This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/oxu0GmrQ5_piXLI7Mf7_jeVm9eU.roa File: oxu0GmrQ5_piXLI7Mf7_jeVm9eU.roa (raw, json) Hash identifier: GJ6aUk4H8magSU3n7bIt4f5oeneg+QR+DzjJ9j+ifeE= Subject key identifier: A3:1B:B4:1A:6A:D0:E7:FA:62:5C:B2:3B:31:FE:FF:8D:E5:66:F5:E5 Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019B76EB196925848BD7950B813B8266A383 Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/oxu0GmrQ5_piXLI7Mf7_jeVm9eU.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200239 IP address blocks: 193.106.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:19:69:25:84:8b:d7:95:0b:81:3b:82:66:a3:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a31bb41a6ad0e7fa625cb23b31feff8de566f5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:76:4d:fb:69:48:60:59:b4:78:07:17:44: 04:05:94:bd:21:a4:b8:3f:5d:64:e8:ca:c3:6f:8b: f5:db:e2:5b:06:65:e1:80:ff:ab:ff:fd:01:ed:92: a7:34:db:0f:86:8d:7b:d8:47:ee:ac:39:02:ba:45: 3b:b4:e3:3c:9f:a6:9f:4b:c2:51:5e:bb:15:39:bb: 92:96:5e:4e:4a:30:f7:ce:62:46:4a:7a:6e:3a:cf: e5:00:d9:9c:9f:8e:0b:1c:a2:ad:fa:12:64:2c:b4: 7c:e9:c8:b0:a5:64:f8:db:9e:00:c1:86:d3:18:a6: 4e:cd:b4:4f:8e:85:38:2d:13:e0:af:81:18:ce:c8: 1f:d8:26:6d:7a:a7:24:47:a4:48:15:6c:42:30:58: 00:b9:ec:df:b1:4c:af:3b:d5:b0:44:99:eb:14:53: 16:01:37:9f:58:3b:f8:24:a5:12:df:45:3c:82:b9: 8c:45:08:95:bc:5a:9e:ef:7d:85:5d:8a:a1:65:6c: f7:b5:f5:46:cb:b1:4b:8e:b0:f4:8e:e0:a3:d2:01: ea:96:1a:0a:5e:d3:49:88:e4:49:2b:0e:34:3f:76: 46:53:93:ab:3f:2c:b0:71:9d:42:7e:08:22:cf:70: 33:8d:b5:45:16:63:f8:82:f5:bc:fb:2d:5e:6c:f9: 18:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1B:B4:1A:6A:D0:E7:FA:62:5C:B2:3B:31:FE:FF:8D:E5:66:F5:E5 X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/oxu0GmrQ5_piXLI7Mf7_jeVm9eU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.106.197.0/24 Signature Algorithm: sha256WithRSAEncryption b4:36:d8:1d:ab:27:c7:86:02:73:f5:f4:36:3d:87:75:57:37: a6:a3:24:77:44:ee:13:81:dd:61:a4:ed:07:88:af:ff:85:07: 24:e5:63:d9:11:82:ab:71:ac:96:92:ce:83:c6:ba:8f:25:70: 6d:d8:f5:18:9b:3c:e9:5a:58:35:cd:70:98:29:74:e0:1e:b5: 53:f8:5b:fa:f9:ce:5d:0c:2b:99:dc:4b:7a:6a:3f:35:d8:f8: 2e:5b:e8:be:b1:53:11:d2:00:b1:0b:10:1c:fa:f0:5f:a2:f1: c7:95:ec:ff:b0:dc:eb:af:0f:65:74:ea:9e:d7:31:c4:d9:30: 1d:66:e8:39:59:9f:61:4c:96:24:ca:2e:5e:1f:6f:22:d2:6a: 33:d8:58:75:49:c2:98:cb:a6:5b:1f:60:ae:86:ab:be:87:c5: 80:fb:c8:8d:3a:1d:5b:a6:59:3d:e6:d8:37:75:a2:00:d5:e1: 31:fe:f3:6d:a0:68:72:dd:d6:fe:c7:6d:1f:21:8d:b4:9b:56: 82:b1:36:47:14:0f:d1:9d:97:e0:b8:50:66:94:c0:6e:47:3a: 8f:5e:85:a0:10:fe:6d:9d:1e:e3:fa:e6:8d:6f:fa:2f:d8:68: 94:7d:d4:21:46:d5:bf:df:c9:6c:2d:20:6f:a4:bf:30:ab:f6: b1:77:a7:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xlpJYSL15ULgTuCZqODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzFiYjQxYTZhZDBlN2ZhNjI1Y2IyM2IzMWZlZmY4ZGU1NjZmNWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpJ2TftpSGBZtHgHF0QEBZS9IaS4 P11k6MrDb4v12+JbBmXhgP+r//0B7ZKnNNsPho172EfurDkCukU7tOM8n6afS8JR XrsVObuSll5OSjD3zmJGSnpuOs/lANmcn44LHKKt+hJkLLR86ciwpWT4254AwYbT GKZOzbRPjoU4LRPgr4EYzsgf2CZteqckR6RIFWxCMFgAuezfsUyvO9WwRJnrFFMW ATefWDv4JKUS30U8grmMRQiVvFqe732FXYqhZWz3tfVGy7FLjrD0juCj0gHqlhoK XtNJiORJKw40P3ZGU5OrPyywcZ1Cfggiz3AzjbVFFmP4gvW8+y1ebPkYfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKMbtBpq0Of6YlyyOzH+/43lZvXlMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvb3h1MEdtclE1X3BpWExJN01mN19qZVZtOWVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWrFMA0G CSqGSIb3DQEBCwUAA4IBAQC0NtgdqyfHhgJz9fQ2PYd1VzemoyR3RO4Tgd1hpO0H iK//hQck5WPZEYKrcayWks6DxrqPJXBt2PUYmzzpWlg1zXCYKXTgHrVT+Fv6+c5d DCuZ3Et6aj812PguW+i+sVMR0gCxCxAc+vBfovHHlez/sNzrrw9ldOqe1zHE2TAd Zug5WZ9hTJYkyi5eH28i0moz2Fh1ScKYy6ZbH2Cuhqu+h8WA+8iNOh1bplk95tg3 daIA1eEx/vNtoGhy3db+x20fIY20m1aCsTZHFA/RnZfguFBmlMBuRzqPXoWgEP5t nR7j+uaNb/ov2GiUfdQhRtW/38lsLSBvpL8wq/axd6cw -----END CERTIFICATE-----Generated at Tue Jan 20 15:48:19 2026 by rpki-client