This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oZD6czPCmLiRxoOvZ6e7TWtI5O8.roa File: oZD6czPCmLiRxoOvZ6e7TWtI5O8.roa (raw, json) Hash identifier: ftRiiEudLzWqFukmeXuEZOsB25VXvhUgiS64U7wfs4g= Subject key identifier: A1:90:FA:73:33:C2:98:B8:91:C6:83:AF:67:A7:BB:4D:6B:48:E4:EF Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019BA27CEDC4AA1176D084188525A7499210 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oZD6czPCmLiRxoOvZ6e7TWtI5O8.roa Signing time: Fri 09 Jan 2026 11:20:54 +0000 ROA not before: Fri 09 Jan 2026 11:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 77.93.139.0/24 maxlen: 24 82.152.122.0/24 maxlen: 24 109.176.215.0/24 maxlen: 24 213.210.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:7c:ed:c4:aa:11:76:d0:84:18:85:25:a7:49:92:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 9 11:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a190fa7333c298b891c683af67a7bb4d6b48e4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:37:6e:23:40:99:49:ed:25:e2:24:7c:fb:2e: 25:60:e0:ad:9c:3c:ef:7c:80:6d:52:de:ce:d7:82: 1c:37:82:1c:c6:d7:8f:d6:92:68:53:f4:e2:13:5e: c1:d4:63:c0:6b:23:32:21:fe:d1:86:7e:cc:12:85: 42:98:ec:77:61:95:00:00:52:58:49:01:ce:22:c2: 07:37:88:fd:63:0c:14:f8:cc:d6:dc:92:10:ef:8f: 1d:46:8b:aa:c3:e1:60:71:03:23:7f:3c:0a:75:63: ea:90:15:4b:78:53:9c:2a:f9:e1:b7:d5:3d:f2:f0: 43:04:7f:f7:d6:e1:7b:ad:a7:9a:a7:d9:ff:2c:af: f7:30:b4:fe:11:88:d0:6a:a1:bd:67:5b:08:c7:c0: db:28:48:54:4d:e6:43:39:f2:1d:41:e1:8d:d9:aa: 9f:48:dd:68:15:e4:1b:e9:99:7b:5e:54:6c:5b:3c: 4f:87:64:6d:c6:e4:3e:76:f4:15:03:8d:9f:c1:56: 86:2d:32:18:a8:6b:eb:7f:39:bf:8e:3f:cd:4b:f8: 84:8b:ca:fc:ca:61:cb:5f:dc:6b:7c:bc:15:c2:47: 57:bc:1f:7f:58:5a:00:1c:74:35:cc:9e:00:5c:ce: c1:a4:ce:df:5b:0a:5c:18:61:d4:95:e8:9d:70:67: 5c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:90:FA:73:33:C2:98:B8:91:C6:83:AF:67:A7:BB:4D:6B:48:E4:EF X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oZD6czPCmLiRxoOvZ6e7TWtI5O8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.139.0/24 82.152.122.0/24 109.176.215.0/24 213.210.41.0/24 Signature Algorithm: sha256WithRSAEncryption 33:5a:b4:7f:9c:99:a1:3f:73:72:cf:57:97:c8:f2:1b:a1:92: 58:71:e2:4c:ff:d8:34:db:83:bd:3d:2e:10:b6:31:46:c3:29: 3c:e1:87:9e:86:24:56:4d:be:72:a0:84:df:99:75:a2:e8:a8: c7:02:f5:4d:45:de:a6:de:ac:5b:8a:f1:73:5a:0d:c7:00:85: d8:3f:d5:f2:2c:5c:e5:0e:b1:f6:aa:76:16:1c:95:d6:df:c2: e6:77:14:65:73:8c:dd:78:ce:19:43:d6:06:33:43:2d:a5:87: 8b:82:92:19:f5:27:9f:fa:70:0c:9b:3e:fb:64:e7:aa:2d:86: a9:16:51:0d:75:db:21:8b:bd:ba:83:a0:4a:94:f6:13:b2:6b: 87:5e:b9:5c:7a:09:80:27:f6:34:05:e6:a5:44:fc:60:c9:9d: a9:7e:d2:22:16:9b:5d:df:af:69:52:54:0e:04:e5:e6:2d:dd: ff:d7:3b:26:1b:7f:b7:97:df:e1:12:70:e4:b6:ec:9c:17:5e: 4a:bc:b2:98:78:e2:f3:12:be:66:b6:f2:04:31:f6:b2:e2:25: 57:64:c7:02:68:c5:62:64:c2:00:9d:a6:ea:70:35:69:c6:5f: ef:67:03:0e:48:48:89:16:7d:c1:0d:d4:0d:38:4c:2e:6a:89: 44:55:66:0b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZuifO3EqhF20IQYhSWnSZIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTA5MTEyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTkwZmE3MzMzYzI5OGI4OTFjNjgzYWY2N2E3YmI0ZDZiNDhlNGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TduI0CZSe0l4iR8+y4lYOCtnDzv fIBtUt7O14IcN4IcxteP1pJoU/TiE17B1GPAayMyIf7Rhn7MEoVCmOx3YZUAAFJY SQHOIsIHN4j9YwwU+MzW3JIQ748dRouqw+FgcQMjfzwKdWPqkBVLeFOcKvnht9U9 8vBDBH/31uF7raeap9n/LK/3MLT+EYjQaqG9Z1sIx8DbKEhUTeZDOfIdQeGN2aqf SN1oFeQb6Zl7XlRsWzxPh2RtxuQ+dvQVA42fwVaGLTIYqGvrfzm/jj/NS/iEi8r8 ymHLX9xrfLwVwkdXvB9/WFoAHHQ1zJ4AXM7BpM7fWwpcGGHUleidcGdcnQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKGQ+nMzwpi4kcaDr2enu01rSOTvMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvb1pENmN6UENtTGlSeG9Pdlo2ZTdUV3RJNU84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATV2LAwQA Uph6AwQAbbDXAwQA1dIpMA0GCSqGSIb3DQEBCwUAA4IBAQAzWrR/nJmhP3Nyz1eX yPIboZJYceJM/9g024O9PS4QtjFGwyk84YeehiRWTb5yoITfmXWi6KjHAvVNRd6m 3qxbivFzWg3HAIXYP9XyLFzlDrH2qnYWHJXW38LmdxRlc4zdeM4ZQ9YGM0MtpYeL gpIZ9Sef+nAMmz77ZOeqLYapFlENddshi726g6BKlPYTsmuHXrlcegmAJ/Y0Beal RPxgyZ2pftIiFptd369pUlQOBOXmLd3/1zsmG3+3l9/hEnDktuycF15KvLKYeOLz Er5mtvIEMfay4iVXZMcCaMViZMIAnabqcDVpxl/vZwMOSEiJFn3BDdQNOEwuaolE VWYL -----END CERTIFICATE-----Generated at Sun Jan 18 04:26:36 2026 by rpki-client