This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/OsX0t0wG95-5VyP53Jq4AJS0W0M.roa File: OsX0t0wG95-5VyP53Jq4AJS0W0M.roa (raw, json) Hash identifier: y2uezb2UJkRqJ1oDp6l1/kWv/o+1MQQ44Y666OmQDxE= Subject key identifier: 3A:C5:F4:B7:4C:06:F7:9F:B9:57:23:F9:DC:9A:B8:00:94:B4:5B:43 Certificate issuer: /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb Certificate serial: 019B7C11BA34A49CFC2AC3356BB6BABB0BC1 Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/OsX0t0wG95-5VyP53Jq4AJS0W0M.roa Signing time: Fri 02 Jan 2026 00:18:15 +0000 ROA not before: Fri 02 Jan 2026 00:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34740 IP address blocks: 193.148.0.0/24 maxlen: 24 194.60.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ba:34:a4:9c:fc:2a:c3:35:6b:b6:ba:bb:0b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb Validity Not Before: Jan 2 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ac5f4b74c06f79fb95723f9dc9ab80094b45b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:10:d2:b9:a6:de:f9:6b:64:29:8f:42:08:c4: ab:c4:ad:d3:9a:b7:5e:3a:55:01:c2:18:ef:83:00: 6b:1c:db:41:7d:81:d8:6a:29:1a:38:28:4f:18:65: 1a:52:61:db:fb:6a:7c:a1:32:09:37:e0:16:cb:d4: 13:86:86:a2:f3:5f:2b:9b:04:59:01:a9:13:a6:66: d0:d5:7a:2f:5f:ef:d0:3d:53:d2:7c:8f:c2:97:91: 5a:7e:a2:2c:0a:c9:92:e1:34:92:67:c6:2d:38:c2: 17:c5:53:07:70:5e:b4:f4:da:be:38:99:36:e6:30: 94:ed:1c:58:a8:b5:f5:68:ef:09:8e:5a:61:bf:b3: db:16:2f:67:0a:8b:ff:a7:44:f0:11:68:a4:29:10: 6f:d8:fa:b1:4d:bc:8c:8b:cb:6e:c3:56:e7:d9:eb: 4e:c4:85:7a:b9:54:bb:35:cb:53:60:73:31:9e:d3: 7b:2e:b6:23:27:30:13:fa:ac:62:06:5a:56:05:0a: 05:24:a7:1d:f0:09:4b:33:0d:43:c5:86:85:48:70: d4:49:90:1a:ff:ff:7e:12:92:09:e0:fa:b7:a6:5f: ec:69:18:85:8e:01:7f:d5:d9:d6:15:d7:5c:fc:33: 69:2d:3a:c2:b0:b2:7f:a4:45:0e:e9:38:95:cf:7e: 7a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C5:F4:B7:4C:06:F7:9F:B9:57:23:F9:DC:9A:B8:00:94:B4:5B:43 X509v3 Authority Key Identifier: keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/OsX0t0wG95-5VyP53Jq4AJS0W0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.148.0.0/24 194.60.72.0/24 Signature Algorithm: sha256WithRSAEncryption e8:5c:92:03:78:48:9e:bd:0f:96:8f:24:67:af:f9:0d:13:fd: 37:21:52:59:48:54:86:46:8a:5f:e2:84:a1:0c:7d:c5:ab:f3: 78:1f:00:7d:37:77:4e:66:b2:fd:48:c9:13:ad:09:45:64:57: 19:38:cc:02:c6:20:ab:8e:87:13:0b:13:2a:ee:ec:6e:cc:a9: 65:17:79:a4:fe:a9:30:18:04:b7:95:1f:d5:0b:e7:bd:13:5b: ce:79:fc:65:2c:09:2c:ea:85:35:06:6e:05:11:37:2f:92:da: 43:e7:f7:21:28:c8:35:cd:4a:22:dd:ec:cf:62:30:5f:b8:18: d1:87:6e:23:f4:7d:7c:75:41:69:ad:f5:ed:54:dc:d7:f9:f7: 85:a4:4b:16:04:7a:1a:e8:83:d4:dc:71:18:c5:7f:68:57:26: ed:98:55:43:97:e3:1e:cb:36:56:77:7c:e2:34:69:53:76:3c: e0:e6:ec:c5:91:7c:38:75:29:d6:24:eb:21:04:a2:8b:b3:fb: 0a:46:3d:08:5f:f3:5a:1f:93:16:ba:a3:54:de:df:5e:a3:5e: 02:0a:c6:ea:4d:d5:b6:23:4a:4a:e9:e9:e1:d0:89:ee:2d:30: b3:39:fa:38:b1:84:23:a4:07:eb:b9:e8:1e:67:b8:29:5c:7e: 60:bf:43:c4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Ebo0pJz8KsM1a7a6uwvBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NjRiYzVkMGFkOWVhMDVlMjhjODJlNzY4ZmYxNGQxZDc0 ZDJmZWIwHhcNMjYwMTAyMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWM1ZjRiNzRjMDZmNzlmYjk1NzIzZjlkYzlhYjgwMDk0YjQ1YjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hDSuabe+WtkKY9CCMSrxK3Tmrde OlUBwhjvgwBrHNtBfYHYaikaOChPGGUaUmHb+2p8oTIJN+AWy9QThoai818rmwRZ AakTpmbQ1XovX+/QPVPSfI/Cl5FafqIsCsmS4TSSZ8YtOMIXxVMHcF609Nq+OJk2 5jCU7RxYqLX1aO8Jjlphv7PbFi9nCov/p0TwEWikKRBv2PqxTbyMi8tuw1bn2etO xIV6uVS7NctTYHMxntN7LrYjJzAT+qxiBlpWBQoFJKcd8AlLMw1DxYaFSHDUSZAa //9+EpIJ4Pq3pl/saRiFjgF/1dnWFddc/DNpLTrCsLJ/pEUO6TiVz356KwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDrF9LdMBvefuVcj+dyauACUtFtDMB8GA1UdIwQY MBaAFOlkvF0K2eoF4oyC52j/FNHXTS/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNldTOFhRclo2Z1hpaklMbmFQOFUwZGROTC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xYzhjYmEtNzQ5MS00NTQ2LTk5NTMt NTg5OWE3NGJlMmFlLzEvT3NYMHQwd0c5NS01VnlQNTNKcTRBSlMwVzBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xYzhjYmEtNzQ5MS00NTQ2LTk5NTMtNTg5OWE3NGJlMmFl LzEvNldTOFhRclo2Z1hpaklMbmFQOFUwZGROTC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwZQAAwQA wjxIMA0GCSqGSIb3DQEBCwUAA4IBAQDoXJIDeEievQ+WjyRnr/kNE/03IVJZSFSG Ropf4oShDH3Fq/N4HwB9N3dOZrL9SMkTrQlFZFcZOMwCxiCrjocTCxMq7uxuzKll F3mk/qkwGAS3lR/VC+e9E1vOefxlLAks6oU1Bm4FETcvktpD5/chKMg1zUoi3ezP YjBfuBjRh24j9H18dUFprfXtVNzX+feFpEsWBHoa6IPU3HEYxX9oVybtmFVDl+Me yzZWd3ziNGlTdjzg5uzFkXw4dSnWJOshBKKLs/sKRj0IX/NaH5MWuqNU3t9eo14C CsbqTdW2I0pK6enh0InuLTCzOfo4sYQjpAfruegeZ7gpXH5gv0PE -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:58 2026 by rpki-client