This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/oWfoIebl0vdlosgiWt_PqvTMCvI.roa File: oWfoIebl0vdlosgiWt_PqvTMCvI.roa (raw, json) Hash identifier: sSMkZCHcY8051GIBXnABdJ427F125fjlpin/p+USqXE= Subject key identifier: A1:67:E8:21:E6:E5:D2:F7:65:A2:C8:22:5A:DF:CF:AA:F4:CC:0A:F2 Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06 Certificate serial: 019B775900114024038397BA2BE4DC6BFED5 Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/oWfoIebl0vdlosgiWt_PqvTMCvI.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55002 IP address blocks: 128.139.6.0/24 maxlen: 24 128.139.7.0/24 maxlen: 24 192.114.0.0/24 maxlen: 24 192.114.1.0/24 maxlen: 24 192.114.2.0/24 maxlen: 24 192.114.49.0/24 maxlen: 24 192.114.50.0/24 maxlen: 24 192.115.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 05:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:00:11:40:24:03:83:97:ba:2b:e4:dc:6b:fe:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a167e821e6e5d2f765a2c8225adfcfaaf4cc0af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8a:d8:34:d2:0f:ed:70:4a:f4:29:30:43:60: 23:89:29:9d:94:28:20:b0:ce:2e:65:1b:3d:ab:8a: ae:1b:cf:fa:33:bc:fa:4d:29:11:17:a6:44:e3:35: 7d:33:70:f6:4f:64:30:8a:fb:5e:58:92:84:90:77: f2:2c:24:db:ea:77:e3:92:e1:ff:53:2a:10:69:9e: 86:fb:55:f5:21:27:07:4c:69:98:d3:52:28:41:64: 28:d1:b7:f9:bd:ce:78:95:04:46:d4:14:1d:23:28: 24:19:f3:15:8a:c2:d6:15:d3:2e:6e:66:1d:ea:d0: 0d:89:75:2c:4d:c1:bd:a3:31:ab:92:a9:27:12:c2: 2d:7e:1a:07:67:6a:8a:60:df:3c:0e:16:b8:65:ef: f4:9a:05:95:15:c5:26:2c:7d:44:94:56:8b:7f:ad: 57:ef:ec:2b:cd:12:d4:f7:dd:fe:9a:ee:10:a3:b1: 5e:b1:78:f7:4b:80:3e:42:8e:1b:53:f9:46:97:10: 9f:55:da:9b:48:b2:e5:77:79:2b:45:68:69:b9:a2: c6:c6:88:10:fd:50:b7:c4:a2:15:f3:b2:b1:b3:54: 73:11:9a:82:be:38:b3:3f:ab:b7:26:45:c4:eb:b0: 1a:1a:25:7b:86:08:b9:2d:84:1e:4c:35:74:20:f5: 67:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:67:E8:21:E6:E5:D2:F7:65:A2:C8:22:5A:DF:CF:AA:F4:CC:0A:F2 X509v3 Authority Key Identifier: keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/oWfoIebl0vdlosgiWt_PqvTMCvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.139.6.0/23 192.114.0.0-192.114.2.255 192.114.49.0-192.114.50.255 192.115.40.0/24 Signature Algorithm: sha256WithRSAEncryption 90:2d:73:97:39:82:c8:db:8f:1d:3f:85:5a:6f:02:f2:f6:54: ea:c8:0c:2d:d7:89:d5:f6:8e:94:58:58:36:6a:aa:c9:cb:96: 03:29:41:79:d8:b3:c0:03:57:4e:c6:2d:8b:1b:ed:a3:32:d6: 08:31:d8:2b:b2:6c:6d:b0:85:58:fb:43:3d:14:06:66:0b:d7: 1d:7f:65:20:27:96:27:19:cf:43:86:c3:a8:c5:96:49:59:76: e9:93:c6:a4:79:e6:62:27:d4:1c:53:23:c3:1d:e5:ff:7c:3e: 6e:a5:82:4f:3b:32:0b:db:4d:05:13:c6:ab:6e:48:3b:a1:da: aa:3e:7f:bf:42:ab:c7:1d:fd:f6:0c:64:51:5c:47:9f:b1:31: 7f:3a:6f:c9:f9:6f:1e:e7:e0:26:f4:d5:1c:65:87:d8:72:b7: 3a:c6:e8:02:d7:9e:e2:6d:80:6f:75:d2:57:f6:cb:91:a7:44: 03:2c:b4:49:18:6b:26:32:b2:1b:30:23:75:72:b1:fc:78:e5: 03:ca:8d:27:a4:0b:1e:c8:72:93:ec:01:86:d8:36:f5:51:1d: 07:d9:a6:06:7b:c1:a1:24:35:32:25:8b:f5:fc:e6:5d:21:52: 98:20:47:b8:61:69:43:33:85:23:ee:3d:b0:92:5e:33:0b:58: d0:b0:ab:ab -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt3WQARQCQDg5e6K+Tca/7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZmE1OTZhMzEyNmFjZTAyOWM2ZDcwZDUyOTI1N2UwN2Iz OGJhMDYwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTY3ZTgyMWU2ZTVkMmY3NjVhMmM4MjI1YWRmY2ZhYWY0Y2MwYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IrYNNIP7XBK9CkwQ2AjiSmdlCgg sM4uZRs9q4quG8/6M7z6TSkRF6ZE4zV9M3D2T2QwivteWJKEkHfyLCTb6nfjkuH/ UyoQaZ6G+1X1IScHTGmY01IoQWQo0bf5vc54lQRG1BQdIygkGfMVisLWFdMubmYd 6tANiXUsTcG9ozGrkqknEsItfhoHZ2qKYN88Dha4Ze/0mgWVFcUmLH1ElFaLf61X 7+wrzRLU993+mu4Qo7FesXj3S4A+Qo4bU/lGlxCfVdqbSLLld3krRWhpuaLGxogQ /VC3xKIV87Kxs1RzEZqCvjizP6u3JkXE67AaGiV7hgi5LYQeTDV0IPVnLwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFKFn6CHm5dL3ZaLIIlrfz6r0zAryMB8GA1UdIwQY MBaAFB76WWoxJqzgKcbXDVKSV+B7OLoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODIt OWQwYzYyMDczNWYxLzEvb1dmb0llYmwwdmRsb3NnaVd0X1BxdlRNQ3ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODItOWQwYzYyMDczNWYx LzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAtBAIAATAnAwQBgIsGMAsD AwHAcgMEAMByAjAMAwQAwHIxAwQAwHIyAwQAwHMoMA0GCSqGSIb3DQEBCwUAA4IB AQCQLXOXOYLI248dP4VabwLy9lTqyAwt14nV9o6UWFg2aqrJy5YDKUF52LPAA1dO xi2LG+2jMtYIMdgrsmxtsIVY+0M9FAZmC9cdf2UgJ5YnGc9DhsOoxZZJWXbpk8ak eeZiJ9QcUyPDHeX/fD5upYJPOzIL200FE8arbkg7odqqPn+/QqvHHf32DGRRXEef sTF/Om/J+W8e5+Am9NUcZYfYcrc6xugC157ibYBvddJX9suRp0QDLLRJGGsmMrIb MCN1crH8eOUDyo0npAseyHKT7AGG2Db1UR0H2aYGe8GhJDUyJYv1/OZdIVKYIEe4 YWlDM4Uj7j2wkl4zC1jQsKur -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:21 2026 by rpki-client