This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/OghForkImI0Jo0zBq3XHOESQXuc.roa File: OghForkImI0Jo0zBq3XHOESQXuc.roa (raw, json) Hash identifier: jMJmmzeuAO8dk90vNQKpGRRQiIdwuWD8TX9EqhW2Bbc= Subject key identifier: 3A:08:45:A2:B9:08:98:8D:09:A3:4C:C1:AB:75:C7:38:44:90:5E:E7 Certificate issuer: /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567 Certificate serial: 019B7BA4D8F05852325146882CC0C6DF215E Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/OghForkImI0Jo0zBq3XHOESQXuc.roa Signing time: Thu 01 Jan 2026 22:19:19 +0000 ROA not before: Thu 01 Jan 2026 22:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1880 IP address blocks: 192.67.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d8:f0:58:52:32:51:46:88:2c:c0:c6:df:21:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567 Validity Not Before: Jan 1 22:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a0845a2b908988d09a34cc1ab75c73844905ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:0c:b5:3d:a5:cf:17:d8:0d:0f:12:cb:8a: 5f:64:ca:f2:b7:67:dd:e8:49:cd:f9:57:9a:13:d7: 80:e8:2e:fa:30:02:c1:76:b3:e4:11:eb:2b:43:a6: 7f:00:74:60:a7:3a:0a:a0:be:86:d7:11:6e:f6:07: e9:18:86:f9:f8:2e:ad:ff:7e:ab:e5:36:cd:5b:ad: e5:73:cb:9b:5f:c0:13:66:f2:67:ef:de:f4:95:be: c2:33:ef:a0:48:b1:54:17:33:45:ee:5b:b2:73:c2: 01:0d:3e:e7:66:0a:70:6a:5d:d2:c9:4c:c8:26:eb: 82:e9:52:56:ea:b8:62:dc:2f:a2:78:6d:4e:91:b9: 04:08:92:7e:78:15:ab:4d:73:9c:ac:5f:e1:85:9c: a9:2f:d5:ef:4e:a3:28:7d:51:c5:24:c8:73:2a:b9: 79:86:ff:73:15:3c:19:88:13:c6:bb:9b:55:03:8b: 8c:70:50:89:1b:90:e1:76:e3:d4:a9:a1:22:bf:8b: bb:23:83:d9:b2:52:f9:93:99:6c:bf:c6:f7:d5:3e: a2:a9:7d:4b:9d:cf:d0:4d:b3:3c:da:2c:87:52:8f: ea:5a:48:79:d9:98:ca:15:74:ce:70:b9:0f:6a:e6: 6f:39:32:9c:7e:cb:58:1a:89:6b:d6:ca:25:6a:6e: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:08:45:A2:B9:08:98:8D:09:A3:4C:C1:AB:75:C7:38:44:90:5E:E7 X509v3 Authority Key Identifier: keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/OghForkImI0Jo0zBq3XHOESQXuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.67.58.0/24 Signature Algorithm: sha256WithRSAEncryption 35:cb:52:0e:93:33:0c:77:46:dc:03:ab:6e:f1:6b:65:df:f5: 42:4d:b0:f6:2b:29:30:02:8d:62:d9:3c:8e:9a:41:c5:ba:ac: 99:54:d5:3c:3a:9e:30:cc:95:e5:09:09:47:74:fe:83:e2:d8: 78:e5:30:cc:a7:e5:30:c1:d6:8a:62:3e:22:32:c0:07:77:dc: 38:d8:59:a5:b4:18:4d:e8:a2:42:10:ad:a5:58:c1:26:c4:d6: aa:51:3f:75:33:af:1c:11:43:68:03:b7:cb:52:cd:b9:17:dd: d6:b3:2e:d9:37:b2:9f:e2:8f:19:e9:27:a9:1e:c9:72:73:4f: 0b:2d:c9:0c:d0:22:de:e1:e2:61:86:a6:df:c6:76:8f:87:5c: 85:d7:86:fb:c2:55:39:92:aa:c9:a1:1c:fc:32:9b:40:b3:f1: 38:e7:30:cc:a5:66:d5:c2:0e:62:1c:18:13:85:65:3e:8a:4a: 44:53:a7:2b:a8:3d:27:b9:1b:4c:00:3a:21:7a:78:02:fe:7f: a3:a8:42:0e:d7:1f:92:5a:3c:bd:7d:3f:6c:0d:b5:c2:ad:ea: 46:b0:0d:de:2d:7f:d9:d2:6c:e4:bf:fc:d1:df:58:3a:89:73: 8b:22:b5:58:6c:55:f8:b7:00:5a:f3:13:3a:dc:c4:0c:7e:0d: 79:6c:ae:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pNjwWFIyUUaILMDG3yFeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MmM5YmMyZDJkYWNmZDZmMTMwZDg1YTg0ZmVkZWFiZjE3 OWE1NjcwHhcNMjYwMTAxMjIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTA4NDVhMmI5MDg5ODhkMDlhMzRjYzFhYjc1YzczODQ0OTA1ZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9YMtT2lzxfYDQ8Sy4pfZMryt2fd 6EnN+VeaE9eA6C76MALBdrPkEesrQ6Z/AHRgpzoKoL6G1xFu9gfpGIb5+C6t/36r 5TbNW63lc8ubX8ATZvJn7970lb7CM++gSLFUFzNF7luyc8IBDT7nZgpwal3SyUzI JuuC6VJW6rhi3C+ieG1OkbkECJJ+eBWrTXOcrF/hhZypL9XvTqMofVHFJMhzKrl5 hv9zFTwZiBPGu5tVA4uMcFCJG5DhduPUqaEiv4u7I4PZslL5k5lsv8b31T6iqX1L nc/QTbM82iyHUo/qWkh52ZjKFXTOcLkPauZvOTKcfstYGolr1solam4P7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDoIRaK5CJiNCaNMwat1xzhEkF7nMB8GA1UdIwQY MBaAFKgsm8LS2s/W8TDYWoT+3qvxeaVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjkxODUtNDBiNS00OTBiLTlhZjgt NTVjMTQwYzlmNTRmLzEvT2doRm9ya0ltSTBKbzB6QnEzWEhPRVNRWHVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xYjkxODUtNDBiNS00OTBiLTlhZjgtNTVjMTQwYzlmNTRm LzEvcUN5Ynd0TGF6OWJ4TU5oYWhQN2VxX0Y1cFdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEM6MA0G CSqGSIb3DQEBCwUAA4IBAQA1y1IOkzMMd0bcA6tu8Wtl3/VCTbD2KykwAo1i2TyO mkHFuqyZVNU8Op4wzJXlCQlHdP6D4th45TDMp+UwwdaKYj4iMsAHd9w42FmltBhN 6KJCEK2lWMEmxNaqUT91M68cEUNoA7fLUs25F93Wsy7ZN7Kf4o8Z6SepHslyc08L LckM0CLe4eJhhqbfxnaPh1yF14b7wlU5kqrJoRz8MptAs/E45zDMpWbVwg5iHBgT hWU+ikpEU6crqD0nuRtMADohengC/n+jqEIO1x+SWjy9fT9sDbXCrepGsA3eLX/Z 0mzkv/zR31g6iXOLIrVYbFX4twBa8xM63MQMfg15bK4Y -----END CERTIFICATE-----Generated at Thu Jan 22 05:01:57 2026 by rpki-client