This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/oog2fr3azEwEvR96dUyVexH-pPI.roa File: oog2fr3azEwEvR96dUyVexH-pPI.roa (raw, json) Hash identifier: 5Y/z/o0CKihXpA4MvidWc/Ioyt/faMA9m4DgHjwqJsY= Subject key identifier: A2:88:36:7E:BD:DA:CC:4C:04:BD:1F:7A:75:4C:95:7B:11:FE:A4:F2 Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03 Certificate serial: 019B7EA6DBE759A7830DD67E7D56DFEE83C1 Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/oog2fr3azEwEvR96dUyVexH-pPI.roa Signing time: Fri 02 Jan 2026 12:20:23 +0000 ROA not before: Fri 02 Jan 2026 12:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61165 IP address blocks: 146.19.252.0/24 maxlen: 24 2a14:5d80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:db:e7:59:a7:83:0d:d6:7e:7d:56:df:ee:83:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03 Validity Not Before: Jan 2 12:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a288367ebddacc4c04bd1f7a754c957b11fea4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f3:3a:b2:4e:59:91:11:a1:83:fc:20:4c:50: 8d:39:59:f1:69:4e:ba:91:69:01:86:35:71:09:84: 79:41:19:82:9b:91:29:c1:2f:22:ae:60:f1:51:b4: 12:7f:38:68:79:40:cc:7f:c5:01:53:c9:69:e0:6b: 11:19:10:d9:9d:54:4a:c2:6e:12:2f:06:e6:48:41: 61:52:1c:91:07:35:4c:c3:4e:cb:53:90:39:35:05: 37:6d:d0:81:95:ed:14:34:65:72:df:00:b4:93:f2: 12:7b:d3:f9:f6:fd:73:6c:ce:c7:35:b9:6c:e7:37: ef:22:40:c2:fb:ef:17:89:ef:6d:e7:7c:9d:ea:a3: da:67:bd:27:21:ae:04:5d:c0:39:64:b0:96:b1:46: 38:79:49:2e:83:16:57:b0:d5:f1:d7:af:b3:ef:d2: 43:f7:a4:4a:d5:92:0e:be:2b:ea:37:7e:6b:0d:bd: e7:82:e2:06:30:7c:a7:f1:04:51:88:0f:fc:71:09: 79:5c:3f:6b:69:42:7c:75:56:bd:2c:1d:4c:87:32: bd:52:02:ad:73:62:15:58:ce:e6:60:37:f3:69:be: ec:4a:d8:a0:2d:4e:c1:65:92:c0:fe:21:43:39:a3: d9:7d:49:29:ad:de:33:9e:84:a1:12:0c:65:d2:05: ea:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:88:36:7E:BD:DA:CC:4C:04:BD:1F:7A:75:4C:95:7B:11:FE:A4:F2 X509v3 Authority Key Identifier: keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/oog2fr3azEwEvR96dUyVexH-pPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.252.0/24 IPv6: 2a14:5d80::/29 Signature Algorithm: sha256WithRSAEncryption 4c:ec:9e:4f:8b:da:0c:35:47:79:64:c5:db:a2:15:ef:f3:36: 7e:5d:f7:f2:a8:5c:7f:22:5c:8b:85:16:27:73:13:40:0a:f7: 99:e5:eb:2a:ff:91:10:21:64:ef:23:e0:74:1c:5d:24:47:cb: df:cc:4f:b0:5b:90:fc:60:50:4b:a6:6a:31:d1:2b:c7:3a:fb: 33:b6:ff:ee:31:bc:33:73:29:65:41:14:76:a7:18:e4:ae:15: 41:3b:9c:c9:fe:b1:a4:ff:4b:a6:13:d6:62:3e:ef:5d:3a:21: 39:6b:31:24:b1:a7:d0:ab:c3:92:05:3a:53:42:0b:1c:03:4d: 0c:a3:b4:28:7d:41:25:0d:aa:7d:28:40:c0:fc:59:98:b7:13: 21:65:f2:b3:bf:37:d2:45:c0:52:6d:9e:07:81:de:19:18:91: 86:53:22:f5:9e:fb:df:24:42:34:57:c5:21:9c:cf:9a:e2:51: 96:1d:85:2c:a8:e0:80:22:b6:2d:17:6d:d1:8c:57:c8:84:c1: 1d:95:37:5f:48:3b:39:02:ff:65:5e:35:ba:4a:97:c0:22:8d: dd:65:e3:c2:9b:51:57:c4:76:6d:2d:89:53:36:cd:14:90:1a: 1f:dc:3f:2c:41:0d:89:4e:05:1e:74:f6:96:89:85:5e:a3:a8: c0:91:a8:d8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+ptvnWaeDDdZ+fVbf7oPBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjg0MmRjNDM5ODM2NjM1YTVjOWVkNmMwYTQ5NWIzZTYz NDRhMDMwHhcNMjYwMTAyMTIyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjg4MzY3ZWJkZGFjYzRjMDRiZDFmN2E3NTRjOTU3YjExZmVhNGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPM6sk5ZkRGhg/wgTFCNOVnxaU66 kWkBhjVxCYR5QRmCm5EpwS8irmDxUbQSfzhoeUDMf8UBU8lp4GsRGRDZnVRKwm4S LwbmSEFhUhyRBzVMw07LU5A5NQU3bdCBle0UNGVy3wC0k/ISe9P59v1zbM7HNbls 5zfvIkDC++8Xie9t53yd6qPaZ70nIa4EXcA5ZLCWsUY4eUkugxZXsNXx16+z79JD 96RK1ZIOvivqN35rDb3nguIGMHyn8QRRiA/8cQl5XD9raUJ8dVa9LB1MhzK9UgKt c2IVWM7mYDfzab7sStigLU7BZZLA/iFDOaPZfUkprd4znoShEgxl0gXqEQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKKINn692sxMBL0fenVMlXsR/qTyMB8GA1UdIwQY MBaAFHFoQtxDmDZjWlye1sCklbPmNEoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mODYwMDctYTk2NC00ZDFmLTgzNWQt NzA2MDI3NTZjYzhkLzEvb29nMmZyM2F6RXdFdlI5NmRVeVZleEgtcFBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9mODYwMDctYTk2NC00ZDFmLTgzNWQtNzA2MDI3NTZjYzhk LzEvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAkhP8MA0E AgACMAcDBQMqFF2AMA0GCSqGSIb3DQEBCwUAA4IBAQBM7J5Pi9oMNUd5ZMXbohXv 8zZ+XffyqFx/IlyLhRYncxNACveZ5esq/5EQIWTvI+B0HF0kR8vfzE+wW5D8YFBL pmox0SvHOvsztv/uMbwzcyllQRR2pxjkrhVBO5zJ/rGk/0umE9ZiPu9dOiE5azEk safQq8OSBTpTQgscA00Mo7QofUElDap9KEDA/FmYtxMhZfKzvzfSRcBSbZ4Hgd4Z GJGGUyL1nvvfJEI0V8UhnM+a4lGWHYUsqOCAIrYtF23RjFfIhMEdlTdfSDs5Av9l XjW6SpfAIo3dZePCm1FXxHZtLYlTNs0UkBof3D8sQQ2JTgUedPaWiYVeo6jAkajY -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:57 2026 by rpki-client