This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/og-DO9CncoCadS5HOAJ0BfOSnew.roa File: og-DO9CncoCadS5HOAJ0BfOSnew.roa (raw, json) Hash identifier: sKXs67ay0NB66Jdkd/yiUU/rBcBdOHYEFZ52pYLtyEc= Subject key identifier: A2:0F:83:3B:D0:A7:72:80:9A:75:2E:47:38:02:74:05:F3:92:9D:EC Certificate issuer: /CN=bbf98f8a44fd60eef6b749d214e56c811897660c Certificate serial: 019B7DCA084C3FA44A2819D6CB5EDF0C7165 Authority key identifier: BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/og-DO9CncoCadS5HOAJ0BfOSnew.roa Signing time: Fri 02 Jan 2026 08:19:11 +0000 ROA not before: Fri 02 Jan 2026 08:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 195.190.0.0/24 maxlen: 24 2001:67c:24b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 23:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:08:4c:3f:a4:4a:28:19:d6:cb:5e:df:0c:71:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf98f8a44fd60eef6b749d214e56c811897660c Validity Not Before: Jan 2 08:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a20f833bd0a772809a752e4738027405f3929dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:22:fe:16:98:11:ff:cf:14:70:d2:cb:90:16: c7:33:8f:e0:67:d3:db:0a:27:02:b4:d6:32:6f:2c: 88:f0:a0:51:78:15:57:3e:be:26:01:d7:95:71:b5: 12:d4:a1:ed:a6:5a:2d:5b:3b:5d:f1:cb:2a:1c:75: f2:88:89:96:6e:6e:69:73:88:c6:76:9e:05:84:16: 3e:4a:5a:c5:97:cd:00:a6:23:4a:89:4e:2b:6f:13: 1d:dd:aa:5c:65:6f:99:e9:0d:13:c6:22:6c:7b:cf: f0:fc:8c:22:23:3e:5d:d5:95:ae:b2:70:d3:6e:cc: 25:2a:16:0e:03:e2:73:e3:ac:9e:e3:11:c6:a9:b2: f3:ff:bc:57:44:8c:da:ce:e2:eb:6e:a6:98:e5:51: ab:0a:c2:f2:f9:20:8b:1a:03:99:1f:c8:2a:c5:72: da:77:cb:e4:80:3e:26:00:64:b8:e8:0a:43:90:96: 0b:28:09:8e:ae:f3:e1:d2:de:b9:37:2a:ee:e5:a0: d2:d9:22:2c:41:5c:83:f9:e2:60:8f:aa:d7:42:c0: 39:9c:51:1a:89:18:07:aa:8f:38:3c:79:88:64:d1: 53:e6:ae:0c:87:70:fc:b5:a5:3f:6c:78:ed:bf:ab: fa:d1:92:70:a1:f1:a6:56:d2:41:61:e6:bf:30:09: dc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0F:83:3B:D0:A7:72:80:9A:75:2E:47:38:02:74:05:F3:92:9D:EC X509v3 Authority Key Identifier: keyid:BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/og-DO9CncoCadS5HOAJ0BfOSnew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.190.0.0/24 IPv6: 2001:67c:24b4::/48 Signature Algorithm: sha256WithRSAEncryption 03:ec:2f:fd:b0:e3:83:bf:16:ec:25:b1:bb:25:77:26:92:a9: f8:5d:d8:51:72:01:45:af:81:82:90:4e:39:94:98:db:19:f6: 62:04:c2:33:2a:3a:8e:00:de:e8:67:ec:c4:e3:e7:4f:e6:7a: 0b:c5:74:41:b1:89:62:55:bf:9f:df:ab:7e:ed:09:13:53:8f: 38:75:3e:9b:90:31:33:18:be:f5:5e:81:b1:68:a2:09:f3:d0: 2e:4a:56:d4:93:90:aa:6c:60:5c:c1:df:0a:e1:10:1f:3e:24: 54:7a:5c:58:1a:5b:b8:e6:a6:ff:0e:e6:1d:58:68:ea:3f:7d: a0:5c:17:ea:74:97:08:e7:ab:2c:dc:fa:0b:ed:f4:e3:29:7a: ef:fb:dd:67:14:c6:95:ab:6f:fa:30:f4:8c:96:fd:73:6b:20: f0:26:d9:b4:ae:68:b1:03:c5:98:53:3c:84:8d:4a:d2:df:6e: 78:11:d9:8d:6e:ae:98:ad:51:5d:3d:1e:02:42:42:44:32:d6: 57:b0:06:a6:f2:80:fa:b1:4e:77:be:80:c9:67:91:10:dc:35: 10:f3:39:85:46:f5:4b:a4:62:d9:30:76:2e:f0:66:24:40:5c: 23:32:f3:d8:f6:90:ac:b7:7b:f3:12:6f:92:f4:75:cb:02:7a: 31:af:8c:82 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9yghMP6RKKBnWy17fDHFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjk4ZjhhNDRmZDYwZWVmNmI3NDlkMjE0ZTU2YzgxMTg5 NzY2MGMwHhcNMjYwMTAyMDgxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjBmODMzYmQwYTc3MjgwOWE3NTJlNDczODAyNzQwNWYzOTI5ZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSL+FpgR/88UcNLLkBbHM4/gZ9Pb CicCtNYybyyI8KBReBVXPr4mAdeVcbUS1KHtplotWztd8csqHHXyiImWbm5pc4jG dp4FhBY+SlrFl80ApiNKiU4rbxMd3apcZW+Z6Q0TxiJse8/w/IwiIz5d1ZWusnDT bswlKhYOA+Jz46ye4xHGqbLz/7xXRIzazuLrbqaY5VGrCsLy+SCLGgOZH8gqxXLa d8vkgD4mAGS46ApDkJYLKAmOrvPh0t65Nyru5aDS2SIsQVyD+eJgj6rXQsA5nFEa iRgHqo84PHmIZNFT5q4Mh3D8taU/bHjtv6v60ZJwofGmVtJBYea/MAncfQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKIPgzvQp3KAmnUuRzgCdAXzkp3sMB8GA1UdIwQY MBaAFLv5j4pE/WDu9rdJ0hTlbIEYl2YMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9tUGlrVDlZTzcydDBuU0ZPVnNnUmlYWmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wYjRiNzAtNmQ2MS00M2M2LTg5ODYt NDE5MzM5NTViNzNmLzEvb2ctRE85Q25jb0NhZFM1SE9BSjBCZk9TbmV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wYjRiNzAtNmQ2MS00M2M2LTg5ODYtNDE5MzM5NTViNzNm LzEvdV9tUGlrVDlZTzcydDBuU0ZPVnNnUmlYWmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw74AMA8E AgACMAkDBwAgAQZ8JLQwDQYJKoZIhvcNAQELBQADggEBAAPsL/2w44O/Fuwlsbsl dyaSqfhd2FFyAUWvgYKQTjmUmNsZ9mIEwjMqOo4A3uhn7MTj50/megvFdEGxiWJV v5/fq37tCRNTjzh1PpuQMTMYvvVegbFoognz0C5KVtSTkKpsYFzB3wrhEB8+JFR6 XFgaW7jmpv8O5h1YaOo/faBcF+p0lwjnqyzc+gvt9OMpeu/73WcUxpWrb/ow9IyW /XNrIPAm2bSuaLEDxZhTPISNStLfbngR2Y1urpitUV09HgJCQkQy1lewBqbygPqx Tne+gMlnkRDcNRDzOYVG9UukYtkwdi7wZiRAXCMy89j2kKy3e/MSb5L0dcsCejGv jII= -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:27 2026 by rpki-client