This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/oGFy_UJ1FYJcnSkbjOpzsDeEAhQ.roa File: oGFy_UJ1FYJcnSkbjOpzsDeEAhQ.roa (raw, json) Hash identifier: sqZQ4ODNviSrmC5Scgdot54s+8lbk1XnzbtP1SaI9m8= Subject key identifier: A0:61:72:FD:42:75:15:82:5C:9D:29:1B:8C:EA:73:B0:37:84:02:14 Certificate issuer: /CN=5d4728bd1f5d136d768bf1753461c53da45746cb Certificate serial: 019B7D5CB59BCDC66096D5F1F4446DFBC522 Authority key identifier: 5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/oGFy_UJ1FYJcnSkbjOpzsDeEAhQ.roa Signing time: Fri 02 Jan 2026 06:19:46 +0000 ROA not before: Fri 02 Jan 2026 06:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57623 IP address blocks: 91.233.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b5:9b:cd:c6:60:96:d5:f1:f4:44:6d:fb:c5:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d4728bd1f5d136d768bf1753461c53da45746cb Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a06172fd427515825c9d291b8cea73b037840214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:63:3b:31:7f:aa:95:16:13:a6:5a:ce:5c: 3a:57:d1:bd:52:b4:60:14:da:d3:ca:55:0d:25:cc: e9:65:b4:96:21:18:f0:81:b8:b5:c4:ea:87:1c:d1: 4d:6c:b5:15:86:d6:c7:94:58:03:19:71:4d:c4:ba: 87:b1:16:4f:55:ea:b6:91:b6:67:8a:1d:24:2d:1f: 23:5d:61:08:a2:05:9a:f0:b5:91:ab:f7:94:c7:5b: 43:3d:5c:b9:0c:13:36:e0:5f:6f:c3:b8:af:26:a2: 79:9f:91:2c:c6:18:3d:a0:1d:53:74:cd:cb:01:ba: 5c:10:68:e7:3a:b0:4e:6d:4e:6b:b2:a4:fb:c8:f5: c5:cf:cc:6f:0e:9a:7f:af:70:b8:a6:29:22:c3:32: 8e:53:1d:6a:54:48:dd:6b:17:83:69:72:11:ac:69: 88:68:af:e1:52:4b:2b:09:a1:73:0a:dc:ea:5a:6e: 63:95:c2:3b:ba:e7:77:55:1c:61:3d:e6:5d:6b:0c: 81:5c:76:37:eb:7c:da:5a:a7:4b:19:2b:2e:34:44: 7c:65:54:c3:04:cd:40:65:83:49:6b:87:f1:6e:bb: ae:54:17:1e:78:aa:b9:45:52:10:76:b9:2f:68:95: e8:83:ea:c8:54:ec:c6:f3:19:26:f8:21:fb:51:4f: 80:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:61:72:FD:42:75:15:82:5C:9D:29:1B:8C:EA:73:B0:37:84:02:14 X509v3 Authority Key Identifier: keyid:5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/oGFy_UJ1FYJcnSkbjOpzsDeEAhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.163.0/24 Signature Algorithm: sha256WithRSAEncryption 08:a4:53:1c:1f:c5:a9:eb:1f:f7:6d:00:18:0b:e9:d5:0a:ce: c8:5d:13:f8:47:8b:52:95:95:f0:b4:78:1e:30:da:55:2e:d0: c3:a2:59:d1:00:4b:f1:e7:34:df:35:38:bc:c2:f8:23:3d:f2: b5:8d:c8:34:87:c4:92:ea:50:77:81:55:42:7b:c2:5b:ca:6e: 80:f6:b3:6b:56:cb:fe:cf:72:6d:ff:e5:dd:92:d1:f3:39:19: 71:c7:cd:ef:7f:84:2e:13:86:ea:da:aa:dd:0d:7d:ca:f9:09: 3a:5a:3a:4e:d6:c6:7e:e1:eb:e2:7b:12:03:84:6e:3b:44:02: c7:07:51:d9:b5:9d:df:f2:c9:59:95:e1:7d:c6:57:9d:5d:72: 35:a1:09:a0:95:5a:55:da:0f:bd:66:c3:13:a1:1e:f5:4a:c1: ca:1d:23:af:d4:d6:c7:25:62:0b:0f:61:01:19:dc:26:13:cd: 2c:af:bc:86:a2:88:4f:27:8a:7e:26:8d:c8:65:22:d2:ec:53: b8:77:19:d3:56:21:f2:f1:91:2d:43:3d:35:3d:27:1a:89:82: 71:f2:c5:94:aa:9a:d3:e0:5e:c2:de:7a:39:bc:de:dc:2d:11: 38:5e:5e:b4:fa:ad:f3:8a:c5:1c:de:46:61:f6:08:8d:d6:a9: b6:53:81:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XLWbzcZgltXx9ERt+8UiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNDcyOGJkMWY1ZDEzNmQ3NjhiZjE3NTM0NjFjNTNkYTQ1 NzQ2Y2IwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDYxNzJmZDQyNzUxNTgyNWM5ZDI5MWI4Y2VhNzNiMDM3ODQwMjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgljOzF/qpUWE6Zazlw6V9G9UrRg FNrTylUNJczpZbSWIRjwgbi1xOqHHNFNbLUVhtbHlFgDGXFNxLqHsRZPVeq2kbZn ih0kLR8jXWEIogWa8LWRq/eUx1tDPVy5DBM24F9vw7ivJqJ5n5Esxhg9oB1TdM3L AbpcEGjnOrBObU5rsqT7yPXFz8xvDpp/r3C4pikiwzKOUx1qVEjdaxeDaXIRrGmI aK/hUksrCaFzCtzqWm5jlcI7uud3VRxhPeZdawyBXHY363zaWqdLGSsuNER8ZVTD BM1AZYNJa4fxbruuVBceeKq5RVIQdrkvaJXog+rIVOzG8xkm+CH7UU+AQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKBhcv1CdRWCXJ0pG4zqc7A3hAIUMB8GA1UdIwQY MBaAFF1HKL0fXRNtdovxdTRhxT2kV0bLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFVjb3ZSOWRFMjEyaV9GMU5HSEZQYVJYUnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kYmU3NzMtYmVmYy00YTc3LWI1MTMt NWUyMzY3MjY3M2QyLzEvb0dGeV9VSjFGWUpjblNrYmpPcHpzRGVFQWhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9kYmU3NzMtYmVmYy00YTc3LWI1MTMtNWUyMzY3MjY3M2Qy LzEvWFVjb3ZSOWRFMjEyaV9GMU5HSEZQYVJYUnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+mjMA0G CSqGSIb3DQEBCwUAA4IBAQAIpFMcH8Wp6x/3bQAYC+nVCs7IXRP4R4tSlZXwtHge MNpVLtDDolnRAEvx5zTfNTi8wvgjPfK1jcg0h8SS6lB3gVVCe8Jbym6A9rNrVsv+ z3Jt/+XdktHzORlxx83vf4QuE4bq2qrdDX3K+Qk6WjpO1sZ+4eviexIDhG47RALH B1HZtZ3f8slZleF9xledXXI1oQmglVpV2g+9ZsMToR71SsHKHSOv1NbHJWILD2EB GdwmE80sr7yGoohPJ4p+Jo3IZSLS7FO4dxnTViHy8ZEtQz01PScaiYJx8sWUqprT 4F7C3no5vN7cLRE4Xl60+q3zisUc3kZh9giN1qm2U4H1 -----END CERTIFICATE-----Generated at Mon Feb 9 18:38:27 2026 by rpki-client