This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/ONsl0GDt_Tfl3JT5iRQTyJYlb_4.roa File: ONsl0GDt_Tfl3JT5iRQTyJYlb_4.roa (raw, json) Hash identifier: zxeBlO2k2zpHRxnbUpE9cjH71458S251L8/4aRE1B34= Subject key identifier: 38:DB:25:D0:60:ED:FD:37:E5:DC:94:F9:89:14:13:C8:96:25:6F:FE Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Certificate serial: 019B7A5B9E6D30A155E5390AB138BC741003 Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/ONsl0GDt_Tfl3JT5iRQTyJYlb_4.roa Signing time: Thu 01 Jan 2026 16:19:43 +0000 ROA not before: Thu 01 Jan 2026 16:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 168.222.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9e:6d:30:a1:55:e5:39:0a:b1:38:bc:74:10:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd Validity Not Before: Jan 1 16:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38db25d060edfd37e5dc94f9891413c896256ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:c8:66:de:f5:bb:8d:90:19:1d:1e:b6:b5: 63:e4:57:42:5a:fd:e8:8e:a4:01:95:d2:0f:3b:d2: c1:37:01:19:b4:b9:12:41:f0:81:30:ab:05:93:95: 00:d2:25:ec:d9:71:c2:47:ed:4d:ae:71:b8:bd:68: 84:42:5f:6e:92:3a:e3:94:4e:cf:04:83:e1:6c:80: 4a:2b:6c:6c:c8:75:ac:25:95:32:f9:09:1f:95:43: e4:3d:1e:28:f3:37:45:f9:71:6b:2f:dc:b1:a1:1e: 4b:c7:75:1a:81:1e:29:cf:2f:19:03:4b:1e:56:8a: 40:18:bc:2e:e5:5e:bb:21:06:30:a6:7e:b4:6e:9c: e3:7e:b1:fe:fa:a4:81:d8:88:bb:5b:31:f1:3a:0e: 07:40:42:40:ea:0d:20:de:8a:35:7f:cc:a9:5a:4b: 6f:60:c2:af:d2:6a:47:5f:ce:b7:25:d8:5a:95:51: 8c:30:8f:a6:78:6b:b5:a7:9e:32:d4:6f:4e:1c:3e: 39:65:71:94:65:87:4d:dc:51:4a:34:3d:08:93:0b: 26:60:b8:94:2f:e9:68:8f:c8:9a:4b:f8:8d:16:2c: 71:76:16:86:40:bd:66:20:bd:24:24:ee:27:31:43: 2c:bb:cc:9a:f1:d3:cd:eb:b9:f5:45:dd:4a:f8:8f: 2d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DB:25:D0:60:ED:FD:37:E5:DC:94:F9:89:14:13:C8:96:25:6F:FE X509v3 Authority Key Identifier: keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/ONsl0GDt_Tfl3JT5iRQTyJYlb_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.222.181.0/24 Signature Algorithm: sha256WithRSAEncryption d2:45:ff:e7:f5:fa:ef:bf:12:57:1e:e2:b1:dc:3c:42:48:ca: ce:74:6c:b4:70:9d:df:0f:35:41:56:1d:dd:df:40:c4:e2:26: 55:87:d4:4d:e9:e7:48:3e:16:87:c1:20:a0:84:17:5b:63:b4: 4a:28:88:18:77:b4:ac:d1:5f:25:97:5e:53:69:2c:40:f5:30: a4:63:b2:dc:74:a2:5c:31:86:e4:1d:37:dc:1e:8b:6d:99:e5: 9e:4f:75:dc:d9:1f:ae:84:00:16:0f:5b:59:29:27:77:f0:9d: 1d:f4:f7:a1:1d:f0:0f:be:fd:4a:91:ec:2a:54:71:20:d0:53: 37:51:09:8f:77:2f:95:8d:ac:46:dc:8c:08:ee:66:1b:9c:94: 4c:46:eb:e7:90:da:7b:27:f4:97:d7:b6:cc:68:f9:1b:73:a9: 22:8c:aa:6a:d4:c2:d7:2e:a7:c6:9f:98:fe:4a:81:61:90:dd: 3a:db:44:af:38:b3:71:49:91:92:0b:37:33:a3:02:92:39:df: 22:b9:5f:98:bb:5d:42:32:6c:57:d5:2e:23:ae:b2:30:30:ac: b8:07:6b:79:be:06:de:a1:b5:79:df:29:e2:a3:60:92:7f:1a: 35:65:c6:58:73:1d:df:31:48:2e:f6:db:a1:a8:91:f5:4a:4b: 73:a8:a2:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W55tMKFV5TkKsTi8dBADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1 NjgwY2QwHhcNMjYwMTAxMTYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGRiMjVkMDYwZWRmZDM3ZTVkYzk0Zjk4OTE0MTNjODk2MjU2ZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxonIZt71u42QGR0etrVj5FdCWv3o jqQBldIPO9LBNwEZtLkSQfCBMKsFk5UA0iXs2XHCR+1NrnG4vWiEQl9ukjrjlE7P BIPhbIBKK2xsyHWsJZUy+QkflUPkPR4o8zdF+XFrL9yxoR5Lx3UagR4pzy8ZA0se VopAGLwu5V67IQYwpn60bpzjfrH++qSB2Ii7WzHxOg4HQEJA6g0g3oo1f8ypWktv YMKv0mpHX863JdhalVGMMI+meGu1p54y1G9OHD45ZXGUZYdN3FFKND0IkwsmYLiU L+loj8iaS/iNFixxdhaGQL1mIL0kJO4nMUMsu8ya8dPN67n1Rd1K+I8tsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDjbJdBg7f035dyU+YkUE8iWJW/+MB8GA1UdIwQY MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt NzFiZTBkNTE5MTlkLzEvT05zbDBHRHRfVGZsM0pUNWlSUVR5SllsYl80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqN61MA0G CSqGSIb3DQEBCwUAA4IBAQDSRf/n9frvvxJXHuKx3DxCSMrOdGy0cJ3fDzVBVh3d 30DE4iZVh9RN6edIPhaHwSCghBdbY7RKKIgYd7Ss0V8ll15TaSxA9TCkY7LcdKJc MYbkHTfcHottmeWeT3Xc2R+uhAAWD1tZKSd38J0d9PehHfAPvv1KkewqVHEg0FM3 UQmPdy+VjaxG3IwI7mYbnJRMRuvnkNp7J/SX17bMaPkbc6kijKpq1MLXLqfGn5j+ SoFhkN0620SvOLNxSZGSCzczowKSOd8iuV+Yu11CMmxX1S4jrrIwMKy4B2t5vgbe obV53ynio2CSfxo1ZcZYcx3fMUgu9tuhqJH1SktzqKKw -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:34 2026 by rpki-client