This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/Oe37s-vc86s8rotczppZ1s-JHRw.roa File: Oe37s-vc86s8rotczppZ1s-JHRw.roa (raw, json) Hash identifier: bLI0fX3EP1ECocdOJFMfjZq1fOytZDavvUAlMr8kej0= Subject key identifier: 39:ED:FB:B3:EB:DC:F3:AB:3C:AE:8B:5C:CE:9A:59:D6:CF:89:1D:1C Certificate issuer: /CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c Certificate serial: 019B7B36088A07E7B55DE1048058026E02DE Authority key identifier: 10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/Oe37s-vc86s8rotczppZ1s-JHRw.roa Signing time: Thu 01 Jan 2026 20:18:17 +0000 ROA not before: Thu 01 Jan 2026 20:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48408 IP address blocks: 91.209.133.0/24 maxlen: 24 109.233.104.0/22 maxlen: 22 185.77.12.0/24 maxlen: 24 185.142.224.0/22 maxlen: 24 2a07:3140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.mft rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:08:8a:07:e7:b5:5d:e1:04:80:58:02:6e:02:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c Validity Not Before: Jan 1 20:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39edfbb3ebdcf3ab3cae8b5cce9a59d6cf891d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:ad:3b:d5:0f:0c:e8:9d:bb:1c:ea:60:b5: c9:61:93:ad:e9:f4:4d:4a:a1:76:f6:e8:8f:85:90: db:64:46:51:8f:04:44:c2:35:e4:26:c6:09:16:74: dd:38:5d:95:60:7d:22:df:2e:20:6d:db:d1:c1:ba: 43:5b:2f:eb:c7:36:49:76:7b:a6:0c:57:d6:42:11: 27:94:33:9f:18:99:fa:25:85:c5:a4:4b:c6:ba:e1: ba:1c:b8:74:29:95:76:73:86:86:e0:91:58:26:db: a2:70:cb:f0:fc:6b:b0:ad:86:c5:2e:ae:42:4d:fc: 1f:c8:07:e4:69:af:34:b6:da:51:98:73:58:85:ae: ec:6d:2d:d2:b8:31:e5:ef:0d:f5:d8:d4:b4:2c:9f: af:8a:e2:b2:62:d5:34:f1:1b:36:a1:1c:62:be:de: 49:72:85:84:30:f2:3a:db:61:62:2f:1d:46:9a:f4: 54:69:b4:25:bd:ac:61:fb:26:01:7c:ca:45:39:15: 01:c6:47:f3:de:20:da:39:9f:59:c7:ea:cc:b8:e2: 67:f4:72:42:83:4c:29:82:97:5b:f7:1c:60:3f:fb: 62:d2:59:2f:c0:fd:3b:34:ad:e1:de:9c:91:40:47: b8:be:b8:44:3f:e8:65:87:1b:a0:93:29:f7:4d:d3: 77:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:ED:FB:B3:EB:DC:F3:AB:3C:AE:8B:5C:CE:9A:59:D6:CF:89:1D:1C X509v3 Authority Key Identifier: keyid:10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/Oe37s-vc86s8rotczppZ1s-JHRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.133.0/24 109.233.104.0/22 185.77.12.0/24 185.142.224.0/22 IPv6: 2a07:3140::/29 Signature Algorithm: sha256WithRSAEncryption 2e:69:20:05:e0:13:30:ee:df:2e:c9:c0:cd:a5:ef:5b:3a:55: 47:73:d0:88:b7:4b:0d:e3:26:1f:38:c8:4d:85:7b:fb:1f:8d: 85:f5:a0:b0:9e:e7:65:9a:06:81:7e:05:e3:45:c5:1a:fb:f7: 04:60:5d:f9:fa:de:67:49:f7:44:3c:6e:2d:f7:16:17:18:ae: 66:ba:a8:b1:1e:07:70:85:ba:d8:f7:22:15:f6:b5:f6:0d:83: 45:f7:b4:58:bc:c7:a0:b9:9e:be:eb:4b:ca:6e:46:9e:9b:2e: b8:e0:e2:04:25:b7:e7:27:77:2a:15:85:27:fc:bd:49:fd:86: 8c:13:06:1a:59:35:89:8a:3d:0d:d1:ff:80:fd:23:fb:f4:ab: 29:89:56:ce:ed:05:d5:b8:ab:da:68:69:b4:4c:a7:7a:47:60: 43:f5:b1:6b:53:ba:f1:4b:f4:eb:62:08:d8:1e:e1:99:4c:f8: d1:4b:95:ce:60:45:a6:a3:fc:53:cf:74:1c:00:bc:00:d6:66: ea:da:5d:e5:25:d1:e4:54:0a:52:40:76:a6:e6:69:62:bc:85: 75:6a:4e:d1:92:a9:ce:66:2e:ac:6a:b5:8b:05:d1:a6:8b:17: 8b:6c:f6:b8:11:34:93:22:5f:2d:fa:24:d6:ec:5b:cc:ee:4a: 58:72:3f:ec -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt7NgiKB+e1XeEEgFgCbgLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMDhiYTU0MjlhNzA5YmM1OGVjZGJhZTNmMTdlMWJjOWQz YTRkNWMwHhcNMjYwMTAxMjAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWVkZmJiM2ViZGNmM2FiM2NhZThiNWNjZTlhNTlkNmNmODkxZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2etO9UPDOiduxzqYLXJYZOt6fRN SqF29uiPhZDbZEZRjwREwjXkJsYJFnTdOF2VYH0i3y4gbdvRwbpDWy/rxzZJdnum DFfWQhEnlDOfGJn6JYXFpEvGuuG6HLh0KZV2c4aG4JFYJtuicMvw/GuwrYbFLq5C TfwfyAfkaa80ttpRmHNYha7sbS3SuDHl7w312NS0LJ+viuKyYtU08Rs2oRxivt5J coWEMPI622FiLx1GmvRUabQlvaxh+yYBfMpFORUBxkfz3iDaOZ9Zx+rMuOJn9HJC g0wpgpdb9xxgP/ti0lkvwP07NK3h3pyRQEe4vrhEP+hlhxugkyn3TdN3eQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFDnt+7Pr3POrPK6LXM6aWdbPiR0cMB8GA1UdIwQY MBaAFBAIulQppwm8WOzbrj8X4bydOk1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUFpNlZDbW5DYnhZN051dVB4Zmh2SjA2VFZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82MTIzYzQtMmJjNS00ZGY5LWFkMTMt ZTFkOTliODcwNmU0LzEvT2UzN3MtdmM4NnM4cm90Y3pwcFoxcy1KSFJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82MTIzYzQtMmJjNS00ZGY5LWFkMTMtZTFkOTliODcwNmU0 LzEvRUFpNlZDbW5DYnhZN051dVB4Zmh2SjA2VFZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAW9GFAwQC beloAwQAuU0MAwQCuY7gMA0EAgACMAcDBQMqBzFAMA0GCSqGSIb3DQEBCwUAA4IB AQAuaSAF4BMw7t8uycDNpe9bOlVHc9CIt0sN4yYfOMhNhXv7H42F9aCwnudlmgaB fgXjRcUa+/cEYF35+t5nSfdEPG4t9xYXGK5muqixHgdwhbrY9yIV9rX2DYNF97RY vMeguZ6+60vKbkaemy644OIEJbfnJ3cqFYUn/L1J/YaMEwYaWTWJij0N0f+A/SP7 9KspiVbO7QXVuKvaaGm0TKd6R2BD9bFrU7rxS/TrYgjYHuGZTPjRS5XOYEWmo/xT z3QcALwA1mbq2l3lJdHkVApSQHam5mlivIV1ak7RkqnOZi6sarWLBdGmixeLbPa4 ETSTIl8t+iTW7FvM7kpYcj/s -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:32 2026 by rpki-client