This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa File: oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa (raw, json) Hash identifier: kW4XZo8hun146OvBm4WamOijm7CLbrQ0Kag1QGXL31g= Subject key identifier: A0:62:90:0F:3F:BF:91:8B:12:57:D1:A1:AE:99:D7:57:0F:D1:14:0E Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa Certificate serial: 019B76EAE12CC280E7F4E44D03172A3E30F7 Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa Signing time: Thu 01 Jan 2026 00:17:43 +0000 ROA not before: Thu 01 Jan 2026 00:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59872 IP address blocks: 91.206.20.0/23 maxlen: 23 185.68.44.0/22 maxlen: 22 185.68.44.0/24 maxlen: 24 185.68.45.0/24 maxlen: 24 185.68.46.0/24 maxlen: 24 185.68.47.0/24 maxlen: 24 2a05:1600::/29 maxlen: 29 2a05:1603::/32 maxlen: 32 2a07:c880::/29 maxlen: 29 2a07:c881::/32 maxlen: 32 2a07:c882::/32 maxlen: 32 2a07:c883::/32 maxlen: 32 2a07:c884::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e1:2c:c2:80:e7:f4:e4:4d:03:17:2a:3e:30:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa Validity Not Before: Jan 1 00:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a062900f3fbf918b1257d1a1ae99d7570fd1140e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:0b:bd:a9:0b:c3:7a:b4:11:b2:c6:e5:4a: 76:22:07:4f:18:42:ef:22:60:ff:a8:7e:45:e7:83: c1:47:f2:15:f7:d7:b7:a4:b4:ae:eb:bf:8c:e8:ae: a2:0f:59:48:93:8f:39:57:b8:bf:c1:33:6e:df:ef: fa:e6:94:34:ff:60:48:54:cb:6e:7a:c8:dc:04:73: cd:33:b5:f6:c9:00:0b:5d:05:1e:03:e2:f8:80:7b: bc:f6:bf:f2:66:bc:d7:d9:8d:d4:32:b0:85:32:fe: 8f:b5:83:8e:df:0b:0e:40:b6:c8:ce:d4:d0:28:dd: 37:38:35:b0:38:d4:6b:8c:69:76:f7:41:c4:02:d6: 4a:dd:ea:92:eb:b9:33:f3:36:d9:d8:e6:1f:f7:0e: ef:28:0f:34:c8:5c:32:a0:41:3e:38:52:c3:77:0f: d1:e3:cb:27:1e:37:41:28:8d:e6:33:05:9f:60:39: ae:e2:c7:86:c0:ff:da:2f:87:19:6f:95:bf:76:96: 30:7c:a3:3a:ba:30:16:95:c9:f4:8b:ae:f7:fc:44: d4:60:b5:89:1b:5f:35:8e:3c:2d:d1:b8:7c:d8:e4: 82:05:14:54:b8:27:f9:ff:99:d8:dd:1d:2c:d8:87: 32:35:e7:9e:18:27:47:1f:4d:97:f2:d9:11:9f:a2: 9f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:62:90:0F:3F:BF:91:8B:12:57:D1:A1:AE:99:D7:57:0F:D1:14:0E X509v3 Authority Key Identifier: keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/oGKQDz-_kYsSV9GhrpnXVw_RFA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.20.0/23 185.68.44.0/22 IPv6: 2a05:1600::/29 2a07:c880::/29 Signature Algorithm: sha256WithRSAEncryption 4b:66:7f:d2:45:a3:9a:b2:3b:e6:d8:2e:75:e7:87:7f:cf:81: 29:e8:61:fe:e4:61:75:1f:ce:22:1e:f2:d3:3c:64:e9:ee:9d: 11:33:c6:8e:6e:97:76:d2:c7:78:5b:fd:5d:c9:cf:2c:b2:9a: ac:17:f1:56:f2:b4:53:d4:8d:83:c6:0a:d1:bb:1f:1e:35:eb: b2:97:0a:68:26:8e:28:1e:b4:79:8d:04:2e:6b:c0:bc:4f:41: f2:c2:98:c4:cc:90:e6:62:cd:23:7a:d6:bb:b9:2a:b9:3a:74: 10:d5:ed:cf:ae:5e:f7:58:13:9b:a3:ea:a9:1f:9c:36:99:24: 8a:62:c1:50:5b:30:de:5e:15:03:0c:20:7b:30:eb:34:ba:2b: 7d:e6:1b:20:43:15:96:c2:8b:c2:83:52:9f:22:98:a0:49:81: 3c:73:8d:b4:57:dc:79:66:87:34:14:3c:64:af:35:5a:ff:2a: 02:f4:5c:7b:af:b8:ad:1c:c3:bb:6d:36:1e:94:79:49:0a:89: f3:1e:b0:f5:92:08:62:30:f2:5b:6b:b6:56:2a:ab:76:36:53: d0:d0:17:16:1f:8c:1b:a6:bd:fd:f9:e1:26:ca:6b:ce:65:ad: d3:26:40:d9:f7:82:8d:00:c2:d5:63:c5:11:aa:19:36:3b:76: 0e:b6:37:c7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt26uEswoDn9ORNAxcqPjD3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzQyMTBjMjg0MTNlMjYyODQ4MjJhYmU4M2FkNmQ3YzBm NzY0ZmEwHhcNMjYwMTAxMDAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDYyOTAwZjNmYmY5MThiMTI1N2QxYTFhZTk5ZDc1NzBmZDExNDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gALvakLw3q0EbLG5Up2IgdPGELv ImD/qH5F54PBR/IV99e3pLSu67+M6K6iD1lIk485V7i/wTNu3+/65pQ0/2BIVMtu esjcBHPNM7X2yQALXQUeA+L4gHu89r/yZrzX2Y3UMrCFMv6PtYOO3wsOQLbIztTQ KN03ODWwONRrjGl290HEAtZK3eqS67kz8zbZ2OYf9w7vKA80yFwyoEE+OFLDdw/R 48snHjdBKI3mMwWfYDmu4seGwP/aL4cZb5W/dpYwfKM6ujAWlcn0i673/ETUYLWJ G181jjwt0bh82OSCBRRUuCf5/5nY3R0s2IcyNeeeGCdHH02X8tkRn6KfIwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKBikA8/v5GLElfRoa6Z11cP0RQOMB8GA1UdIwQY MBaAFDR0IQwoQT4mKEgiq+g61tfA92T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5Yzkt YjBjNzRiNzZlMTgyLzEvb0dLUUR6LV9rWXNTVjlHaHJwblhWd19SRkE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5YzktYjBjNzRiNzZlMTgy LzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQBW84UAwQC uUQsMBQEAgACMA4DBQMqBRYAAwUDKgfIgDANBgkqhkiG9w0BAQsFAAOCAQEAS2Z/ 0kWjmrI75tgudeeHf8+BKehh/uRhdR/OIh7y0zxk6e6dETPGjm6XdtLHeFv9XcnP LLKarBfxVvK0U9SNg8YK0bsfHjXrspcKaCaOKB60eY0ELmvAvE9B8sKYxMyQ5mLN I3rWu7kquTp0ENXtz65e91gTm6PqqR+cNpkkimLBUFsw3l4VAwwgezDrNLorfeYb IEMVlsKLwoNSnyKYoEmBPHONtFfceWaHNBQ8ZK81Wv8qAvRce6+4rRzDu202HpR5 SQqJ8x6w9ZIIYjDyW2u2ViqrdjZT0NAXFh+MG6a9/fnhJsprzmWt0yZA2feCjQDC 1WPFEaoZNjt2DrY3xw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:11:38 2026 by rpki-client