This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/oi4g4l999AP6onKm27Ed-wdQpPs.roa File: oi4g4l999AP6onKm27Ed-wdQpPs.roa (raw, json) Hash identifier: I8WiOuarlTLTaPl9Rt0sGmGw4q5pBrI5UJKZRMtdZkc= Subject key identifier: A2:2E:20:E2:5F:7D:F4:03:FA:A2:72:A6:DB:B1:1D:FB:07:50:A4:FB Certificate issuer: /CN=68bd39d793125c684dff272f88622bac432180f0 Certificate serial: 019B7C13486A598DE417996AF6881FFBAEAB Authority key identifier: 68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/oi4g4l999AP6onKm27Ed-wdQpPs.roa Signing time: Fri 02 Jan 2026 00:19:57 +0000 ROA not before: Fri 02 Jan 2026 00:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197650 IP address blocks: 62.102.152.0/21 maxlen: 21 185.30.112.0/24 maxlen: 24 185.30.113.0/24 maxlen: 24 185.30.114.0/24 maxlen: 24 185.30.115.0/24 maxlen: 24 2a03:4540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:48:6a:59:8d:e4:17:99:6a:f6:88:1f:fb:ae:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68bd39d793125c684dff272f88622bac432180f0 Validity Not Before: Jan 2 00:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a22e20e25f7df403faa272a6dbb11dfb0750a4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:83:e7:38:48:06:b1:4b:c3:27:84:19:5b:9b: 8d:6e:d4:a3:ff:af:ed:f7:4e:7b:92:c7:94:8f:48: 0a:77:4f:06:c4:a3:90:99:c4:50:37:26:be:e9:50: 91:9e:4d:99:53:fc:79:09:07:21:34:03:2d:4c:26: 30:53:04:d0:b9:b1:02:60:ce:5c:87:a9:1c:1f:ad: 06:34:10:4a:69:52:f3:04:01:e8:1b:79:e1:48:4b: 38:5d:75:0f:84:33:f0:dc:5e:fe:47:e9:81:7c:c8: fc:9a:e5:db:11:10:ab:05:cd:e3:20:7a:54:33:cb: 72:51:bd:1a:d7:38:d8:ef:69:7f:b5:04:d2:f2:89: 8b:42:96:be:21:0f:d8:86:e6:97:03:e8:a5:9e:8e: d4:50:26:48:03:75:49:8a:56:67:86:c4:a2:8e:0b: 02:36:1b:f3:55:fe:7a:0c:d3:50:49:a9:01:3a:eb: 1d:ec:37:e5:08:86:ef:ed:5d:07:e4:ae:cb:5f:42: 31:e3:53:bd:e6:bf:e9:a7:30:49:9e:c3:9b:50:22: 3b:6a:3d:42:b8:6f:97:65:cb:50:22:d1:9e:29:5f: 52:5e:0f:39:a1:23:f9:03:f4:a4:3a:e5:8a:13:53: 1b:4b:a8:ac:8b:60:05:78:6a:21:d5:05:75:6a:ce: cd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2E:20:E2:5F:7D:F4:03:FA:A2:72:A6:DB:B1:1D:FB:07:50:A4:FB X509v3 Authority Key Identifier: keyid:68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/oi4g4l999AP6onKm27Ed-wdQpPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.102.152.0/21 185.30.112.0/22 IPv6: 2a03:4540::/32 Signature Algorithm: sha256WithRSAEncryption c7:62:ca:0e:d9:25:82:dd:66:a4:e2:1c:81:55:ee:94:10:77: b7:f2:91:a5:d8:91:3c:d4:f5:fe:25:88:3b:0b:70:f3:08:58: 45:46:5f:b3:ee:6b:0f:cf:7d:df:f8:1f:06:e1:70:d0:51:1e: c1:1e:ec:5e:1b:bd:c4:84:35:92:85:d3:5d:84:e5:00:e6:f7: 7c:ba:a7:56:5f:66:1f:c1:db:a6:58:f6:9d:e9:7d:ba:cd:88: aa:97:0d:a1:ed:72:de:96:2f:c7:56:09:2e:7e:e9:31:cc:07: 8c:e7:50:51:52:04:b7:ee:ca:c8:0c:85:c4:92:6f:de:c7:05: 64:8f:55:f2:11:d6:3c:68:19:80:df:59:7b:46:46:97:49:66: 03:77:92:19:c3:b3:27:23:00:94:71:67:48:13:35:ef:57:ed: d5:ae:72:f6:cd:2d:c0:5b:4d:61:ab:71:30:d2:f4:7d:b8:f8: 77:57:e9:97:d6:7e:f1:4b:50:14:98:13:f5:6d:f4:9e:25:49: e4:94:72:72:49:85:4b:60:c0:99:44:30:f8:bd:48:ba:80:8f: c2:46:06:26:d8:be:13:80:3d:ff:0d:07:e3:ac:a5:8a:38:f6: 14:78:08:be:6f:51:54:1a:8d:b5:34:1d:cc:57:a3:fa:9e:4f: 5f:c4:0a:12 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8E0hqWY3kF5lq9ogf+66rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YmQzOWQ3OTMxMjVjNjg0ZGZmMjcyZjg4NjIyYmFjNDMy MTgwZjAwHhcNMjYwMTAyMDAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjJlMjBlMjVmN2RmNDAzZmFhMjcyYTZkYmIxMWRmYjA3NTBhNGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IPnOEgGsUvDJ4QZW5uNbtSj/6/t 9057kseUj0gKd08GxKOQmcRQNya+6VCRnk2ZU/x5CQchNAMtTCYwUwTQubECYM5c h6kcH60GNBBKaVLzBAHoG3nhSEs4XXUPhDPw3F7+R+mBfMj8muXbERCrBc3jIHpU M8tyUb0a1zjY72l/tQTS8omLQpa+IQ/YhuaXA+ilno7UUCZIA3VJilZnhsSijgsC NhvzVf56DNNQSakBOusd7DflCIbv7V0H5K7LX0Ix41O95r/ppzBJnsObUCI7aj1C uG+XZctQItGeKV9SXg85oSP5A/SkOuWKE1MbS6isi2AFeGoh1QV1as7NhwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKIuIOJfffQD+qJyptuxHfsHUKT7MB8GA1UdIwQY MBaAFGi9OdeTElxoTf8nL4hiK6xDIYDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUwwNTE1TVNYR2hOX3ljdmlHSXJyRU1oZ1BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80MjRiOTQtZTcwMi00YjIyLWFlMmUt MDg5MDUyMGI4ODQ2LzEvb2k0ZzRsOTk5QVA2b25LbTI3RWQtd2RRcFBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80MjRiOTQtZTcwMi00YjIyLWFlMmUtMDg5MDUyMGI4ODQ2 LzEvYUwwNTE1TVNYR2hOX3ljdmlHSXJyRU1oZ1BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDPmaYAwQC uR5wMA0EAgACMAcDBQAqA0VAMA0GCSqGSIb3DQEBCwUAA4IBAQDHYsoO2SWC3Wak 4hyBVe6UEHe38pGl2JE81PX+JYg7C3DzCFhFRl+z7msPz33f+B8G4XDQUR7BHuxe G73EhDWShdNdhOUA5vd8uqdWX2YfwdumWPad6X26zYiqlw2h7XLeli/HVgkufukx zAeM51BRUgS37srIDIXEkm/exwVkj1XyEdY8aBmA31l7RkaXSWYDd5IZw7MnIwCU cWdIEzXvV+3VrnL2zS3AW01hq3Ew0vR9uPh3V+mX1n7xS1AUmBP1bfSeJUnklHJy SYVLYMCZRDD4vUi6gI/CRgYm2L4TgD3/DQfjrKWKOPYUeAi+b1FUGo21NB3MV6P6 nk9fxAoS -----END CERTIFICATE-----Generated at Tue Feb 10 06:03:58 2026 by rpki-client