This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/OeUkA-MxuBY0MCQq2lEXcd7LDp0.roa File: OeUkA-MxuBY0MCQq2lEXcd7LDp0.roa (raw, json) Hash identifier: UNu3aGNU9iKX9W+pdSbXjn6MIdvAzU/dQ2Ruk579C2c= Subject key identifier: 39:E5:24:03:E3:31:B8:16:34:30:24:2A:DA:51:17:71:DE:CB:0E:9D Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1 Certificate serial: 019B7C805A2B3597FEFC2F9989EB7D657F37 Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/OeUkA-MxuBY0MCQq2lEXcd7LDp0.roa Signing time: Fri 02 Jan 2026 02:19:04 +0000 ROA not before: Fri 02 Jan 2026 02:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 194.179.160.0/19 maxlen: 24 194.179.192.0/19 maxlen: 24 194.179.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5a:2b:35:97:fe:fc:2f:99:89:eb:7d:65:7f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1 Validity Not Before: Jan 2 02:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39e52403e331b8163430242ada511771decb0e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:15:88:2f:53:2f:90:cf:cf:51:ea:a7:58:dd: 0c:64:a3:96:6b:a7:f0:03:bc:64:cc:88:5d:e0:7f: 45:be:7b:97:c4:58:ff:f3:98:75:b5:c3:78:fe:9c: d0:8d:52:e2:d8:65:f5:df:e9:a1:a2:9d:71:6a:5d: 5f:d8:53:eb:bb:49:9e:ce:f3:91:1b:73:f4:96:04: 81:9e:6b:f2:6c:88:4c:41:d3:b0:38:e8:1a:ae:93: 27:68:a5:bc:a0:be:04:86:00:37:2e:7e:3e:d6:5c: 07:dc:1e:44:bd:60:d9:2e:3f:a5:cf:0d:54:50:2a: 68:df:7f:46:23:ee:1b:31:6e:4e:2e:ec:53:47:fa: e9:d1:8d:fe:c1:84:aa:b0:e1:f7:17:9d:b7:8f:03: 4c:0f:6f:00:ec:9b:ec:1a:a4:8b:66:0e:3b:5b:ce: 8d:4d:0a:7d:0f:2f:f6:f7:a9:ba:7b:b5:d5:27:0c: f2:0a:23:ef:aa:fc:b9:b2:5b:66:d5:bb:10:89:03: dd:a5:a4:e7:04:9e:77:39:20:16:5d:3b:85:a3:8f: 3d:4a:46:af:5a:16:07:cb:3a:29:63:30:ca:8f:c6: bf:45:7a:56:3a:31:3c:21:8e:fe:c7:fb:6a:1e:8d: 9d:16:15:de:46:7c:c1:3f:3e:65:20:1a:c0:1c:73: 43:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E5:24:03:E3:31:B8:16:34:30:24:2A:DA:51:17:71:DE:CB:0E:9D X509v3 Authority Key Identifier: keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/OeUkA-MxuBY0MCQq2lEXcd7LDp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.179.160.0-194.179.255.255 Signature Algorithm: sha256WithRSAEncryption ca:88:da:31:0f:97:ee:f4:14:48:06:ed:2d:03:00:e9:60:2c: b0:9b:9e:b3:3d:95:c6:f1:6f:56:44:52:35:98:8d:24:9c:ed: c6:64:7f:a7:6a:69:0a:8d:08:5b:a3:ff:e8:5c:a9:22:8f:66: 12:96:9b:ba:eb:42:3d:88:e7:ed:98:df:7b:f4:50:c1:45:c9: 8b:48:49:58:4c:cc:a4:ce:86:72:02:e2:b9:c6:1c:42:d9:3f: ba:1a:2d:27:3e:d7:05:d0:c2:54:6d:ed:92:5f:29:1b:09:a2: 29:8b:66:ab:86:10:87:92:41:1e:47:ef:e3:34:81:00:52:95: af:04:5a:26:ec:dd:62:2b:49:44:8c:2e:91:91:84:dd:17:3e: 61:3a:5d:0f:e5:88:a0:ef:a4:ad:c9:16:3d:7c:ee:f8:be:6d: 97:2e:48:e3:94:e7:3c:83:37:c5:d4:4f:1c:7c:33:b1:e1:02: ff:56:62:9f:d7:57:89:90:67:4d:d6:02:27:ea:d5:23:c2:0f: 2f:0d:21:58:e3:f8:8c:73:d7:bd:f4:f9:67:1c:15:0e:0f:ed: b6:ab:fb:0e:2b:fc:18:04:c9:f3:2d:75:50:f6:7b:c4:9c:c8: d0:49:44:90:1f:08:8e:de:37:35:4f:04:ab:9b:39:78:68:b2: 47:02:43:bc -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt8gForNZf+/C+Ziet9ZX83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NmIwMTgyMTA1YmIyN2IwYzhiY2YyODQyYmQzYzFhODUx NjRiZDEwHhcNMjYwMTAyMDIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWU1MjQwM2UzMzFiODE2MzQzMDI0MmFkYTUxMTc3MWRlY2IwZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBWIL1MvkM/PUeqnWN0MZKOWa6fw A7xkzIhd4H9FvnuXxFj/85h1tcN4/pzQjVLi2GX13+mhop1xal1f2FPru0mezvOR G3P0lgSBnmvybIhMQdOwOOgarpMnaKW8oL4EhgA3Ln4+1lwH3B5EvWDZLj+lzw1U UCpo339GI+4bMW5OLuxTR/rp0Y3+wYSqsOH3F523jwNMD28A7JvsGqSLZg47W86N TQp9Dy/296m6e7XVJwzyCiPvqvy5sltm1bsQiQPdpaTnBJ53OSAWXTuFo489Skav WhYHyzopYzDKj8a/RXpWOjE8IY7+x/tqHo2dFhXeRnzBPz5lIBrAHHNDxwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFDnlJAPjMbgWNDAkKtpRF3Heyw6dMB8GA1UdIwQY MBaAFFhrAYIQW7J7DIvPKEK9PBqFFkvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQt NzM3MGZkODBkZjZjLzEvT2VVa0EtTXh1QlkwTUNRcTJsRVhjZDdMRHAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQtNzM3MGZkODBkZjZj LzEvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAXCs6AD AwLCsDANBgkqhkiG9w0BAQsFAAOCAQEAyojaMQ+X7vQUSAbtLQMA6WAssJuesz2V xvFvVkRSNZiNJJztxmR/p2ppCo0IW6P/6FypIo9mEpabuutCPYjn7Zjfe/RQwUXJ i0hJWEzMpM6GcgLiucYcQtk/uhotJz7XBdDCVG3tkl8pGwmiKYtmq4YQh5JBHkfv 4zSBAFKVrwRaJuzdYitJRIwukZGE3Rc+YTpdD+WIoO+krckWPXzu+L5tly5I45Tn PIM3xdRPHHwzseEC/1Zin9dXiZBnTdYCJ+rVI8IPLw0hWOP4jHPXvfT5ZxwVDg/t tqv7Div8GATJ8y11UPZ7xJzI0ElEkB8Ijt43NU8Eq5s5eGiyRwJDvA== -----END CERTIFICATE-----Generated at Mon Jan 19 16:55:25 2026 by rpki-client