This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/OoGvPehNjKU6hE3SxfV0wILIsN4.roa File: OoGvPehNjKU6hE3SxfV0wILIsN4.roa (raw, json) Hash identifier: 7Php/xkVqP8tmnrDY7MQsYCSTzCCLDFw6kgWF4S8f2I= Subject key identifier: 3A:81:AF:3D:E8:4D:8C:A5:3A:84:4D:D2:C5:F5:74:C0:82:C8:B0:DE Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df Certificate serial: 019C037F26D56F0C32948FCAF8297E59CFC4 Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/OoGvPehNjKU6hE3SxfV0wILIsN4.roa Signing time: Wed 28 Jan 2026 07:26:30 +0000 ROA not before: Wed 28 Jan 2026 07:26:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 378 IP address blocks: 132.64.0.0/15 maxlen: 24 132.64.0.0/16 maxlen: 24 132.64.1.0/24 maxlen: 24 132.64.2.0/24 maxlen: 24 132.64.3.0/24 maxlen: 24 132.64.5.0/24 maxlen: 24 132.64.6.0/24 maxlen: 24 132.64.7.0/24 maxlen: 24 132.64.16.0/24 maxlen: 24 132.64.17.0/24 maxlen: 24 132.64.24.0/22 maxlen: 22 132.64.40.0/24 maxlen: 24 132.64.43.0/24 maxlen: 24 132.64.44.0/24 maxlen: 24 132.64.45.0/24 maxlen: 24 132.64.254.0/24 maxlen: 24 132.65.0.0/16 maxlen: 24 192.114.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 10:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:7f:26:d5:6f:0c:32:94:8f:ca:f8:29:7e:59:cf:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df Validity Not Before: Jan 28 07:26:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a81af3de84d8ca53a844dd2c5f574c082c8b0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:84:eb:56:d9:a0:5b:e6:24:16:7a:cb:c5:ad: 09:15:5e:8d:dc:73:e4:33:2c:4c:95:c0:14:ec:95: e5:7b:ba:ac:99:58:bc:cc:ec:51:cb:e4:2e:11:6a: 8e:22:e2:84:27:55:26:36:53:5e:22:4c:72:c4:6f: dc:fc:7c:95:4b:c1:bc:24:fb:97:09:69:a4:ec:bd: 89:6b:40:29:de:ad:41:13:8e:c4:73:3c:2d:19:63: 04:e8:67:fb:c0:43:f1:49:ef:11:47:62:0a:b7:9a: 2c:56:66:1f:41:54:9c:ed:2f:ca:44:77:40:fe:aa: e4:32:c2:ef:18:cd:66:ea:b6:e5:b6:8a:62:23:60: d7:7c:2e:17:e1:8f:4c:96:68:0e:df:37:d9:f1:89: 5a:e0:ef:4f:8c:57:ea:56:32:23:84:d5:7c:82:1a: 2f:64:da:79:29:19:3c:d7:78:3a:73:82:42:f2:46: 12:46:35:b9:72:87:4e:26:16:80:3d:ce:5d:a0:d8: 36:50:36:41:e5:e3:5b:7b:6e:25:85:f1:e2:2c:8d: 82:9c:ce:c6:c8:0d:3f:78:c6:57:b8:0f:8a:04:57: cf:ef:63:f7:d4:19:dc:3f:44:7c:fb:f6:ff:bf:d6: 79:78:cd:bb:ce:1f:85:d3:07:00:c4:3a:86:1d:6a: 47:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:81:AF:3D:E8:4D:8C:A5:3A:84:4D:D2:C5:F5:74:C0:82:C8:B0:DE X509v3 Authority Key Identifier: keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/OoGvPehNjKU6hE3SxfV0wILIsN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.64.0.0/15 192.114.88.0/22 Signature Algorithm: sha256WithRSAEncryption 04:03:80:cb:d3:94:cb:65:54:18:26:91:6d:1f:0c:a6:51:e9: 32:a2:a3:44:6f:d3:4e:16:6f:8a:9e:6f:ee:d2:83:de:00:4f: 0e:6d:c4:2e:1c:89:58:9c:76:ee:d1:ac:9b:eb:09:bd:0e:2b: f9:0b:d6:3a:ac:21:13:a4:f2:8b:34:d1:0c:a2:c0:0f:90:42: 76:44:1f:c8:65:7c:05:dc:0d:f5:3e:c3:c8:23:4c:70:a8:f3: ef:4e:6b:05:70:02:35:e6:c3:a1:b0:18:d1:0a:34:58:e5:3c: eb:4d:c8:98:58:16:97:10:4c:8a:78:d6:a9:f9:51:54:35:cd: 19:eb:fc:89:c0:66:82:59:6d:15:6d:c4:25:2f:4d:ad:be:55: 54:77:96:91:3f:15:74:ec:16:26:35:a6:92:77:7f:ce:ae:3d: 55:3f:0b:9f:dc:7f:d2:21:29:ea:c8:4e:46:f3:89:69:3a:e4: 3a:2f:42:8d:9a:ad:a6:18:d5:60:da:48:1f:ca:29:6a:bb:56: 3e:c1:47:ca:af:5b:ab:e1:c5:4e:75:3d:d0:22:76:8a:41:b3: 85:be:c4:84:99:d0:46:74:cb:5f:fd:a1:7b:79:43:6f:4e:fd: cc:d0:fc:ed:82:30:a9:ea:97:ac:60:b0:14:70:3e:9d:07:b1: b7:62:c3:3b -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZwDfybVbwwylI/K+Cl+Wc/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMTg3MGM5NmVmMDk3MjM4MTFmYjg5MjUwZWVhNmViYTk2 M2MwZGYwHhcNMjYwMTI4MDcyNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTgxYWYzZGU4NGQ4Y2E1M2E4NDRkZDJjNWY1NzRjMDgyYzhiMGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14TrVtmgW+YkFnrLxa0JFV6N3HPk MyxMlcAU7JXle7qsmVi8zOxRy+QuEWqOIuKEJ1UmNlNeIkxyxG/c/HyVS8G8JPuX CWmk7L2Ja0Ap3q1BE47EczwtGWME6Gf7wEPxSe8RR2IKt5osVmYfQVSc7S/KRHdA /qrkMsLvGM1m6rbltopiI2DXfC4X4Y9MlmgO3zfZ8Yla4O9PjFfqVjIjhNV8ghov ZNp5KRk813g6c4JC8kYSRjW5codOJhaAPc5doNg2UDZB5eNbe24lhfHiLI2CnM7G yA0/eMZXuA+KBFfP72P31BncP0R8+/b/v9Z5eM27zh+F0wcAxDqGHWpHmQIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFDqBrz3oTYylOoRN0sX1dMCCyLDeMB8GA1UdIwQY MBaAFAsYcMlu8JcjgR+4klDupuupY8DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMt YTJlMjRmOTgwYjNmLzEvT29HdlBlaE5qS1U2aEUzU3hmVjB3SUxJc040LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMtYTJlMjRmOTgwYjNm LzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMBhEADBALA clgwDQYJKoZIhvcNAQELBQADggEBAAQDgMvTlMtlVBgmkW0fDKZR6TKio0Rv004W b4qeb+7Sg94ATw5txC4ciVicdu7RrJvrCb0OK/kL1jqsIROk8os00QyiwA+QQnZE H8hlfAXcDfU+w8gjTHCo8+9OawVwAjXmw6GwGNEKNFjlPOtNyJhYFpcQTIp41qn5 UVQ1zRnr/InAZoJZbRVtxCUvTa2+VVR3lpE/FXTsFiY1ppJ3f86uPVU/C5/cf9Ih KerITkbziWk65DovQo2araYY1WDaSB/KKWq7Vj7BR8qvW6vhxU51PdAidopBs4W+ xISZ0EZ0y1/9oXt5Q29O/czQ/O2CMKnql6xgsBRwPp0Hsbdiwzs= -----END CERTIFICATE-----Generated at Sat Feb 7 20:29:17 2026 by rpki-client