This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/OaKg-lG-pzNmRpP7SDCitTlZaNo.roa File: OaKg-lG-pzNmRpP7SDCitTlZaNo.roa (raw, json) Hash identifier: 5+9V4WRdjlkj5ldl1qKFN9pvoMnzM+PUFUtZ5jME0PE= Subject key identifier: 39:A2:A0:FA:51:BE:A7:33:66:46:93:FB:48:30:A2:B5:39:59:68:DA Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58 Certificate serial: 019B7D5D3999F8FB1F62710EB4AF747E174A Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/OaKg-lG-pzNmRpP7SDCitTlZaNo.roa Signing time: Fri 02 Jan 2026 06:20:20 +0000 ROA not before: Fri 02 Jan 2026 06:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.33.112.0/23 maxlen: 23 193.33.112.0/24 maxlen: 24 193.33.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:39:99:f8:fb:1f:62:71:0e:b4:af:74:7e:17:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58 Validity Not Before: Jan 2 06:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39a2a0fa51bea733664693fb4830a2b5395968da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6e:73:0f:de:a3:13:1b:62:b8:05:55:98:c2: bc:92:c5:30:e1:b4:60:79:09:28:96:9a:a9:50:fa: 16:b0:d4:05:ef:62:ed:60:3a:e8:73:c6:4d:18:f0: 61:1d:e4:49:3c:a8:8e:99:51:b2:b0:58:11:08:13: 44:7e:08:1d:c2:73:ea:f5:dd:73:a9:95:f8:f2:ca: 5e:0f:40:60:00:52:bd:59:dd:7f:aa:12:a5:c5:06: 98:b0:ac:68:09:59:5c:cb:c1:50:4a:ec:54:12:c5: 95:ad:3e:93:c4:45:70:6d:76:4b:a8:f9:3b:7d:fc: 99:1f:e3:bb:a5:ea:f1:47:19:7a:25:e5:52:00:1a: 53:32:15:4c:06:b6:bd:3d:9c:e5:a2:1a:39:53:ac: 6d:0f:c1:8a:cd:05:d8:f4:1d:12:55:c7:aa:66:fb: de:94:5d:52:d5:d5:39:ac:0b:fc:52:b5:87:25:31: c1:96:d4:7f:35:81:56:1c:a9:c5:a0:13:87:98:00: 25:8e:42:24:10:67:44:52:32:eb:94:04:c1:8a:83: f0:cb:a4:cf:24:b5:a0:22:5f:80:20:37:47:c3:8f: f5:f0:73:93:c0:08:6f:b6:5d:6d:a3:22:45:3d:fc: 79:4f:4f:0c:b0:5c:06:38:a2:53:01:a3:b8:69:5a: 5d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A2:A0:FA:51:BE:A7:33:66:46:93:FB:48:30:A2:B5:39:59:68:DA X509v3 Authority Key Identifier: keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/OaKg-lG-pzNmRpP7SDCitTlZaNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.112.0/23 Signature Algorithm: sha256WithRSAEncryption 09:b3:cf:ee:17:97:86:1e:3c:c0:71:f4:50:ef:ed:64:8c:2e: 75:7c:19:e2:72:72:9e:a5:a8:a8:b2:d3:ee:7a:bb:1b:1d:7e: 66:96:22:25:df:82:27:cf:a6:f1:a7:57:5d:cd:e3:80:0b:9e: b7:eb:25:a6:e5:c2:ff:5e:34:f5:38:51:25:cb:7e:0d:b6:05: dd:bd:99:22:b4:ed:eb:07:45:07:e9:f7:dc:b7:03:e4:bc:1f: a7:15:8a:15:de:ad:73:1c:7d:17:5e:6e:eb:1a:7d:0d:00:bf: 76:03:10:6e:f2:20:a9:0f:b6:36:c2:07:ed:09:c6:af:79:63: 7e:17:3e:4c:b0:4e:6f:a0:07:45:91:5a:5b:54:de:92:84:9b: 7b:f9:16:91:e3:89:42:47:05:fb:41:9a:f7:32:4b:29:19:0f: 5c:c5:bf:08:48:9f:33:62:da:52:89:6b:39:da:b3:d9:db:12: 75:ef:ec:37:dd:f5:09:dc:ff:c3:57:d4:fd:3f:c6:32:6d:d2: f3:d6:17:b0:f4:52:79:98:2b:0d:40:13:b3:c3:d5:1a:e5:c3: f4:39:cb:0c:4f:a0:78:95:6c:01:d2:f9:2d:39:36:f2:eb:f0: 45:82:c3:f9:3e:21:6d:bf:7c:f0:76:34:15:2b:01:ee:4c:84: c5:0f:d5:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XTmZ+PsfYnEOtK90fhdKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZDc4ODI2ZTE3MTdlYzk5M2ViNjRkZDExODc4NzZiMDY1 ZThmNTgwHhcNMjYwMTAyMDYyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWEyYTBmYTUxYmVhNzMzNjY0NjkzZmI0ODMwYTJiNTM5NTk2OGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA825zD96jExtiuAVVmMK8ksUw4bRg eQkolpqpUPoWsNQF72LtYDroc8ZNGPBhHeRJPKiOmVGysFgRCBNEfggdwnPq9d1z qZX48speD0BgAFK9Wd1/qhKlxQaYsKxoCVlcy8FQSuxUEsWVrT6TxEVwbXZLqPk7 ffyZH+O7perxRxl6JeVSABpTMhVMBra9PZzloho5U6xtD8GKzQXY9B0SVceqZvve lF1S1dU5rAv8UrWHJTHBltR/NYFWHKnFoBOHmAAljkIkEGdEUjLrlATBioPwy6TP JLWgIl+AIDdHw4/18HOTwAhvtl1toyJFPfx5T08MsFwGOKJTAaO4aVpdQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDmioPpRvqczZkaT+0gworU5WWjaMB8GA1UdIwQY MBaAFNHXiCbhcX7Jk+tk3RGHh2sGXo9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgt YjU5YzJhYzk1MWNiLzEvT2FLZy1sRy1wek5tUnBQN1NEQ2l0VGxaYU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgtYjU5YzJhYzk1MWNi LzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSFwMA0G CSqGSIb3DQEBCwUAA4IBAQAJs8/uF5eGHjzAcfRQ7+1kjC51fBnicnKepaiostPu ersbHX5mliIl34Inz6bxp1ddzeOAC5636yWm5cL/XjT1OFEly34NtgXdvZkitO3r B0UH6ffctwPkvB+nFYoV3q1zHH0XXm7rGn0NAL92AxBu8iCpD7Y2wgftCcaveWN+ Fz5MsE5voAdFkVpbVN6ShJt7+RaR44lCRwX7QZr3MkspGQ9cxb8ISJ8zYtpSiWs5 2rPZ2xJ17+w33fUJ3P/DV9T9P8YybdLz1hew9FJ5mCsNQBOzw9Ua5cP0OcsMT6B4 lWwB0vktOTby6/BFgsP5PiFtv3zwdjQVKwHuTITFD9Xe -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:52 2026 by rpki-client