This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/oe9_BUEcNMQXUPeMx0Pcsnv2N20.roa File: oe9_BUEcNMQXUPeMx0Pcsnv2N20.roa (raw, json) Hash identifier: 4+asMob/DRGngq6GAVzO2x+uYasSdWuu4BCpYVlKFoo= Subject key identifier: A1:EF:7F:05:41:1C:34:C4:17:50:F7:8C:C7:43:DC:B2:7B:F6:37:6D Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213 Certificate serial: 019B7C803A014562ABF1D50764D9B39F4E3C Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/oe9_BUEcNMQXUPeMx0Pcsnv2N20.roa Signing time: Fri 02 Jan 2026 02:18:56 +0000 ROA not before: Fri 02 Jan 2026 02:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 5.252.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3a:01:45:62:ab:f1:d5:07:64:d9:b3:9f:4e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213 Validity Not Before: Jan 2 02:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1ef7f05411c34c41750f78cc743dcb27bf6376d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:02:4f:6f:62:39:f0:6b:06:bd:e1:7d:1c: e6:fa:5f:e2:46:74:9a:46:73:b0:53:9a:99:a9:00: fc:fb:62:5a:4d:61:05:cd:f4:35:5b:8d:41:f6:63: e5:70:97:e8:de:2a:ef:aa:de:b6:06:c3:09:f8:3c: c8:32:89:3b:c0:3b:c2:a0:53:36:3f:06:d7:e5:65: 06:0a:39:aa:d8:12:b2:27:24:ae:39:e5:0c:0b:5b: 73:5b:0b:f5:d8:31:b7:fd:0d:00:ad:97:33:21:f3: 37:7d:1d:d6:94:2f:8e:59:38:c2:ec:7d:4f:e3:70: 3b:ac:61:1c:9d:d3:e8:5d:cb:53:8c:15:54:90:fb: dc:9c:22:18:f6:12:a0:08:a9:ea:1c:d3:7e:bb:c3: 64:33:2a:6a:ab:de:60:ec:b1:66:5a:42:43:d8:f2: 08:f8:c1:82:cb:f9:f0:f3:ac:fb:50:ad:35:5d:d4: 33:3f:a6:80:d9:aa:05:8e:86:d7:67:99:34:40:e7: fa:08:bf:dc:53:0a:5e:1e:4a:a1:b4:9e:e2:6e:fd: 4b:6b:5b:56:e8:11:b1:47:c6:86:c0:db:01:fe:fc: 55:26:a2:fe:d8:51:85:75:b0:cc:43:7d:9e:32:7e: ac:88:93:c0:7e:96:07:29:89:66:c3:b6:a7:04:47: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EF:7F:05:41:1C:34:C4:17:50:F7:8C:C7:43:DC:B2:7B:F6:37:6D X509v3 Authority Key Identifier: keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/oe9_BUEcNMQXUPeMx0Pcsnv2N20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.152.0/24 Signature Algorithm: sha256WithRSAEncryption 17:a4:b6:d9:db:ae:fd:b6:a9:1c:ce:59:fa:18:34:bb:a3:1d: 14:26:a1:ae:80:c6:5f:52:21:f9:9b:27:54:e4:52:f4:b7:c7: 56:f5:ae:2d:60:d8:73:01:35:7f:a3:85:10:ae:3a:3d:8d:ff: 79:08:0d:45:d6:49:46:17:1f:c6:ea:43:30:5c:f5:25:9e:89: 7b:32:2e:df:d5:33:00:52:bf:e6:17:05:dd:0d:7e:7c:1b:da: d6:4e:50:ca:1c:a9:d2:1b:98:6c:69:45:0a:01:bf:1e:1d:18: 2c:c8:8a:27:1a:48:b6:09:90:db:38:78:50:78:76:58:43:8b: 42:62:9c:33:1a:6b:86:23:aa:3b:f8:44:b0:fb:96:58:7d:c4: 22:71:64:3f:c5:69:e7:24:e2:ed:b7:9b:54:45:1a:5a:de:c2: 66:ff:f3:15:1c:d1:69:d8:87:53:54:4f:c3:de:7f:e6:85:67: 46:f8:bc:b2:d7:5c:b5:86:8a:f4:26:09:2d:a3:8e:c2:92:4b: 83:36:f9:65:2c:f9:91:e1:d7:6a:76:2d:5c:39:c6:05:d7:93: fc:0e:51:b9:45:70:d6:80:99:78:47:1d:52:ec:d2:4e:33:e1: 89:41:82:a6:00:a4:80:30:b0:67:35:64:94:5d:ca:df:2f:0f: 7a:b1:b5:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gDoBRWKr8dUHZNmzn048MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTcwNzkzNGE3NjJiYmRmMzRmYzAxNDhmMjY1Y2UxMjQ1 NzcyMTMwHhcNMjYwMTAyMDIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWVmN2YwNTQxMWMzNGM0MTc1MGY3OGNjNzQzZGNiMjdiZjYzNzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1MCT29iOfBrBr3hfRzm+l/iRnSa RnOwU5qZqQD8+2JaTWEFzfQ1W41B9mPlcJfo3irvqt62BsMJ+DzIMok7wDvCoFM2 PwbX5WUGCjmq2BKyJySuOeUMC1tzWwv12DG3/Q0ArZczIfM3fR3WlC+OWTjC7H1P 43A7rGEcndPoXctTjBVUkPvcnCIY9hKgCKnqHNN+u8NkMypqq95g7LFmWkJD2PII +MGCy/nw86z7UK01XdQzP6aA2aoFjobXZ5k0QOf6CL/cUwpeHkqhtJ7ibv1La1tW 6BGxR8aGwNsB/vxVJqL+2FGFdbDMQ32eMn6siJPAfpYHKYlmw7anBEclCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKHvfwVBHDTEF1D3jMdD3LJ79jdtMB8GA1UdIwQY MBaAFManB5NKdiu980/AFI8mXOEkV3ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUt YjhlYTE4ZWI3NWY0LzEvb2U5X0JVRWNOTVFYVVBlTXgwUGNzbnYyTjIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUtYjhlYTE4ZWI3NWY0 LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABfyYMA0G CSqGSIb3DQEBCwUAA4IBAQAXpLbZ2679tqkczln6GDS7ox0UJqGugMZfUiH5mydU 5FL0t8dW9a4tYNhzATV/o4UQrjo9jf95CA1F1klGFx/G6kMwXPUlnol7Mi7f1TMA Ur/mFwXdDX58G9rWTlDKHKnSG5hsaUUKAb8eHRgsyIonGki2CZDbOHhQeHZYQ4tC YpwzGmuGI6o7+ESw+5ZYfcQicWQ/xWnnJOLtt5tURRpa3sJm//MVHNFp2IdTVE/D 3n/mhWdG+Lyy11y1hor0Jgkto47CkkuDNvllLPmR4ddqdi1cOcYF15P8DlG5RXDW gJl4Rx1S7NJOM+GJQYKmAKSAMLBnNWSUXcrfLw96sbVL -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:25 2026 by rpki-client