This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/oJbVnfo8nfXDxx0xOHsViY24X4g.roa File: oJbVnfo8nfXDxx0xOHsViY24X4g.roa (raw, json) Hash identifier: uemM8M2q02VORXRg6zfmvzJH/l3Oxb3V5/KirOrQjq0= Subject key identifier: A0:96:D5:9D:FA:3C:9D:F5:C3:C7:1D:31:38:7B:15:89:8D:B8:5F:88 Certificate issuer: /CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0 Certificate serial: 019B7EA57B2A32841BB4001932A196EDB5AC Authority key identifier: 69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/oJbVnfo8nfXDxx0xOHsViY24X4g.roa Signing time: Fri 02 Jan 2026 12:18:52 +0000 ROA not before: Fri 02 Jan 2026 12:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60538 IP address blocks: 193.36.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:7b:2a:32:84:1b:b4:00:19:32:a1:96:ed:b5:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0 Validity Not Before: Jan 2 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a096d59dfa3c9df5c3c71d31387b15898db85f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e9:6b:1d:0b:13:e2:7f:2a:3d:cf:8b:75:58: 73:86:d8:6c:4f:42:fb:bc:44:cb:32:43:3b:51:95: 42:c1:d7:8e:c7:9a:05:f9:7a:a9:5e:57:49:13:05: 5b:a1:a7:3c:fc:a0:5d:8e:9f:7d:79:2f:0a:68:05: 3e:46:3c:50:65:17:97:e0:8d:93:ae:ab:24:a9:cf: e1:29:c0:ee:50:21:78:ce:f7:2a:2b:75:89:5f:74: e3:29:05:19:65:d1:60:4e:bf:9a:05:5c:3c:c4:11: da:40:dc:17:3e:7b:3b:df:c5:4b:81:e9:ad:ec:fa: 9f:59:69:04:36:b1:5c:b9:c4:25:e6:f9:f5:29:97: 23:0c:3d:10:10:af:1e:7b:91:0e:f4:20:44:6a:64: 86:df:8a:2f:15:e3:2a:9e:5b:3e:61:11:45:25:42: 0f:b5:32:b8:88:07:38:32:47:99:f9:fc:66:67:60: cc:8f:f2:8a:d0:59:2a:78:e3:af:fe:c9:5e:7f:44: f5:44:f5:21:fb:b4:db:6a:70:4b:8d:20:e6:07:26: 92:8a:6a:60:b7:c9:c2:ef:86:a5:e0:61:12:3b:a7: 99:70:6c:75:e3:f0:c4:42:ef:bb:53:25:62:b9:2b: 68:80:f1:96:02:3b:30:16:14:80:c4:ea:c7:64:10: cb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:96:D5:9D:FA:3C:9D:F5:C3:C7:1D:31:38:7B:15:89:8D:B8:5F:88 X509v3 Authority Key Identifier: keyid:69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/oJbVnfo8nfXDxx0xOHsViY24X4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.1.0/24 Signature Algorithm: sha256WithRSAEncryption a1:de:ea:0a:dc:69:b2:f6:c8:a3:42:f3:a3:d3:6a:57:48:c8: 38:c3:83:85:8d:84:42:6e:25:b8:76:00:a2:15:68:da:7b:21: 8c:d3:84:b3:c0:52:8e:62:9f:05:61:41:1a:7f:6f:37:27:05: 6b:20:fb:07:7a:9f:fe:3a:ea:88:31:a3:59:87:80:a3:6c:41: 51:10:5d:8c:52:0e:12:3f:b4:dd:92:ff:07:d5:49:46:98:c8: 23:0f:de:83:5d:b8:fa:ea:67:f6:fe:d5:51:e3:c4:5f:9b:a4: 6e:63:13:c6:ff:12:4f:2e:18:18:04:f4:52:89:5f:25:09:81: 3c:3c:2c:d7:96:2f:d9:56:34:cc:cf:41:e5:68:d7:4a:a7:20: a2:40:a7:d4:5f:6d:b9:5e:d5:4f:b3:89:d5:8b:1b:32:0a:cd: 60:ce:98:83:f7:2f:3a:ef:7f:67:3f:e0:67:cd:14:39:da:94: 37:5a:28:dc:85:ca:c3:53:04:38:59:cc:26:5f:30:48:1a:db: 50:22:d1:70:67:8c:ec:77:fc:33:d6:5b:51:f3:da:a0:45:8e: a0:f3:a3:94:54:28:66:1d:31:e0:07:65:53:a7:cc:44:87:b7: bc:7b:da:71:b9:22:ab:3c:f5:78:42:ee:e3:49:cb:cf:c2:30: 17:a9:b8:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pXsqMoQbtAAZMqGW7bWsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MzFkN2U3YTk5NzQ5YTM4NWVhZWIyN2Y4NTBhYjg5ZGE4 ZjJlZTAwHhcNMjYwMTAyMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDk2ZDU5ZGZhM2M5ZGY1YzNjNzFkMzEzODdiMTU4OThkYjg1Zjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+lrHQsT4n8qPc+LdVhzhthsT0L7 vETLMkM7UZVCwdeOx5oF+XqpXldJEwVboac8/KBdjp99eS8KaAU+RjxQZReX4I2T rqskqc/hKcDuUCF4zvcqK3WJX3TjKQUZZdFgTr+aBVw8xBHaQNwXPns738VLgemt 7PqfWWkENrFcucQl5vn1KZcjDD0QEK8ee5EO9CBEamSG34ovFeMqnls+YRFFJUIP tTK4iAc4MkeZ+fxmZ2DMj/KK0FkqeOOv/slef0T1RPUh+7TbanBLjSDmByaSimpg t8nC74al4GESO6eZcGx14/DEQu+7UyViuStogPGWAjswFhSAxOrHZBDLcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKCW1Z36PJ31w8cdMTh7FYmNuF+IMB8GA1UdIwQY MBaAFGkx1+epl0mjherrJ/hQq4najy7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVRIWDU2bVhTYU9GNnVzbi1GQ3JpZHFQTHVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC84Y2ZkNzMtMTI1Ny00ZGZhLThjNTkt NzZhZTQyMzU2Y2U1LzEvb0piVm5mbzhuZlhEeHgweE9Ic1ZpWTI0WDRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC84Y2ZkNzMtMTI1Ny00ZGZhLThjNTktNzZhZTQyMzU2Y2U1 LzEvYVRIWDU2bVhTYU9GNnVzbi1GQ3JpZHFQTHVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSQBMA0G CSqGSIb3DQEBCwUAA4IBAQCh3uoK3Gmy9sijQvOj02pXSMg4w4OFjYRCbiW4dgCi FWjaeyGM04SzwFKOYp8FYUEaf283JwVrIPsHep/+OuqIMaNZh4CjbEFREF2MUg4S P7Tdkv8H1UlGmMgjD96DXbj66mf2/tVR48Rfm6RuYxPG/xJPLhgYBPRSiV8lCYE8 PCzXli/ZVjTMz0HlaNdKpyCiQKfUX225XtVPs4nVixsyCs1gzpiD9y86739nP+Bn zRQ52pQ3WijchcrDUwQ4WcwmXzBIGttQItFwZ4zsd/wz1ltR89qgRY6g86OUVChm HTHgB2VTp8xEh7e8e9pxuSKrPPV4Qu7jScvPwjAXqbgV -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:42 2026 by rpki-client