This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/oLLauIjsnq0CU9o7a3qZCDZubhU.roa File: oLLauIjsnq0CU9o7a3qZCDZubhU.roa (raw, json) Hash identifier: rpPRCBKnUtbVXbolchM8brrNDEFSl9uMPPsKX1x6sWA= Subject key identifier: A0:B2:DA:B8:88:EC:9E:AD:02:53:DA:3B:6B:7A:99:08:36:6E:6E:15 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C7402E80B2A7CE081F268119FBB2B2 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/oLLauIjsnq0CU9o7a3qZCDZubhU.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 31.187.92.0/22 maxlen: 24 91.210.80.0/22 maxlen: 24 192.109.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:40:2e:80:b2:a7:ce:08:1f:26:81:19:fb:b2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0b2dab888ec9ead0253da3b6b7a9908366e6e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:b2:7f:fe:d3:d0:8b:8f:b7:80:a1:68:e8: db:fb:f9:1f:b2:b9:52:75:af:5d:c9:e1:d2:8c:1c: 47:ca:c9:e5:44:d5:38:4a:12:7d:7b:de:91:aa:bf: 13:12:1b:1e:01:92:24:9f:fd:aa:a7:11:62:76:cf: 81:f0:84:ec:16:34:ea:e6:4d:01:bc:32:eb:4e:be: ff:67:72:02:48:ca:90:85:2c:65:d9:7b:dc:b2:6a: 3e:41:c1:37:d7:3c:e0:7f:b4:56:cd:40:d1:83:6f: df:31:7a:d3:0c:02:51:9c:52:e8:dc:08:e7:4c:84: 41:3f:b4:83:ab:99:eb:e8:2c:64:25:a1:9f:be:48: 28:47:a8:1a:30:64:d2:00:3b:01:70:fa:05:f9:0e: 4a:fd:1a:db:c6:82:09:00:2e:be:6c:6a:af:2f:f6: 33:7b:07:e4:af:98:d4:5c:d7:77:74:89:4f:3f:e9: 66:f6:42:96:d3:29:16:53:c0:6e:5f:4f:35:d9:9f: 99:e5:97:f7:f8:42:d2:25:2b:ed:72:44:e6:ff:e5: 0d:21:b6:9d:f2:9e:94:08:5b:6d:3f:99:70:0f:9d: 77:fd:63:77:ed:1f:89:0f:bd:29:79:25:da:8f:b0: 52:3e:7e:85:82:a2:cb:29:72:f6:7c:44:d5:d9:3a: 9d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B2:DA:B8:88:EC:9E:AD:02:53:DA:3B:6B:7A:99:08:36:6E:6E:15 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/oLLauIjsnq0CU9o7a3qZCDZubhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.187.92.0/22 91.210.80.0/22 192.109.205.0/24 Signature Algorithm: sha256WithRSAEncryption 43:c7:7f:c6:48:ae:a3:6a:0f:9c:0a:5c:08:bd:60:16:c9:33: b6:f0:5d:a4:03:c6:80:76:81:62:a5:b7:b8:54:3a:21:4c:ac: 57:d4:bc:ec:8a:95:ff:04:9f:4f:61:85:eb:d1:98:25:2e:30: 6a:22:c8:38:98:db:40:3e:ca:d8:70:82:9c:24:11:09:94:b0: a9:a6:4a:da:6d:d9:11:db:45:33:65:d1:45:e4:eb:a7:0c:5b: 8f:b0:8a:b5:05:34:ce:12:07:2c:37:39:9c:09:91:f1:80:7d: 59:d1:9a:9d:54:fa:c8:13:df:66:f8:0d:60:7a:a8:91:26:12: 0a:cf:4f:51:19:9a:da:f3:c8:23:09:24:24:2e:88:2e:92:e1: 34:72:1c:f2:d1:e0:ed:e6:62:84:f1:00:02:45:88:ee:4c:c0: 20:52:ea:59:88:79:1c:8d:14:9d:77:41:d9:04:cb:7d:f1:a5: a7:d6:a6:91:60:26:07:6b:f7:21:11:de:73:b2:88:4b:dd:76: 15:d3:15:46:08:7d:b6:3c:49:c5:4a:44:e0:cf:ae:c1:dd:ca: b3:e7:06:39:33:cf:94:43:f3:1e:01:1c:eb:30:36:28:71:e2: 4f:80:27:b7:86:2e:fb:65:61:de:8b:ca:7d:a4:f0:d2:77:d6: 85:f1:f0:d8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3x0AugLKnzggfJoEZ+7KyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGIyZGFiODg4ZWM5ZWFkMDI1M2RhM2I2YjdhOTkwODM2NmU2ZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBCyf/7T0IuPt4ChaOjb+/kfsrlS da9dyeHSjBxHysnlRNU4ShJ9e96Rqr8TEhseAZIkn/2qpxFids+B8ITsFjTq5k0B vDLrTr7/Z3ICSMqQhSxl2Xvcsmo+QcE31zzgf7RWzUDRg2/fMXrTDAJRnFLo3Ajn TIRBP7SDq5nr6CxkJaGfvkgoR6gaMGTSADsBcPoF+Q5K/RrbxoIJAC6+bGqvL/Yz ewfkr5jUXNd3dIlPP+lm9kKW0ykWU8BuX0812Z+Z5Zf3+ELSJSvtckTm/+UNIbad 8p6UCFttP5lwD513/WN37R+JD70peSXaj7BSPn6FgqLLKXL2fETV2Tqd5wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKCy2riI7J6tAlPaO2t6mQg2bm4VMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvb0xMYXVJanNucTBDVTlvN2EzcVpDRFp1YmhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCH7tcAwQC W9JQAwQAwG3NMA0GCSqGSIb3DQEBCwUAA4IBAQBDx3/GSK6jag+cClwIvWAWyTO2 8F2kA8aAdoFipbe4VDohTKxX1LzsipX/BJ9PYYXr0ZglLjBqIsg4mNtAPsrYcIKc JBEJlLCppkrabdkR20UzZdFF5OunDFuPsIq1BTTOEgcsNzmcCZHxgH1Z0ZqdVPrI E99m+A1geqiRJhIKz09RGZra88gjCSQkLogukuE0chzy0eDt5mKE8QACRYjuTMAg UupZiHkcjRSdd0HZBMt98aWn1qaRYCYHa/chEd5zsohL3XYV0xVGCH22PEnFSkTg z67B3cqz5wY5M8+UQ/MeARzrMDYoceJPgCe3hi77ZWHei8p9pPDSd9aF8fDY -----END CERTIFICATE-----Generated at Thu Jan 1 20:22:30 2026 by rpki-client