This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/oKjaZzr2WL1sJPY2s9ct0VHgjmE.roa File: oKjaZzr2WL1sJPY2s9ct0VHgjmE.roa (raw, json) Hash identifier: BfBo8KhVWa4ugCGtWR+GTTpoDD+qROZ01hHtGPmi5dE= Subject key identifier: A0:A8:DA:67:3A:F6:58:BD:6C:24:F6:36:B3:D7:2D:D1:51:E0:8E:61 Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5 Certificate serial: 019B77C665A7375D55EF9DEDBC2DD9B658ED Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/oKjaZzr2WL1sJPY2s9ct0VHgjmE.roa Signing time: Thu 01 Jan 2026 04:17:29 +0000 ROA not before: Thu 01 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44486 IP address blocks: 81.31.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:65:a7:37:5d:55:ef:9d:ed:bc:2d:d9:b6:58:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5 Validity Not Before: Jan 1 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0a8da673af658bd6c24f636b3d72dd151e08e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3d:04:53:52:56:1a:dd:a7:7d:85:93:8a:13: b1:3c:82:04:c4:74:53:4e:90:57:bb:79:c7:4c:bf: 7c:3d:dd:5a:48:74:21:bd:bf:2d:2f:88:c9:1b:6c: 60:ac:d7:39:63:07:dd:69:ad:41:de:0e:07:3c:dd: 30:36:83:df:47:6d:a2:ac:f6:9b:95:10:2c:99:e3: 63:b2:ee:bb:0a:85:20:b2:ae:34:48:9f:94:86:6e: 9a:f5:ce:40:43:77:b6:e8:57:d1:45:85:00:09:41: 95:72:ff:19:d4:fc:54:92:e9:d0:9e:33:ce:d7:ff: f2:61:3f:3c:a9:ab:d9:50:18:8a:6c:79:31:30:40: 52:04:f2:76:9d:9d:ce:73:92:05:51:91:3a:32:fd: 31:81:0f:de:46:a7:41:55:a4:7a:1c:15:5e:19:54: f3:57:38:d4:12:4a:3c:3b:73:7d:e6:93:87:d2:a7: 11:e1:12:9e:b6:6d:3e:a9:a4:5b:68:61:03:f0:3e: 31:df:69:ec:b5:08:ea:8f:8d:b3:6d:4d:2d:e7:f7: d6:2c:0e:57:59:10:f1:ae:f1:fe:9d:b7:67:f6:50: e2:ae:34:0a:4b:06:45:e5:e9:a1:eb:d6:2d:7e:d3: fa:20:b9:ec:b3:38:d1:a5:60:cb:f7:38:dd:f1:da: 2c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A8:DA:67:3A:F6:58:BD:6C:24:F6:36:B3:D7:2D:D1:51:E0:8E:61 X509v3 Authority Key Identifier: keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/oKjaZzr2WL1sJPY2s9ct0VHgjmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.199.0/24 Signature Algorithm: sha256WithRSAEncryption 16:3a:09:1c:d1:a7:78:ae:d7:ca:c6:48:94:96:92:7f:ad:38: 66:45:8f:e7:7d:78:2e:03:23:83:ce:b7:ff:f2:d3:f1:8d:f7: dd:4a:eb:2c:67:52:a6:7c:b0:a3:79:c5:ee:b3:5f:f9:4e:46: f0:68:0b:5b:ff:d5:e8:28:be:55:74:98:fe:d7:6b:68:95:10: 36:e2:2b:0d:77:63:82:6e:14:6e:82:93:72:ba:fe:4b:97:a0: 19:85:09:a0:dc:e8:f5:67:e7:fc:53:03:f9:4d:19:6c:cc:f0: cd:5c:f4:06:b0:5c:9c:fd:c2:5e:ea:e9:d1:64:da:67:4b:9e: 86:0c:ee:54:59:08:63:85:88:e1:87:78:e3:31:48:2e:1b:6a: f8:f6:22:12:23:33:ff:4b:b4:5f:14:44:20:b9:69:1c:3e:45: 14:c8:15:aa:ee:7a:79:0a:c5:05:6b:24:f5:3d:76:8e:d2:2c: cd:c7:f2:09:e0:26:34:35:b3:58:cd:03:ad:ff:d5:47:cd:37: 47:3d:cc:14:dd:71:59:3e:ea:24:2f:09:2e:5b:1c:68:1b:9b: 5e:1f:39:bf:ce:db:76:84:98:96:8b:cf:55:0c:0b:1a:3d:d8: 41:7e:f6:37:95:1e:f6:5b:4f:9b:54:05:7e:9a:b2:14:4b:33: 32:c8:08:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmWnN11V753tvC3ZtljtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4OGIxMDI0ZWEwNTZlNWVkNDk4ZjZlOWRkYzIwNjMyYmRm NmM5YzUwHhcNMjYwMTAxMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGE4ZGE2NzNhZjY1OGJkNmMyNGY2MzZiM2Q3MmRkMTUxZTA4ZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9j0EU1JWGt2nfYWTihOxPIIExHRT TpBXu3nHTL98Pd1aSHQhvb8tL4jJG2xgrNc5Ywfdaa1B3g4HPN0wNoPfR22irPab lRAsmeNjsu67CoUgsq40SJ+Uhm6a9c5AQ3e26FfRRYUACUGVcv8Z1PxUkunQnjPO 1//yYT88qavZUBiKbHkxMEBSBPJ2nZ3Oc5IFUZE6Mv0xgQ/eRqdBVaR6HBVeGVTz VzjUEko8O3N95pOH0qcR4RKetm0+qaRbaGED8D4x32nstQjqj42zbU0t5/fWLA5X WRDxrvH+nbdn9lDirjQKSwZF5emh69YtftP6ILnsszjRpWDL9zjd8dosMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKCo2mc69li9bCT2NrPXLdFR4I5hMB8GA1UdIwQY MBaAFFiLECTqBW5e1Jj26d3CBjK99snFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2Qt NTY2MjhhNDZkZjQwLzEvb0tqYVp6cjJXTDFzSlBZMnM5Y3QwVkhnam1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2QtNTY2MjhhNDZkZjQw LzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR/HMA0G CSqGSIb3DQEBCwUAA4IBAQAWOgkc0ad4rtfKxkiUlpJ/rThmRY/nfXguAyODzrf/ 8tPxjffdSussZ1KmfLCjecXus1/5TkbwaAtb/9XoKL5VdJj+12tolRA24isNd2OC bhRugpNyuv5Ll6AZhQmg3Oj1Z+f8UwP5TRlszPDNXPQGsFyc/cJe6unRZNpnS56G DO5UWQhjhYjhh3jjMUguG2r49iISIzP/S7RfFEQguWkcPkUUyBWq7np5CsUFayT1 PXaO0izNx/IJ4CY0NbNYzQOt/9VHzTdHPcwU3XFZPuokLwkuWxxoG5teHzm/ztt2 hJiWi89VDAsaPdhBfvY3lR72W0+bVAV+mrIUSzMyyAjh -----END CERTIFICATE-----Generated at Sun Jan 18 08:33:43 2026 by rpki-client