This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/Oe7wTUeOifNOrZPE6s11kQOKX-4.roa File: Oe7wTUeOifNOrZPE6s11kQOKX-4.roa (raw, json) Hash identifier: gsLsf04/fdLsccMrWMJ4qLZbQv2ayrUfRSE5fjnchYc= Subject key identifier: 39:EE:F0:4D:47:8E:89:F3:4E:AD:93:C4:EA:CD:75:91:03:8A:5F:EE Certificate issuer: /CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e Certificate serial: 019B775964FE4494CC1749C42BB9F41AB433 Authority key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/Oe7wTUeOifNOrZPE6s11kQOKX-4.roa Signing time: Thu 01 Jan 2026 02:18:25 +0000 ROA not before: Thu 01 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51616 IP address blocks: 92.119.48.0/23 maxlen: 23 92.119.50.0/24 maxlen: 24 92.119.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:64:fe:44:94:cc:17:49:c4:2b:b9:f4:1a:b4:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39eef04d478e89f34ead93c4eacd7591038a5fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d8:77:45:3f:1c:91:bf:39:7b:d5:03:76:2b: a4:76:6a:c0:70:39:b4:d7:11:db:3f:a7:67:0e:c5: 30:d8:f4:55:b5:a6:fc:10:c7:fa:48:5e:e3:6f:3f: 23:7d:15:4c:ba:73:7a:ee:34:ff:d4:20:63:60:66: 5e:9a:16:54:86:75:1b:ec:24:7a:21:b3:33:77:9f: c3:da:fa:b4:c2:0e:2f:af:71:ec:51:7d:f2:eb:c5: 03:17:7e:4b:7e:5a:2f:2e:5d:2e:6c:0b:8d:dd:6b: 72:9b:7b:f1:e1:bc:0c:01:10:12:58:ba:b0:54:54: 1c:53:c7:e4:6c:1f:83:3a:05:76:29:05:1e:c5:dd: 68:b0:52:4e:14:c0:cb:e3:0e:c5:99:5c:dc:0f:7c: 88:0b:14:e8:fc:46:7e:cb:5b:1e:43:5a:69:99:27: 4d:01:3e:38:1f:a9:d2:38:14:fd:b1:aa:5b:9f:a7: 09:6e:ac:bd:6b:21:50:28:77:0c:a3:85:1d:25:86: 0a:92:53:8c:bf:14:54:50:2c:82:37:8b:89:d6:38: a1:03:97:5b:b1:67:b7:6d:7d:49:0f:21:23:33:d4: 75:12:10:d1:77:b5:c6:6f:b1:a7:c4:9c:5b:1f:24: 91:9d:24:46:39:6f:7d:15:6c:00:3f:02:e2:cd:b8: 5d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EE:F0:4D:47:8E:89:F3:4E:AD:93:C4:EA:CD:75:91:03:8A:5F:EE X509v3 Authority Key Identifier: keyid:23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/Oe7wTUeOifNOrZPE6s11kQOKX-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.48.0/22 Signature Algorithm: sha256WithRSAEncryption 20:a7:06:4e:8d:74:36:7d:71:bd:a8:24:1e:ee:03:db:74:a1: 56:b0:00:8f:68:be:f3:95:c9:93:fa:73:e4:03:3a:ab:67:96: 8f:55:da:28:63:3e:ed:da:4a:c3:3f:ea:ef:c8:57:a8:7d:50: 12:58:6c:67:83:9c:7c:a7:e4:b0:f5:83:7e:15:77:72:29:f6: b3:c3:98:90:b6:5e:84:b1:29:31:f9:f3:c3:6e:0d:75:9d:b2: a4:77:85:3d:e0:72:54:7d:2d:fa:30:fa:d4:fa:e9:47:68:d6: 20:68:fd:bd:49:20:e4:96:d8:27:ee:30:9f:6e:4b:e5:25:90: 7e:0f:f7:c6:7e:38:7b:54:86:f1:f2:ee:ba:ee:e7:c6:3f:4d: 8e:4e:03:79:1d:c4:fc:a2:22:78:a9:ff:59:9e:1c:ff:91:ce: 48:f9:f1:06:18:17:9e:f1:3c:d7:b4:c4:ef:ff:13:65:a6:b4: a9:6f:e3:5c:43:8c:6a:20:6c:78:28:7a:89:57:07:ff:8e:f1: 47:41:4d:92:c1:41:2f:44:00:50:d5:1b:a9:67:69:24:ce:af: a5:8a:b2:1f:71:44:04:94:3b:b6:cd:a1:5d:21:28:50:fd:ac: 43:c0:9e:c1:22:3a:54:15:da:91:fa:10:29:b6:7f:05:fb:34: 4f:90:80:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WWT+RJTMF0nEK7n0GrQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMDVhZTA2MjEyZjNjMmY4ZjU3M2EwYjU0OTI0NDFlNThm MjFjNGUwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWVlZjA0ZDQ3OGU4OWYzNGVhZDkzYzRlYWNkNzU5MTAzOGE1ZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Nh3RT8ckb85e9UDdiukdmrAcDm0 1xHbP6dnDsUw2PRVtab8EMf6SF7jbz8jfRVMunN67jT/1CBjYGZemhZUhnUb7CR6 IbMzd5/D2vq0wg4vr3HsUX3y68UDF35LflovLl0ubAuN3Wtym3vx4bwMARASWLqw VFQcU8fkbB+DOgV2KQUexd1osFJOFMDL4w7FmVzcD3yICxTo/EZ+y1seQ1ppmSdN AT44H6nSOBT9sapbn6cJbqy9ayFQKHcMo4UdJYYKklOMvxRUUCyCN4uJ1jihA5db sWe3bX1JDyEjM9R1EhDRd7XGb7GnxJxbHySRnSRGOW99FWwAPwLizbhdeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDnu8E1HjonzTq2TxOrNdZEDil/uMB8GA1UdIwQY MBaAFCMFrgYhLzwvj1c6C1SSRB5Y8hxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdXdUJpRXZQQy1QVnpvTFZKSkVIbGp5SEU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9hNmNhZGUtZDQyNS00ZDg5LWEwYzEt Y2Y2YjIzZDI2MTdjLzEvT2U3d1RVZU9pZk5PclpQRTZzMTFrUU9LWC00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9hNmNhZGUtZDQyNS00ZDg5LWEwYzEtY2Y2YjIzZDI2MTdj LzEvSXdXdUJpRXZQQy1QVnpvTFZKSkVIbGp5SEU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXHcwMA0G CSqGSIb3DQEBCwUAA4IBAQAgpwZOjXQ2fXG9qCQe7gPbdKFWsACPaL7zlcmT+nPk AzqrZ5aPVdooYz7t2krDP+rvyFeofVASWGxng5x8p+Sw9YN+FXdyKfazw5iQtl6E sSkx+fPDbg11nbKkd4U94HJUfS36MPrU+ulHaNYgaP29SSDkltgn7jCfbkvlJZB+ D/fGfjh7VIbx8u667ufGP02OTgN5HcT8oiJ4qf9Znhz/kc5I+fEGGBee8TzXtMTv /xNlprSpb+NcQ4xqIGx4KHqJVwf/jvFHQU2SwUEvRABQ1RupZ2kkzq+lirIfcUQE lDu2zaFdIShQ/axDwJ7BIjpUFdqR+hAptn8F+zRPkIDP -----END CERTIFICATE-----Generated at Thu Jan 1 15:35:13 2026 by rpki-client