This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/Oanj9HZBO6pjmAia4pctaEcwILk.roa File: Oanj9HZBO6pjmAia4pctaEcwILk.roa (raw, json) Hash identifier: XGqLRhTKxqFHvcnOJ1VVsX5xFgoIImSw0HHatVrIKYA= Subject key identifier: 39:A9:E3:F4:76:41:3B:AA:63:98:08:9A:E2:97:2D:68:47:30:20:B9 Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2 Certificate serial: 019B78354E9FE6366E2C4F9DB874A8C99801 Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/Oanj9HZBO6pjmAia4pctaEcwILk.roa Signing time: Thu 01 Jan 2026 06:18:38 +0000 ROA not before: Thu 01 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50474 IP address blocks: 109.234.160.0/24 maxlen: 24 109.234.161.0/24 maxlen: 24 109.234.162.0/24 maxlen: 24 109.234.163.0/24 maxlen: 24 109.234.164.0/22 maxlen: 22 185.154.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4e:9f:e6:36:6e:2c:4f:9d:b8:74:a8:c9:98:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2 Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39a9e3f476413baa6398089ae2972d68473020b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d3:6c:4a:f3:2b:2b:e3:c9:69:cc:17:fc:85: f0:50:df:83:19:04:06:79:19:d1:09:3d:52:73:f7: 57:33:f2:c3:05:c0:3d:8f:82:72:a9:78:a9:ae:a8: be:39:00:10:42:2f:73:00:aa:cf:1e:fb:f6:83:df: d9:77:63:81:ed:ba:6f:cd:94:3a:3e:8e:07:cd:f3: 71:c7:58:99:28:be:6f:de:dc:8c:7d:61:b1:b0:13: 97:4a:16:c2:77:e5:6e:c4:b9:cb:cb:5d:65:fd:f3: 75:4d:3e:1e:8b:b1:9b:d5:f2:db:9e:3b:1f:2f:d5: 8e:97:7c:6c:50:08:57:6b:04:2c:33:67:66:92:85: 93:0b:9f:c5:a3:e3:94:ab:07:1f:d9:fc:32:65:9d: 49:ac:e4:78:e1:1d:82:8a:d5:40:19:d2:f9:ef:6d: 9d:e8:2b:f0:fb:53:b3:5c:b5:e4:2a:42:af:9b:d2: 15:92:af:46:c1:17:b9:35:7d:6b:05:96:ab:2a:4a: 6b:8f:25:d2:40:e8:37:fd:42:a8:89:f5:49:74:d5: 1c:31:3a:32:45:f8:72:11:33:81:fc:23:90:f8:4a: 02:3b:6f:08:cb:71:6e:cb:ab:ae:d4:29:9d:2c:e0: e1:aa:bf:ab:08:c3:d9:af:da:4a:fe:3f:18:8d:de: db:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A9:E3:F4:76:41:3B:AA:63:98:08:9A:E2:97:2D:68:47:30:20:B9 X509v3 Authority Key Identifier: keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/Oanj9HZBO6pjmAia4pctaEcwILk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.234.160.0/21 185.154.136.0/22 Signature Algorithm: sha256WithRSAEncryption 78:2c:dd:0a:4c:6b:82:2e:41:e3:67:70:07:42:27:f4:4d:db: 46:0e:ba:19:66:13:75:82:e6:7f:26:32:ee:57:76:d2:ac:a6: 6b:e7:83:c5:a2:cc:b8:4a:60:1c:15:a9:08:6e:0b:21:5f:a9: a0:84:f5:f7:71:43:8e:db:22:6e:a0:5d:e7:fa:ff:3e:b4:3c: b9:76:4f:c6:9d:f5:b1:ec:7f:c1:a0:33:8d:dd:b4:3d:09:77: 2b:d2:73:02:a4:d6:31:d6:9e:e2:af:d1:32:84:33:0d:d0:6f: 0c:e4:68:54:9b:5b:9f:f8:cc:ad:e5:3e:f6:85:ad:be:12:a9: b3:dd:ec:81:4d:bc:95:31:4f:9a:bd:bc:b6:27:e8:a7:14:0d: 36:eb:91:01:68:8f:d4:4d:cc:93:96:ca:cf:3e:c7:d1:80:bc: 90:2b:11:23:ed:e5:32:d2:6a:35:41:79:a4:e6:ac:aa:6f:aa: e9:79:d2:2e:d0:2f:1e:8d:cf:b0:95:f2:68:db:1d:0e:08:c8: 77:b4:e3:ac:8a:09:07:33:97:b8:c3:6c:51:e2:a0:4e:cf:3b: 2b:23:7a:d5:f6:c5:4f:69:46:23:8c:b1:09:59:a1:9a:13:2c: e6:6b:28:41:9b:99:9e:cc:8c:2d:66:a3:7d:aa:58:3e:40:5b: 51:b1:95:b5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NU6f5jZuLE+duHSoyZgBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYWU3YWExNTk0ZDg5OTI5YjExMWEzNzFmMGZmMjZmMjAy ZjU4ZTIwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWE5ZTNmNDc2NDEzYmFhNjM5ODA4OWFlMjk3MmQ2ODQ3MzAyMGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdNsSvMrK+PJacwX/IXwUN+DGQQG eRnRCT1Sc/dXM/LDBcA9j4JyqXiprqi+OQAQQi9zAKrPHvv2g9/Zd2OB7bpvzZQ6 Po4HzfNxx1iZKL5v3tyMfWGxsBOXShbCd+VuxLnLy11l/fN1TT4ei7Gb1fLbnjsf L9WOl3xsUAhXawQsM2dmkoWTC5/Fo+OUqwcf2fwyZZ1JrOR44R2CitVAGdL5722d 6Cvw+1OzXLXkKkKvm9IVkq9GwRe5NX1rBZarKkprjyXSQOg3/UKoifVJdNUcMToy RfhyETOB/COQ+EoCO28Iy3Fuy6uu1CmdLODhqr+rCMPZr9pK/j8Yjd7b+wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDmp4/R2QTuqY5gImuKXLWhHMCC5MB8GA1UdIwQY MBaAFFyueqFZTYmSmxEaNx8P8m8gL1jiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUt Mjc5ZjU5NGIzYTJmLzEvT2FuajlIWkJPNnBqbUFpYTRwY3RhRWN3SUxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUtMjc5ZjU5NGIzYTJm LzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDbeqgAwQC uZqIMA0GCSqGSIb3DQEBCwUAA4IBAQB4LN0KTGuCLkHjZ3AHQif0TdtGDroZZhN1 guZ/JjLuV3bSrKZr54PFosy4SmAcFakIbgshX6mghPX3cUOO2yJuoF3n+v8+tDy5 dk/GnfWx7H/BoDON3bQ9CXcr0nMCpNYx1p7ir9EyhDMN0G8M5GhUm1uf+Myt5T72 ha2+Eqmz3eyBTbyVMU+avby2J+inFA0265EBaI/UTcyTlsrPPsfRgLyQKxEj7eUy 0mo1QXmk5qyqb6rpedIu0C8ejc+wlfJo2x0OCMh3tOOsigkHM5e4w2xR4qBOzzsr I3rV9sVPaUYjjLEJWaGaEyzmayhBm5mezIwtZqN9qlg+QFtRsZW1 -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:22 2026 by rpki-client