This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/ogdUuLMLGXWAE97ep_6xE6pGauw.roa File: ogdUuLMLGXWAE97ep_6xE6pGauw.roa (raw, json) Hash identifier: /8ETMtUNYvyW0sg04nFVftmDWf2q5zsPGKV2h1Meulg= Subject key identifier: A2:07:54:B8:B3:0B:19:75:80:13:DE:DE:A7:FE:B1:13:AA:46:6A:EC Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943 Certificate serial: 019B79EBB28EF5B1B6E4C2B60C47C325B128 Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/ogdUuLMLGXWAE97ep_6xE6pGauw.roa Signing time: Thu 01 Jan 2026 14:17:28 +0000 ROA not before: Thu 01 Jan 2026 14:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 5.198.0.0/17 maxlen: 24 77.86.0.0/17 maxlen: 24 83.100.128.0/17 maxlen: 24 87.102.0.0/17 maxlen: 24 94.72.192.0/18 maxlen: 24 159.253.64.0/20 maxlen: 24 178.78.64.0/18 maxlen: 24 185.188.232.0/22 maxlen: 24 194.207.0.0/19 maxlen: 24 194.207.64.0/19 maxlen: 24 194.207.96.0/19 maxlen: 24 194.207.128.0/19 maxlen: 24 194.207.160.0/19 maxlen: 24 194.207.192.0/19 maxlen: 24 194.207.224.0/19 maxlen: 24 212.50.160.0/19 maxlen: 24 213.249.128.0/18 maxlen: 24 213.249.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b2:8e:f5:b1:b6:e4:c2:b6:0c:47:c3:25:b1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943 Validity Not Before: Jan 1 14:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a20754b8b30b19758013dedea7feb113aa466aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:20:9e:78:03:1c:91:ea:ee:ec:00:c1:45:3b: 9f:ab:79:80:67:c7:94:ab:36:d9:34:db:fe:e3:d0: 7f:0e:f8:d8:e1:b3:61:6a:21:9a:cb:5c:66:e9:d9: d4:24:67:cd:2b:3a:a0:a4:22:d9:5b:15:64:a4:fa: a0:43:66:2d:45:05:6f:f3:b0:bb:26:5a:83:4f:bd: e2:6f:29:c3:cc:03:e5:7d:05:d0:71:25:d6:c3:6c: 13:9c:ba:9a:4e:2d:5c:c5:99:a4:44:33:ea:82:2b: 37:95:d2:5a:74:3f:b0:a0:5b:c0:c4:cd:7a:26:06: ad:c1:48:03:90:da:8c:1e:b9:b7:dc:71:af:29:19: 16:c5:5f:6a:98:5b:48:80:4e:be:ae:02:57:ab:92: c4:de:91:91:7a:a2:e5:8a:b8:7c:d5:f7:23:a4:3d: 03:91:71:8c:81:4a:96:f7:8e:cc:31:71:7f:02:02: ce:53:0b:e6:a9:5d:57:0c:81:1f:d8:61:9f:c8:20: c4:ba:16:89:12:ff:a3:dd:d8:78:d9:2e:f7:a4:4c: 5a:d8:2c:a0:73:76:d9:27:e0:2b:d6:ae:60:9e:a5: 83:c7:78:32:2c:76:13:3f:a1:2e:d5:3a:a4:a7:34: 05:b6:fc:a0:5a:43:5c:06:ee:52:83:29:a1:85:73: 08:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:07:54:B8:B3:0B:19:75:80:13:DE:DE:A7:FE:B1:13:AA:46:6A:EC X509v3 Authority Key Identifier: keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/ogdUuLMLGXWAE97ep_6xE6pGauw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.198.0.0/17 77.86.0.0/17 83.100.128.0/17 87.102.0.0/17 94.72.192.0/18 159.253.64.0/20 178.78.64.0/18 185.188.232.0/22 194.207.0.0/19 194.207.64.0-194.207.255.255 212.50.160.0/19 213.249.128.0/17 Signature Algorithm: sha256WithRSAEncryption 31:c0:09:ff:f5:d0:4e:98:73:02:b9:b8:2c:70:0c:82:9c:f1: 80:26:f6:ae:2d:9f:eb:f9:ca:09:22:a0:8b:2c:99:4c:90:a9: e9:2e:60:8d:ba:ec:65:3d:38:25:f8:2e:df:66:3a:f3:67:f3: f8:b8:f5:22:2c:2f:ff:2e:dc:5b:b0:e6:bd:9a:eb:63:46:a6: cf:47:e7:53:f2:1c:08:e7:75:94:1e:94:ed:56:55:4c:a4:73: 36:82:47:fa:91:9a:1d:70:60:0a:5b:b0:7e:63:33:1d:b7:e5: 59:82:bc:f1:9c:f0:bc:b9:15:ff:ac:89:3d:87:fe:57:ba:7e: c0:7b:b5:a5:a8:3d:47:25:02:a5:a4:15:80:e1:fd:2f:68:be: af:06:05:26:0d:59:2e:ce:9b:1e:8a:78:6c:24:be:56:f5:5a: 6f:3a:4d:b9:d9:17:68:e7:e2:ab:9d:2d:84:0f:bb:45:95:1b: 36:9c:5f:60:99:76:e4:11:5b:de:53:ac:6c:6e:d9:be:b1:b3: 3f:22:3e:c2:8c:27:15:b0:7b:87:6e:e5:47:07:02:f4:1c:5c: 19:4c:9f:40:f5:06:4e:8b:df:43:cd:5e:65:f5:21:dd:cd:71: ef:24:9c:ed:e8:b6:24:e9:00:37:55:35:2e:fd:a8:33:f3:13: c7:38:99:f0 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISAZt567KO9bG25MK2DEfDJbEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTVjZmVkYjlhZWFiNDJiZjhhYzViMjRjYjFhZWVjMmE2 NjA5NDMwHhcNMjYwMTAxMTQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjA3NTRiOGIzMGIxOTc1ODAxM2RlZGVhN2ZlYjExM2FhNDY2YWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSCeeAMckeru7ADBRTufq3mAZ8eU qzbZNNv+49B/DvjY4bNhaiGay1xm6dnUJGfNKzqgpCLZWxVkpPqgQ2YtRQVv87C7 JlqDT73ibynDzAPlfQXQcSXWw2wTnLqaTi1cxZmkRDPqgis3ldJadD+woFvAxM16 JgatwUgDkNqMHrm33HGvKRkWxV9qmFtIgE6+rgJXq5LE3pGReqLlirh81fcjpD0D kXGMgUqW947MMXF/AgLOUwvmqV1XDIEf2GGfyCDEuhaJEv+j3dh42S73pExa2Cyg c3bZJ+Ar1q5gnqWDx3gyLHYTP6Eu1TqkpzQFtvygWkNcBu5SgymhhXMIcQIDAQAB o4ICUjCCAk4wHQYDVR0OBBYEFKIHVLizCxl1gBPe3qf+sROqRmrsMB8GA1UdIwQY MBaAFH0Vz+25rqtCv4rFskyxruwqZglDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJYUDdibXVxMEtfaXNXeVRMR3U3Q3BtQ1VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZDZiNzMtMGU4Yy00YTQ1LWI2YmIt NDIyODFmNTUxOGE5LzEvb2dkVXVMTUxHWFdBRTk3ZXBfNnhFNnBHYXV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hZDZiNzMtMGU4Yy00YTQ1LWI2YmItNDIyODFmNTUxOGE5 LzEvZlJYUDdibXVxMEtfaXNXeVRMR3U3Q3BtQ1VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzBVBAIAATBPAwQHBcYAAwQH TVYAAwQHU2SAAwQHV2YAAwQGXkjAAwQEn/1AAwQGsk5AAwQCubzoAwQFws8AMAsD BAbCz0ADAwTCwAMEBdQyoAMEB9X5gDANBgkqhkiG9w0BAQsFAAOCAQEAMcAJ//XQ TphzArm4LHAMgpzxgCb2ri2f6/nKCSKgiyyZTJCp6S5gjbrsZT04Jfgu32Y682fz +Lj1Iiwv/y7cW7DmvZrrY0amz0fnU/IcCOd1lB6U7VZVTKRzNoJH+pGaHXBgCluw fmMzHbflWYK88ZzwvLkV/6yJPYf+V7p+wHu1pag9RyUCpaQVgOH9L2i+rwYFJg1Z Ls6bHop4bCS+VvVabzpNudkXaOfiq50thA+7RZUbNpxfYJl25BFb3lOsbG7ZvrGz PyI+wownFbB7h27lRwcC9BxcGUyfQPUGTovfQ81eZfUh3c1x7ySc7ei2JOkAN1U1 Lv2oM/MTxziZ8A== -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:55 2026 by rpki-client