This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/oqgwVvgO4WobvG_o2YvqXL-ZxrA.roa File: oqgwVvgO4WobvG_o2YvqXL-ZxrA.roa (raw, json) Hash identifier: qgN0ZwFa85gMlSMo8H+ZBEVFv906WUNJ1MUKTtcyf+o= Subject key identifier: A2:A8:30:56:F8:0E:E1:6A:1B:BC:6F:E8:D9:8B:EA:5C:BF:99:C6:B0 Certificate issuer: /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23 Certificate serial: 019B7A5B8D4EC2B40A141F39A598D93F201C Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/oqgwVvgO4WobvG_o2YvqXL-ZxrA.roa Signing time: Thu 01 Jan 2026 16:19:38 +0000 ROA not before: Thu 01 Jan 2026 16:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200635 IP address blocks: 185.100.196.0/22 maxlen: 32 2a06:1900::/29 maxlen: 120 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8d:4e:c2:b4:0a:14:1f:39:a5:98:d9:3f:20:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23 Validity Not Before: Jan 1 16:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2a83056f80ee16a1bbc6fe8d98bea5cbf99c6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0f:2a:9d:1b:4a:b8:15:0e:b3:34:d5:b4:5b: bd:db:cf:91:51:00:73:f0:01:92:3b:1a:94:3f:d0: d2:bf:bb:ee:98:0f:34:fa:55:40:a8:38:a4:74:b6: 94:95:cc:88:2b:e7:f4:19:c9:ca:63:d7:ca:81:76: 83:d7:d5:1c:e3:0f:aa:b8:ce:60:b1:9c:ac:e6:41: 67:52:48:96:4f:d9:ba:46:d7:07:66:28:4f:ec:59: 67:1d:03:00:7d:59:9e:e9:4c:4b:1e:9f:ed:6b:6b: d2:b8:6d:18:2a:09:48:e5:9e:b6:50:91:e9:36:d2: 4d:98:c0:09:67:be:48:a6:86:15:bc:c8:6d:58:70: b5:62:00:d4:80:cd:d3:17:ba:fc:6a:e5:2f:d5:ad: c2:72:e2:ba:c2:b6:ee:2b:2e:cb:e8:92:a5:a5:e1: 30:79:5b:55:a7:57:a4:85:5e:8e:c4:a9:ed:e3:39: 09:15:df:a3:1c:09:80:0a:4a:7d:c4:51:43:4e:da: 72:70:92:99:e6:f4:d5:d2:d3:ab:6a:5a:73:e0:73: 9c:f4:87:0d:69:fe:f3:2f:4a:d0:95:d5:61:0e:2a: de:95:6a:b4:e1:d4:21:b4:79:39:62:f8:47:45:90: 78:a2:b6:d3:b9:2f:cb:63:d1:d6:06:30:57:86:3a: 69:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A8:30:56:F8:0E:E1:6A:1B:BC:6F:E8:D9:8B:EA:5C:BF:99:C6:B0 X509v3 Authority Key Identifier: keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/oqgwVvgO4WobvG_o2YvqXL-ZxrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.196.0/22 IPv6: 2a06:1900::/29 Signature Algorithm: sha256WithRSAEncryption 74:b8:48:1e:77:29:dd:75:ca:41:a5:c6:48:4a:08:e7:21:e8: e0:42:16:67:60:de:e8:1d:19:e5:c2:61:0f:28:34:e4:0e:bc: 19:d4:7d:60:89:61:1f:a7:d1:10:ab:b4:a9:15:48:45:5a:5a: 25:67:f7:27:35:c4:e4:fd:be:2d:09:27:77:c4:f5:69:e0:bd: 5c:d6:1c:b6:8f:9b:14:68:57:60:ad:6c:e6:dc:2e:31:89:1c: ca:ba:e5:e9:92:e4:5b:a8:b1:e9:0e:d1:34:01:88:bf:8d:91: 35:26:86:65:d7:3a:56:c8:4e:12:82:bd:29:17:69:8f:7d:5d: a6:c8:fa:18:98:f9:60:a2:72:2d:3b:54:37:f1:3f:ca:bd:e0: 8d:ea:5b:e3:18:d8:c3:dc:8d:40:2e:8b:6e:70:b1:92:29:e8: bd:21:76:fd:0b:26:29:d9:1a:dd:11:f4:59:5a:a1:e5:a0:d1: 39:01:90:c8:9e:ad:b4:ce:88:b8:df:c6:fe:c8:84:2b:50:a9: a6:fe:74:73:68:57:6d:42:34:15:f7:36:aa:53:07:c9:0a:0a: 5b:60:0a:da:d3:0b:86:cd:d0:00:ad:1a:a9:f5:fb:51:12:67: cf:0f:2e:30:0d:15:07:64:41:a5:00:ca:42:41:5d:47:15:0b: 58:93:93:cc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W41OwrQKFB85pZjZPyAcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlN2EyNjRkYmNjZDc1YWE4NmNkMzYxYzZkMzY2YmQ4OGM5 MGRhMjMwHhcNMjYwMTAxMTYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmE4MzA1NmY4MGVlMTZhMWJiYzZmZThkOThiZWE1Y2JmOTljNmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg8qnRtKuBUOszTVtFu928+RUQBz 8AGSOxqUP9DSv7vumA80+lVAqDikdLaUlcyIK+f0GcnKY9fKgXaD19Uc4w+quM5g sZys5kFnUkiWT9m6RtcHZihP7FlnHQMAfVme6UxLHp/ta2vSuG0YKglI5Z62UJHp NtJNmMAJZ75IpoYVvMhtWHC1YgDUgM3TF7r8auUv1a3CcuK6wrbuKy7L6JKlpeEw eVtVp1ekhV6OxKnt4zkJFd+jHAmACkp9xFFDTtpycJKZ5vTV0tOralpz4HOc9IcN af7zL0rQldVhDirelWq04dQhtHk5YvhHRZB4orbTuS/LY9HWBjBXhjppuwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKKoMFb4DuFqG7xv6NmL6ly/mcawMB8GA1UdIwQY MBaAFO56Jk28zXWqhs02HG02a9iMkNojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83ZjRiNWEtODJlNy00ZmNlLWI2ZmMt MzE3ZTgyMGRmY2RiLzEvb3Fnd1Z2Z080V29idkdfbzJZdnFYTC1aeHJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83ZjRiNWEtODJlNy00ZmNlLWI2ZmMtMzE3ZTgyMGRmY2Ri LzEvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWTEMA0E AgACMAcDBQMqBhkAMA0GCSqGSIb3DQEBCwUAA4IBAQB0uEgedynddcpBpcZISgjn IejgQhZnYN7oHRnlwmEPKDTkDrwZ1H1giWEfp9EQq7SpFUhFWlolZ/cnNcTk/b4t CSd3xPVp4L1c1hy2j5sUaFdgrWzm3C4xiRzKuuXpkuRbqLHpDtE0AYi/jZE1JoZl 1zpWyE4Sgr0pF2mPfV2myPoYmPlgonItO1Q38T/KveCN6lvjGNjD3I1ALotucLGS Kei9IXb9CyYp2RrdEfRZWqHloNE5AZDInq20zoi438b+yIQrUKmm/nRzaFdtQjQV 9zaqUwfJCgpbYAra0wuGzdAArRqp9ftREmfPDy4wDRUHZEGlAMpCQV1HFQtYk5PM -----END CERTIFICATE-----Generated at Tue Feb 10 05:55:31 2026 by rpki-client