This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/oQCJF4siUdcpboMPfHP2EbeM0ps.roa File: oQCJF4siUdcpboMPfHP2EbeM0ps.roa (raw, json) Hash identifier: IesKj0DCrmac38Ifbjs7D9byS/qB5f4vRUYllQm6ZFw= Subject key identifier: A1:00:89:17:8B:22:51:D7:29:6E:83:0F:7C:73:F6:11:B7:8C:D2:9B Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860 Certificate serial: 019B797EE76DD91C1CEAF63DF7074961F1EC Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/oQCJF4siUdcpboMPfHP2EbeM0ps.roa Signing time: Thu 01 Jan 2026 12:18:38 +0000 ROA not before: Thu 01 Jan 2026 12:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212493 IP address blocks: 193.163.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e7:6d:d9:1c:1c:ea:f6:3d:f7:07:49:61:f1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860 Validity Not Before: Jan 1 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a10089178b2251d7296e830f7c73f611b78cd29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a4:45:86:c8:45:94:a0:1f:ea:0a:1d:04:aa: bd:3f:3e:bc:bc:21:db:39:d7:71:99:42:3d:35:90: 96:b2:b2:8e:65:b3:20:0c:09:1d:22:de:ac:a3:d6: d4:98:91:6f:87:7c:a2:59:de:b2:87:03:5e:31:84: 5c:18:b0:ac:09:33:e2:6d:70:62:d1:d3:4b:5d:86: ba:70:1d:ce:27:9b:5a:f0:a1:41:05:59:72:e6:ba: a1:be:04:d9:9d:c7:66:0f:ce:71:7a:93:98:ba:03: 45:7a:29:da:30:7d:62:a8:16:3e:94:3d:6f:1d:e1: fb:fc:31:4a:51:9c:f3:18:93:7e:56:40:03:0f:28: 05:b1:86:c4:15:9a:8e:0e:df:9a:b8:76:cb:c1:bb: ed:df:a8:d5:80:4b:50:13:20:63:b8:44:09:27:78: 13:e8:7e:cd:6f:5e:82:99:3e:95:1f:f8:e7:e8:ac: 10:96:59:ad:71:58:c6:65:a1:bf:bc:94:fd:e8:6c: b5:b8:4d:34:f4:0f:e2:a8:a0:e0:dc:af:ef:d6:80: 61:a8:94:1f:5e:6f:e4:a2:ea:10:f3:49:fb:87:7f: 35:a0:04:f4:5b:ea:cc:a1:63:81:9c:66:e5:62:2d: 08:08:a4:45:48:5e:0e:3a:c4:a5:d9:2a:c9:84:e0: 4e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:00:89:17:8B:22:51:D7:29:6E:83:0F:7C:73:F6:11:B7:8C:D2:9B X509v3 Authority Key Identifier: keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/oQCJF4siUdcpboMPfHP2EbeM0ps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.49.0/24 Signature Algorithm: sha256WithRSAEncryption 08:4f:1a:8a:fd:04:c2:1a:98:28:03:cf:8a:8f:20:51:ca:dc: 92:e2:43:e9:50:29:19:17:67:64:54:e8:a6:a2:72:7c:66:f2: 7c:88:14:7c:fe:77:e6:88:66:a6:d7:1c:c5:f0:eb:58:8b:96: 42:47:4a:53:b9:c0:50:9a:44:25:61:d4:c3:60:5f:bf:a8:81: 30:48:1a:10:02:3e:a7:71:b4:11:b6:c8:5d:7c:97:40:21:ed: 33:c0:1c:b3:2d:e7:94:a4:e5:97:26:b8:d5:8c:60:0f:e7:0f: 33:6e:38:35:4e:d9:12:86:fc:cb:78:ef:5b:06:85:23:3b:53: eb:88:4a:cc:6a:a8:3c:ca:4b:98:1f:cc:e2:7a:57:e7:c9:f5: 89:04:de:17:29:bd:8a:d2:99:bc:d0:f0:6b:43:5a:0c:23:63: d4:f5:2a:a5:d3:ed:99:43:e2:fd:cb:78:8c:9c:9b:f4:72:45: e4:aa:a5:28:73:1a:a2:8d:2d:ed:ee:ad:1e:02:f7:2b:fb:ee: dd:2d:3e:2f:de:9f:3b:1a:29:1d:e9:0a:de:94:4e:ed:5d:0e: 26:73:95:16:23:f9:f1:dd:5c:d7:d5:88:54:a1:b6:a8:5f:08: f0:25:48:2c:7b:b9:f6:67:d4:21:22:ff:8a:5c:a8:4c:35:95: 3f:4b:05:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fudt2Rwc6vY99wdJYfHsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YThkODQ3MjkwNmMyMDM4YWFlYzg0YzdiM2U1NmMyMDk2 YmU4NjAwHhcNMjYwMTAxMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTAwODkxNzhiMjI1MWQ3Mjk2ZTgzMGY3YzczZjYxMWI3OGNkMjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqRFhshFlKAf6godBKq9Pz68vCHb OddxmUI9NZCWsrKOZbMgDAkdIt6so9bUmJFvh3yiWd6yhwNeMYRcGLCsCTPibXBi 0dNLXYa6cB3OJ5ta8KFBBVly5rqhvgTZncdmD85xepOYugNFeinaMH1iqBY+lD1v HeH7/DFKUZzzGJN+VkADDygFsYbEFZqODt+auHbLwbvt36jVgEtQEyBjuEQJJ3gT 6H7Nb16CmT6VH/jn6KwQllmtcVjGZaG/vJT96Gy1uE009A/iqKDg3K/v1oBhqJQf Xm/kouoQ80n7h381oAT0W+rMoWOBnGblYi0ICKRFSF4OOsSl2SrJhOBOPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKEAiReLIlHXKW6DD3xz9hG3jNKbMB8GA1UdIwQY MBaAFHSo2EcpBsIDiq7ITHs+VsIJa+hgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNGQ1MTktZTc3NC00MTVhLTkzYWIt Mzk1NmU1NmMxODM1LzEvb1FDSkY0c2lVZGNwYm9NUGZIUDJFYmVNMHBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kNGQ1MTktZTc3NC00MTVhLTkzYWItMzk1NmU1NmMxODM1 LzEvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaMxMA0G CSqGSIb3DQEBCwUAA4IBAQAITxqK/QTCGpgoA8+KjyBRytyS4kPpUCkZF2dkVOim onJ8ZvJ8iBR8/nfmiGam1xzF8OtYi5ZCR0pTucBQmkQlYdTDYF+/qIEwSBoQAj6n cbQRtshdfJdAIe0zwByzLeeUpOWXJrjVjGAP5w8zbjg1TtkShvzLeO9bBoUjO1Pr iErMaqg8ykuYH8zielfnyfWJBN4XKb2K0pm80PBrQ1oMI2PU9Sql0+2ZQ+L9y3iM nJv0ckXkqqUocxqijS3t7q0eAvcr++7dLT4v3p87Gikd6QrelE7tXQ4mc5UWI/nx 3VzX1YhUobaoXwjwJUgse7n2Z9QhIv+KXKhMNZU/SwUt -----END CERTIFICATE-----Generated at Fri Jan 9 23:45:11 2026 by rpki-client