This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/oW4ysh7_p8WRJo9597igjbvRPFI.roa File: oW4ysh7_p8WRJo9597igjbvRPFI.roa (raw, json) Hash identifier: Wy+rRsEtgTNtxhEZBxl30jxFcu3vxwgqKgQ7YULebdk= Subject key identifier: A1:6E:32:B2:1E:FF:A7:C5:91:26:8F:79:F7:B8:A0:8D:BB:D1:3C:52 Certificate issuer: /CN=709f8f32082152359cdaf9aabd4a551f4fb40213 Certificate serial: 019BB7D11FB379A3CA9789E329DE884C60F5 Authority key identifier: 70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/oW4ysh7_p8WRJo9597igjbvRPFI.roa Signing time: Tue 13 Jan 2026 14:44:54 +0000 ROA not before: Tue 13 Jan 2026 14:44:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43815 IP address blocks: 193.30.244.0/24 maxlen: 24 2001:678:8b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:d1:1f:b3:79:a3:ca:97:89:e3:29:de:88:4c:60:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709f8f32082152359cdaf9aabd4a551f4fb40213 Validity Not Before: Jan 13 14:44:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a16e32b21effa7c591268f79f7b8a08dbbd13c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ce:d1:9f:1c:98:f2:46:ae:50:66:23:a1:5e: a7:34:d8:12:3d:19:f9:ae:ec:b9:92:28:4c:bf:5a: 22:c6:f5:e5:78:09:a7:08:e0:cb:e7:80:df:5b:fe: 6b:e0:f8:6c:04:4d:bd:66:68:04:69:0b:c6:29:48: eb:39:b1:18:e5:6c:70:43:d5:dd:b0:2e:1e:7e:0e: 2b:ce:f8:83:61:ec:a1:a1:07:21:10:bf:fe:ab:28: db:0d:69:0b:f8:ab:8e:86:ad:55:44:3b:fe:15:40: 35:dd:aa:69:fe:97:f3:03:63:ec:86:b8:90:74:34: bf:bf:94:cd:67:c9:bb:a7:ae:08:6a:ad:08:33:fa: 9c:92:bb:2b:fd:fd:2b:9a:1a:fb:d2:2c:6e:4a:65: fa:99:19:34:0c:65:2d:99:20:92:5d:0a:ac:55:b1: 29:08:02:6f:7f:9d:97:ba:13:16:43:e8:c6:58:dc: f3:11:14:26:86:93:fb:8e:67:42:b0:3d:bb:14:6f: ad:a3:09:88:3b:9f:d5:83:23:31:bd:02:be:76:ae: 58:f8:e6:b7:fe:33:a1:61:b1:9c:18:3e:04:15:c5: d4:bb:0b:75:62:83:dc:ba:08:92:42:e2:09:86:ac: 92:bf:7c:5c:02:17:09:2a:e6:c3:93:59:4d:0c:9e: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6E:32:B2:1E:FF:A7:C5:91:26:8F:79:F7:B8:A0:8D:BB:D1:3C:52 X509v3 Authority Key Identifier: keyid:70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/oW4ysh7_p8WRJo9597igjbvRPFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.244.0/24 IPv6: 2001:678:8b0::/48 Signature Algorithm: sha256WithRSAEncryption a7:0e:1c:87:04:b4:27:a6:70:63:57:67:c6:f6:56:24:41:72: 33:8b:6b:7c:58:0d:2e:d3:05:04:62:94:04:ab:36:69:a8:c2: 7a:0c:da:1b:63:25:2f:df:64:45:00:f5:71:2d:b5:29:25:eb: d3:ba:f5:6e:27:8d:23:d2:60:8f:a6:c4:ba:60:37:c9:49:2a: dd:46:5b:10:26:3a:28:ed:f0:1f:3b:f6:9b:f8:9a:9d:55:54: d7:83:e0:62:77:84:73:0f:8a:06:ed:91:c8:e7:b7:74:d4:d7: 3e:6b:29:19:66:fa:17:dc:e3:7e:2e:99:54:ca:7a:a9:b8:2c: ed:1c:ea:18:2d:0c:4e:22:4b:56:15:8a:d9:b4:b4:3c:56:3d: 46:db:9f:10:b4:88:ef:ec:59:bb:0b:4c:ec:6a:de:54:d4:ad: 07:31:ad:7d:6f:68:2f:11:cc:c4:72:66:21:04:6a:f7:de:3d: 90:d2:71:fd:84:17:ec:36:b0:00:ff:79:06:74:99:6d:1d:e7: 0f:a6:f9:dc:fa:df:13:67:24:67:4a:7e:44:b0:30:68:bb:88: 07:0e:95:d8:a7:e4:3c:5b:54:01:cb:a9:12:dc:d1:27:e0:a0: ed:26:5a:f6:d0:22:78:1d:a4:b2:fc:17:7c:38:39:05:dd:32: 4c:f9:7f:9d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZu30R+zeaPKl4njKd6ITGD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOWY4ZjMyMDgyMTUyMzU5Y2RhZjlhYWJkNGE1NTFmNGZi NDAyMTMwHhcNMjYwMTEzMTQ0NDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTZlMzJiMjFlZmZhN2M1OTEyNjhmNzlmN2I4YTA4ZGJiZDEzYzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM7RnxyY8kauUGYjoV6nNNgSPRn5 ruy5kihMv1oixvXleAmnCODL54DfW/5r4PhsBE29ZmgEaQvGKUjrObEY5WxwQ9Xd sC4efg4rzviDYeyhoQchEL/+qyjbDWkL+KuOhq1VRDv+FUA13app/pfzA2PshriQ dDS/v5TNZ8m7p64Iaq0IM/qckrsr/f0rmhr70ixuSmX6mRk0DGUtmSCSXQqsVbEp CAJvf52XuhMWQ+jGWNzzERQmhpP7jmdCsD27FG+towmIO5/VgyMxvQK+dq5Y+Oa3 /jOhYbGcGD4EFcXUuwt1YoPcugiSQuIJhqySv3xcAhcJKubDk1lNDJ61jQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKFuMrIe/6fFkSaPefe4oI270TxSMB8GA1UdIwQY MBaAFHCfjzIIIVI1nNr5qr1KVR9PtAITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0otUE1nZ2hValdjMnZtcXZVcFZIMC0wQWhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mMzc1MzgtN2Y5Zi00MjI4LWEzMWUt MmRhYjQzYWMwNGIzLzEvb1c0eXNoN19wOFdSSm85NTk3aWdqYnZSUEZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mMzc1MzgtN2Y5Zi00MjI4LWEzMWUtMmRhYjQzYWMwNGIz LzEvY0otUE1nZ2hValdjMnZtcXZVcFZIMC0wQWhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwR70MA8E AgACMAkDBwAgAQZ4CLAwDQYJKoZIhvcNAQELBQADggEBAKcOHIcEtCemcGNXZ8b2 ViRBcjOLa3xYDS7TBQRilASrNmmownoM2htjJS/fZEUA9XEttSkl69O69W4njSPS YI+mxLpgN8lJKt1GWxAmOijt8B879pv4mp1VVNeD4GJ3hHMPigbtkcjnt3TU1z5r KRlm+hfc434umVTKeqm4LO0c6hgtDE4iS1YVitm0tDxWPUbbnxC0iO/sWbsLTOxq 3lTUrQcxrX1vaC8RzMRyZiEEavfePZDScf2EF+w2sAD/eQZ0mW0d5w+m+dz63xNn JGdKfkSwMGi7iAcOldin5DxbVAHLqRLc0SfgoO0mWvbQIngdpLL8F3w4OQXdMkz5 f50= -----END CERTIFICATE-----Generated at Tue Feb 10 06:08:11 2026 by rpki-client