This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/oGOTDBSs-8RzQgvE7ZrDeZrWmhY.roa File: oGOTDBSs-8RzQgvE7ZrDeZrWmhY.roa (raw, json) Hash identifier: fg5ldvtNVy0GA4pv1zrABZsjmX5v9/M80VbIZSFHe+A= Subject key identifier: A0:63:93:0C:14:AC:FB:C4:73:42:0B:C4:ED:9A:C3:79:9A:D6:9A:16 Certificate issuer: /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6 Certificate serial: 019B7B36203AF764C164EA80F5D1EF51EAB8 Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/oGOTDBSs-8RzQgvE7ZrDeZrWmhY.roa Signing time: Thu 01 Jan 2026 20:18:23 +0000 ROA not before: Thu 01 Jan 2026 20:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43872 IP address blocks: 5.253.252.0/22 maxlen: 22 45.136.108.0/24 maxlen: 24 92.118.111.0/24 maxlen: 24 176.101.169.0/24 maxlen: 24 185.183.20.0/22 maxlen: 22 185.187.61.0/24 maxlen: 24 185.253.176.0/22 maxlen: 22 193.105.189.0/24 maxlen: 24 193.247.94.0/24 maxlen: 24 193.247.101.0/24 maxlen: 24 193.247.103.0/24 maxlen: 24 193.247.165.0/24 maxlen: 24 195.234.28.0/24 maxlen: 24 217.198.183.0/24 maxlen: 24 2a0b:180::/29 maxlen: 29 2a0d:1e80::/29 maxlen: 29 2a10:c740::/29 maxlen: 29 2a10:c7c0::/29 maxlen: 29 2a10:c8c0::/29 maxlen: 29 2a10:c9c0::/29 maxlen: 29 2a10:cac0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:20:3a:f7:64:c1:64:ea:80:f5:d1:ef:51:ea:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6 Validity Not Before: Jan 1 20:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a063930c14acfbc473420bc4ed9ac3799ad69a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:6f:ad:5a:2f:b0:79:fc:1e:5c:72:f7:f1: a0:20:81:27:d3:eb:6a:08:bd:78:47:8c:05:65:97: 0f:86:9f:01:71:a0:a0:90:5b:a5:c0:ec:9e:15:f8: 75:94:ad:c9:5d:32:01:b2:48:77:7c:25:13:6f:58: aa:80:f8:04:8b:8d:1d:3a:3d:f9:3a:36:32:e1:81: 2e:84:08:e6:88:3f:6c:c9:db:66:8a:72:6e:5d:76: a9:56:20:76:a9:8b:72:ce:3a:d4:7a:85:47:83:c6: 67:7b:f6:e2:f0:37:c7:76:6a:b1:40:76:3f:44:a5: 55:3a:9f:4e:eb:7e:d0:47:bf:e6:2c:30:f5:01:87: ae:a7:57:86:a9:0a:3c:e1:64:c8:a4:06:88:c3:91: 16:11:2d:87:27:ec:36:b1:26:a5:f9:35:93:44:68: f1:e0:d6:62:09:0e:90:a2:45:9d:d0:da:78:b7:d8: fe:04:22:bd:a0:46:18:9f:3b:80:18:67:18:f5:13: a7:63:dc:f6:14:55:ac:03:dd:98:ff:3a:9c:72:b4: 4d:33:fa:d7:e5:a3:a7:bc:14:74:12:7e:ce:f6:1b: 73:26:a4:97:f4:de:9a:5c:cc:1e:63:b3:c4:44:d5: fe:27:93:63:87:fd:fc:99:ac:4f:e6:5b:93:50:9e: 41:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:63:93:0C:14:AC:FB:C4:73:42:0B:C4:ED:9A:C3:79:9A:D6:9A:16 X509v3 Authority Key Identifier: keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/oGOTDBSs-8RzQgvE7ZrDeZrWmhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.252.0/22 45.136.108.0/24 92.118.111.0/24 176.101.169.0/24 185.183.20.0/22 185.187.61.0/24 185.253.176.0/22 193.105.189.0/24 193.247.94.0/24 193.247.101.0/24 193.247.103.0/24 193.247.165.0/24 195.234.28.0/24 217.198.183.0/24 IPv6: 2a0b:180::/29 2a0d:1e80::/29 2a10:c740::/29 2a10:c7c0::/29 2a10:c8c0::/29 2a10:c9c0::/29 2a10:cac0::/29 Signature Algorithm: sha256WithRSAEncryption 97:a5:95:c7:52:1b:b7:6f:58:e6:26:43:ea:df:49:ee:ec:3c: 16:af:94:76:25:17:26:cf:42:a3:ac:e1:b5:f0:4f:87:f1:5b: a4:c7:13:3e:59:38:d1:2d:bc:33:96:63:9d:99:be:84:4d:ab: 4d:88:20:e6:7d:bb:3d:29:2d:1d:0a:be:f9:58:36:fd:22:99: 06:c1:4f:b2:1f:30:58:b4:b7:2e:82:7b:55:61:e2:62:a2:ad: 40:7f:36:31:fe:6d:70:37:bb:bc:90:84:5e:8b:c8:b9:92:78: f8:c8:0d:b8:b9:c0:0b:e0:49:0b:72:20:ed:7d:68:36:83:b5: b3:6a:66:20:7c:ab:4b:93:3d:0f:80:86:8c:6e:fb:d0:cb:b7: 36:91:b4:e5:ff:9f:b5:49:23:4d:ae:95:27:02:b6:80:22:e1: 77:b4:7f:2e:f0:fb:a9:18:7a:69:0a:ab:5f:e7:db:0d:83:1e: d5:32:50:8e:b4:8b:d9:73:15:68:80:b8:d8:64:bd:99:b4:54: f0:d3:ed:38:5d:41:8a:64:c7:96:7a:d8:72:8f:72:a5:a8:aa: 04:79:67:1f:0e:10:be:34:42:1c:12:5f:e1:98:cd:1f:0d:a7: 1d:9c:0f:cd:95:34:7f:dd:7f:61:50:27:8d:e8:05:dd:2a:14: 30:d5:a6:03 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7NiA692TBZOqA9dHvUeq4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2UyMGJmNWYyNTJiMWJkYmQyMWRjOTlkOTRjZDk3ZWE3 ZjBmZTYwHhcNMjYwMTAxMjAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDYzOTMwYzE0YWNmYmM0NzM0MjBiYzRlZDlhYzM3OTlhZDY5YTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4ZvrVovsHn8Hlxy9/GgIIEn0+tq CL14R4wFZZcPhp8BcaCgkFulwOyeFfh1lK3JXTIBskh3fCUTb1iqgPgEi40dOj35 OjYy4YEuhAjmiD9sydtminJuXXapViB2qYtyzjrUeoVHg8Zne/bi8DfHdmqxQHY/ RKVVOp9O637QR7/mLDD1AYeup1eGqQo84WTIpAaIw5EWES2HJ+w2sSal+TWTRGjx 4NZiCQ6QokWd0Np4t9j+BCK9oEYYnzuAGGcY9ROnY9z2FFWsA92Y/zqccrRNM/rX 5aOnvBR0En7O9htzJqSX9N6aXMweY7PERNX+J5Njh/38maxP5luTUJ5BBQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFKBjkwwUrPvEc0ILxO2aw3ma1poWMB8GA1UdIwQY MBaAFFQ+IL9fJSsb29IdyZ2UzZfqfw/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUt ZDVhZDk5NmExYWM4LzEvb0dPVERCU3MtOFJ6UWd2RTdackRlWnJXbWhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUtZDVhZDk5NmExYWM4 LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGoBggrBgEFBQcBBwEB/wSBmDCBlTBaBAIAATBUAwQCBf38 AwQALYhsAwQAXHZvAwQAsGWpAwQCubcUAwQAubs9AwQCuf2wAwQAwWm9AwQAwfde AwQAwfdlAwQAwfdnAwQAwfelAwQAw+ocAwQA2ca3MDcEAgACMDEDBQMqCwGAAwUD Kg0egAMFAyoQx0ADBQMqEMfAAwUDKhDIwAMFAyoQycADBQMqEMrAMA0GCSqGSIb3 DQEBCwUAA4IBAQCXpZXHUhu3b1jmJkPq30nu7DwWr5R2JRcmz0KjrOG18E+H8Vuk xxM+WTjRLbwzlmOdmb6ETatNiCDmfbs9KS0dCr75WDb9IpkGwU+yHzBYtLcugntV YeJioq1AfzYx/m1wN7u8kIRei8i5knj4yA24ucAL4EkLciDtfWg2g7WzamYgfKtL kz0PgIaMbvvQy7c2kbTl/5+1SSNNrpUnAraAIuF3tH8u8PupGHppCqtf59sNgx7V MlCOtIvZcxVogLjYZL2ZtFTw0+04XUGKZMeWethyj3KlqKoEeWcfDhC+NEIcEl/h mM0fDacdnA/NlTR/3X9hUCeN6AXdKhQw1aYD -----END CERTIFICATE-----Generated at Mon Feb 2 09:40:06 2026 by rpki-client