This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/OOmJ-RkbduxK-k7822kHHTnwfho.roa File: OOmJ-RkbduxK-k7822kHHTnwfho.roa (raw, json) Hash identifier: Zhhmx3+Bddmr+hDQFTAMK3LPfl5DC3igpcEZIPBCFZU= Subject key identifier: 38:E9:89:F9:19:1B:76:EC:4A:FA:4E:FC:DB:69:07:1D:39:F0:7E:1A Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af Certificate serial: 019B7D5BB251813B8382BB1352C086EEDA30 Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/OOmJ-RkbduxK-k7822kHHTnwfho.roa Signing time: Fri 02 Jan 2026 06:18:39 +0000 ROA not before: Fri 02 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39257 IP address blocks: 194.156.212.0/23 maxlen: 23 2a07:e884::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:b2:51:81:3b:83:82:bb:13:52:c0:86:ee:da:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af Validity Not Before: Jan 2 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38e989f9191b76ec4afa4efcdb69071d39f07e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:7c:1b:de:e0:77:90:0b:f0:6f:c0:0e:5c: dc:be:96:a1:13:6a:3a:31:b3:cc:4f:6c:72:9e:73: ed:5d:e3:f0:9a:6d:95:17:0d:49:6b:61:eb:fd:63: 5a:98:ac:75:49:c0:a2:eb:a7:45:b9:98:70:a2:ab: 45:10:ba:ee:a4:51:74:d0:8b:12:89:10:6d:26:be: 47:1a:00:e1:9e:d7:f8:a1:10:89:4a:68:4b:0d:c0: 5c:ea:7f:b0:cf:8f:50:51:b7:82:17:56:57:19:de: f1:46:05:aa:2d:2a:15:5e:e0:4b:43:37:e0:c0:6e: 4d:c8:dc:d4:23:e4:12:99:45:f8:9e:4d:5b:95:c5: 61:2b:13:5a:3c:a4:7f:14:89:3a:46:b1:d1:ef:f8: 8b:4e:b0:da:df:98:48:bc:b1:41:9c:7f:a6:42:bd: 63:4e:4b:61:52:39:62:cc:70:b3:a2:e1:10:87:ea: f5:b4:c5:d3:d0:d9:29:fa:47:8f:ae:a7:30:41:df: 70:d7:35:4d:08:b2:25:b9:fc:70:52:75:01:f8:c7: 5e:29:f4:71:c3:88:b1:6d:8f:3e:af:47:5c:ed:7e: ad:f0:d0:f9:bc:39:45:7f:c3:ce:a9:ca:12:64:30: 4a:89:e9:9b:d5:d7:c3:ea:36:25:59:25:68:5f:1b: d0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E9:89:F9:19:1B:76:EC:4A:FA:4E:FC:DB:69:07:1D:39:F0:7E:1A X509v3 Authority Key Identifier: keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/OOmJ-RkbduxK-k7822kHHTnwfho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.212.0/23 IPv6: 2a07:e884::/30 Signature Algorithm: sha256WithRSAEncryption 49:28:43:bd:5a:22:b7:a7:c9:cf:6e:e9:56:66:95:2d:78:44: 4d:23:1c:18:e2:06:62:0c:f1:42:7d:ea:f1:61:99:3f:cb:df: ae:39:d6:67:03:23:ef:39:c9:9b:99:26:87:e4:5d:74:12:ba: 3f:84:b6:62:7f:8c:f7:90:60:fb:00:94:56:49:a3:64:6f:74: 08:9b:88:21:33:c9:c3:5c:3b:fc:03:e9:c5:2f:5f:c9:f0:e8: ce:ad:8d:c8:0a:61:6b:f8:58:c5:c0:c6:a3:2f:54:70:23:b4: fe:33:38:55:c8:7e:a9:89:b5:d2:8f:86:96:37:bb:fc:8c:83: 83:00:ad:7d:32:40:bd:00:86:e9:20:ab:21:1d:46:61:23:d1: 33:2d:e3:f6:c2:38:74:b2:26:d1:60:d2:23:c7:34:0e:d8:cc: 9a:31:b9:89:99:87:6e:3e:be:e3:36:a0:55:ba:ed:96:8b:05: 55:93:10:2d:db:d4:3d:84:07:e5:69:37:59:cd:68:b3:76:0a: ce:90:e4:d9:f1:45:c4:52:76:8f:97:bf:1e:ba:ee:86:12:c8: fb:07:9f:07:c9:ac:37:16:6d:15:24:ab:6c:0a:6d:62:3a:70: 0a:0a:fc:19:64:ca:51:ec:20:c9:a8:a2:f9:41:d4:f4:1a:03: 91:dc:18:95 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9W7JRgTuDgrsTUsCG7towMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNjJiYjkyYmJlZTlmNmRlNzc1N2QyNTZkNDhmNjZlMjA3 ZjQ0YWYwHhcNMjYwMTAyMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGU5ODlmOTE5MWI3NmVjNGFmYTRlZmNkYjY5MDcxZDM5ZjA3ZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiN8G97gd5AL8G/ADlzcvpahE2o6 MbPMT2xynnPtXePwmm2VFw1Ja2Hr/WNamKx1ScCi66dFuZhwoqtFELrupFF00IsS iRBtJr5HGgDhntf4oRCJSmhLDcBc6n+wz49QUbeCF1ZXGd7xRgWqLSoVXuBLQzfg wG5NyNzUI+QSmUX4nk1blcVhKxNaPKR/FIk6RrHR7/iLTrDa35hIvLFBnH+mQr1j TkthUjlizHCzouEQh+r1tMXT0Nkp+kePrqcwQd9w1zVNCLIlufxwUnUB+MdeKfRx w4ixbY8+r0dc7X6t8ND5vDlFf8POqcoSZDBKiemb1dfD6jYlWSVoXxvQ7QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDjpifkZG3bsSvpO/NtpBx058H4aMB8GA1UdIwQY MBaAFOBiu5K77p9t53V9JW1I9m4gf0SvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEdLN2tydnVuMjNuZFgwbGJVajJiaUJfUks4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWY1MTgtMTU2Ni00YTZiLTgwNGIt MWFiNWQ2MjA5ZjU3LzEvT09tSi1Sa2JkdXhLLWs3ODIya0hIVG53ZmhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84YWY1MTgtMTU2Ni00YTZiLTgwNGItMWFiNWQ2MjA5ZjU3 LzEvNEdLN2tydnVuMjNuZFgwbGJVajJiaUJfUks4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwpzUMA0E AgACMAcDBQIqB+iEMA0GCSqGSIb3DQEBCwUAA4IBAQBJKEO9WiK3p8nPbulWZpUt eERNIxwY4gZiDPFCferxYZk/y9+uOdZnAyPvOcmbmSaH5F10Ero/hLZif4z3kGD7 AJRWSaNkb3QIm4ghM8nDXDv8A+nFL1/J8OjOrY3ICmFr+FjFwMajL1RwI7T+MzhV yH6pibXSj4aWN7v8jIODAK19MkC9AIbpIKshHUZhI9EzLeP2wjh0sibRYNIjxzQO 2MyaMbmJmYduPr7jNqBVuu2WiwVVkxAt29Q9hAflaTdZzWizdgrOkOTZ8UXEUnaP l78euu6GEsj7B58Hyaw3Fm0VJKtsCm1iOnAKCvwZZMpR7CDJqKL5QdT0GgOR3BiV -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:19 2026 by rpki-client