This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OG24l83clxzj7LNzssZF_ksAlzU.roa File: OG24l83clxzj7LNzssZF_ksAlzU.roa (raw, json) Hash identifier: u7kSC1/szOosaTngKAkNQjNGDtL5XvE0iHI/dfibugg= Subject key identifier: 38:6D:B8:97:CD:DC:97:1C:E3:EC:B3:73:B2:C6:45:FE:4B:00:97:35 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB70F9594B7F548835786E1DC548B9 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OG24l83clxzj7LNzssZF_ksAlzU.roa Signing time: Fri 02 Jan 2026 08:20:43 +0000 ROA not before: Fri 02 Jan 2026 08:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59729 IP address blocks: 5.42.192.0/24 maxlen: 24 5.42.195.0/24 maxlen: 24 5.42.209.0/24 maxlen: 24 5.42.210.0/24 maxlen: 24 91.213.230.0/24 maxlen: 24 193.9.20.0/24 maxlen: 24 193.200.199.0/24 maxlen: 24 194.26.204.0/24 maxlen: 24 194.55.170.0/24 maxlen: 24 212.18.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:70:f9:59:4b:7f:54:88:35:78:6e:1d:c5:48:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=386db897cddc971ce3ecb373b2c645fe4b009735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:00:8e:a1:22:bf:0e:ac:0d:fc:15:aa:2a:2e: 06:56:f2:41:66:46:2d:c0:05:31:36:b0:78:ca:c5: 55:0b:97:20:70:de:01:10:f9:0b:91:18:e3:43:b5: 42:1d:5b:87:8f:f0:d2:76:e6:90:b9:29:3f:7c:88: 5b:39:ee:2c:8e:ba:66:08:44:06:47:fb:1b:53:f5: bd:d0:f4:eb:90:2a:b9:2a:a3:d2:1c:1c:0a:43:9a: ff:f9:e8:dd:36:d0:b2:11:89:ac:01:f7:02:18:aa: 96:f1:5e:cb:23:6a:6c:51:25:5d:32:ca:79:ca:34: f1:82:84:00:19:cb:0d:2e:9e:10:20:f5:22:67:c8: 1a:64:4b:c7:b5:3e:ec:90:72:30:85:9d:6e:d7:e0: 41:ad:c5:37:35:de:cd:64:db:5e:28:50:1d:6a:f2: 14:c5:a6:84:c8:a5:47:0b:3b:42:17:0a:55:22:dd: e8:b0:2e:1f:01:96:b2:dc:59:c0:37:6c:2a:c9:b8: 07:6a:e3:99:b6:e4:f1:2b:85:e2:2c:5d:91:d3:aa: 1f:56:de:cb:03:03:7a:0a:fa:39:c1:33:88:68:e5: 4e:ca:a8:16:01:49:2d:fc:24:a1:29:8c:6d:ae:32: eb:8b:26:92:e0:05:f4:eb:12:97:3f:42:23:b5:49: b6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6D:B8:97:CD:DC:97:1C:E3:EC:B3:73:B2:C6:45:FE:4B:00:97:35 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/OG24l83clxzj7LNzssZF_ksAlzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.192.0/24 5.42.195.0/24 5.42.209.0-5.42.210.255 91.213.230.0/24 193.9.20.0/24 193.200.199.0/24 194.26.204.0/24 194.55.170.0/24 212.18.120.0/24 Signature Algorithm: sha256WithRSAEncryption 61:23:c4:35:73:15:12:ab:1e:04:a6:9a:fa:eb:80:27:ac:17: d2:64:c2:49:99:36:5b:63:0c:bd:4e:67:3d:3a:e7:5b:6c:63: b2:fc:0b:70:86:92:3e:ba:86:0f:b8:9f:a1:f2:5f:bb:76:53: bb:0b:14:25:ed:9a:e9:c1:ab:fa:6e:05:96:ee:f6:f7:d9:21: 32:60:7d:de:88:3e:16:b1:76:60:d3:36:a0:e0:3e:c9:74:a1: 2f:c5:5d:99:43:d8:48:78:23:48:b1:bf:e7:3c:96:e9:42:42: 22:c1:8e:fe:f1:3d:4e:00:bb:07:c3:fb:20:8c:1f:08:c4:5d: c2:a4:3b:1b:83:aa:19:bc:b2:5d:35:04:7a:e2:a3:98:37:7f: 05:97:a8:57:bf:9f:8b:34:74:79:e2:42:c5:95:3a:6e:36:ee: 6f:c7:1a:c7:f4:0c:80:81:fb:db:e3:5d:d8:f4:61:b9:bb:05: e6:59:cb:74:6f:42:5d:4e:a5:c5:77:be:17:e6:7e:f7:a2:42: e2:7d:52:3b:9f:c4:48:41:7b:3b:04:1c:e6:10:3b:06:85:6d: d7:b7:b0:12:a3:0e:d0:d3:9a:ca:42:97:c7:92:34:9c:ff:f4: f7:85:a9:55:2a:77:47:2b:9b:3c:62:6c:c8:7e:64:6a:bc:40: dc:fe:e4:c6 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt9y3D5WUt/VIg1eG4dxUi5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODZkYjg5N2NkZGM5NzFjZTNlY2IzNzNiMmM2NDVmZTRiMDA5NzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowCOoSK/DqwN/BWqKi4GVvJBZkYt wAUxNrB4ysVVC5cgcN4BEPkLkRjjQ7VCHVuHj/DSduaQuSk/fIhbOe4sjrpmCEQG R/sbU/W90PTrkCq5KqPSHBwKQ5r/+ejdNtCyEYmsAfcCGKqW8V7LI2psUSVdMsp5 yjTxgoQAGcsNLp4QIPUiZ8gaZEvHtT7skHIwhZ1u1+BBrcU3Nd7NZNteKFAdavIU xaaEyKVHCztCFwpVIt3osC4fAZay3FnAN2wqybgHauOZtuTxK4XiLF2R06ofVt7L AwN6Cvo5wTOIaOVOyqgWAUkt/CShKYxtrjLriyaS4AX06xKXP0IjtUm27wIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFDhtuJfN3Jcc4+yzc7LGRf5LAJc1MB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvT0cyNGw4M2NseHpqN0xOenNzWkZfa3NBbHpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQABSrAAwQA BSrDMAwDBAAFKtEDBAAFKtIDBABb1eYDBADBCRQDBADByMcDBADCGswDBADCN6oD BADUEngwDQYJKoZIhvcNAQELBQADggEBAGEjxDVzFRKrHgSmmvrrgCesF9JkwkmZ NltjDL1OZz0651tsY7L8C3CGkj66hg+4n6HyX7t2U7sLFCXtmunBq/puBZbu9vfZ ITJgfd6IPhaxdmDTNqDgPsl0oS/FXZlD2Eh4I0ixv+c8lulCQiLBjv7xPU4AuwfD +yCMHwjEXcKkOxuDqhm8sl01BHrio5g3fwWXqFe/n4s0dHniQsWVOm427m/HGsf0 DICB+9vjXdj0Ybm7BeZZy3RvQl1OpcV3vhfmfveiQuJ9UjufxEhBezsEHOYQOwaF bde3sBKjDtDTmspCl8eSNJz/9PeFqVUqd0crmzxibMh+ZGq8QNz+5MY= -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:59 2026 by rpki-client