This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/oaaK-SykNHj4NMtAlojIzptkrl8.roa File: oaaK-SykNHj4NMtAlojIzptkrl8.roa (raw, json) Hash identifier: s9ElKRoJMX78rcJ0exfOAn6uy9x5N+KQ6zeX8pI3px0= Subject key identifier: A1:A6:8A:F9:2C:A4:34:78:F8:34:CB:40:96:88:C8:CE:9B:64:AE:5F Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019B7E3899355753CB85828C4014BC7837BD Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/oaaK-SykNHj4NMtAlojIzptkrl8.roa Signing time: Fri 02 Jan 2026 10:19:57 +0000 ROA not before: Fri 02 Jan 2026 10:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212416 IP address blocks: 193.108.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:99:35:57:53:cb:85:82:8c:40:14:bc:78:37:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Jan 2 10:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1a68af92ca43478f834cb409688c8ce9b64ae5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6a:eb:a5:14:13:97:da:a7:26:40:0d:44:e1: c3:f9:97:26:13:29:0f:b8:70:a7:b6:b0:df:e6:8e: b1:9e:58:da:27:85:0b:cc:17:17:08:61:52:75:cb: 30:3b:41:51:16:c2:10:34:ee:21:40:cf:1d:9d:d0: ae:03:aa:46:62:4a:ac:69:87:a0:5c:79:25:cd:ca: 0d:5b:60:b3:b0:40:d9:6d:fe:9b:e4:82:56:c0:df: e4:65:7b:e8:a2:7e:c2:1e:2a:3d:0a:f3:46:19:86: bf:76:7e:43:f5:e9:40:6f:f1:48:f3:c6:7a:ea:63: 74:3c:e6:d0:a6:fe:5b:87:f7:37:8e:68:7f:e9:81: 49:d6:55:f6:75:4c:c9:9c:c0:b1:63:8f:4f:cb:99: 64:99:a9:e1:e4:2a:2e:88:e5:f8:51:73:a2:71:bb: ce:7f:63:ff:3b:43:5d:51:4a:f9:d4:be:a7:04:e9: 3a:8f:94:55:16:69:1b:86:ca:00:99:2e:81:e6:b1: 27:5c:9c:24:5c:1f:26:2a:c4:09:7d:9a:31:2f:51: a5:a4:f4:c2:72:4f:23:2c:5d:65:24:73:33:b4:62: d6:44:24:4a:e0:e0:0b:24:24:db:26:ea:a6:f2:c7: df:94:93:bd:bc:68:85:b6:ed:71:97:72:98:f4:99: 95:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A6:8A:F9:2C:A4:34:78:F8:34:CB:40:96:88:C8:CE:9B:64:AE:5F X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/oaaK-SykNHj4NMtAlojIzptkrl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.57.0/24 Signature Algorithm: sha256WithRSAEncryption 20:9f:ea:8f:8d:08:28:44:f8:aa:3d:49:5c:ae:5e:b2:d0:46: 09:83:eb:88:a9:35:06:1f:04:3f:f1:80:e8:9a:4a:58:60:28: 55:b6:5c:7a:0a:e8:de:02:38:92:54:f4:66:70:2f:fc:f0:30: b2:a4:f1:70:3a:11:b5:db:31:3a:77:d3:f5:90:c7:aa:09:cc: ad:52:03:75:30:0b:cc:c9:01:b9:dc:72:57:d5:0e:ea:a9:23: 3b:ea:f6:a3:45:84:67:4b:45:a2:d8:da:b8:fc:a3:67:10:0e: bb:13:ea:43:3a:17:4b:29:e9:8b:0c:44:4a:d6:47:1c:b9:86: f7:fa:5b:75:8f:bd:fb:88:2a:a3:53:ef:30:4c:c6:fd:58:9e: a9:19:af:af:64:46:c5:ff:31:9d:46:ef:93:1c:94:a0:f3:90: f6:c7:11:13:68:f7:8a:5c:95:f9:3f:d8:11:7a:d0:00:aa:ca: 55:cd:8c:1f:84:99:62:37:58:ae:f6:14:5a:d0:df:00:11:f1: 61:12:0e:75:ad:60:4c:e9:1d:9d:b4:27:22:29:af:fc:a8:dc: b2:b9:87:ac:df:cd:50:19:1c:f1:84:6c:9c:e7:98:e0:79:c8: a6:c7:69:d8:f0:79:14:ec:50:e1:1d:ab:73:eb:06:c2:48:d2: b8:f1:50:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJk1V1PLhYKMQBS8eDe9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwMTAyMTAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWE2OGFmOTJjYTQzNDc4ZjgzNGNiNDA5Njg4YzhjZTliNjRhZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GrrpRQTl9qnJkANROHD+ZcmEykP uHCntrDf5o6xnljaJ4ULzBcXCGFSdcswO0FRFsIQNO4hQM8dndCuA6pGYkqsaYeg XHklzcoNW2CzsEDZbf6b5IJWwN/kZXvoon7CHio9CvNGGYa/dn5D9elAb/FI88Z6 6mN0PObQpv5bh/c3jmh/6YFJ1lX2dUzJnMCxY49Py5lkmanh5CouiOX4UXOicbvO f2P/O0NdUUr51L6nBOk6j5RVFmkbhsoAmS6B5rEnXJwkXB8mKsQJfZoxL1GlpPTC ck8jLF1lJHMztGLWRCRK4OALJCTbJuqm8sfflJO9vGiFtu1xl3KY9JmVswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKGmivkspDR4+DTLQJaIyM6bZK5fMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvb2FhSy1TeWtOSGo0Tk10QWxvakl6cHRrcmw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWw5MA0G CSqGSIb3DQEBCwUAA4IBAQAgn+qPjQgoRPiqPUlcrl6y0EYJg+uIqTUGHwQ/8YDo mkpYYChVtlx6CujeAjiSVPRmcC/88DCypPFwOhG12zE6d9P1kMeqCcytUgN1MAvM yQG53HJX1Q7qqSM76vajRYRnS0Wi2Nq4/KNnEA67E+pDOhdLKemLDERK1kccuYb3 +lt1j737iCqjU+8wTMb9WJ6pGa+vZEbF/zGdRu+THJSg85D2xxETaPeKXJX5P9gR etAAqspVzYwfhJliN1iu9hRa0N8AEfFhEg51rWBM6R2dtCciKa/8qNyyuYes381Q GRzxhGyc55jgecimx2nY8HkU7FDhHatz6wbCSNK48VDd -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:53 2026 by rpki-client