This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/oRGU4dD-wRnhsAeXFhYBTl3ahaY.roa File: oRGU4dD-wRnhsAeXFhYBTl3ahaY.roa (raw, json) Hash identifier: KwxVldnlFQ7swrf5zJ4tkIkoluJnRIq49ZF/vvuzGEk= Subject key identifier: A1:11:94:E1:D0:FE:C1:19:E1:B0:07:97:16:16:01:4E:5D:DA:85:A6 Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDD979E1803ED539CFA78535642E4E Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/oRGU4dD-wRnhsAeXFhYBTl3ahaY.roa Signing time: Fri 02 Jan 2026 04:18:41 +0000 ROA not before: Fri 02 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 176.57.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d9:79:e1:80:3e:d5:39:cf:a7:85:35:64:2e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a11194e1d0fec119e1b007971616014e5dda85a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6e:51:f5:9e:5b:c1:cf:1e:1c:6e:f9:d6:9b: 4f:1c:dd:19:6a:1e:2a:72:2a:e4:60:24:83:d2:92: c0:c8:02:ca:bf:95:e8:31:ec:fb:90:af:c9:99:c8: 53:38:e2:8d:c2:3c:3e:61:55:9d:3a:24:38:27:a6: b5:a0:8a:83:00:d3:c7:a3:ff:33:2f:81:98:5d:32: 9e:14:4f:0d:33:85:51:e4:87:8e:79:38:c7:fd:e1: a1:f0:3f:e0:d8:b1:82:8e:71:27:8f:5a:71:f9:83: 79:14:db:75:28:20:6a:e0:de:88:83:ee:de:80:e0: 07:45:65:bc:4b:bb:5b:13:a0:9b:49:7b:78:c5:7e: 91:21:19:f9:2f:84:4c:c7:9f:db:35:ec:02:7b:a5: 5c:af:d0:11:00:83:0f:3f:a0:02:dc:58:0a:75:aa: 72:e7:9f:d5:c9:1b:f4:6c:9e:72:01:3f:46:b8:22: ca:80:be:01:4a:83:c4:b2:a6:32:4f:71:4b:56:fa: a5:82:d4:d8:10:33:18:9a:3f:0d:cc:63:ca:ea:61: eb:55:9b:f0:8b:d6:98:fe:9f:93:d7:7e:bb:92:ad: 6d:fb:de:22:83:79:56:56:54:95:db:61:64:7c:de: 0f:15:a5:d0:84:e1:93:77:67:0c:d9:4d:ad:a0:d9: d1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:11:94:E1:D0:FE:C1:19:E1:B0:07:97:16:16:01:4E:5D:DA:85:A6 X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/oRGU4dD-wRnhsAeXFhYBTl3ahaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.58.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:74:6f:fb:b5:99:f2:4f:9d:16:53:36:56:44:57:ef:59:5c: e2:49:b2:25:a2:99:d1:4e:fc:47:21:be:62:cc:21:c4:01:0f: 31:06:b9:45:dd:00:aa:ca:2c:bd:ed:de:90:f5:f2:39:c8:cd: da:35:99:31:47:55:0b:3c:50:13:00:2e:00:41:5f:aa:9c:84: bf:cb:bc:ec:4b:d1:de:4c:08:20:63:cf:1c:df:c6:be:41:b5: a9:57:83:bc:dd:5f:15:c1:64:f4:9b:f4:0f:47:95:6f:bf:10: bc:ee:79:b1:b9:9f:63:43:e3:b4:7b:fb:56:54:d9:80:83:41: bd:a7:15:8b:03:f9:de:ef:ba:ae:ea:ba:f0:23:88:87:dc:bc: e0:9b:a5:eb:c5:cb:1d:98:45:e1:94:8d:49:e6:41:82:6b:7d: 19:c3:12:a0:8a:ed:53:58:f6:42:70:7e:44:49:15:c2:0f:e9: 1e:e5:2e:6d:53:c5:70:90:bf:37:b0:d0:27:2b:04:0b:73:40: 8c:f9:ef:4e:9f:f7:91:6c:22:0e:79:3c:7b:fb:98:31:2c:76: 00:4e:f5:25:3a:fe:87:19:6d:b6:8a:e0:7d:08:e3:98:50:75: 1f:0b:3c:e2:38:0b:57:c6:ec:3a:fa:53:fd:42:42:28:93:b2: b9:23:ca:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87dl54YA+1TnPp4U1ZC5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTExOTRlMWQwZmVjMTE5ZTFiMDA3OTcxNjE2MDE0ZTVkZGE4NWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW5R9Z5bwc8eHG751ptPHN0Zah4q cirkYCSD0pLAyALKv5XoMez7kK/JmchTOOKNwjw+YVWdOiQ4J6a1oIqDANPHo/8z L4GYXTKeFE8NM4VR5IeOeTjH/eGh8D/g2LGCjnEnj1px+YN5FNt1KCBq4N6Ig+7e gOAHRWW8S7tbE6CbSXt4xX6RIRn5L4RMx5/bNewCe6Vcr9ARAIMPP6AC3FgKdapy 55/VyRv0bJ5yAT9GuCLKgL4BSoPEsqYyT3FLVvqlgtTYEDMYmj8NzGPK6mHrVZvw i9aY/p+T1367kq1t+94ig3lWVlSV22FkfN4PFaXQhOGTd2cM2U2toNnRywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKERlOHQ/sEZ4bAHlxYWAU5d2oWmMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvb1JHVTRkRC13Um5oc0FlWEZoWUJUbDNhaGFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsDk6MA0G CSqGSIb3DQEBCwUAA4IBAQBNdG/7tZnyT50WUzZWRFfvWVziSbIlopnRTvxHIb5i zCHEAQ8xBrlF3QCqyiy97d6Q9fI5yM3aNZkxR1ULPFATAC4AQV+qnIS/y7zsS9He TAggY88c38a+QbWpV4O83V8VwWT0m/QPR5VvvxC87nmxuZ9jQ+O0e/tWVNmAg0G9 pxWLA/ne77qu6rrwI4iH3Lzgm6XrxcsdmEXhlI1J5kGCa30ZwxKgiu1TWPZCcH5E SRXCD+ke5S5tU8VwkL83sNAnKwQLc0CM+e9On/eRbCIOeTx7+5gxLHYATvUlOv6H GW22iuB9COOYUHUfCzziOAtXxuw6+lP9QkIok7K5I8rt -----END CERTIFICATE-----Generated at Fri Jan 2 17:57:08 2026 by rpki-client