This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/OfgX__ujJsM89vLwjQPhSwsxz5M.roa File: OfgX__ujJsM89vLwjQPhSwsxz5M.roa (raw, json) Hash identifier: qToo5/1dF5tOyToAZo/HzIT0sklloDTYo8xdNUNZt+Q= Subject key identifier: 39:F8:17:FF:FB:A3:26:C3:3C:F6:F2:F0:8D:03:E1:4B:0B:31:CF:93 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758C088FDB551F0E384D6ED93A52212 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/OfgX__ujJsM89vLwjQPhSwsxz5M.roa Signing time: Thu 01 Jan 2026 02:17:43 +0000 ROA not before: Thu 01 Jan 2026 02:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215073 IP address blocks: 185.254.29.0/24 maxlen: 24 185.254.239.0/24 maxlen: 24 193.35.152.0/24 maxlen: 24 193.160.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c0:88:fd:b5:51:f0:e3:84:d6:ed:93:a5:22:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39f817fffba326c33cf6f2f08d03e14b0b31cf93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:cd:e6:6c:1b:86:f9:51:38:a2:3a:6f:2b: 27:f0:03:6a:81:d4:c3:38:54:d0:b9:a1:fc:a2:c2: 00:71:83:3f:73:05:ed:73:96:f7:e5:76:d6:1b:29: b3:19:c4:0a:f1:af:25:40:9b:3e:b1:c8:80:47:35: 52:b3:12:85:80:8a:c6:1d:e7:de:77:80:1d:94:23: 9e:74:12:ed:aa:25:0e:98:2d:52:32:1e:76:d5:ed: ff:a0:5a:23:e2:3c:ba:f3:09:55:62:0b:d9:96:85: 67:2a:7b:13:d8:6b:4a:97:b7:6e:c9:a4:ce:cf:47: 8c:e6:e9:cc:3c:b4:5b:6e:8a:d8:3b:6f:1d:5b:2c: c0:e8:6e:3c:e1:34:a2:ff:f0:cf:f5:98:6d:89:6b: cf:53:27:9c:52:5b:f5:1b:ee:7c:fd:47:f4:f3:bf: 49:2a:ab:73:c9:79:cd:1e:52:bd:e8:62:ac:64:0c: de:8f:e5:82:98:e5:c0:06:94:b8:1a:15:0b:98:d0: 28:72:6b:0b:6e:93:1a:ac:11:9a:46:58:b2:6e:79: 6e:33:f9:49:81:bb:f6:2c:73:c4:17:fc:17:0b:8b: 79:39:58:26:d4:ba:13:fd:9b:a6:07:49:60:9f:83: 97:fb:bc:cc:e1:42:45:02:ed:19:b8:d1:dc:67:56: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F8:17:FF:FB:A3:26:C3:3C:F6:F2:F0:8D:03:E1:4B:0B:31:CF:93 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/OfgX__ujJsM89vLwjQPhSwsxz5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.29.0/24 185.254.239.0/24 193.35.152.0/24 193.160.143.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:83:5d:e7:fe:21:c9:da:26:81:a9:88:dc:74:49:56:98:3f: 57:6f:45:54:5f:64:f7:82:3a:81:33:04:10:2d:3d:91:18:5a: 38:4e:0d:3e:f2:be:67:7d:46:a4:00:7d:5f:a2:7a:98:c2:94: c3:ea:d3:fe:c7:78:f3:e9:2a:12:12:df:aa:5c:ad:38:81:b6: 3b:05:5d:71:eb:23:e8:f7:cf:47:c2:1f:28:d1:cc:76:88:1d: 3f:f9:3e:9b:ec:26:90:69:83:ea:02:c9:dd:0b:6a:23:40:71: 6d:91:25:d3:f5:f0:f8:0a:21:40:81:51:a4:c8:cc:49:c2:16: 5d:b9:d9:1c:40:7b:49:18:16:86:81:1d:0c:fb:af:2c:51:1b: 7c:dc:f8:3a:98:ac:c5:55:0d:25:0d:96:19:5a:b9:42:11:99: 10:aa:85:a3:e5:1d:cc:73:2f:d3:83:02:7c:72:39:ad:be:34: c9:a0:d2:e7:c1:47:79:89:67:d5:4c:a9:97:0f:7a:cf:a6:8f: 32:b1:16:38:f1:c1:a8:96:e7:87:93:e6:b6:cb:7f:a6:ab:98: ca:19:be:93:33:10:b2:27:30:9a:cb:23:95:7a:f0:ae:af:82: b4:9b:21:ee:88:6e:c6:19:2b:4a:50:9b:7b:64:3e:b3:c8:bc: 49:7c:9a:bf -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WMCI/bVR8OOE1u2TpSISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWY4MTdmZmZiYTMyNmMzM2NmNmYyZjA4ZDAzZTE0YjBiMzFjZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6XN5mwbhvlROKI6bysn8ANqgdTD OFTQuaH8osIAcYM/cwXtc5b35XbWGymzGcQK8a8lQJs+sciARzVSsxKFgIrGHefe d4AdlCOedBLtqiUOmC1SMh521e3/oFoj4jy68wlVYgvZloVnKnsT2GtKl7duyaTO z0eM5unMPLRbborYO28dWyzA6G484TSi//DP9ZhtiWvPUyecUlv1G+58/Uf0879J KqtzyXnNHlK96GKsZAzej+WCmOXABpS4GhULmNAocmsLbpMarBGaRliybnluM/lJ gbv2LHPEF/wXC4t5OVgm1LoT/ZumB0lgn4OX+7zM4UJFAu0ZuNHcZ1aeBwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDn4F//7oybDPPby8I0D4UsLMc+TMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvT2ZnWF9fdWpKc004OXZMd2pRUGhTd3N4ejVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuf4dAwQA uf7vAwQAwSOYAwQAwaCPMA0GCSqGSIb3DQEBCwUAA4IBAQCLg13n/iHJ2iaBqYjc dElWmD9Xb0VUX2T3gjqBMwQQLT2RGFo4Tg0+8r5nfUakAH1fonqYwpTD6tP+x3jz 6SoSEt+qXK04gbY7BV1x6yPo989Hwh8o0cx2iB0/+T6b7CaQaYPqAsndC2ojQHFt kSXT9fD4CiFAgVGkyMxJwhZdudkcQHtJGBaGgR0M+68sURt83Pg6mKzFVQ0lDZYZ WrlCEZkQqoWj5R3Mcy/TgwJ8cjmtvjTJoNLnwUd5iWfVTKmXD3rPpo8ysRY48cGo lueHk+a2y3+mq5jKGb6TMxCyJzCayyOVevCur4K0myHuiG7GGStKUJt7ZD6zyLxJ fJq/ -----END CERTIFICATE-----Generated at Wed Jan 21 14:10:53 2026 by rpki-client