This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/OGdZxTPmloNqGIAa-UfynkuV3EM.roa File: OGdZxTPmloNqGIAa-UfynkuV3EM.roa (raw, json) Hash identifier: m/cAPkjPkOHWq6QUdY18VpClF9YEIKI7RmQsvt84toU= Subject key identifier: 38:67:59:C5:33:E6:96:83:6A:18:80:1A:F9:47:F2:9E:4B:95:DC:43 Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Certificate serial: 019B7A5BA1092BF96C615243D959EF404B2B Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/OGdZxTPmloNqGIAa-UfynkuV3EM.roa Signing time: Thu 01 Jan 2026 16:19:43 +0000 ROA not before: Thu 01 Jan 2026 16:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216096 IP address blocks: 168.222.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:a1:09:2b:f9:6c:61:52:43:d9:59:ef:40:4b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Validity Not Before: Jan 1 16:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=386759c533e696836a18801af947f29e4b95dc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:53:f1:75:e4:26:b8:29:17:44:1f:6e:14: 9e:b3:fe:20:99:2d:4c:41:4b:82:e8:31:55:d7:6e: 6f:04:cb:3b:e7:c4:90:cc:50:59:e7:ae:41:6f:f4: c4:43:8a:4f:88:99:a1:9b:bf:a9:88:42:2b:5e:af: 29:71:66:c0:0b:a6:bc:90:c7:c1:a1:bc:26:97:04: 87:3c:4d:7c:03:5d:87:8f:08:2b:d1:08:7e:33:e4: eb:7f:6f:25:1b:15:b2:67:db:98:82:cb:89:ad:bc: 68:4d:25:f1:21:02:96:4c:6d:b0:09:6f:2d:62:2f: 50:85:81:62:3e:e9:3a:85:55:a1:ba:f3:6d:b5:6e: 17:aa:99:b6:aa:ac:6f:eb:87:28:fe:95:d8:64:d2: 5a:05:e4:b5:92:be:05:52:9e:89:4e:03:52:e5:d2: 40:01:29:40:2a:36:84:53:4e:6d:26:5a:d6:d1:07: a9:7a:4c:c3:38:28:bb:64:a5:a5:57:ef:c9:9c:f4: 10:13:74:84:45:82:7c:18:b3:de:8a:d2:64:22:30: 13:cc:99:df:6d:f8:05:ce:e3:a6:b1:c8:d2:ed:9f: 08:05:a6:cf:dc:29:d1:2a:cf:fc:03:3e:d6:b0:ed: 12:90:ce:bf:ef:ab:f7:ee:f9:65:98:ee:ba:27:aa: 9c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:67:59:C5:33:E6:96:83:6A:18:80:1A:F9:47:F2:9E:4B:95:DC:43 X509v3 Authority Key Identifier: keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/OGdZxTPmloNqGIAa-UfynkuV3EM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.222.182.0/24 Signature Algorithm: sha256WithRSAEncryption b0:ba:4b:6f:0a:08:15:e0:d0:33:3e:18:fb:31:19:43:25:b5: 64:b0:1d:22:76:b8:86:f9:a3:9e:96:12:5c:c4:ec:c3:6c:27: 3b:a3:95:a5:7d:5b:9e:76:90:3d:9e:98:bc:a0:45:67:0a:b9: f3:be:96:3c:48:a6:df:15:b7:50:1b:e4:c0:5b:05:64:5b:1e: dc:3b:eb:a8:f4:e2:1f:27:84:3b:67:b2:59:d4:e3:99:db:ae: bc:7e:32:50:10:aa:e4:5e:27:e4:14:56:6a:bd:49:b6:19:fa: a3:e9:00:3c:0b:79:78:b9:9f:b6:4c:aa:85:80:cb:53:0f:8b: a1:a2:13:93:13:aa:fe:18:43:0a:79:d5:8d:13:96:ba:18:6f: de:5c:a5:59:4a:37:94:96:f3:91:1a:0b:64:46:b8:d7:d2:44: a7:a2:c0:b5:c7:d6:bf:ed:3b:70:82:17:7d:ca:f0:a5:83:2c: fc:c4:dc:89:2d:f7:1d:bd:2a:d1:d9:5e:47:23:ae:8d:e0:14: be:f3:f8:12:18:d3:71:d0:38:1e:98:2f:31:82:d9:c3:7c:a1: ad:82:a9:c7:0f:2b:da:3d:d6:c3:0a:3a:df:19:30:75:a2:f5: 49:9d:b7:ba:43:ae:3c:ef:ca:22:2b:fc:5a:a5:50:e7:74:dd: c1:0d:4d:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W6EJK/lsYVJD2VnvQEsrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1 NjgwY2QwHhcNMjYwMTAxMTYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODY3NTljNTMzZTY5NjgzNmExODgwMWFmOTQ3ZjI5ZTRiOTVkYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+pT8XXkJrgpF0QfbhSes/4gmS1M QUuC6DFV125vBMs758SQzFBZ565Bb/TEQ4pPiJmhm7+piEIrXq8pcWbAC6a8kMfB obwmlwSHPE18A12Hjwgr0Qh+M+Trf28lGxWyZ9uYgsuJrbxoTSXxIQKWTG2wCW8t Yi9QhYFiPuk6hVWhuvNttW4Xqpm2qqxv64co/pXYZNJaBeS1kr4FUp6JTgNS5dJA ASlAKjaEU05tJlrW0QepekzDOCi7ZKWlV+/JnPQQE3SERYJ8GLPeitJkIjATzJnf bfgFzuOmscjS7Z8IBabP3CnRKs/8Az7WsO0SkM6/76v37vllmO66J6qcjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDhnWcUz5paDahiAGvlH8p5LldxDMB8GA1UdIwQY MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt NzFiZTBkNTE5MTlkLzEvT0dkWnhUUG1sb05xR0lBYS1VZnlua3VWM0VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqN62MA0G CSqGSIb3DQEBCwUAA4IBAQCwuktvCggV4NAzPhj7MRlDJbVksB0idriG+aOelhJc xOzDbCc7o5WlfVuedpA9npi8oEVnCrnzvpY8SKbfFbdQG+TAWwVkWx7cO+uo9OIf J4Q7Z7JZ1OOZ2668fjJQEKrkXifkFFZqvUm2Gfqj6QA8C3l4uZ+2TKqFgMtTD4uh ohOTE6r+GEMKedWNE5a6GG/eXKVZSjeUlvORGgtkRrjX0kSnosC1x9a/7Ttwghd9 yvClgyz8xNyJLfcdvSrR2V5HI66N4BS+8/gSGNNx0DgemC8xgtnDfKGtgqnHDyva PdbDCjrfGTB1ovVJnbe6Q64878oiK/xapVDndN3BDU3K -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:16 2026 by rpki-client