This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/oEK_YHBBUyISX0iWmor1fQ6Pl5A.roa File: oEK_YHBBUyISX0iWmor1fQ6Pl5A.roa (raw, json) Hash identifier: AGNUEtISZw0y/wBF7hbThk66bo1ozAXY272/o4iI/xA= Subject key identifier: A0:42:BF:60:70:41:53:22:12:5F:48:96:9A:8A:F5:7D:0E:8F:97:90 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12ED12EF932987ABB8495A792294B6 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/oEK_YHBBUyISX0iWmor1fQ6Pl5A.roa Signing time: Fri 02 Jan 2026 00:19:33 +0000 ROA not before: Fri 02 Jan 2026 00:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16079 IP address blocks: 194.209.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ed:12:ef:93:29:87:ab:b8:49:5a:79:22:94:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a042bf6070415322125f48969a8af57d0e8f9790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:b2:1d:93:7a:10:aa:4e:c9:3f:99:70:fe: 4a:5c:d4:47:29:02:c5:40:48:68:2d:97:46:d6:65: 57:6f:a9:69:57:8a:cd:b2:41:42:b7:61:7a:0e:b9: 3d:2f:3f:db:9d:f8:03:72:46:b9:0c:8e:36:d8:af: 67:dd:b8:1e:59:2a:b8:ae:0d:95:45:fd:33:12:c3: d3:e2:d4:5f:6a:c8:a4:09:16:fa:e8:ce:fa:3f:a2: c2:a5:3c:bc:17:36:3f:ba:a5:6a:c9:1c:66:04:fc: 10:0c:ed:bc:bb:cb:d1:9a:f1:ae:35:d6:22:85:57: ab:ca:74:50:f4:2a:76:26:f5:84:72:d9:7a:8d:a0: e7:77:5d:a9:c8:26:62:09:29:23:6f:de:4f:02:a8: 84:be:fa:4f:66:f5:97:a6:a1:9e:3b:dd:2e:85:59: 6e:e5:7f:43:9b:5f:47:14:90:b0:ff:95:a2:52:9f: 4f:72:34:1e:53:e8:ab:96:ec:8f:c6:30:2e:9f:a6: e4:3d:af:06:e6:de:99:74:3a:67:3f:90:ad:38:b0: 4a:12:30:b2:48:ac:79:37:65:0d:80:22:f1:0d:fb: 80:cb:50:a5:94:0a:b2:22:f5:03:22:66:27:83:2d: 65:09:17:c8:c3:d1:c1:ca:a3:49:15:87:43:33:52: eb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:42:BF:60:70:41:53:22:12:5F:48:96:9A:8A:F5:7D:0E:8F:97:90 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/oEK_YHBBUyISX0iWmor1fQ6Pl5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.159.0/24 Signature Algorithm: sha256WithRSAEncryption 11:28:19:7e:82:d8:94:6a:d5:39:f8:e3:8d:6a:b4:1e:66:1e: a8:64:dd:ee:78:ff:db:5d:42:a8:40:b2:c7:d3:ba:90:f4:6b: 8b:f2:05:d4:6b:66:9d:6e:98:75:7e:dd:89:3c:42:4a:40:2f: 53:86:56:b1:30:e9:30:45:71:01:8d:c5:46:c9:f7:3f:a1:83: 74:f0:2a:5f:3f:eb:56:d8:61:a4:0a:60:47:d1:3f:84:94:bc: da:ba:45:8f:be:44:7f:78:4e:c8:f7:7c:7c:6b:06:a4:8a:6b: f9:3c:8e:df:79:03:7f:20:fd:75:52:b5:8b:c1:d5:9c:47:e3: fc:69:db:cb:84:b7:32:ef:12:41:93:98:5b:2f:64:c8:32:b1: bd:11:6f:a4:33:1a:97:12:83:9d:32:f7:6e:68:52:59:ae:2c: f0:38:39:a6:e2:ed:a9:63:fc:8e:91:b3:1d:55:90:4b:3f:7d: 48:7c:2b:b1:bc:b5:e1:0d:ab:2e:5c:38:72:fd:93:e6:56:f9: 51:16:ba:b6:79:ba:ee:61:78:87:bd:86:82:a4:e6:0c:79:45: 42:bf:b2:58:2b:5a:d6:fd:4f:80:be:dc:c1:ce:cb:56:48:01: ac:89:48:6c:ab:84:f6:b1:dc:4e:6c:aa:c6:b5:40:ef:c1:d6: b2:a8:7b:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Eu0S75Mph6u4SVp5IpS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDQyYmY2MDcwNDE1MzIyMTI1ZjQ4OTY5YThhZjU3ZDBlOGY5NzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcayHZN6EKpOyT+ZcP5KXNRHKQLF QEhoLZdG1mVXb6lpV4rNskFCt2F6Drk9Lz/bnfgDcka5DI422K9n3bgeWSq4rg2V Rf0zEsPT4tRfasikCRb66M76P6LCpTy8FzY/uqVqyRxmBPwQDO28u8vRmvGuNdYi hVerynRQ9Cp2JvWEctl6jaDnd12pyCZiCSkjb95PAqiEvvpPZvWXpqGeO90uhVlu 5X9Dm19HFJCw/5WiUp9PcjQeU+irluyPxjAun6bkPa8G5t6ZdDpnP5CtOLBKEjCy SKx5N2UNgCLxDfuAy1CllAqyIvUDImYngy1lCRfIw9HByqNJFYdDM1LrSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKBCv2BwQVMiEl9IlpqK9X0Oj5eQMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvb0VLX1lIQkJVeUlTWDBpV21vcjFmUTZQbDVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtGfMA0G CSqGSIb3DQEBCwUAA4IBAQARKBl+gtiUatU5+OONarQeZh6oZN3ueP/bXUKoQLLH 07qQ9GuL8gXUa2adbph1ft2JPEJKQC9ThlaxMOkwRXEBjcVGyfc/oYN08CpfP+tW 2GGkCmBH0T+ElLzaukWPvkR/eE7I93x8awakimv5PI7feQN/IP11UrWLwdWcR+P8 advLhLcy7xJBk5hbL2TIMrG9EW+kMxqXEoOdMvduaFJZrizwODmm4u2pY/yOkbMd VZBLP31IfCuxvLXhDasuXDhy/ZPmVvlRFrq2ebruYXiHvYaCpOYMeUVCv7JYK1rW /U+AvtzBzstWSAGsiUhsq4T2sdxObKrGtUDvwdayqHvf -----END CERTIFICATE-----Generated at Mon Jan 26 17:45:33 2026 by rpki-client