This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/Oce8w_FStQrxz5-sGyZ5GI_yylQ.roa File: Oce8w_FStQrxz5-sGyZ5GI_yylQ.roa (raw, json) Hash identifier: /gUG2XD9ZyXjCehDc7TUgIzStA7kApp9jArOXsYwwL4= Subject key identifier: 39:C7:BC:C3:F1:52:B5:0A:F1:CF:9F:AC:1B:26:79:18:8F:F2:CA:54 Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a Certificate serial: 019B7E3832AF1954B4C4C0FD9CEF09D1FAB9 Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/Oce8w_FStQrxz5-sGyZ5GI_yylQ.roa Signing time: Fri 02 Jan 2026 10:19:30 +0000 ROA not before: Fri 02 Jan 2026 10:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 145.83.4.0/23 maxlen: 23 145.83.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:32:af:19:54:b4:c4:c0:fd:9c:ef:09:d1:fa:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a Validity Not Before: Jan 2 10:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39c7bcc3f152b50af1cf9fac1b2679188ff2ca54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:7b:b6:83:38:2e:03:c3:11:58:fc:93:2f: 59:60:d2:ba:9f:0d:60:57:2d:64:a5:3c:03:7f:92: 6c:60:de:8a:60:85:84:c7:9e:fa:d5:7c:03:0f:e9: 10:bb:9b:fc:80:70:37:59:f2:c7:4a:22:eb:e6:ab: 9a:d2:18:3b:9d:97:5a:ba:e6:3c:c5:3b:a9:f5:b3: 2d:14:a0:71:a8:25:69:c9:a1:cc:c2:2c:27:0e:e9: a3:3d:52:e4:d4:10:87:9e:57:1f:fe:af:c0:00:f8: cb:03:fc:c9:41:4c:1b:d5:dd:ff:73:14:77:7c:34: 19:41:f8:83:74:7b:9b:d4:aa:de:73:43:99:0a:39: 1f:a4:46:f4:87:a7:63:46:4b:32:2a:92:9c:c2:2f: e6:7c:fe:4d:55:cf:6c:cd:99:78:e1:dd:af:e6:21: ba:41:83:45:04:30:ec:b0:6f:af:4e:ff:93:01:a7: 48:82:8c:c3:b5:43:f6:90:61:4f:2c:60:81:a7:be: 33:0c:1e:b9:7b:fc:15:14:69:b1:0e:e6:3a:29:53: 3c:46:38:83:36:d3:9f:2d:cc:f4:18:6d:b5:09:06: 50:ed:c6:d3:d2:0b:ed:d6:5e:30:b6:90:51:d1:cb: ca:3e:03:28:07:68:39:cb:e7:1c:db:cf:ea:b2:11: 22:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C7:BC:C3:F1:52:B5:0A:F1:CF:9F:AC:1B:26:79:18:8F:F2:CA:54 X509v3 Authority Key Identifier: keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/Oce8w_FStQrxz5-sGyZ5GI_yylQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.83.4.0/22 Signature Algorithm: sha256WithRSAEncryption 84:4b:84:08:a3:b9:51:93:d9:d5:61:95:a3:f2:04:17:e1:7b: 49:8e:c7:77:39:76:26:20:97:89:f5:25:69:5e:ba:97:54:5d: 47:bd:2b:54:6d:ba:e4:d5:a5:66:c5:6e:c4:b8:6b:6e:aa:0c: b5:7b:40:41:95:fc:75:13:af:b0:c2:97:bc:e4:87:b2:3b:8b: 53:46:7f:af:63:bc:3c:e2:14:a1:8c:7f:d0:2d:59:0d:57:0f: 2e:21:c9:e7:6b:60:cf:f2:1f:4c:d5:44:7d:e1:07:fc:f4:13: b0:6a:24:0f:25:a3:fd:79:f4:9b:3d:30:52:47:df:85:3a:19: 30:f4:7d:71:fa:55:ab:83:3d:07:86:dc:19:d3:42:89:1f:0d: 4b:b5:6a:aa:f7:6c:ae:3c:a4:d0:c0:2a:ab:75:75:b6:16:e0: 0d:69:56:b6:b7:b5:a6:e3:79:2c:e4:04:c9:78:df:6f:6f:e5: 0c:a3:8c:4f:4d:13:f0:b3:5f:01:1d:1f:63:0b:58:1d:cd:db: a9:cf:f8:78:75:fa:dc:ff:e0:a6:bb:96:78:25:17:2e:7f:98: a3:0f:f8:95:08:ed:0d:f7:6e:11:c3:f6:90:f2:d4:c8:50:ea: d7:43:05:36:13:dd:b3:9c:b5:91:96:12:e2:6e:ac:2b:ad:b3: 38:c5:12:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ODKvGVS0xMD9nO8J0fq5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczM2IwNzI4YjdhMDU0MzU4NGMyY2QwYjQ4Yjc0NzhjNDE5 NGVmMGEwHhcNMjYwMTAyMTAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWM3YmNjM2YxNTJiNTBhZjFjZjlmYWMxYjI2NzkxODhmZjJjYTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbl7toM4LgPDEVj8ky9ZYNK6nw1g Vy1kpTwDf5JsYN6KYIWEx5761XwDD+kQu5v8gHA3WfLHSiLr5qua0hg7nZdauuY8 xTup9bMtFKBxqCVpyaHMwiwnDumjPVLk1BCHnlcf/q/AAPjLA/zJQUwb1d3/cxR3 fDQZQfiDdHub1Krec0OZCjkfpEb0h6djRksyKpKcwi/mfP5NVc9szZl44d2v5iG6 QYNFBDDssG+vTv+TAadIgozDtUP2kGFPLGCBp74zDB65e/wVFGmxDuY6KVM8RjiD NtOfLcz0GG21CQZQ7cbT0gvt1l4wtpBR0cvKPgMoB2g5y+cc28/qshEiQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDnHvMPxUrUK8c+frBsmeRiP8spUMB8GA1UdIwQY MBaAFHM7Byi3oFQ1hMLNC0i3R4xBlO8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hODM0ZGEtMWNjYS00MDE3LTkwYjgt ZGFlZTBhZWFmYjJiLzEvT2NlOHdfRlN0UXJ4ejUtc0d5WjVHSV95eWxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9hODM0ZGEtMWNjYS00MDE3LTkwYjgtZGFlZTBhZWFmYjJi LzEvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkVMEMA0G CSqGSIb3DQEBCwUAA4IBAQCES4QIo7lRk9nVYZWj8gQX4XtJjsd3OXYmIJeJ9SVp XrqXVF1HvStUbbrk1aVmxW7EuGtuqgy1e0BBlfx1E6+wwpe85IeyO4tTRn+vY7w8 4hShjH/QLVkNVw8uIcnna2DP8h9M1UR94Qf89BOwaiQPJaP9efSbPTBSR9+FOhkw 9H1x+lWrgz0HhtwZ00KJHw1LtWqq92yuPKTQwCqrdXW2FuANaVa2t7Wm43ks5ATJ eN9vb+UMo4xPTRPws18BHR9jC1gdzdupz/h4dfrc/+Cmu5Z4JRcuf5ijD/iVCO0N 924Rw/aQ8tTIUOrXQwU2E92znLWRlhLibqwrrbM4xRKP -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:38 2026 by rpki-client