This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/OUSNJic16YHsFdydiuaFE2ZdqEU.roa File: OUSNJic16YHsFdydiuaFE2ZdqEU.roa (raw, json) Hash identifier: Te9uOokwyk9iyAdeUIheCIvhMu20V8m5YnWWnhDRCII= Subject key identifier: 39:44:8D:26:27:35:E9:81:EC:15:DC:9D:8A:E6:85:13:66:5D:A8:45 Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb Certificate serial: 019B797F0E6569F073E9290EB2853982A015 Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/OUSNJic16YHsFdydiuaFE2ZdqEU.roa Signing time: Thu 01 Jan 2026 12:18:48 +0000 ROA not before: Thu 01 Jan 2026 12:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35106 IP address blocks: 194.69.104.0/23 maxlen: 24 2a01:110:9008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 13:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0e:65:69:f0:73:e9:29:0e:b2:85:39:82:a0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb Validity Not Before: Jan 1 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39448d262735e981ec15dc9d8ae68513665da845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:77:35:a8:05:92:83:d5:34:ad:63:fe:44:39: 75:e5:6c:fd:a0:97:44:7c:4b:67:3e:54:66:bb:66: 3a:e9:7e:60:0a:60:8f:4c:a9:e5:ab:48:3a:e7:fb: bc:31:3a:9b:3a:fe:41:23:db:20:c6:36:fe:90:05: 22:5d:07:2d:2d:01:8a:75:b7:ae:6f:1a:ec:86:23: 9e:57:2e:28:96:06:64:2e:36:53:de:68:1e:f4:b5: 29:90:d9:05:db:0f:ac:38:b3:4f:97:48:2c:1c:43: b9:14:23:e8:a1:98:21:e0:8f:06:a1:01:8b:ad:6e: 5c:03:89:c4:90:71:79:54:ff:0a:01:77:41:e7:0a: b1:02:00:82:72:7f:f3:43:9a:50:5b:04:bb:37:1d: 04:93:0a:e2:d5:71:26:4d:5c:2c:6e:e3:d2:85:cb: 2f:a2:75:50:19:1e:0e:ac:92:e2:e0:c4:cd:b7:dc: 14:16:fa:62:94:77:77:5a:13:42:36:e5:cc:51:13: 8d:88:f6:70:76:3e:f2:ea:b6:40:1f:5a:a5:7c:48: 6c:0f:c0:0d:13:55:6c:a0:30:c3:0b:f4:50:7c:c1: 1b:5e:39:61:b0:d5:0b:d0:4a:18:76:b2:97:86:cb: 42:c0:66:39:b9:e2:97:1f:73:5a:17:16:01:ca:ca: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:44:8D:26:27:35:E9:81:EC:15:DC:9D:8A:E6:85:13:66:5D:A8:45 X509v3 Authority Key Identifier: keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/OUSNJic16YHsFdydiuaFE2ZdqEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.69.104.0/23 IPv6: 2a01:110:9008::/48 Signature Algorithm: sha256WithRSAEncryption c1:9d:2b:03:e1:33:96:5f:bc:51:1c:f4:d3:c0:59:40:c0:f9: cf:be:c5:46:7a:39:08:9f:b0:bf:09:cf:b9:13:29:f6:27:e7: 18:dd:fd:e6:17:27:cc:41:03:95:1a:f8:9f:26:1f:73:dc:c0: 1f:f6:fa:af:1a:ea:fa:90:91:9b:a1:37:ff:e6:8b:a0:0a:f7: 0d:8c:4c:4f:50:cb:58:37:2f:1a:1b:89:9e:f3:df:00:a4:31: 56:56:ee:51:05:91:de:73:ab:83:25:48:f2:39:34:fa:5e:4b: b2:67:05:70:7c:3a:e9:88:6d:ea:2d:26:4c:f4:b3:8a:5b:02: f1:58:fb:dd:25:2f:aa:08:ed:75:f4:13:ef:5a:4f:96:31:c5: bf:e3:79:3d:04:cc:bd:e0:89:cb:6e:49:0b:7f:81:50:fe:d9: 1c:b7:83:2f:54:a1:9c:78:ae:38:0f:21:b7:6d:d4:87:4b:41: 74:4b:b1:ea:ab:49:b7:8b:61:8e:33:ae:3b:72:69:24:fa:45: 66:13:76:bf:78:de:93:bc:3b:1c:ae:04:59:45:64:c6:7f:18: b7:a8:c8:db:f9:9b:59:23:b4:1c:89:a0:12:9e:58:a7:3b:f4: 97:3e:c0:93:ca:85:98:1c:d7:32:9e:ee:bb:83:bf:88:88:0a: ce:7f:de:69 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fw5lafBz6SkOsoU5gqAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZTY4ZGFmNWYwODk0NTZjMGUxZDAyMjQ1MzkzNTMxYWM1 YjhmY2IwHhcNMjYwMTAxMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTQ0OGQyNjI3MzVlOTgxZWMxNWRjOWQ4YWU2ODUxMzY2NWRhODQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3c1qAWSg9U0rWP+RDl15Wz9oJdE fEtnPlRmu2Y66X5gCmCPTKnlq0g65/u8MTqbOv5BI9sgxjb+kAUiXQctLQGKdbeu bxrshiOeVy4olgZkLjZT3mge9LUpkNkF2w+sOLNPl0gsHEO5FCPooZgh4I8GoQGL rW5cA4nEkHF5VP8KAXdB5wqxAgCCcn/zQ5pQWwS7Nx0Ekwri1XEmTVwsbuPShcsv onVQGR4OrJLi4MTNt9wUFvpilHd3WhNCNuXMURONiPZwdj7y6rZAH1qlfEhsD8AN E1VsoDDDC/RQfMEbXjlhsNUL0EoYdrKXhstCwGY5ueKXH3NaFxYBysoh+wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDlEjSYnNemB7BXcnYrmhRNmXahFMB8GA1UdIwQY MBaAFHzmja9fCJRWwOHQIkU5NTGsW4/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMt MTNhMDZhMjY5YWE4LzEvT1VTTkppYzE2WUhzRmR5ZGl1YUZFMlpkcUVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMtMTNhMDZhMjY5YWE4 LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwkVoMA8E AgACMAkDBwAqAQEQkAgwDQYJKoZIhvcNAQELBQADggEBAMGdKwPhM5ZfvFEc9NPA WUDA+c++xUZ6OQifsL8Jz7kTKfYn5xjd/eYXJ8xBA5Ua+J8mH3PcwB/2+q8a6vqQ kZuhN//mi6AK9w2MTE9Qy1g3LxobiZ7z3wCkMVZW7lEFkd5zq4MlSPI5NPpeS7Jn BXB8OumIbeotJkz0s4pbAvFY+90lL6oI7XX0E+9aT5Yxxb/jeT0EzL3gictuSQt/ gVD+2Ry3gy9UoZx4rjgPIbdt1IdLQXRLseqrSbeLYY4zrjtyaST6RWYTdr943pO8 OxyuBFlFZMZ/GLeoyNv5m1kjtByJoBKeWKc79Jc+wJPKhZgc1zKe7ruDv4iICs5/ 3mk= -----END CERTIFICATE-----Generated at Sun Jan 18 17:55:01 2026 by rpki-client