This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa File: oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa (raw, json) Hash identifier: oHOFp9TL81c7KtMVFWQ9DGRuGttBJhr1ayJ1ZSxs8Lw= Subject key identifier: A3:2D:DF:0F:BE:41:72:B0:CD:4B:A2:37:7B:3A:B4:CB:C5:4B:B9:14 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED9786D59CDFB365E21BA79081489C Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa Signing time: Fri 02 Jan 2026 04:18:24 +0000 ROA not before: Fri 02 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44282 IP address blocks: 147.234.24.0/24 maxlen: 24 147.234.30.0/23 maxlen: 23 147.234.30.0/24 maxlen: 24 147.234.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:97:86:d5:9c:df:b3:65:e2:1b:a7:90:81:48:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a32ddf0fbe4172b0cd4ba2377b3ab4cbc54bb914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:5a:68:0b:ec:8a:34:33:bf:fb:ea:e7:e5: 72:0f:fb:df:15:0b:c5:ea:fd:50:0f:db:99:f6:67: 75:db:8b:8d:ea:1e:f0:58:40:6c:59:9b:93:37:3c: c5:dd:63:f9:54:87:ef:53:19:24:7f:d9:c3:a4:6d: 3c:73:91:2d:fb:45:6d:11:cc:8e:e8:12:44:38:51: 45:41:65:02:d8:bc:c3:4f:38:e6:f5:ce:5a:6d:c5: c3:b6:1f:56:99:c0:9d:bb:31:73:6d:e1:64:8b:41: 21:88:1f:4b:5e:b5:43:38:f4:35:6f:ed:b4:45:bd: ba:1e:ec:97:c8:cc:99:f3:3c:4c:10:5a:23:99:f8: 90:58:4d:8b:c9:b7:6d:ad:a8:da:09:b6:a6:39:da: 5c:ad:64:93:32:0c:e6:e1:28:ce:fa:7f:ee:93:78: 9c:89:be:19:06:cc:c9:cb:1b:ff:f9:36:e6:31:30: eb:1b:c6:34:ec:6b:26:80:2a:39:58:f4:7e:1c:c3: 97:7f:55:65:22:4c:8a:b5:ba:61:c8:28:fa:86:b1: 26:52:07:7f:72:2d:52:c1:73:e4:f0:ad:7f:6f:4b: b1:16:90:93:19:65:0d:0a:0a:4b:58:7f:80:0c:37: 5a:e7:dc:9f:28:e2:b7:0d:d0:3a:77:63:4f:85:42: c2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2D:DF:0F:BE:41:72:B0:CD:4B:A2:37:7B:3A:B4:CB:C5:4B:B9:14 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.24.0/24 147.234.30.0/23 Signature Algorithm: sha256WithRSAEncryption 28:05:9e:92:e0:3e:f1:91:6a:82:8f:f9:32:3f:47:da:95:ce: 3f:dc:fa:28:e8:26:23:da:8b:9b:21:20:87:7b:a2:3b:49:2f: 2f:a8:61:41:23:c9:3c:39:23:76:1f:67:69:01:a6:73:73:f8: 0a:9e:a0:0d:72:94:77:90:48:f4:8b:32:36:dd:96:a8:77:06: 6d:3a:60:ed:61:62:b2:6d:ee:fb:bf:e9:c0:e7:dc:c8:8a:08: 80:85:d4:51:1f:6a:60:43:b3:2c:e0:8b:d9:ff:ba:f4:6c:40: 95:f8:55:9b:d0:ec:8f:94:e9:48:ef:4f:6a:2c:14:5c:00:b3: 86:6a:49:c6:5d:bc:d8:a3:45:b4:49:1b:7d:6e:a7:03:72:07: 74:52:1a:98:2a:0b:77:67:82:b7:e7:3d:36:9d:07:fe:bb:79: 91:99:d5:97:76:09:4b:0d:a0:44:84:10:e3:92:8b:17:1f:92: 5b:4c:a7:aa:1c:21:06:4d:4a:c7:18:57:f1:a5:19:7e:48:07: b4:0b:6e:81:2f:e7:c9:68:f4:35:44:57:ac:67:35:b3:b0:0c: 34:08:9a:01:76:d5:80:df:17:e5:a5:ac:36:b0:4f:fc:99:87: 09:08:39:8c:5c:cc:25:72:b1:cc:63:33:56:c3:e8:7f:1c:ce: e8:be:ad:6f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87ZeG1Zzfs2XiG6eQgUicMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzJkZGYwZmJlNDE3MmIwY2Q0YmEyMzc3YjNhYjRjYmM1NGJiOTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMZaaAvsijQzv/vq5+VyD/vfFQvF 6v1QD9uZ9md124uN6h7wWEBsWZuTNzzF3WP5VIfvUxkkf9nDpG08c5Et+0VtEcyO 6BJEOFFFQWUC2LzDTzjm9c5abcXDth9WmcCduzFzbeFki0EhiB9LXrVDOPQ1b+20 Rb26HuyXyMyZ8zxMEFojmfiQWE2LybdtrajaCbamOdpcrWSTMgzm4SjO+n/uk3ic ib4ZBszJyxv/+TbmMTDrG8Y07GsmgCo5WPR+HMOXf1VlIkyKtbphyCj6hrEmUgd/ ci1SwXPk8K1/b0uxFpCTGWUNCgpLWH+ADDda59yfKOK3DdA6d2NPhULCIQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKMt3w++QXKwzUuiN3s6tMvFS7kUMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvb3kzZkQ3NUJjckROUzZJM2V6cTB5OFZMdVJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk+oYAwQB k+oeMA0GCSqGSIb3DQEBCwUAA4IBAQAoBZ6S4D7xkWqCj/kyP0falc4/3Poo6CYj 2oubISCHe6I7SS8vqGFBI8k8OSN2H2dpAaZzc/gKnqANcpR3kEj0izI23ZaodwZt OmDtYWKybe77v+nA59zIigiAhdRRH2pgQ7Ms4IvZ/7r0bECV+FWb0OyPlOlI709q LBRcALOGaknGXbzYo0W0SRt9bqcDcgd0UhqYKgt3Z4K35z02nQf+u3mRmdWXdglL DaBEhBDjkosXH5JbTKeqHCEGTUrHGFfxpRl+SAe0C26BL+fJaPQ1RFesZzWzsAw0 CJoBdtWA3xflpaw2sE/8mYcJCDmMXMwlcrHMYzNWw+h/HM7ovq1v -----END CERTIFICATE-----Generated at Mon Jan 26 23:46:10 2026 by rpki-client