This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/oc9NNjLJP5bHNwRtvggK5853u0I.roa File: oc9NNjLJP5bHNwRtvggK5853u0I.roa (raw, json) Hash identifier: QEJX9V+tmmHO1oVM4U0QVK2GYXHC+jd9Iu69/qnNN24= Subject key identifier: A1:CF:4D:36:32:C9:3F:96:C7:37:04:6D:BE:08:0A:E7:CE:77:BB:42 Certificate issuer: /CN=332293d0399160788b31e438760dc3bd1ed882eb Certificate serial: 019B7F157B396AD93B6001F5A0F0D49FA9FB Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/oc9NNjLJP5bHNwRtvggK5853u0I.roa Signing time: Fri 02 Jan 2026 14:21:12 +0000 ROA not before: Fri 02 Jan 2026 14:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50188 IP address blocks: 95.215.192.0/21 maxlen: 21 95.215.192.0/24 maxlen: 24 95.215.193.0/24 maxlen: 24 95.215.194.0/24 maxlen: 24 95.215.195.0/24 maxlen: 24 95.215.196.0/24 maxlen: 24 95.215.197.0/24 maxlen: 24 95.215.198.0/24 maxlen: 24 95.215.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7b:39:6a:d9:3b:60:01:f5:a0:f0:d4:9f:a9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb Validity Not Before: Jan 2 14:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1cf4d3632c93f96c737046dbe080ae7ce77bb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:1f:32:f9:99:46:7c:f8:a0:67:7e:7d:cd: c2:d0:3c:30:06:9a:16:40:20:19:fc:e7:68:45:c4: 4a:a5:4f:1f:b6:df:93:58:74:80:d7:24:61:e0:25: e8:7a:0d:08:ad:b9:fb:fb:04:cc:03:11:8b:45:5b: 00:87:09:0a:97:de:4d:f5:4b:26:b2:d9:6b:90:10: c8:81:d6:51:f5:34:63:e1:c0:91:ab:d4:7c:93:c4: 1a:37:c0:dc:7c:c6:57:08:28:17:7c:48:23:58:14: 34:cd:57:e4:4a:da:62:59:20:8a:70:cc:08:dc:de: d0:b0:53:d0:cf:0f:2e:e6:a2:a8:d9:f7:e1:5b:8a: be:5d:fd:d7:5f:df:53:2a:f1:8c:89:a7:c3:86:9c: 9e:73:70:98:24:f8:82:8f:7c:55:0a:39:8b:cf:c7: b9:1a:60:c4:dd:e7:ca:9b:7d:d5:b3:50:bd:0c:a9: 99:4a:d2:b0:73:3d:d5:58:66:ef:bc:bf:ee:34:9e: fa:bd:df:82:72:f3:5a:f3:ff:54:fe:a5:c5:28:8c: 3c:e1:ee:bf:a6:20:8c:03:07:be:e5:ae:08:dc:7d: 8e:0e:ca:0a:77:2e:18:85:ce:3b:c0:fc:d0:5c:58: 20:87:e8:fe:54:db:ce:83:a2:b4:d2:37:e5:bf:2e: 52:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CF:4D:36:32:C9:3F:96:C7:37:04:6D:BE:08:0A:E7:CE:77:BB:42 X509v3 Authority Key Identifier: keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/oc9NNjLJP5bHNwRtvggK5853u0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.192.0/21 Signature Algorithm: sha256WithRSAEncryption 15:ba:96:72:35:0f:de:b4:b7:ee:fd:8e:10:24:16:09:e2:ae: 9f:eb:0b:94:32:04:3d:0f:e1:b3:ba:62:60:3f:bd:eb:25:2e: 52:36:a1:41:cb:96:5d:b8:01:f4:c5:b7:ed:c5:95:48:97:43: 58:78:94:1f:f3:ad:01:cf:ea:b8:83:a5:b2:3a:5c:ea:87:d0: b7:ac:85:57:62:54:d1:36:ec:45:57:8f:7d:20:69:31:67:ba: 09:72:1d:45:94:9e:4d:da:e2:da:14:1e:ec:4d:c1:e5:ef:0a: cc:21:15:6a:bd:4f:af:04:8c:ad:43:bd:96:da:fe:06:d1:22: 94:d1:1c:74:66:b8:b5:f3:e1:fb:8f:37:df:21:aa:22:d9:cb: ac:58:4d:eb:62:03:ae:97:fb:a0:21:b5:83:7c:17:a5:b9:de: 49:75:76:bf:97:23:97:e6:7c:f5:7d:a4:31:08:78:63:fa:bb: ea:58:c2:a9:f2:67:f9:55:e2:53:ff:27:af:03:6d:ff:4d:78: 29:32:48:20:e7:2e:fd:2f:05:71:e7:9d:b3:76:e3:ca:db:60: 67:f8:0f:9d:3b:55:3f:82:e9:1a:05:f0:33:1d:04:63:1e:2d: 91:fc:e4:d4:10:79:03:5a:3a:b2:f0:ab:f6:64:49:e8:dc:6f: dd:a0:ce:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FXs5atk7YAH1oPDUn6n7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMjI5M2QwMzk5MTYwNzg4YjMxZTQzODc2MGRjM2JkMWVk ODgyZWIwHhcNMjYwMTAyMTQyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWNmNGQzNjMyYzkzZjk2YzczNzA0NmRiZTA4MGFlN2NlNzdiYjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1gfMvmZRnz4oGd+fc3C0DwwBpoW QCAZ/OdoRcRKpU8ftt+TWHSA1yRh4CXoeg0Irbn7+wTMAxGLRVsAhwkKl95N9Usm stlrkBDIgdZR9TRj4cCRq9R8k8QaN8DcfMZXCCgXfEgjWBQ0zVfkStpiWSCKcMwI 3N7QsFPQzw8u5qKo2ffhW4q+Xf3XX99TKvGMiafDhpyec3CYJPiCj3xVCjmLz8e5 GmDE3efKm33Vs1C9DKmZStKwcz3VWGbvvL/uNJ76vd+CcvNa8/9U/qXFKIw84e6/ piCMAwe+5a4I3H2ODsoKdy4Yhc47wPzQXFggh+j+VNvOg6K00jflvy5SOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKHPTTYyyT+WxzcEbb4ICufOd7tCMB8GA1UdIwQY MBaAFDMik9A5kWB4izHkOHYNw70e2ILrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXlLVDBEbVJZSGlMTWVRNGRnM0R2UjdZZ3VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jOGIxZTUtN2I5NS00Y2E3LWIyYmEt MjIyZmUzNDgyNjhhLzEvb2M5Tk5qTEpQNWJITndSdHZnZ0s1ODUzdTBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9jOGIxZTUtN2I5NS00Y2E3LWIyYmEtMjIyZmUzNDgyNjhh LzEvTXlLVDBEbVJZSGlMTWVRNGRnM0R2UjdZZ3VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDX9fAMA0G CSqGSIb3DQEBCwUAA4IBAQAVupZyNQ/etLfu/Y4QJBYJ4q6f6wuUMgQ9D+GzumJg P73rJS5SNqFBy5ZduAH0xbftxZVIl0NYeJQf860Bz+q4g6WyOlzqh9C3rIVXYlTR NuxFV499IGkxZ7oJch1FlJ5N2uLaFB7sTcHl7wrMIRVqvU+vBIytQ72W2v4G0SKU 0Rx0Zri18+H7jzffIaoi2cusWE3rYgOul/ugIbWDfBelud5JdXa/lyOX5nz1faQx CHhj+rvqWMKp8mf5VeJT/yevA23/TXgpMkgg5y79LwVx552zduPK22Bn+A+dO1U/ gukaBfAzHQRjHi2R/OTUEHkDWjqy8Kv2ZEno3G/doM4f -----END CERTIFICATE-----Generated at Tue Feb 10 02:48:07 2026 by rpki-client