This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/O93rUG0ldryuh9-LYis7w6UfO1w.roa File: O93rUG0ldryuh9-LYis7w6UfO1w.roa (raw, json) Hash identifier: ojZEmISFm5RdmO2THEEsy3HBhCvY1rlDIunZCRL5byg= Subject key identifier: 3B:DD:EB:50:6D:25:76:BC:AE:87:DF:8B:62:2B:3B:C3:A5:1F:3B:5C Certificate issuer: /CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b Certificate serial: 019B7AC7CE1959045B29746FD7F83D6F14C3 Authority key identifier: 5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/O93rUG0ldryuh9-LYis7w6UfO1w.roa Signing time: Thu 01 Jan 2026 18:17:53 +0000 ROA not before: Thu 01 Jan 2026 18:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5398 IP address blocks: 217.18.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ce:19:59:04:5b:29:74:6f:d7:f8:3d:6f:14:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b Validity Not Before: Jan 1 18:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bddeb506d2576bcae87df8b622b3bc3a51f3b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:f9:8d:dc:f4:4d:22:15:31:16:7c:93:b3: af:c9:fa:aa:3b:ba:66:7d:12:5a:c6:04:8d:45:62: a7:d5:e2:6f:71:d0:1a:b5:d2:97:ec:9f:26:af:cf: da:a1:6f:64:64:a6:b7:fc:e0:c8:6e:a5:b5:1f:82: de:59:28:a5:8f:58:3c:bf:ba:e3:eb:38:23:c0:95: df:95:d7:da:3f:29:f5:41:69:14:c5:48:a6:ec:e5: a3:eb:c3:c5:f6:2c:6f:08:37:9a:36:89:34:89:28: 6f:1c:d4:42:e3:87:8c:1c:93:cc:e8:99:cc:d1:bf: 70:8b:63:3e:e9:d7:34:b8:ed:a5:1e:a1:32:a4:62: 2b:9e:cd:c4:21:a3:46:07:a3:ec:3a:63:ed:3e:d3: a8:c9:cd:f6:c1:1f:fd:ae:64:d3:40:5e:4e:aa:2c: 70:d7:3b:5b:71:51:cc:75:38:94:79:fb:92:6b:a9: 4d:9c:a2:8f:11:25:91:35:71:ee:d4:47:6a:ad:83: 89:f0:68:ff:55:81:65:41:3d:4f:04:e6:57:55:f6: 30:91:84:07:a9:4a:b9:29:3d:6e:29:b4:cc:58:03: 42:aa:9f:0a:d9:8e:1f:f0:df:7f:29:16:27:f4:c0: 84:32:21:a1:de:61:50:12:ea:de:3e:91:8f:5f:d3: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DD:EB:50:6D:25:76:BC:AE:87:DF:8B:62:2B:3B:C3:A5:1F:3B:5C X509v3 Authority Key Identifier: keyid:5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/O93rUG0ldryuh9-LYis7w6UfO1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.18.0.0/20 Signature Algorithm: sha256WithRSAEncryption 24:c6:27:c0:32:22:a1:9d:82:85:cd:58:0d:67:b0:f2:a8:59: e2:fc:39:72:f3:4f:98:ab:58:de:0e:fb:f7:e1:3a:c8:31:0e: ee:54:c5:35:39:ea:91:ee:c3:e7:a4:54:e0:8d:72:e8:9b:51: f6:10:32:13:c6:df:00:2c:6c:28:57:0b:24:53:67:af:42:46: 32:ac:37:00:d4:08:fe:d6:89:39:43:96:e7:11:2f:8a:4f:30: 5d:ce:10:89:81:36:07:e7:1e:e2:66:e9:b1:15:e9:a9:4d:40: 25:a1:f2:9b:e8:56:3b:96:1f:9c:e7:a5:f5:9f:85:4f:26:84: fe:50:28:fb:2a:92:5a:5d:47:eb:41:0c:9a:10:82:e7:b6:62: ac:60:7c:79:7d:28:81:6c:cc:94:d6:e3:96:81:a6:f1:5a:75: 2c:c8:64:e2:c9:fe:58:2e:fb:d4:f6:9a:5e:78:09:f8:8d:b2: 24:b6:dc:49:9b:fc:64:36:ad:6b:fa:99:08:07:64:d0:05:3e: 3c:66:55:3a:94:3f:31:ce:57:3a:2a:d4:a4:e6:ca:c3:b7:a8: 21:d0:a2:5c:97:b3:4a:06:26:0e:5e:dd:b9:51:b6:d1:1e:51: 76:69:d1:84:20:ab:39:d5:3b:a6:6a:96:3e:23:d8:90:a2:96: 0f:d4:04:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x84ZWQRbKXRv1/g9bxTDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYTlmNzVkY2EyY2QzYjM5MzUzZTAzMDBiMzBiYTViNjI5 NzZhMmIwHhcNMjYwMTAxMTgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmRkZWI1MDZkMjU3NmJjYWU4N2RmOGI2MjJiM2JjM2E1MWYzYjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR/5jdz0TSIVMRZ8k7OvyfqqO7pm fRJaxgSNRWKn1eJvcdAatdKX7J8mr8/aoW9kZKa3/ODIbqW1H4LeWSilj1g8v7rj 6zgjwJXfldfaPyn1QWkUxUim7OWj68PF9ixvCDeaNok0iShvHNRC44eMHJPM6JnM 0b9wi2M+6dc0uO2lHqEypGIrns3EIaNGB6PsOmPtPtOoyc32wR/9rmTTQF5Oqixw 1ztbcVHMdTiUefuSa6lNnKKPESWRNXHu1EdqrYOJ8Gj/VYFlQT1PBOZXVfYwkYQH qUq5KT1uKbTMWANCqp8K2Y4f8N9/KRYn9MCEMiGh3mFQEurePpGPX9OVhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDvd61BtJXa8roffi2IrO8OlHztcMB8GA1UdIwQY MBaAFFyp913KLNOzk1PgMAswultil2orMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEtuM1hjb3MwN09UVS1Bd0N6QzZXMktYYWlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xMDU0MzMtODNkOS00MTJjLTlmYzQt MWQ1MWM0NjhkNTU2LzEvTzkzclVHMGxkcnl1aDktTFlpczd3NlVmTzF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8xMDU0MzMtODNkOS00MTJjLTlmYzQtMWQ1MWM0NjhkNTU2 LzEvWEtuM1hjb3MwN09UVS1Bd0N6QzZXMktYYWlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2RIAMA0G CSqGSIb3DQEBCwUAA4IBAQAkxifAMiKhnYKFzVgNZ7DyqFni/Dly80+Yq1jeDvv3 4TrIMQ7uVMU1OeqR7sPnpFTgjXLom1H2EDITxt8ALGwoVwskU2evQkYyrDcA1Aj+ 1ok5Q5bnES+KTzBdzhCJgTYH5x7iZumxFempTUAlofKb6FY7lh+c56X1n4VPJoT+ UCj7KpJaXUfrQQyaEILntmKsYHx5fSiBbMyU1uOWgabxWnUsyGTiyf5YLvvU9ppe eAn4jbIkttxJm/xkNq1r+pkIB2TQBT48ZlU6lD8xzlc6KtSk5srDt6gh0KJcl7NK BiYOXt25UbbRHlF2adGEIKs51TumapY+I9iQopYP1AQk -----END CERTIFICATE-----Generated at Mon Feb 9 22:58:08 2026 by rpki-client