This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/OEDEDYA3SYXxsiHcF8-A5cjLPNk.roa File: OEDEDYA3SYXxsiHcF8-A5cjLPNk.roa (raw, json) Hash identifier: r9PEpvr7wKafvI4ropP5Z5RymqQ4mqOf4OSTnA4BsLQ= Subject key identifier: 38:40:C4:0D:80:37:49:85:F1:B2:21:DC:17:CF:80:E5:C8:CB:3C:D9 Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996 Certificate serial: 019B797ED1809EEA3F25DACD55DCA103B4C9 Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/OEDEDYA3SYXxsiHcF8-A5cjLPNk.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211274 IP address blocks: 193.56.11.0/24 maxlen: 24 2a0b:4740::/32 maxlen: 32 2a0b:4741::/32 maxlen: 32 2a0b:4742::/32 maxlen: 32 2a0b:4743::/32 maxlen: 32 2a0b:4744::/32 maxlen: 32 2a0b:4745::/32 maxlen: 32 2a0b:4746::/32 maxlen: 32 2a0b:4747::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d1:80:9e:ea:3f:25:da:cd:55:dc:a1:03:b4:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3840c40d80374985f1b221dc17cf80e5c8cb3cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:24:65:d7:31:11:a3:5a:2d:a3:88:a9:c1:8d: 31:51:50:b2:62:c3:66:40:e0:8e:fb:10:d7:c0:c5: f8:9d:c5:88:09:c6:06:79:4f:a7:97:9c:df:70:85: c0:00:1e:e6:38:d4:d1:ef:af:c4:36:46:cf:b1:60: dd:9a:84:1c:93:b6:4a:58:09:d2:8b:1f:b8:73:64: cb:6b:40:e3:df:1e:b1:f5:dd:0b:c6:ea:17:e2:2f: 78:f5:92:4e:f0:6a:5d:68:41:00:1a:cb:59:74:70: c9:ca:8d:88:de:5e:65:48:ac:9d:1e:88:2c:7c:a9: b1:87:03:38:b5:fb:43:1a:22:11:a2:8c:0e:f2:a9: 22:c2:30:0a:20:92:2c:d3:2b:da:93:1e:5d:87:7a: 8a:58:39:d8:67:6f:9c:f8:fa:7f:34:a8:7e:ca:c5: c2:c4:68:6b:fe:41:0c:21:1a:5b:57:eb:f1:32:fd: 56:8b:e9:6a:13:2a:36:78:fe:9c:bb:1d:df:56:cc: 15:68:cf:7e:01:3e:9b:1f:b3:a7:62:7e:ae:7f:bf: e9:82:70:13:71:ec:ae:7f:1d:14:2d:18:4a:c0:dd: 27:63:33:5b:cb:2f:60:c4:de:5c:c8:e0:4d:b7:02: 1e:4b:eb:cf:af:56:0f:52:ce:14:02:5e:11:cc:0f: 3d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:40:C4:0D:80:37:49:85:F1:B2:21:DC:17:CF:80:E5:C8:CB:3C:D9 X509v3 Authority Key Identifier: keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/OEDEDYA3SYXxsiHcF8-A5cjLPNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.11.0/24 IPv6: 2a0b:4740::/29 Signature Algorithm: sha256WithRSAEncryption d2:1e:e0:bc:70:71:e8:f3:c8:67:f9:fb:70:f3:94:d0:71:d8: b7:76:0c:8c:dc:c3:55:95:3c:7a:5c:f7:13:9c:aa:7b:f7:a8: 70:a1:01:79:9d:29:0f:4e:34:8a:7f:85:b0:cd:23:f5:7c:0d: 77:72:d6:2d:1e:a6:eb:04:67:32:98:be:24:18:80:e7:f0:fe: 5b:f0:13:f1:87:ef:9e:82:45:7f:78:13:af:a2:9a:35:0a:f3: 2f:d1:f4:50:93:22:0d:03:bd:43:e6:b8:d9:fe:cd:a1:28:fb: fa:d4:0a:9f:73:01:f2:0d:84:12:50:04:33:9b:7d:06:18:1c: e7:5d:84:30:55:4c:5d:35:ed:49:e6:ab:ef:0b:e2:a9:4e:bc: 56:cd:25:10:9b:91:4d:e3:03:0a:08:2e:67:52:c4:52:78:83: 2b:10:bc:a1:f2:08:23:e7:54:91:c8:06:86:23:85:c3:76:1b: 93:77:2f:78:8c:e8:b7:9a:e3:73:9a:27:cb:ba:0a:85:0b:19: 75:74:0b:ca:0e:7d:97:02:4d:86:9c:15:f5:cb:16:8d:ee:a2: 40:cd:29:93:85:b3:ea:b5:79:d5:f7:06:7c:ca:a2:db:18:3c: eb:5f:93:e9:93:9a:ad:ed:06:da:da:b1:17:f0:1f:cc:45:30: bf:a7:25:99 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ftGAnuo/JdrNVdyhA7TJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NDE3ZGE4YWE0ZmUwYjhjZmYxODg0MTJlZWRkYTYzY2Jk Y2Y5OTYwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODQwYzQwZDgwMzc0OTg1ZjFiMjIxZGMxN2NmODBlNWM4Y2IzY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSRl1zERo1oto4ipwY0xUVCyYsNm QOCO+xDXwMX4ncWICcYGeU+nl5zfcIXAAB7mONTR76/ENkbPsWDdmoQck7ZKWAnS ix+4c2TLa0Dj3x6x9d0LxuoX4i949ZJO8GpdaEEAGstZdHDJyo2I3l5lSKydHogs fKmxhwM4tftDGiIRoowO8qkiwjAKIJIs0yvakx5dh3qKWDnYZ2+c+Pp/NKh+ysXC xGhr/kEMIRpbV+vxMv1Wi+lqEyo2eP6cux3fVswVaM9+AT6bH7OnYn6uf7/pgnAT ceyufx0ULRhKwN0nYzNbyy9gxN5cyOBNtwIeS+vPr1YPUs4UAl4RzA89zQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDhAxA2AN0mF8bIh3BfPgOXIyzzZMB8GA1UdIwQY MBaAFGhBfaiqT+C4z/GIQS7t2mPL3PmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYt NGQ1MzdjZjAxODA5LzEvT0VERURZQTNTWVh4c2lIY0Y4LUE1Y2pMUE5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYtNGQ1MzdjZjAxODA5 LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwTgLMA0E AgACMAcDBQMqC0dAMA0GCSqGSIb3DQEBCwUAA4IBAQDSHuC8cHHo88hn+ftw85TQ cdi3dgyM3MNVlTx6XPcTnKp796hwoQF5nSkPTjSKf4WwzSP1fA13ctYtHqbrBGcy mL4kGIDn8P5b8BPxh++egkV/eBOvopo1CvMv0fRQkyINA71D5rjZ/s2hKPv61Aqf cwHyDYQSUAQzm30GGBznXYQwVUxdNe1J5qvvC+KpTrxWzSUQm5FN4wMKCC5nUsRS eIMrELyh8ggj51SRyAaGI4XDdhuTdy94jOi3muNzmifLugqFCxl1dAvKDn2XAk2G nBX1yxaN7qJAzSmThbPqtXnV9wZ8yqLbGDzrX5Ppk5qt7Qba2rEX8B/MRTC/pyWZ -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:05 2026 by rpki-client