This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/oUGkPZTPkKHGPI9Jz6IXcq74MlY.roa File: oUGkPZTPkKHGPI9Jz6IXcq74MlY.roa (raw, json) Hash identifier: kW23YRINjjPil+PnE7QgBUdKf6Li2ZuNouz/Gf0yezE= Subject key identifier: A1:41:A4:3D:94:CF:90:A1:C6:3C:8F:49:CF:A2:17:72:AE:F8:32:56 Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129 Certificate serial: 019B7DCB30360093AF9626D15C92756A89AB Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/oUGkPZTPkKHGPI9Jz6IXcq74MlY.roa Signing time: Fri 02 Jan 2026 08:20:26 +0000 ROA not before: Fri 02 Jan 2026 08:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39835 IP address blocks: 5.34.224.0/21 maxlen: 24 81.20.112.0/20 maxlen: 24 81.90.192.0/20 maxlen: 24 130.193.96.0/21 maxlen: 24 185.75.148.0/22 maxlen: 24 185.94.36.0/22 maxlen: 24 188.74.32.0/20 maxlen: 24 212.101.32.0/19 maxlen: 24 2a02:1318::/32 maxlen: 40 2a03:4b20::/29 maxlen: 40 2a03:6880::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:30:36:00:93:af:96:26:d1:5c:92:75:6a:89:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129 Validity Not Before: Jan 2 08:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a141a43d94cf90a1c63c8f49cfa21772aef83256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b0:3c:f0:77:fc:3a:d8:20:68:ed:4d:d7:b2: e0:67:34:34:a8:26:1e:67:2d:a5:e0:58:4f:41:53: 0b:06:a5:30:10:ca:f5:59:89:75:ee:39:bb:4a:75: d9:41:c0:5b:3c:44:ff:c5:e4:b9:fc:42:74:5f:ce: 58:f2:0a:81:30:3f:9a:28:ac:6d:43:5c:d0:b7:54: 32:2d:17:e6:d2:38:cb:34:66:f2:5f:81:2c:48:2d: 99:34:b2:e8:eb:cd:c6:83:2e:b5:e8:60:c0:d9:e8: 53:f0:6e:50:ca:9a:e7:5f:0b:d4:54:9c:74:82:d3: 70:e7:bc:ca:9c:68:a2:50:61:f0:ed:a7:fe:cd:66: f8:6b:be:d1:68:33:38:cd:6b:a4:cd:59:f9:d3:12: a5:30:8a:dc:dc:ce:f0:33:43:e0:3f:1f:50:81:8c: 8b:78:46:c5:d6:74:3d:cc:4a:6b:6b:1f:2a:4c:f9: eb:af:a5:c2:a9:5b:72:c9:a2:6f:56:6c:81:99:66: 1e:ae:e2:88:9e:d9:44:a2:67:c1:e0:53:ee:38:a5: 40:d3:72:eb:48:79:60:f7:ee:d4:5a:c1:6e:d0:3f: 4d:10:49:e6:46:47:9d:e6:df:2e:c9:ca:dc:c4:42: 1d:b0:86:66:79:ea:ae:aa:0d:3e:63:49:9f:51:7c: e3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:41:A4:3D:94:CF:90:A1:C6:3C:8F:49:CF:A2:17:72:AE:F8:32:56 X509v3 Authority Key Identifier: keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/oUGkPZTPkKHGPI9Jz6IXcq74MlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.224.0/21 81.20.112.0/20 81.90.192.0/20 130.193.96.0/21 185.75.148.0/22 185.94.36.0/22 188.74.32.0/20 212.101.32.0/19 IPv6: 2a02:1318::/32 2a03:4b20::/29 2a03:6880::/32 Signature Algorithm: sha256WithRSAEncryption 46:87:f9:6a:34:df:39:6c:37:e3:d3:de:0e:d4:c9:35:16:13: fa:ac:aa:0d:1f:d9:6b:7f:ef:d1:69:18:63:2f:59:8a:6d:e2: 22:ab:4d:5c:e7:6f:7b:87:29:46:fa:fd:40:9b:98:4b:22:fe: 29:42:e9:82:49:e4:8e:b0:d4:91:a3:45:9e:57:c7:e3:6c:7a: ef:08:c0:7f:8f:7e:19:87:9c:19:85:96:5f:a2:be:66:bf:1f: 33:21:65:2c:79:d3:ad:4b:7e:19:d3:27:b6:2c:6b:66:47:7a: 1c:1d:f7:aa:33:79:71:9e:68:8d:66:90:77:d4:dc:f4:b8:5b: a2:e8:47:9b:09:89:0b:c8:7b:b3:e6:52:83:ab:f4:66:b8:36: 21:81:79:0f:74:ed:79:f4:a5:38:92:f5:6f:22:63:37:70:08: 1c:a1:b2:32:a8:02:d0:61:d7:ca:64:26:d5:e5:eb:c8:49:7f: 15:35:f6:51:1d:f3:4a:44:77:f7:7a:13:fb:99:5c:b9:7d:67: 46:7c:ff:e7:e6:91:ba:dc:78:3a:7f:1b:e4:e2:82:bd:4c:37: de:0f:b5:a1:bd:86:1f:f1:61:cb:52:80:83:55:e6:2c:55:18: d2:09:8e:8c:01:0f:64:18:d7:25:08:ef:e1:c7:ef:23:fa:97: cf:da:6c:18 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZt9yzA2AJOvlibRXJJ1aomrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzOWYxYTZlODRjMDI3N2VmY2I1NmQ5NDJiMGViNWU0NTY0 NzExMjkwHhcNMjYwMTAyMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTQxYTQzZDk0Y2Y5MGExYzYzYzhmNDljZmEyMTc3MmFlZjgzMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbA88Hf8OtggaO1N17LgZzQ0qCYe Zy2l4FhPQVMLBqUwEMr1WYl17jm7SnXZQcBbPET/xeS5/EJ0X85Y8gqBMD+aKKxt Q1zQt1QyLRfm0jjLNGbyX4EsSC2ZNLLo683Ggy616GDA2ehT8G5QyprnXwvUVJx0 gtNw57zKnGiiUGHw7af+zWb4a77RaDM4zWukzVn50xKlMIrc3M7wM0PgPx9QgYyL eEbF1nQ9zEprax8qTPnrr6XCqVtyyaJvVmyBmWYeruKIntlEomfB4FPuOKVA03Lr SHlg9+7UWsFu0D9NEEnmRked5t8uycrcxEIdsIZmeequqg0+Y0mfUXzjnQIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFKFBpD2Uz5ChxjyPSc+iF3Ku+DJWMB8GA1UdIwQY MBaAFOOfGm6EwCd+/LVtlCsOteRWRxEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMt MGU1MzkyNzU3ZjgyLzEvb1VHa1BaVFBrS0hHUEk5Sno2SVhjcTc0TWxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMtMGU1MzkyNzU3Zjgy LzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTA2BAIAATAwAwQDBSLgAwQE URRwAwQEUVrAAwQDgsFgAwQCuUuUAwQCuV4kAwQEvEogAwQF1GUgMBsEAgACMBUD BQAqAhMYAwUDKgNLIAMFACoDaIAwDQYJKoZIhvcNAQELBQADggEBAEaH+Wo03zls N+PT3g7UyTUWE/qsqg0f2Wt/79FpGGMvWYpt4iKrTVznb3uHKUb6/UCbmEsi/ilC 6YJJ5I6w1JGjRZ5Xx+Nseu8IwH+PfhmHnBmFll+ivma/HzMhZSx5061LfhnTJ7Ys a2ZHehwd96ozeXGeaI1mkHfU3PS4W6LoR5sJiQvIe7PmUoOr9Ga4NiGBeQ907Xn0 pTiS9W8iYzdwCByhsjKoAtBh18pkJtXl68hJfxU19lEd80pEd/d6E/uZXLl9Z0Z8 /+fmkbrceDp/G+Tigr1MN94PtaG9hh/xYctSgINV5ixVGNIJjowBD2QY1yUI7+HH 7yP6l8/abBg= -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:59 2026 by rpki-client