This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/onylvAnaX1xJT4oQ_18209fUiQo.roa File: onylvAnaX1xJT4oQ_18209fUiQo.roa (raw, json) Hash identifier: uJ5yGGvZ7mIQiDhU+Wu/R2iMU5zPKWhZCJOHY75uE3g= Subject key identifier: A2:7C:A5:BC:09:DA:5F:5C:49:4F:8A:10:FF:5F:36:D3:D7:D4:89:0A Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e Certificate serial: 019B7E37581242526AE9484C07C09DB2F742 Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/onylvAnaX1xJT4oQ_18209fUiQo.roa Signing time: Fri 02 Jan 2026 10:18:34 +0000 ROA not before: Fri 02 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 192.160.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:58:12:42:52:6a:e9:48:4c:07:c0:9d:b2:f7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e Validity Not Before: Jan 2 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a27ca5bc09da5f5c494f8a10ff5f36d3d7d4890a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:91:74:23:5f:65:60:46:e8:f7:13:70:e4: f4:c6:65:f1:94:0e:c1:e3:53:ee:4a:5e:b2:0b:32: ca:7e:02:7e:1d:9c:2f:c9:e4:a3:1b:8d:50:0e:72: c9:60:5e:13:85:20:08:cb:2b:41:cf:95:8d:6c:d7: 57:dd:bc:40:d1:f5:70:3b:96:3b:f1:79:46:34:8f: 36:ea:c2:23:05:0f:0c:e5:80:7f:aa:60:6e:f7:0e: 6b:65:a7:89:29:15:eb:d9:d1:b2:ff:6e:4c:4c:b3: 56:cd:2d:e3:a8:12:31:a2:ae:e9:23:11:b7:01:ef: a7:fd:c6:ed:b5:22:d0:39:c1:15:34:9d:39:0e:64: 7b:83:d8:be:e6:0b:b2:3c:8c:4d:ab:c5:10:69:06: 9d:e7:77:d6:46:bf:72:4e:6d:74:96:27:26:2e:75: 46:6a:6f:92:16:98:03:45:01:ab:06:79:be:fa:65: 39:d1:68:47:87:d6:6f:bd:91:6c:03:3f:ca:43:2f: 2d:5d:cd:88:10:92:36:33:9b:89:b2:0b:e4:47:9a: 7b:2c:48:85:62:67:04:29:0a:05:d0:bb:c1:c4:96: d2:11:a6:35:52:8b:f7:c2:b8:66:f2:77:00:97:78: 1f:fd:fb:5f:5d:85:f1:75:7e:82:2c:4d:22:e8:cd: 8b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7C:A5:BC:09:DA:5F:5C:49:4F:8A:10:FF:5F:36:D3:D7:D4:89:0A X509v3 Authority Key Identifier: keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/onylvAnaX1xJT4oQ_18209fUiQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.160.194.0/24 Signature Algorithm: sha256WithRSAEncryption 40:f4:11:2e:ce:4e:86:ec:9e:9d:4f:4b:00:72:00:3c:a2:3b: 25:7a:f0:19:e6:c7:68:4a:05:d5:91:82:e3:fd:b2:d1:d8:60: 00:6f:60:cd:b8:1e:63:d7:1c:d5:f8:94:9e:52:dd:0b:fe:b7: 15:2d:7f:fe:0c:bb:c5:6a:23:6b:28:05:32:34:a5:e5:ef:46: ed:9d:f1:25:6a:01:64:62:43:2b:2d:03:8b:2e:ba:8f:6c:a7: e7:d3:19:81:a5:e2:80:79:15:cf:21:c5:58:5b:27:62:c3:36: 9b:ae:14:83:59:18:53:56:b5:a7:52:ed:5a:5a:5b:c5:85:75: 62:65:db:31:19:9f:45:82:78:b5:e6:04:d7:e4:04:04:53:5d: 05:b1:c5:76:c6:4f:70:2f:8e:26:20:7d:22:be:e4:f6:39:22: 57:13:bd:2f:5e:bd:fe:0a:df:19:2c:fc:b3:73:e1:6b:3f:e1: e5:dc:8f:0c:7e:15:15:60:1a:d0:5d:7c:5d:a6:ac:2e:12:83: 93:01:9a:41:17:d7:7a:8d:f1:ca:6d:97:f4:cf:99:35:b4:31: b8:bd:ff:b0:d9:e8:e2:d1:45:f0:75:cb:9f:bf:fc:7d:68:51: 6c:04:fe:20:49:28:3b:ba:fb:51:0b:74:56:24:ac:5b:99:5e: 62:07:69:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N1gSQlJq6UhMB8CdsvdCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTg3NDA5NWM0Yzk0MjJiOTM1OTc1YTcxNTY0ZjA3NzFj ZDI5MmUwHhcNMjYwMTAyMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjdjYTViYzA5ZGE1ZjVjNDk0ZjhhMTBmZjVmMzZkM2Q3ZDQ4OTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWiRdCNfZWBG6PcTcOT0xmXxlA7B 41PuSl6yCzLKfgJ+HZwvyeSjG41QDnLJYF4ThSAIyytBz5WNbNdX3bxA0fVwO5Y7 8XlGNI826sIjBQ8M5YB/qmBu9w5rZaeJKRXr2dGy/25MTLNWzS3jqBIxoq7pIxG3 Ae+n/cbttSLQOcEVNJ05DmR7g9i+5guyPIxNq8UQaQad53fWRr9yTm10licmLnVG am+SFpgDRQGrBnm++mU50WhHh9ZvvZFsAz/KQy8tXc2IEJI2M5uJsgvkR5p7LEiF YmcEKQoF0LvBxJbSEaY1Uov3wrhm8ncAl3gf/ftfXYXxdX6CLE0i6M2L4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKJ8pbwJ2l9cSU+KEP9fNtPX1IkKMB8GA1UdIwQY MBaAFLhYdAlcTJQiuTWXWnFWTwdxzSkuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZoMENWeE1sQ0s1TlpkYWNWWlBCM0hOS1M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kODA4NzctN2YxZS00YTUwLTk5NTct MDcwYTFmNzE4ODVlLzEvb255bHZBbmFYMXhKVDRvUV8xODIwOWZVaVFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9kODA4NzctN2YxZS00YTUwLTk5NTctMDcwYTFmNzE4ODVl LzEvdUZoMENWeE1sQ0s1TlpkYWNWWlBCM0hOS1M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKDCMA0G CSqGSIb3DQEBCwUAA4IBAQBA9BEuzk6G7J6dT0sAcgA8ojslevAZ5sdoSgXVkYLj /bLR2GAAb2DNuB5j1xzV+JSeUt0L/rcVLX/+DLvFaiNrKAUyNKXl70btnfElagFk YkMrLQOLLrqPbKfn0xmBpeKAeRXPIcVYWydiwzabrhSDWRhTVrWnUu1aWlvFhXVi ZdsxGZ9Fgni15gTX5AQEU10FscV2xk9wL44mIH0ivuT2OSJXE70vXr3+Ct8ZLPyz c+FrP+Hl3I8MfhUVYBrQXXxdpqwuEoOTAZpBF9d6jfHKbZf0z5k1tDG4vf+w2eji 0UXwdcufv/x9aFFsBP4gSSg7uvtRC3RWJKxbmV5iB2m4 -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:28 2026 by rpki-client