This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa File: OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa (raw, json) Hash identifier: oyzTksz2QKSnafMS1kmCzYf1d4YWDMBQktGYceuURLI= Subject key identifier: 3A:C5:C9:45:52:3D:3E:19:A0:A3:4C:57:84:54:3B:89:AD:5D:C3:0C Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B7DCA7F104A1ED3518DC2E771C34C922B Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa Signing time: Fri 02 Jan 2026 08:19:41 +0000 ROA not before: Fri 02 Jan 2026 08:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 194.116.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:7f:10:4a:1e:d3:51:8d:c2:e7:71:c3:4c:92:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jan 2 08:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ac5c945523d3e19a0a34c5784543b89ad5dc30c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:de:1b:dc:04:0a:c0:61:62:79:86:2e:e4:2c: f3:c5:6a:3c:73:15:eb:a0:0f:c5:15:25:a1:cf:6e: bb:ea:1a:5d:b2:e9:57:01:f3:0f:46:80:f1:97:ca: 5b:36:25:ca:78:4b:3d:50:38:6e:27:03:f3:0e:42: db:37:89:7a:00:1d:8b:95:ce:49:f1:4d:e3:f1:ea: ae:51:49:52:6f:46:ae:69:ec:52:e4:c7:e2:1b:de: 3c:10:19:89:bc:f8:d4:f7:64:47:dc:c2:7d:96:af: f0:f7:82:3a:50:4b:11:ef:0e:b3:00:19:49:de:2c: a7:a0:00:d7:64:63:4b:85:0d:1f:73:d7:f8:78:82: 10:fd:fe:4e:89:48:e1:db:b8:d9:3f:a1:f8:4f:39: cc:4d:35:e3:06:8e:50:c0:03:27:49:f0:3e:2f:f1: 28:04:3c:e1:51:eb:b1:ff:56:2e:88:3e:37:66:77: 61:1b:d0:d9:f4:3f:6b:e2:a0:89:74:92:3f:ac:c5: 1b:6b:e1:ad:0b:be:6a:75:e3:5d:9a:d3:fb:0c:53: 34:93:b8:13:cb:87:fa:8a:10:10:ac:65:ec:1e:b4: f7:6e:dc:0c:94:b1:6c:38:fd:c1:d0:28:1a:f1:ed: 70:9d:96:40:56:a3:56:2e:ae:87:f9:fc:16:50:3e: d0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C5:C9:45:52:3D:3E:19:A0:A3:4C:57:84:54:3B:89:AD:5D:C3:0C X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.116.234.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:57:49:64:5f:ee:ff:63:a1:c3:be:89:51:f4:2c:de:43:c9: 47:c1:55:d9:81:fc:54:68:a6:60:39:2a:d9:12:31:3c:a2:09: 50:60:71:b0:fc:31:7c:cf:21:60:26:27:e1:a2:b2:e4:98:96: 85:46:b9:2c:28:78:1c:d7:ff:cb:82:32:10:bd:84:67:54:17: 96:0e:d7:a1:d3:16:af:9e:0d:0c:a0:b7:07:0b:57:38:ca:95: 82:6c:cd:ae:e7:8f:46:ff:61:86:8f:48:75:d5:8e:12:b1:c6: b1:58:7e:e0:c7:2c:24:1e:c0:c3:54:6b:f4:71:a4:29:9f:62: ca:f6:19:72:12:5a:5b:bb:2e:aa:e5:3f:74:e8:c0:2f:ee:21: 27:c4:8b:a8:2c:26:f7:31:64:3e:2d:74:20:b0:c2:44:1d:45: df:70:04:91:5c:01:82:f4:dc:17:9c:cf:8f:87:10:50:59:e0: 26:59:3f:a9:43:04:b5:83:be:51:ea:7c:7d:ee:71:f8:91:e0: 6b:d0:40:ed:33:0a:c6:25:48:0a:c6:93:94:5a:8a:06:2c:69: ab:6a:95:77:15:f5:07:b1:b5:c4:d7:63:03:62:7d:a1:29:92: 5a:d6:f3:2f:3f:89:f3:4f:8f:4e:69:b1:1c:ba:6b:0c:4a:78: 23:16:2c:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yn8QSh7TUY3C53HDTJIrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMTAyMDgxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWM1Yzk0NTUyM2QzZTE5YTBhMzRjNTc4NDU0M2I4OWFkNWRjMzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj94b3AQKwGFieYYu5CzzxWo8cxXr oA/FFSWhz2676hpdsulXAfMPRoDxl8pbNiXKeEs9UDhuJwPzDkLbN4l6AB2Llc5J 8U3j8equUUlSb0auaexS5MfiG948EBmJvPjU92RH3MJ9lq/w94I6UEsR7w6zABlJ 3iynoADXZGNLhQ0fc9f4eIIQ/f5OiUjh27jZP6H4TznMTTXjBo5QwAMnSfA+L/Eo BDzhUeux/1YuiD43ZndhG9DZ9D9r4qCJdJI/rMUba+GtC75qdeNdmtP7DFM0k7gT y4f6ihAQrGXsHrT3btwMlLFsOP3B0Cga8e1wnZZAVqNWLq6H+fwWUD7QgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDrFyUVSPT4ZoKNMV4RUO4mtXcMMMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvT3NYSlJWSTlQaG1nbzB4WGhGUTdpYTFkd3d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnTqMA0G CSqGSIb3DQEBCwUAA4IBAQA8V0lkX+7/Y6HDvolR9CzeQ8lHwVXZgfxUaKZgOSrZ EjE8oglQYHGw/DF8zyFgJifhorLkmJaFRrksKHgc1//LgjIQvYRnVBeWDteh0xav ng0MoLcHC1c4ypWCbM2u549G/2GGj0h11Y4SscaxWH7gxywkHsDDVGv0caQpn2LK 9hlyElpbuy6q5T906MAv7iEnxIuoLCb3MWQ+LXQgsMJEHUXfcASRXAGC9NwXnM+P hxBQWeAmWT+pQwS1g75R6nx97nH4keBr0EDtMwrGJUgKxpOUWooGLGmrapV3FfUH sbXE12MDYn2hKZJa1vMvP4nzT49OabEcumsMSngjFizT -----END CERTIFICATE-----Generated at Mon Jan 19 11:24:43 2026 by rpki-client