This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/OYOS-7oCt8qB-IolnQtbLO6mNJs.roa File: OYOS-7oCt8qB-IolnQtbLO6mNJs.roa (raw, json) Hash identifier: chuIv7V7D8ZTIYroROKzsMh/sfUH1MBxL7TmjhgmwAY= Subject key identifier: 39:83:92:FB:BA:02:B7:CA:81:F8:8A:25:9D:0B:5B:2C:EE:A6:34:9B Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 019B78A2A2C599226AF0E6BC936047E133E1 Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/OYOS-7oCt8qB-IolnQtbLO6mNJs.roa Signing time: Thu 01 Jan 2026 08:18:03 +0000 ROA not before: Thu 01 Jan 2026 08:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213019 IP address blocks: 194.39.69.0/24 maxlen: 24 194.39.70.0/24 maxlen: 24 194.39.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a2:c5:99:22:6a:f0:e6:bc:93:60:47:e1:33:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Jan 1 08:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=398392fbba02b7ca81f88a259d0b5b2ceea6349b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:44:f6:16:f4:60:ae:7c:63:43:41:c9:aa:9f: c6:c3:68:9c:21:10:bd:a6:b9:30:7e:54:25:44:46: d8:b3:18:b9:68:3c:7b:70:8e:4d:6a:fe:19:57:01: e3:72:9d:f3:4d:86:ab:d6:43:9b:f3:79:8d:71:fa: 52:89:38:f5:4b:72:11:14:14:c1:8c:40:29:9a:9d: 63:eb:67:ea:fa:06:2a:ea:16:cb:5f:87:d6:53:a5: bf:7c:a1:6f:5e:fd:3b:eb:cb:72:3c:5a:9b:84:01: 32:1e:74:50:22:9a:47:c9:b9:f1:48:47:0b:16:6b: 46:d2:30:3a:83:ac:76:df:d2:6a:df:a1:fd:c2:f5: a1:54:ed:7f:fa:a2:17:45:2a:7a:4d:e4:fd:61:89: 83:e4:e5:a9:57:9a:68:6e:6c:f6:2e:e0:85:1c:7f: 58:5a:05:ff:fa:51:cb:87:15:98:1d:aa:7e:a7:2c: 4e:54:d4:19:6d:53:3e:59:53:ae:ed:0f:88:5b:ad: 7d:84:2a:39:e7:d6:a4:28:54:38:08:c4:f7:6a:df: f0:03:55:d0:74:da:41:90:e3:f3:8f:2f:4d:3b:dd: db:36:4a:84:e9:13:5b:d7:a4:5b:6f:8a:20:37:f4: 9f:bb:2c:cc:2a:28:a2:72:02:3a:67:c3:c5:a2:fe: 3b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:83:92:FB:BA:02:B7:CA:81:F8:8A:25:9D:0B:5B:2C:EE:A6:34:9B X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/OYOS-7oCt8qB-IolnQtbLO6mNJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.69.0-194.39.71.255 Signature Algorithm: sha256WithRSAEncryption be:45:c2:b3:fb:2e:7c:6d:9d:7b:81:a0:a3:d6:0c:97:c1:35: 6b:ac:22:0c:ce:11:45:7f:04:89:86:2b:20:3b:bc:11:19:49: 03:fd:f4:50:1b:bf:15:4b:b4:98:eb:2a:41:85:8d:30:b4:04: c8:82:f4:29:a9:39:0b:7a:da:bb:a6:81:ed:75:e8:eb:89:54: c0:5c:0d:c5:7c:e4:05:9e:9d:15:42:ef:33:ce:67:9c:80:f8: ec:22:5b:08:23:da:0f:e1:b3:bc:59:82:2a:fe:24:12:79:db: 7f:da:fe:a0:41:51:11:ec:67:12:ce:27:eb:2a:00:77:44:26: 5a:c0:27:1d:5d:f6:2a:ce:8b:97:85:0f:4a:a0:4e:47:ce:b6: 32:53:3b:d4:98:57:67:6f:bc:bd:b6:b4:52:82:f1:76:5a:ed: 8f:14:42:35:0f:40:30:b3:37:ab:e7:cb:93:f9:25:f6:d7:76: 01:55:b0:42:82:a1:01:3c:17:05:06:02:e6:f5:c1:cb:28:24: cb:4d:f3:09:96:21:73:c4:a6:25:ea:59:04:82:52:fc:71:62: 43:c6:9d:1a:48:8f:05:cb:7c:a3:a7:28:b2:70:a6:31:c0:46: 79:fa:4a:e1:9e:4b:3e:1c:29:ef:f6:7e:c3:7f:7d:d4:06:0c: a0:66:06:fa -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4oqLFmSJq8Oa8k2BH4TPhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjYwMTAxMDgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTgzOTJmYmJhMDJiN2NhODFmODhhMjU5ZDBiNWIyY2VlYTYzNDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokT2FvRgrnxjQ0HJqp/Gw2icIRC9 prkwflQlREbYsxi5aDx7cI5Nav4ZVwHjcp3zTYar1kOb83mNcfpSiTj1S3IRFBTB jEApmp1j62fq+gYq6hbLX4fWU6W/fKFvXv0768tyPFqbhAEyHnRQIppHybnxSEcL FmtG0jA6g6x239Jq36H9wvWhVO1/+qIXRSp6TeT9YYmD5OWpV5pobmz2LuCFHH9Y WgX/+lHLhxWYHap+pyxOVNQZbVM+WVOu7Q+IW619hCo559akKFQ4CMT3at/wA1XQ dNpBkOPzjy9NO93bNkqE6RNb16Rbb4ogN/SfuyzMKiiicgI6Z8PFov47FwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDmDkvu6ArfKgfiKJZ0LWyzupjSbMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvT1lPUy03b0N0OHFCLUlvbG5RdGJMTzZtTkpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCJ0UD BAPCJ0AwDQYJKoZIhvcNAQELBQADggEBAL5FwrP7LnxtnXuBoKPWDJfBNWusIgzO EUV/BImGKyA7vBEZSQP99FAbvxVLtJjrKkGFjTC0BMiC9CmpOQt62rumge116OuJ VMBcDcV85AWenRVC7zPOZ5yA+OwiWwgj2g/hs7xZgir+JBJ523/a/qBBURHsZxLO J+sqAHdEJlrAJx1d9irOi5eFD0qgTkfOtjJTO9SYV2dvvL22tFKC8XZa7Y8UQjUP QDCzN6vny5P5JfbXdgFVsEKCoQE8FwUGAub1wcsoJMtN8wmWIXPEpiXqWQSCUvxx YkPGnRpIjwXLfKOnKLJwpjHARnn6SuGeSz4cKe/2fsN/fdQGDKBmBvo= -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:50 2026 by rpki-client