This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa File: OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa (raw, json) Hash identifier: j+79l8r3SxM1RICNZ8BxQsW9LOcBALGzMeybUT2J8So= Subject key identifier: 3A:86:58:6F:A4:7A:62:69:46:A5:9A:D8:8C:4E:F3:30:22:0E:CC:2B Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019B7910EE4F76D86E98DCA5FF69B419491D Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21211 IP address blocks: 62.192.180.0/23 maxlen: 23 62.192.182.0/23 maxlen: 23 147.78.112.0/23 maxlen: 23 147.78.114.0/23 maxlen: 23 171.22.4.0/23 maxlen: 23 171.22.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ee:4f:76:d8:6e:98:dc:a5:ff:69:b4:19:49:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a86586fa47a626946a59ad88c4ef330220ecc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:aa:47:53:2c:87:a2:30:61:dc:81:d1:32:35: 23:ff:1d:c3:82:40:82:91:dc:b9:b8:bc:16:b2:75: 47:f7:ea:c9:32:c6:ec:a0:14:1a:69:42:3a:bd:92: 96:7e:3a:32:e8:81:ce:bc:48:4d:96:f5:55:0b:8f: b5:2b:ca:57:8a:c4:f9:1f:76:84:5a:63:90:b3:37: 1d:ce:72:d8:5a:f9:c9:52:1a:e8:22:93:be:01:57: e2:aa:c5:01:92:40:05:d5:63:53:46:d3:77:93:98: ec:18:c5:5c:f0:09:5c:2b:80:0c:30:8e:34:62:d0: 04:3d:5f:75:f0:ad:f1:4f:0f:bc:b3:79:23:db:ce: 84:da:28:79:75:30:fe:c9:64:e1:71:c9:00:ec:f2: 47:c2:e3:9d:58:0e:54:4b:67:8c:fb:64:c1:3a:ae: 1d:6c:e1:86:96:d5:0f:65:ca:bb:4a:4c:97:99:02: cf:06:43:e6:78:ff:e1:bb:e6:0f:f7:eb:c1:73:17: 03:50:e0:c4:e1:b7:8b:96:98:67:1b:c1:e5:93:67: f4:e4:52:c5:26:68:21:bf:1d:31:44:4e:18:25:86: a5:ef:d3:49:30:f5:6c:5e:43:fa:85:e6:92:01:9c: fb:d3:5b:3f:9e:fe:f2:aa:b0:23:b5:0b:fc:92:0b: 2a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:86:58:6F:A4:7A:62:69:46:A5:9A:D8:8C:4E:F3:30:22:0E:CC:2B X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.180.0/22 147.78.112.0/22 171.22.4.0/22 Signature Algorithm: sha256WithRSAEncryption 72:58:b5:b1:ca:3c:70:c8:45:f9:a0:89:eb:56:fb:76:65:19: 13:d6:26:51:51:c6:c4:0c:64:bb:ea:31:fa:db:e3:6f:95:92: a6:9a:bf:f6:16:b3:95:fc:aa:f5:38:14:32:57:a1:d0:1d:d0: 9f:77:0e:24:b2:a7:c7:19:29:18:7f:56:b7:12:a0:84:93:39: 05:c8:18:66:7f:d3:04:21:72:40:0c:a1:27:a7:a8:fa:3e:e0: 3a:c2:f6:a1:91:52:e9:52:66:6a:50:6d:70:d5:12:24:1d:b3: ae:db:1c:10:4b:aa:07:ab:f9:5a:4f:35:94:52:23:60:93:c0: a0:56:41:19:f7:03:24:9b:e1:3e:24:3f:3d:44:3f:b5:84:c0: c1:6e:3a:da:21:75:c7:88:ce:0e:b3:c5:3e:e0:e9:18:36:7c: c9:87:a8:a3:3e:09:56:62:f6:88:9b:13:e3:ef:12:6a:28:c1: d6:63:05:95:8d:3e:ce:b2:13:84:a2:33:7e:36:17:4a:0a:89: e1:99:ba:95:25:61:bd:cf:39:10:9e:41:93:10:64:66:b8:38: 7b:ff:75:40:73:ad:68:55:9f:32:ed:e5:ef:ea:66:8c:c1:e3: 55:71:2e:2a:71:ec:6d:c0:e5:8f:ad:aa:83:83:d3:84:81:bc: 61:a7:4a:a0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EO5PdthumNyl/2m0GUkdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTg2NTg2ZmE0N2E2MjY5NDZhNTlhZDg4YzRlZjMzMDIyMGVjYzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqpHUyyHojBh3IHRMjUj/x3DgkCC kdy5uLwWsnVH9+rJMsbsoBQaaUI6vZKWfjoy6IHOvEhNlvVVC4+1K8pXisT5H3aE WmOQszcdznLYWvnJUhroIpO+AVfiqsUBkkAF1WNTRtN3k5jsGMVc8AlcK4AMMI40 YtAEPV918K3xTw+8s3kj286E2ih5dTD+yWThcckA7PJHwuOdWA5US2eM+2TBOq4d bOGGltUPZcq7SkyXmQLPBkPmeP/hu+YP9+vBcxcDUODE4beLlphnG8Hlk2f05FLF Jmghvx0xRE4YJYal79NJMPVsXkP6heaSAZz701s/nv7yqrAjtQv8kgsqCwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDqGWG+kemJpRqWa2IxO8zAiDswrMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvT29aWWI2UjZZbWxHcFpyWWpFN3pNQ0lPekNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCPsC0AwQC k05wAwQCqxYEMA0GCSqGSIb3DQEBCwUAA4IBAQByWLWxyjxwyEX5oInrVvt2ZRkT 1iZRUcbEDGS76jH62+NvlZKmmr/2FrOV/Kr1OBQyV6HQHdCfdw4ksqfHGSkYf1a3 EqCEkzkFyBhmf9MEIXJADKEnp6j6PuA6wvahkVLpUmZqUG1w1RIkHbOu2xwQS6oH q/laTzWUUiNgk8CgVkEZ9wMkm+E+JD89RD+1hMDBbjraIXXHiM4Os8U+4OkYNnzJ h6ijPglWYvaImxPj7xJqKMHWYwWVjT7OshOEojN+NhdKConhmbqVJWG9zzkQnkGT EGRmuDh7/3VAc61oVZ8y7eXv6maMweNVcS4qcextwOWPraqDg9OEgbxhp0qg -----END CERTIFICATE-----Generated at Sun Jan 25 03:14:26 2026 by rpki-client