This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/OYgre_-TZIfJxOW5CqDrgpwgkMo.roa File: OYgre_-TZIfJxOW5CqDrgpwgkMo.roa (raw, json) Hash identifier: OBphoVWe1wpCXSnuX5Vie+bHC5Q80K+aLt8j/e5pkXQ= Subject key identifier: 39:88:2B:7B:FF:93:64:87:C9:C4:E5:B9:0A:A0:EB:82:9C:20:90:CA Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af Certificate serial: 019B7758D342EEE87CD6A763ABEA91BD0D10 Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/OYgre_-TZIfJxOW5CqDrgpwgkMo.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199248 IP address blocks: 5.56.40.0/24 maxlen: 24 5.56.41.0/24 maxlen: 24 5.56.43.0/24 maxlen: 24 5.56.44.0/24 maxlen: 24 5.56.45.0/24 maxlen: 24 5.56.46.0/24 maxlen: 24 5.56.47.0/24 maxlen: 24 2a01:46c0::/33 maxlen: 33 2a01:46c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d3:42:ee:e8:7c:d6:a7:63:ab:ea:91:bd:0d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39882b7bff936487c9c4e5b90aa0eb829c2090ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ed:6d:ad:2b:5e:9f:4b:fc:07:22:1a:3c:48: 2a:b8:bf:19:da:46:9c:4f:65:fe:8c:f5:6f:6e:99: 05:41:bf:e9:28:fa:e4:d1:dd:a1:bf:29:66:3a:ff: fe:bb:d1:6f:49:18:d8:1d:91:c2:7f:5e:3c:65:0c: 85:e0:77:8c:6a:f0:c1:3f:fa:6a:81:c7:f4:e9:d4: b1:e7:61:7f:fa:83:fc:28:66:39:fd:ff:7a:0e:3f: d6:bc:ba:28:2f:cf:e7:90:f4:09:65:be:b0:7b:1c: 51:6a:c2:13:99:68:2e:72:a3:7e:fa:4f:76:f6:e7: 22:0e:ee:ed:db:16:9e:23:81:f5:5d:d4:b5:80:cd: df:c4:43:4c:aa:c1:66:00:29:18:b1:a5:e5:12:d2: 88:4a:ef:3b:56:36:a3:67:3d:c1:10:ed:3c:b5:8f: 29:f4:61:22:e2:46:b0:8e:da:9f:1a:4b:ac:8e:8d: 63:ae:b2:71:5f:d1:4e:42:84:62:e5:87:b3:dd:97: 63:d3:6c:00:fb:1a:aa:5f:3f:4f:10:9d:16:9f:e6: 16:f5:dd:c3:80:fd:ce:09:97:69:eb:e3:6c:91:4c: d9:d6:66:42:4b:96:b5:22:e3:21:66:44:cc:17:95: 49:5c:6b:80:34:74:5e:33:5b:a9:42:da:77:44:be: 90:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:88:2B:7B:FF:93:64:87:C9:C4:E5:B9:0A:A0:EB:82:9C:20:90:CA X509v3 Authority Key Identifier: keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/OYgre_-TZIfJxOW5CqDrgpwgkMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.40.0/23 5.56.43.0-5.56.47.255 IPv6: 2a01:46c0::/33 Signature Algorithm: sha256WithRSAEncryption 4a:bb:85:1f:3b:1e:ca:c5:8c:a9:6d:25:82:b4:3e:d5:85:4c: 9b:c5:f4:a5:6d:50:c9:da:b0:71:f7:f2:14:c4:ec:f0:3d:cd: dc:cb:1d:49:70:0b:3c:0b:61:35:27:12:97:33:07:21:24:c0: 5c:73:a1:de:81:1b:62:87:ec:e5:c1:8a:bf:bb:76:3b:27:6d: 11:60:37:6a:d4:41:7a:71:07:1c:04:96:6c:c6:fe:31:57:dc: 32:d3:9b:37:d1:b3:f8:a7:1f:49:3e:04:19:06:af:b1:ed:ee: 44:d1:19:4d:01:6b:5b:28:b4:cb:2e:ff:41:c4:54:eb:27:fd: 77:d0:2b:aa:a2:a5:92:1a:1d:a2:e6:89:2c:b7:0c:58:c8:f0: f2:af:08:24:e3:74:64:65:d2:a1:0a:36:19:01:83:70:5c:26: 41:f9:35:7b:d7:17:be:75:82:c0:ad:e9:70:5e:24:9b:76:34: 6c:65:f8:2f:3c:8e:c5:03:9c:68:3d:6b:18:10:0d:12:ab:08: 64:39:dd:47:1d:06:82:f4:00:21:bf:67:f7:76:46:da:e1:bb: 80:cd:8b:88:cd:dc:97:93:e2:a2:8e:c6:cb:b3:0f:48:cd:10: 78:d3:c7:fc:a2:c3:52:1a:20:73:b6:15:e7:b3:3f:b6:ba:a6: 33:af:ee:18 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt3WNNC7uh81qdjq+qRvQ0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmJmOWJlZTUzMWYzZGVlMmQwM2JiZjRlNjllZjgyZWVk Yjk5YWYwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTg4MmI3YmZmOTM2NDg3YzljNGU1YjkwYWEwZWI4MjljMjA5MGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9e1trSten0v8ByIaPEgquL8Z2kac T2X+jPVvbpkFQb/pKPrk0d2hvylmOv/+u9FvSRjYHZHCf148ZQyF4HeMavDBP/pq gcf06dSx52F/+oP8KGY5/f96Dj/WvLooL8/nkPQJZb6wexxRasITmWgucqN++k92 9uciDu7t2xaeI4H1XdS1gM3fxENMqsFmACkYsaXlEtKISu87VjajZz3BEO08tY8p 9GEi4kawjtqfGkusjo1jrrJxX9FOQoRi5Yez3Zdj02wA+xqqXz9PEJ0Wn+YW9d3D gP3OCZdp6+NskUzZ1mZCS5a1IuMhZkTMF5VJXGuANHReM1upQtp3RL6QGQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFDmIK3v/k2SHycTluQqg64KcIJDKMB8GA1UdIwQY MBaAFPG7+b7lMfPe4tA7v05p74Lu25mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGJ2NXZ1VXg4OTdpMER1X1RtbnZndTdibWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zZjExMGItZGVkYi00OTBmLTllNjYt NmZhZDA4YWEyMGVlLzEvT1lncmVfLVRaSWZKeE9XNUNxRHJncHdna01vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8zZjExMGItZGVkYi00OTBmLTllNjYtNmZhZDA4YWEyMGVl LzEvOGJ2NXZ1VXg4OTdpMER1X1RtbnZndTdibWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAaBAIAATAUAwQBBTgoMAwD BAAFOCsDBAQFOCAwDgQCAAIwCAMGByoBRsAAMA0GCSqGSIb3DQEBCwUAA4IBAQBK u4UfOx7KxYypbSWCtD7VhUybxfSlbVDJ2rBx9/IUxOzwPc3cyx1JcAs8C2E1JxKX MwchJMBcc6HegRtih+zlwYq/u3Y7J20RYDdq1EF6cQccBJZsxv4xV9wy05s30bP4 px9JPgQZBq+x7e5E0RlNAWtbKLTLLv9BxFTrJ/130CuqoqWSGh2i5okstwxYyPDy rwgk43RkZdKhCjYZAYNwXCZB+TV71xe+dYLArelwXiSbdjRsZfgvPI7FA5xoPWsY EA0SqwhkOd1HHQaC9AAhv2f3dkba4buAzYuIzdyXk+KijsbLsw9IzRB408f8osNS GiBzthXnsz+2uqYzr+4Y -----END CERTIFICATE-----Generated at Mon Jan 26 12:21:00 2026 by rpki-client