This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/o6jn4pMH4sc0eujptr5xx165q4Q.roa File: o6jn4pMH4sc0eujptr5xx165q4Q.roa (raw, json) Hash identifier: fEt3SZ1Yy3NPOPzC2NTZohBKbWX72IOAPI3OKkPJrBw= Subject key identifier: A3:A8:E7:E2:93:07:E2:C7:34:7A:E8:E9:B6:BE:71:C7:5E:B9:AB:84 Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00 Certificate serial: 019B8F1074189DF33B974ECB9F66A9133606 Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/o6jn4pMH4sc0eujptr5xx165q4Q.roa Signing time: Mon 05 Jan 2026 16:49:38 +0000 ROA not before: Mon 05 Jan 2026 16:49:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209114 IP address blocks: 193.33.120.0/24 maxlen: 24 194.31.130.0/24 maxlen: 24 212.56.58.0/23 maxlen: 24 212.56.59.0/24 maxlen: 24 2a12:6e40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:10:74:18:9d:f3:3b:97:4e:cb:9f:66:a9:13:36:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00 Validity Not Before: Jan 5 16:49:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3a8e7e29307e2c7347ae8e9b6be71c75eb9ab84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a1:6c:dc:11:37:c5:d5:e0:13:be:b1:f4:83: 37:b8:6a:a2:04:6f:b9:f8:5c:af:5f:29:bd:46:03: b7:88:69:52:11:de:06:c4:01:93:f4:95:c6:2e:7e: b7:94:b8:48:d4:46:ed:14:5b:e7:b2:7b:ba:e1:67: 36:2d:94:64:8b:aa:ec:e5:0b:b4:eb:90:f5:45:25: e0:9e:2a:4e:11:9b:a5:78:0a:94:e8:0a:e6:7e:be: 94:5a:a0:09:a6:4d:65:3d:ae:79:84:83:25:0b:46: fa:8f:d7:d4:7f:ba:f4:64:1f:0b:e6:8c:72:4c:45: 2b:1c:d5:26:59:60:68:91:88:e9:cf:02:54:6d:40: d5:70:31:35:0f:7e:79:65:b4:75:64:27:4a:db:72: 11:8e:c9:dd:6a:47:e2:73:c9:75:d9:b3:15:10:79: 61:d4:2c:83:3e:4e:f3:75:c9:62:2c:44:9a:24:e7: fa:c1:38:12:a6:e8:9d:98:72:91:2f:60:c8:1e:77: 35:7c:8c:36:31:5c:59:77:0b:83:76:ca:28:7f:0b: 24:a9:1b:5f:b8:90:e6:e6:e5:07:60:dc:18:ef:09: 4e:b4:44:93:ea:3b:71:ce:af:32:38:37:5c:46:12: af:1a:c4:04:ad:0d:41:cf:13:6f:29:e4:00:45:2d: 58:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A8:E7:E2:93:07:E2:C7:34:7A:E8:E9:B6:BE:71:C7:5E:B9:AB:84 X509v3 Authority Key Identifier: keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/o6jn4pMH4sc0eujptr5xx165q4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.120.0/24 194.31.130.0/24 212.56.58.0/23 IPv6: 2a12:6e40::/29 Signature Algorithm: sha256WithRSAEncryption 5f:e7:9c:02:7e:6c:80:c5:9f:4e:7e:14:59:ae:18:ff:9e:ce: 58:03:e7:3c:e7:5e:1c:74:55:22:ae:b9:5e:c3:2d:43:8b:c3: ad:e9:e0:c2:59:b1:34:99:b3:c3:f7:56:57:60:5a:eb:ed:ea: 3c:97:69:de:50:a9:67:86:e7:22:59:4d:13:e3:2b:bd:69:5a: ee:fe:56:54:4f:c5:98:41:02:92:08:85:1f:53:4d:80:c4:ec: 99:c3:04:b0:87:ea:c3:0b:43:ee:18:38:64:ff:01:a4:d2:7f: 22:b4:4f:bf:3b:7d:8b:18:2d:e3:bc:80:97:09:79:5a:f8:28: 4f:50:64:4a:3b:34:6c:77:ea:f8:eb:c5:4f:e8:5c:11:37:96: d7:1a:91:fc:8e:97:98:7a:bf:5d:39:b8:d7:b9:fa:ce:57:e0: 4e:0e:9a:61:41:04:35:33:3d:5d:7b:0a:a2:7a:34:1f:18:c9: f1:c5:bc:cd:26:06:07:a7:bd:20:e9:2c:4d:ef:10:16:7b:1c: 18:b4:1a:c6:ec:43:d4:84:3d:83:63:1e:36:bf:1a:b0:e9:49: 21:08:44:8e:48:74:9a:7a:09:65:93:8d:5a:a7:ef:0a:40:68: 18:6f:e0:43:cf:a7:58:9d:ab:0f:79:7b:4c:c8:96:56:c8:c0: 34:6c:eb:dc -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZuPEHQYnfM7l07Ln2apEzYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Zjk2NzBlZTJhMzBlYWM4YzBhMzlkYzQ3ZmY3YThjZDI0 NzNiMDAwHhcNMjYwMTA1MTY0OTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2E4ZTdlMjkzMDdlMmM3MzQ3YWU4ZTliNmJlNzFjNzVlYjlhYjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6Fs3BE3xdXgE76x9IM3uGqiBG+5 +FyvXym9RgO3iGlSEd4GxAGT9JXGLn63lLhI1EbtFFvnsnu64Wc2LZRki6rs5Qu0 65D1RSXgnipOEZuleAqU6Armfr6UWqAJpk1lPa55hIMlC0b6j9fUf7r0ZB8L5oxy TEUrHNUmWWBokYjpzwJUbUDVcDE1D355ZbR1ZCdK23IRjsndakfic8l12bMVEHlh 1CyDPk7zdcliLESaJOf6wTgSpuidmHKRL2DIHnc1fIw2MVxZdwuDdsoofwskqRtf uJDm5uUHYNwY7wlOtEST6jtxzq8yODdcRhKvGsQErQ1BzxNvKeQARS1YjwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKOo5+KTB+LHNHro6ba+ccdeuauEMB8GA1UdIwQY MBaAFCn5Zw7iow6sjAo53Ef/eozSRzsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yZmY3NmQtZjExNi00NDMwLTg0MDct NmUyOWVmZGZkNGUzLzEvbzZqbjRwTUg0c2MwZXVqcHRyNXh4MTY1cTRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yZmY3NmQtZjExNi00NDMwLTg0MDctNmUyOWVmZGZkNGUz LzEvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAwSF4AwQA wh+CAwQB1Dg6MA0EAgACMAcDBQMqEm5AMA0GCSqGSIb3DQEBCwUAA4IBAQBf55wC fmyAxZ9OfhRZrhj/ns5YA+c8514cdFUirrlewy1Di8Ot6eDCWbE0mbPD91ZXYFrr 7eo8l2neUKlnhuciWU0T4yu9aVru/lZUT8WYQQKSCIUfU02AxOyZwwSwh+rDC0Pu GDhk/wGk0n8itE+/O32LGC3jvICXCXla+ChPUGRKOzRsd+r468VP6FwRN5bXGpH8 jpeYer9dObjXufrOV+BODpphQQQ1Mz1dewqiejQfGMnxxbzNJgYHp70g6SxN7xAW exwYtBrG7EPUhD2DYx42vxqw6UkhCESOSHSaegllk41ap+8KQGgYb+BDz6dYnasP eXtMyJZWyMA0bOvc -----END CERTIFICATE-----Generated at Mon Jan 26 18:19:17 2026 by rpki-client