This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/OyEIC351j4Qoq74F-t1AjHXNdrc.roa File: OyEIC351j4Qoq74F-t1AjHXNdrc.roa (raw, json) Hash identifier: 0usInaZbC2vd9aTUZLy7WtWvlyT0Yu/kRhO0ABJvGIc= Subject key identifier: 3B:21:08:0B:7E:75:8F:84:28:AB:BE:05:FA:DD:40:8C:75:CD:76:B7 Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0 Certificate serial: 019B7C123A6958F860A0E4667160CF8752B3 Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/OyEIC351j4Qoq74F-t1AjHXNdrc.roa Signing time: Fri 02 Jan 2026 00:18:47 +0000 ROA not before: Fri 02 Jan 2026 00:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34953 IP address blocks: 5.145.128.0/20 maxlen: 24 5.199.240.0/20 maxlen: 24 46.183.96.0/21 maxlen: 24 62.112.64.0/19 maxlen: 24 93.159.248.0/21 maxlen: 24 2a00:fe0::/32 maxlen: 48 2a02:23f8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3a:69:58:f8:60:a0:e4:66:71:60:cf:87:52:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0 Validity Not Before: Jan 2 00:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b21080b7e758f8428abbe05fadd408c75cd76b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c3:c5:d0:c3:68:0b:15:87:ab:af:dc:59:df: 54:5e:a1:50:98:71:7b:de:d3:a9:8b:ed:d2:bd:08: ca:f7:e7:22:20:f2:87:9d:ea:15:64:35:46:ef:fc: 41:b3:05:a1:4e:3a:01:3c:9a:d8:9a:14:5b:a9:9e: 80:89:8e:d1:e7:86:59:d5:b0:f1:83:89:07:55:b8: f0:7a:9d:ca:4b:ae:ce:80:d3:86:5b:23:3a:3f:12: 72:72:54:f8:0c:c5:a3:28:44:18:cc:a6:6c:7b:bb: ad:ad:f7:5f:9b:59:47:81:3c:fe:f1:eb:4c:68:be: 68:c5:35:56:e5:bf:08:21:98:50:f1:21:fa:3b:61: c7:db:ea:80:12:1f:c2:80:93:7f:ff:8e:9a:bd:9d: de:e3:d1:fc:63:62:b9:c1:74:54:75:c1:3e:40:9d: 31:47:b8:e1:5e:9b:69:7d:95:45:39:b9:dc:21:05: 7b:fb:d4:a6:66:bb:aa:57:3b:57:b4:55:eb:0a:43: 61:5f:d4:30:e2:72:35:5e:8f:29:94:3d:cf:ac:6d: 0d:50:cf:25:df:98:6b:46:56:2d:91:59:1a:0f:1c: a8:d0:41:ea:9b:73:eb:2d:72:10:0f:97:bc:88:e7: 74:a1:63:ef:e7:f5:09:8f:7d:83:16:d2:ce:36:31: e2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:21:08:0B:7E:75:8F:84:28:AB:BE:05:FA:DD:40:8C:75:CD:76:B7 X509v3 Authority Key Identifier: keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/OyEIC351j4Qoq74F-t1AjHXNdrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.145.128.0/20 5.199.240.0/20 46.183.96.0/21 62.112.64.0/19 93.159.248.0/21 IPv6: 2a00:fe0::/32 2a02:23f8::/32 Signature Algorithm: sha256WithRSAEncryption 46:36:15:90:51:7a:65:59:f8:13:4a:2a:d6:c1:43:7a:ff:83: 4c:51:13:6f:56:e9:bf:90:5a:9c:fc:5e:b1:77:53:25:90:85: b9:23:d9:6b:5e:3c:be:d7:ee:46:e0:c3:d8:8c:6b:00:71:08: 78:08:96:e8:62:67:f7:0a:be:92:71:ab:2e:f5:cc:99:8a:ca: d3:7b:a8:3b:47:75:24:59:4e:0f:e1:a6:5f:75:fa:d5:7a:56: a8:3e:06:35:59:ae:25:dc:36:c3:9f:1f:d0:2b:c4:8e:c3:02: 23:89:12:67:70:59:40:ca:68:50:3c:3e:c7:ab:f4:8a:1e:4d: d5:b6:2b:db:bd:5f:a0:42:a6:4f:9d:e5:bc:0d:d0:28:ba:72: 42:e3:41:70:64:0b:0c:fb:7f:33:a5:16:83:2c:37:8f:4b:96: e7:df:79:01:8b:3e:0c:40:51:85:d8:de:21:af:27:30:16:f8: ac:00:41:78:87:3d:d1:92:6a:f4:92:f5:9a:4c:93:58:b5:19: e9:09:5a:8b:b8:e4:2f:fa:c9:79:d0:87:3e:e7:60:15:cf:20: 1a:5c:ec:0e:17:33:36:e2:9a:4b:b1:73:f3:98:82:16:2c:29: 69:8c:2a:f8:40:d8:ae:1b:6f:f9:95:51:8f:df:cb:87:d1:51: e4:50:c2:38 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt8EjppWPhgoORmcWDPh1KzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTQ0N2Y3YjNhNzc2ZjcyNGQ4YmM4MTQwYmUzMTc2NjYy YzI0ZDAwHhcNMjYwMTAyMDAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjIxMDgwYjdlNzU4Zjg0MjhhYmJlMDVmYWRkNDA4Yzc1Y2Q3NmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMPF0MNoCxWHq6/cWd9UXqFQmHF7 3tOpi+3SvQjK9+ciIPKHneoVZDVG7/xBswWhTjoBPJrYmhRbqZ6AiY7R54ZZ1bDx g4kHVbjwep3KS67OgNOGWyM6PxJyclT4DMWjKEQYzKZse7utrfdfm1lHgTz+8etM aL5oxTVW5b8IIZhQ8SH6O2HH2+qAEh/CgJN//46avZ3e49H8Y2K5wXRUdcE+QJ0x R7jhXptpfZVFObncIQV7+9SmZruqVztXtFXrCkNhX9Qw4nI1Xo8plD3PrG0NUM8l 35hrRlYtkVkaDxyo0EHqm3PrLXIQD5e8iOd0oWPv5/UJj32DFtLONjHiQwIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFDshCAt+dY+EKKu+BfrdQIx1zXa3MB8GA1UdIwQY MBaAFEykR/ezp3b3JNi8gUC+MXZmLCTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYt MjlhZjMzYmM2Yjk4LzEvT3lFSUMzNTFqNFFvcTc0Ri10MUFqSFhOZHJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYtMjlhZjMzYmM2Yjk4 LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQEBZGAAwQE BcfwAwQDLrdgAwQFPnBAAwQDXZ/4MBQEAgACMA4DBQAqAA/gAwUAKgIj+DANBgkq hkiG9w0BAQsFAAOCAQEARjYVkFF6ZVn4E0oq1sFDev+DTFETb1bpv5BanPxesXdT JZCFuSPZa148vtfuRuDD2IxrAHEIeAiW6GJn9wq+knGrLvXMmYrK03uoO0d1JFlO D+GmX3X61XpWqD4GNVmuJdw2w58f0CvEjsMCI4kSZ3BZQMpoUDw+x6v0ih5N1bYr 271foEKmT53lvA3QKLpyQuNBcGQLDPt/M6UWgyw3j0uW5995AYs+DEBRhdjeIa8n MBb4rABBeIc90ZJq9JL1mkyTWLUZ6Qlai7jkL/rJedCHPudgFc8gGlzsDhczNuKa S7Fz85iCFiwpaYwq+EDYrhtv+ZVRj9/Lh9FR5FDCOA== -----END CERTIFICATE-----Generated at Tue Jan 27 10:20:06 2026 by rpki-client