This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/oEr0iaXnd0sYycCq7BAkuxMnYgU.roa File: oEr0iaXnd0sYycCq7BAkuxMnYgU.roa (raw, json) Hash identifier: htrjhsBScBfwfdBlz2NkGUVVLsJ41MJX7K3Gfxtec48= Subject key identifier: A0:4A:F4:89:A5:E7:77:4B:18:C9:C0:AA:EC:10:24:BB:13:27:62:05 Certificate issuer: /CN=66507077ce7f30fc0686dd0934a89997df31e84c Certificate serial: 019B7D5ACCD4D2C4156D3BD9775BD290E761 Authority key identifier: 66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/oEr0iaXnd0sYycCq7BAkuxMnYgU.roa Signing time: Fri 02 Jan 2026 06:17:41 +0000 ROA not before: Fri 02 Jan 2026 06:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202527 IP address blocks: 193.111.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:cc:d4:d2:c4:15:6d:3b:d9:77:5b:d2:90:e7:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66507077ce7f30fc0686dd0934a89997df31e84c Validity Not Before: Jan 2 06:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a04af489a5e7774b18c9c0aaec1024bb13276205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bb:9f:77:df:0d:5b:5a:11:67:26:37:fc:cf: 3e:26:86:be:80:fc:ef:49:18:59:83:06:b7:2b:01: bb:23:d6:3c:f5:ae:60:4e:cd:d5:c9:4d:33:86:d2: 8b:75:ee:84:c0:16:5b:30:5f:4a:68:18:76:91:4d: 80:1f:b6:46:d2:0e:3f:81:7c:ea:87:f2:4c:b3:0a: a3:e0:e0:2d:c5:3b:2e:98:b9:69:74:64:f8:63:97: 12:f3:a8:14:47:6e:9e:f0:b2:5d:81:2f:1f:1c:15: b2:66:07:2c:ff:11:8b:02:11:a1:46:d8:77:63:60: 8b:c9:44:0f:b9:c6:14:b1:6c:1d:5a:1f:f4:d1:08: 06:42:74:2e:33:f4:56:b0:46:15:5e:b6:ac:f8:2c: 8f:78:90:f6:c3:41:d8:06:9e:1f:56:2f:26:6f:74: e5:20:71:ac:82:b4:ef:79:ed:64:81:7b:cb:4a:9c: 3e:1d:4f:42:4b:56:07:e5:ef:77:f2:e0:c8:31:22: 8c:5a:5e:43:d7:78:6e:fb:30:15:cc:29:78:97:1f: f6:36:01:47:2b:1f:ca:00:a7:ea:12:98:5a:f2:dc: 58:b8:2c:c7:e0:33:76:8d:7f:a1:80:1b:20:3a:84: 73:be:ba:d3:c3:19:ec:90:38:2e:5b:9f:ae:4e:56: 7a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4A:F4:89:A5:E7:77:4B:18:C9:C0:AA:EC:10:24:BB:13:27:62:05 X509v3 Authority Key Identifier: keyid:66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/oEr0iaXnd0sYycCq7BAkuxMnYgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.47.0/24 Signature Algorithm: sha256WithRSAEncryption 54:48:cd:72:14:c8:93:35:32:a6:2e:e3:71:bd:47:e8:15:39: 96:c2:cb:76:a7:09:8a:7c:1d:b8:30:3e:67:36:d3:ab:33:fd: 38:37:0b:55:d5:d3:93:95:30:3f:a0:35:29:ba:aa:c5:59:49: ed:a9:24:56:26:c5:bc:fe:b3:23:56:de:26:5a:e1:ce:33:77: 60:51:a6:d8:33:eb:79:30:3c:57:ee:f1:d8:f8:a3:b0:83:d9: 81:68:f6:8b:95:8d:84:1b:2c:89:15:20:2b:ff:23:a1:26:13: cd:7c:c4:b5:a6:7b:0c:45:5b:19:70:4f:a0:8c:58:9f:39:bc: ee:69:db:05:13:61:3b:6c:7c:cd:75:da:19:a6:3f:5f:e5:59: a0:63:2e:f2:ef:b3:5f:6b:12:e6:b1:47:d9:7c:9b:b6:9a:d5: 56:99:a2:d5:7c:64:a1:89:87:e5:34:3f:3e:b9:e7:df:54:11: e8:2d:9e:a1:51:a4:7b:14:9d:d9:24:4e:e6:90:a2:8e:d7:75: 49:08:23:f4:2e:71:1f:8c:83:8c:e0:9f:7a:8d:3d:0a:36:1a: c3:a0:06:c9:18:a5:e9:73:e7:86:55:9e:f1:ff:9e:c5:1b:d7: c0:04:3a:5e:0a:38:f6:ea:b4:71:ba:67:c9:4f:89:a5:0b:5a: dc:b6:64:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WszU0sQVbTvZd1vSkOdhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NTA3MDc3Y2U3ZjMwZmMwNjg2ZGQwOTM0YTg5OTk3ZGYz MWU4NGMwHhcNMjYwMTAyMDYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDRhZjQ4OWE1ZTc3NzRiMThjOWMwYWFlYzEwMjRiYjEzMjc2MjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrufd98NW1oRZyY3/M8+Joa+gPzv SRhZgwa3KwG7I9Y89a5gTs3VyU0zhtKLde6EwBZbMF9KaBh2kU2AH7ZG0g4/gXzq h/JMswqj4OAtxTsumLlpdGT4Y5cS86gUR26e8LJdgS8fHBWyZgcs/xGLAhGhRth3 Y2CLyUQPucYUsWwdWh/00QgGQnQuM/RWsEYVXras+CyPeJD2w0HYBp4fVi8mb3Tl IHGsgrTvee1kgXvLSpw+HU9CS1YH5e938uDIMSKMWl5D13hu+zAVzCl4lx/2NgFH Kx/KAKfqEpha8txYuCzH4DN2jX+hgBsgOoRzvrrTwxnskDguW5+uTlZ6iwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKBK9Iml53dLGMnAquwQJLsTJ2IFMB8GA1UdIwQY MBaAFGZQcHfOfzD8BobdCTSomZffMehMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hMzYzNjUtODU1Mi00YTk3LThiZmEt Y2NhZjQ0ZDQxNjQ4LzEvb0VyMGlhWG5kMHNZeWNDcTdCQWt1eE1uWWdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hMzYzNjUtODU1Mi00YTk3LThiZmEtY2NhZjQ0ZDQxNjQ4 LzEvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW8vMA0G CSqGSIb3DQEBCwUAA4IBAQBUSM1yFMiTNTKmLuNxvUfoFTmWwst2pwmKfB24MD5n NtOrM/04NwtV1dOTlTA/oDUpuqrFWUntqSRWJsW8/rMjVt4mWuHOM3dgUabYM+t5 MDxX7vHY+KOwg9mBaPaLlY2EGyyJFSAr/yOhJhPNfMS1pnsMRVsZcE+gjFifObzu adsFE2E7bHzNddoZpj9f5VmgYy7y77NfaxLmsUfZfJu2mtVWmaLVfGShiYflND8+ ueffVBHoLZ6hUaR7FJ3ZJE7mkKKO13VJCCP0LnEfjIOM4J96jT0KNhrDoAbJGKXp c+eGVZ7x/57FG9fABDpeCjj26rRxumfJT4mlC1rctmSU -----END CERTIFICATE-----Generated at Mon Jan 5 13:15:11 2026 by rpki-client