This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/OG5yYZRHtJiYyq5pO1FIDH0wwrY.roa File: OG5yYZRHtJiYyq5pO1FIDH0wwrY.roa (raw, json) Hash identifier: v0N9aSxgVv0t0A+JdFIJk1kR33YnQpvCxp6VxxBAxC4= Subject key identifier: 38:6E:72:61:94:47:B4:98:98:CA:AE:69:3B:51:48:0C:7D:30:C2:B6 Certificate issuer: /CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13 Certificate serial: 019B7C123F472F3999947938249804AA1827 Authority key identifier: E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/OG5yYZRHtJiYyq5pO1FIDH0wwrY.roa Signing time: Fri 02 Jan 2026 00:18:49 +0000 ROA not before: Fri 02 Jan 2026 00:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42905 IP address blocks: 91.199.245.0/24 maxlen: 24 193.39.118.0/24 maxlen: 24 193.200.151.0/24 maxlen: 24 195.62.36.0/23 maxlen: 23 195.62.36.0/24 maxlen: 24 195.62.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3f:47:2f:39:99:94:79:38:24:98:04:aa:18:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13 Validity Not Before: Jan 2 00:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=386e72619447b49898caae693b51480c7d30c2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:d4:49:31:a4:dc:40:e6:86:9f:78:79:5c: 24:16:94:14:bd:db:1f:b1:a0:75:e3:3d:36:5f:0d: 33:f9:67:27:f7:b0:21:ad:32:17:b1:15:dd:00:e4: 24:69:9a:54:00:eb:2f:56:2d:e3:73:77:a3:ee:32: 37:45:0b:6b:b6:b1:60:7d:c6:92:16:86:bd:54:0a: e5:e0:07:0f:d7:30:b3:be:63:e9:4c:2e:f9:87:37: cb:3b:db:4e:13:9b:e8:05:84:bb:31:ba:fc:f6:85: 70:5f:fd:29:1c:c5:aa:d8:22:f6:e5:79:55:e7:9e: 69:91:a1:8b:a9:14:32:2c:a3:70:3a:b0:0b:8f:71: c3:f1:75:0c:47:37:7b:00:d2:45:98:fa:8e:60:a5: a1:27:ec:d6:8d:06:2f:71:a6:60:e4:9b:05:c0:11: a7:77:ba:ed:f9:c1:4e:cb:ab:6f:49:33:bb:02:b9: 2d:0b:fc:2a:1f:34:3c:27:46:64:34:56:c5:fb:d7: 5c:3d:68:c3:f5:b5:72:aa:df:c4:28:b8:e9:91:db: a6:f6:64:61:86:c1:81:42:d8:d2:4a:d4:7c:c6:c3: ab:74:5d:41:c8:b6:e9:d2:45:0a:d6:70:6b:93:78: 3c:82:07:be:bf:4e:27:f7:89:29:b7:d4:a7:9e:9a: 16:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6E:72:61:94:47:B4:98:98:CA:AE:69:3B:51:48:0C:7D:30:C2:B6 X509v3 Authority Key Identifier: keyid:E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/OG5yYZRHtJiYyq5pO1FIDH0wwrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.245.0/24 193.39.118.0/24 193.200.151.0/24 195.62.36.0/23 Signature Algorithm: sha256WithRSAEncryption ce:ad:2d:46:ea:66:90:db:61:15:cd:16:dc:2b:48:ca:c5:59: 9e:df:cf:59:a2:dd:bb:e6:60:a2:fa:b7:af:24:25:79:fc:5f: 0e:9e:b5:b3:dc:c9:81:2b:e4:aa:12:97:ed:89:89:f9:db:e5: 6b:1e:94:f2:32:a8:c1:83:d2:a7:cb:8f:a1:15:7c:57:69:fd: d3:c8:06:de:e6:d2:21:bc:a3:ce:56:8b:b0:81:a6:90:cb:96: 03:e6:b1:4d:01:21:41:53:62:32:30:ea:c5:05:85:2e:a7:66: 26:02:66:fa:b4:e5:f5:a9:46:6b:50:cb:8f:24:70:fc:60:bb: 27:38:3d:1f:72:8f:74:4f:5e:97:fe:88:1b:59:f5:e2:12:e2: de:a2:b0:14:7e:10:00:6b:2d:0f:87:0e:38:94:30:33:e3:ee: 6f:d4:e5:fa:b6:f4:6d:c9:2d:3e:41:a4:64:47:f4:80:36:55: c4:4b:7b:d9:43:2f:30:c5:7e:ce:fa:f7:ec:11:47:41:98:8d: 8a:65:a7:8d:94:0e:71:9f:5b:6d:ec:e4:15:6a:4b:9c:23:a1: c7:5b:b8:83:a1:3d:f0:e9:f7:e0:99:f5:16:7b:82:4d:04:ec: 5c:94:8f:b1:1b:af:88:cb:97:aa:a5:20:89:b6:5a:3c:17:01: 55:e0:65:05 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8Ej9HLzmZlHk4JJgEqhgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MWY5ZGJiZTY4Yjg0MDI3Y2VkNGQzMWU4ODAzZjEzZTlk NjVkMTMwHhcNMjYwMTAyMDAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODZlNzI2MTk0NDdiNDk4OThjYWFlNjkzYjUxNDgwYzdkMzBjMmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBzUSTGk3EDmhp94eVwkFpQUvdsf saB14z02Xw0z+Wcn97AhrTIXsRXdAOQkaZpUAOsvVi3jc3ej7jI3RQtrtrFgfcaS Foa9VArl4AcP1zCzvmPpTC75hzfLO9tOE5voBYS7Mbr89oVwX/0pHMWq2CL25XlV 555pkaGLqRQyLKNwOrALj3HD8XUMRzd7ANJFmPqOYKWhJ+zWjQYvcaZg5JsFwBGn d7rt+cFOy6tvSTO7ArktC/wqHzQ8J0ZkNFbF+9dcPWjD9bVyqt/EKLjpkdum9mRh hsGBQtjSStR8xsOrdF1ByLbp0kUK1nBrk3g8gge+v04n94kpt9SnnpoW9QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDhucmGUR7SYmMquaTtRSAx9MMK2MB8GA1UdIwQY MBaAFOkfnbvmi4QCfO1NMeiAPxPp1l0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlItZHUtYUxoQUo4N1UweDZJQV9FLW5XWFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wYWZhYzAtMjdiOS00NjM3LTljZGUt YjRlNzlmNzgxZTRkLzEvT0c1eVlaUkh0SmlZeXE1cE8xRklESDB3d3JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8wYWZhYzAtMjdiOS00NjM3LTljZGUtYjRlNzlmNzgxZTRk LzEvNlItZHUtYUxoQUo4N1UweDZJQV9FLW5XWFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW8f1AwQA wSd2AwQAwciXAwQBwz4kMA0GCSqGSIb3DQEBCwUAA4IBAQDOrS1G6maQ22EVzRbc K0jKxVme389Zot275mCi+revJCV5/F8OnrWz3MmBK+SqEpftiYn52+VrHpTyMqjB g9Kny4+hFXxXaf3TyAbe5tIhvKPOVouwgaaQy5YD5rFNASFBU2IyMOrFBYUup2Ym Amb6tOX1qUZrUMuPJHD8YLsnOD0fco90T16X/ogbWfXiEuLeorAUfhAAay0Phw44 lDAz4+5v1OX6tvRtyS0+QaRkR/SANlXES3vZQy8wxX7O+vfsEUdBmI2KZaeNlA5x n1tt7OQVakucI6HHW7iDoT3w6ffgmfUWe4JNBOxclI+xG6+Iy5eqpSCJtlo8FwFV 4GUF -----END CERTIFICATE-----Generated at Sun Jan 18 15:42:23 2026 by rpki-client