This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/OgHzARzUsqLR0u5JpwfqHPUJH3c.roa File: OgHzARzUsqLR0u5JpwfqHPUJH3c.roa (raw, json) Hash identifier: vk6noktjCviYMLCwPzDd3UOjf8ckGdWUy0fkk3R9+9M= Subject key identifier: 3A:01:F3:01:1C:D4:B2:A2:D1:D2:EE:49:A7:07:EA:1C:F5:09:1F:77 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019B36605C11C4A77AE9CC05E90F6B6BD0FF Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/OgHzARzUsqLR0u5JpwfqHPUJH3c.roa Signing time: Fri 19 Dec 2025 11:30:43 +0000 ROA not before: Fri 19 Dec 2025 11:30:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25211 IP address blocks: 94.26.3.0/24 maxlen: 24 94.26.32.0/24 maxlen: 24 94.26.38.0/24 maxlen: 24 94.26.41.0/24 maxlen: 24 94.26.42.0/24 maxlen: 24 94.26.68.0/24 maxlen: 24 94.26.69.0/24 maxlen: 24 94.26.88.0/24 maxlen: 24 192.109.139.0/24 maxlen: 24 192.109.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:60:5c:11:c4:a7:7a:e9:cc:05:e9:0f:6b:6b:d0:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Dec 19 11:30:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3a01f3011cd4b2a2d1d2ee49a707ea1cf5091f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5e:86:a2:b9:c0:2a:dc:fd:4a:96:42:bb:a6: b8:60:f6:74:dd:9f:e7:a3:ec:c7:8d:c3:69:72:bb: 5d:09:7c:4c:97:58:f5:91:a8:01:26:38:28:94:b9: 7c:26:41:59:47:2f:66:ff:b8:6a:25:86:9d:ac:97: 1b:1c:a8:29:66:be:fa:7c:c5:85:09:2b:6c:43:c0: b4:1f:5b:22:7f:ff:8d:87:dc:f3:e8:a2:87:94:ae: 8d:b4:ea:fa:59:68:50:df:03:f9:db:0d:95:98:d3: a4:06:89:4b:cb:70:d6:58:23:dc:12:57:52:f5:49: 85:a3:3b:20:4b:f8:0a:1b:96:de:d3:61:5d:a6:c4: ae:60:5e:82:1d:1c:e8:c1:49:67:35:66:cd:30:03: 8c:af:81:20:d4:b8:f8:3b:4b:dc:a9:ec:c4:26:ca: 34:b0:30:4b:98:7b:f6:5c:50:98:41:d7:55:96:af: 7d:d2:d0:42:49:95:5c:c4:ba:7b:a8:6f:ff:a2:f0: a8:64:1e:6c:00:3e:1e:19:24:81:4a:44:34:d5:4e: 1c:fd:67:1d:c1:4d:75:e3:ec:d4:99:f2:cd:ed:26: 73:80:ef:b2:7c:fb:db:c9:84:55:f4:66:39:fd:89: 87:13:df:6b:03:10:19:46:38:0e:59:fb:f1:0c:89: ff:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:01:F3:01:1C:D4:B2:A2:D1:D2:EE:49:A7:07:EA:1C:F5:09:1F:77 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/OgHzARzUsqLR0u5JpwfqHPUJH3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.26.3.0/24 94.26.32.0/24 94.26.38.0/24 94.26.41.0-94.26.42.255 94.26.68.0/23 94.26.88.0/24 192.109.139.0/24 192.109.200.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:23:f7:3f:96:8c:f1:cc:97:59:45:29:f7:73:25:6f:41:da: b7:97:f0:ed:a8:1e:88:31:0d:0f:6e:d5:2e:61:b3:b6:16:7e: 34:49:3c:74:0c:78:44:a8:0e:25:fa:d8:e7:87:a4:cd:fb:cf: b6:ea:3f:eb:b9:55:55:fc:ef:f4:f5:29:f9:2f:cc:a9:3c:2d: 34:08:06:f1:d5:5c:c3:9e:5d:90:2b:29:36:35:71:e0:62:19: e8:5c:13:c7:8c:b8:6c:31:23:03:51:c8:12:a1:74:0b:e9:09: 89:99:bc:de:e4:cf:be:b8:4f:73:cb:2f:ce:60:6c:58:98:99: fb:89:af:c3:24:63:57:cb:00:8e:ab:80:97:ef:a3:9f:76:8b: 25:d1:64:d2:e5:c3:e6:a6:ed:ae:10:91:c8:51:76:f8:c2:13: f7:2d:60:2c:cb:d2:2a:04:d5:a1:5e:81:d3:1b:05:ff:66:a9: 2d:49:41:77:0e:ec:f3:77:63:af:08:79:ee:9e:48:75:cb:a4: 9a:4c:92:69:79:b2:bd:ad:c7:30:3e:df:da:93:bc:7a:19:48: 6b:bc:95:e2:ad:ec:80:96:21:6f:11:ca:7b:06:db:2f:47:b9: 27:ac:1e:76:c2:64:fa:a3:b6:5f:81:c1:c4:89:a7:27:9e:42: 6c:b1:53:ed -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZs2YFwRxKd66cwF6Q9ra9D/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjUxMjE5MTEzMDQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTAxZjMwMTFjZDRiMmEyZDFkMmVlNDlhNzA3ZWExY2Y1MDkxZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA016GornAKtz9SpZCu6a4YPZ03Z/n o+zHjcNpcrtdCXxMl1j1kagBJjgolLl8JkFZRy9m/7hqJYadrJcbHKgpZr76fMWF CStsQ8C0H1sif/+Nh9zz6KKHlK6NtOr6WWhQ3wP52w2VmNOkBolLy3DWWCPcEldS 9UmFozsgS/gKG5be02FdpsSuYF6CHRzowUlnNWbNMAOMr4Eg1Lj4O0vcqezEJso0 sDBLmHv2XFCYQddVlq990tBCSZVcxLp7qG//ovCoZB5sAD4eGSSBSkQ01U4c/Wcd wU114+zUmfLN7SZzgO+yfPvbyYRV9GY5/YmHE99rAxAZRjgOWfvxDIn/JwIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFDoB8wEc1LKi0dLuSacH6hz1CR93MB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvT2dIekFSelVzcUxSMHU1SnB3ZnFIUFVKSDNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAXhoDAwQA XhogAwQAXhomMAwDBABeGikDBABeGioDBAFeGkQDBABeGlgDBADAbYsDBADAbcgw DQYJKoZIhvcNAQELBQADggEBAF4j9z+WjPHMl1lFKfdzJW9B2reX8O2oHogxDQ9u 1S5hs7YWfjRJPHQMeESoDiX62OeHpM37z7bqP+u5VVX87/T1KfkvzKk8LTQIBvHV XMOeXZArKTY1ceBiGehcE8eMuGwxIwNRyBKhdAvpCYmZvN7kz764T3PLL85gbFiY mfuJr8MkY1fLAI6rgJfvo592iyXRZNLlw+am7a4QkchRdvjCE/ctYCzL0ioE1aFe gdMbBf9mqS1JQXcO7PN3Y68Iee6eSHXLpJpMkml5sr2txzA+39qTvHoZSGu8leKt 7ICWIW8RynsG2y9HuSesHnbCZPqjtl+BwcSJpyeeQmyxU+0= -----END CERTIFICATE-----Generated at Sat Dec 20 18:49:44 2025 by rpki-client