This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/OjQ0zzKUV1mIuissX7R6oiwC7R4.roa File: OjQ0zzKUV1mIuissX7R6oiwC7R4.roa (raw, json) Hash identifier: RqtRopS3nAAsoOtWVCcZpZzIHlMNh6J6RVxWQzfONms= Subject key identifier: 3A:34:34:CF:32:94:57:59:88:BA:2B:2C:5F:B4:7A:A2:2C:02:ED:1E Certificate issuer: /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c Certificate serial: 019B7AC80272293BB869AE2673591D495BF6 Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/OjQ0zzKUV1mIuissX7R6oiwC7R4.roa Signing time: Thu 01 Jan 2026 18:18:06 +0000 ROA not before: Thu 01 Jan 2026 18:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203348 IP address blocks: 193.201.166.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:02:72:29:3b:b8:69:ae:26:73:59:1d:49:5b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c Validity Not Before: Jan 1 18:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a3434cf3294575988ba2b2c5fb47aa22c02ed1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:91:2b:6b:90:a8:06:09:91:9e:7e:ca:94:30: 4e:1b:65:5c:a2:51:c0:a0:45:92:fd:65:a3:07:b2: e6:eb:23:d6:49:40:a5:c5:2a:54:70:65:89:ab:02: 54:f4:8e:cf:8b:1a:bf:2f:af:fd:ab:13:f2:8a:9b: 50:e4:83:05:9a:72:a3:bc:4f:e4:ea:58:43:b0:67: fd:bb:c1:b4:8a:ed:8c:87:7b:c7:cd:1c:0a:c6:36: b7:e9:71:93:eb:f4:6b:d2:30:27:89:d8:53:b1:88: f6:e1:00:79:8c:b7:d5:b0:d1:53:53:be:2d:60:1a: da:25:3c:45:96:b7:e9:bb:3b:a5:26:95:67:7c:27: 5c:31:6a:0c:75:95:22:7e:e2:d1:c4:3d:5b:12:81: 53:da:e2:d5:7d:a9:0f:a0:5a:3b:27:6e:35:e3:12: 81:35:d6:0a:d9:0d:df:cc:15:41:59:aa:78:b9:65: ce:e1:e8:29:ad:8c:21:bb:c1:17:c2:6c:4b:f9:49: 1d:6d:7c:78:e5:48:6b:93:d5:cc:c6:27:da:60:36: a4:da:f6:9f:e7:de:a7:95:cb:81:9d:be:e0:a8:fa: aa:25:ca:bd:78:74:94:ce:eb:81:d9:90:38:b8:84: df:9f:9e:15:c1:32:65:d2:a2:7f:ff:0c:97:d6:e1: 07:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:34:34:CF:32:94:57:59:88:BA:2B:2C:5F:B4:7A:A2:2C:02:ED:1E X509v3 Authority Key Identifier: keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/OjQ0zzKUV1mIuissX7R6oiwC7R4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.166.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:71:b6:42:04:55:e5:61:30:7a:a8:d8:16:03:64:93:98:e3: 72:37:e5:80:85:7c:fb:6e:8a:d0:ca:e6:42:dd:19:31:d8:fc: 3d:87:d6:24:65:93:57:f9:82:27:26:07:f8:45:b8:13:11:26: 97:fb:27:61:2e:ac:e1:a2:8f:f7:02:c3:7b:0a:7d:09:10:5c: 68:7a:3d:cf:44:48:10:63:e2:23:39:20:6f:2a:93:e1:53:0d: 04:f2:0a:94:46:dd:d2:4c:9c:59:76:49:ec:d1:e8:2e:d4:1f: aa:ec:63:28:bc:64:11:e2:88:a8:8d:77:25:11:b1:60:55:06: 05:c5:97:d0:ac:8e:96:d7:56:74:6e:c4:0e:91:20:e2:f1:3c: 63:57:f4:c2:45:db:cc:1d:3d:ba:56:48:e3:45:14:fc:04:94: 8b:f9:c9:08:21:89:25:e3:cd:7c:5d:d6:04:cf:0e:34:d8:ba: c1:fe:bc:45:de:ea:0c:d0:20:8e:a5:16:6e:9f:74:c4:5a:0a: b9:44:c8:f1:39:a1:ae:d3:1e:5e:bc:22:3f:3b:21:71:8f:0f: 60:fa:05:7a:18:93:fb:ce:86:2c:30:72:e2:c5:31:8c:9a:75: 7c:99:f9:06:78:9e:c7:43:16:90:6c:1c:6b:8a:e1:cb:17:7e: b5:fd:d5:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yAJyKTu4aa4mc1kdSVv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMjFkYmZmYjE5MmUxNDkxOWNmZTI3ODZiYWY0NDg0MGMz YWNhM2MwHhcNMjYwMTAxMTgxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTM0MzRjZjMyOTQ1NzU5ODhiYTJiMmM1ZmI0N2FhMjJjMDJlZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZEra5CoBgmRnn7KlDBOG2VcolHA oEWS/WWjB7Lm6yPWSUClxSpUcGWJqwJU9I7Pixq/L6/9qxPyiptQ5IMFmnKjvE/k 6lhDsGf9u8G0iu2Mh3vHzRwKxja36XGT6/Rr0jAnidhTsYj24QB5jLfVsNFTU74t YBraJTxFlrfpuzulJpVnfCdcMWoMdZUifuLRxD1bEoFT2uLVfakPoFo7J2414xKB NdYK2Q3fzBVBWap4uWXO4egprYwhu8EXwmxL+UkdbXx45Uhrk9XMxifaYDak2vaf 596nlcuBnb7gqPqqJcq9eHSUzuuB2ZA4uITfn54VwTJl0qJ//wyX1uEHhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDo0NM8ylFdZiLorLF+0eqIsAu0eMB8GA1UdIwQY MBaAFBsh2/+xkuFJGc/ieGuvRIQMOso8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wNjYyMjEtMGVlYi00MmQ5LTljMDct ZmM2OWUwYmNhNjIyLzEvT2pRMHp6S1VWMW1JdWlzc1g3UjZvaXdDN1I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8wNjYyMjEtMGVlYi00MmQ5LTljMDctZmM2OWUwYmNhNjIy LzEvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcmmMA0G CSqGSIb3DQEBCwUAA4IBAQAPcbZCBFXlYTB6qNgWA2STmONyN+WAhXz7borQyuZC 3Rkx2Pw9h9YkZZNX+YInJgf4RbgTESaX+ydhLqzhoo/3AsN7Cn0JEFxoej3PREgQ Y+IjOSBvKpPhUw0E8gqURt3STJxZdkns0egu1B+q7GMovGQR4oiojXclEbFgVQYF xZfQrI6W11Z0bsQOkSDi8TxjV/TCRdvMHT26VkjjRRT8BJSL+ckIIYkl4818XdYE zw402LrB/rxF3uoM0CCOpRZun3TEWgq5RMjxOaGu0x5evCI/OyFxjw9g+gV6GJP7 zoYsMHLixTGMmnV8mfkGeJ7HQxaQbBxriuHLF361/dUw -----END CERTIFICATE-----Generated at Mon Feb 2 14:10:40 2026 by rpki-client