This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/OIf5o3TuUaTGCWR1GyZJ8zyr1DU.roa File: OIf5o3TuUaTGCWR1GyZJ8zyr1DU.roa (raw, json) Hash identifier: Id91w3MsfuN+1fBJYgr9h61G7NpSD3kW83pc4b6qwCg= Subject key identifier: 38:87:F9:A3:74:EE:51:A4:C6:09:64:75:1B:26:49:F3:3C:AB:D4:35 Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Certificate serial: 019B7FF25F7B204C6E085E8789860F47C70C Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/OIf5o3TuUaTGCWR1GyZJ8zyr1DU.roa Signing time: Fri 02 Jan 2026 18:22:29 +0000 ROA not before: Fri 02 Jan 2026 18:22:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.102.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 00:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:5f:7b:20:4c:6e:08:5e:87:89:86:0f:47:c7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Validity Not Before: Jan 2 18:22:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3887f9a374ee51a4c60964751b2649f33cabd435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:49:a8:d2:fa:78:73:67:e5:42:7c:76:1f: d2:80:b4:c4:1c:32:3d:b2:43:0d:7c:20:08:37:75: 3d:47:2e:cd:8c:e8:1c:43:f4:20:d9:7c:40:80:04: 25:62:3c:72:e4:86:5d:87:88:52:37:2e:25:29:e8: 8e:97:1e:38:10:bc:26:62:d3:9b:b1:d7:f8:0e:fb: ed:3e:b0:73:b7:ea:d0:bb:00:10:ec:58:35:08:30: 9c:e3:e9:f2:c2:46:b6:75:1c:df:7f:d9:a2:37:af: 2e:a4:b0:aa:f9:15:69:50:5e:8b:db:32:d9:b3:12: 99:e3:f3:4e:50:14:d1:1c:1d:38:3d:ba:37:81:ba: 6b:70:19:ca:9e:f8:17:84:ca:40:f6:1b:96:a6:5b: 77:37:15:2a:4f:02:0b:87:6a:73:25:2c:b9:ca:10: cd:13:16:a5:11:a1:96:9e:d3:bd:a8:0f:4d:1e:91: 6b:83:0a:62:bb:fe:3e:76:ac:62:73:85:16:3e:8c: 1e:af:c3:1e:0f:2a:f8:ba:40:b2:50:25:15:79:39: 77:9c:21:80:7e:de:bc:77:17:a8:80:c8:68:0e:0c: cd:b8:33:d1:6d:14:5e:b4:22:d6:9a:8b:70:a5:36: 75:e6:e7:e5:5f:a8:8f:9e:1a:c2:56:72:81:ab:fa: 13:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:87:F9:A3:74:EE:51:A4:C6:09:64:75:1B:26:49:F3:3C:AB:D4:35 X509v3 Authority Key Identifier: keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/OIf5o3TuUaTGCWR1GyZJ8zyr1DU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.165.0/24 Signature Algorithm: sha256WithRSAEncryption 14:bd:50:34:b0:5c:04:95:44:83:75:16:d7:63:80:70:82:da: 05:0f:32:82:e8:f4:94:63:6e:3b:dc:0a:37:ea:71:74:f0:23: cd:5f:07:6b:fa:d8:42:37:ef:06:e5:9c:20:03:75:f5:db:0b: 93:ba:d4:a5:78:29:61:9c:a7:88:4a:33:da:8b:3e:43:6e:e8: 42:2d:59:cc:54:65:c6:7a:23:17:aa:b7:8e:22:86:25:a1:66: 2c:cd:b6:05:fa:a1:a1:a7:01:4f:5f:9c:ea:f6:19:82:77:a7: 8a:56:72:70:23:2e:24:36:93:79:98:da:d1:93:36:9d:4e:54: 19:b5:01:5e:46:20:a5:0a:d3:ea:a9:73:8a:51:fb:61:e7:fb: 94:d4:4a:15:e1:55:ed:21:ab:74:28:07:cf:45:c0:32:1d:d6: f6:80:a2:05:37:09:fe:59:8b:a1:dc:5c:aa:cc:d4:52:93:d9: 4f:4c:8f:53:1a:12:07:4a:10:45:2d:74:4f:ce:7a:6b:f8:a1: 14:50:06:3a:8c:91:d4:4f:b2:1f:aa:8b:8f:2e:bc:03:e5:2f: 44:d3:73:6b:11:d3:52:b2:e5:5a:e7:23:20:a7:22:f9:43:b0: 3a:e4:9b:2b:09:fe:55:e6:36:1c:6a:c4:e4:4d:d2:1b:e7:96: 00:ef:b2:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8l97IExuCF6HiYYPR8cMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5 ZmMyYzkwHhcNMjYwMTAyMTgyMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODg3ZjlhMzc0ZWU1MWE0YzYwOTY0NzUxYjI2NDlmMzNjYWJkNDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIRJqNL6eHNn5UJ8dh/SgLTEHDI9 skMNfCAIN3U9Ry7NjOgcQ/Qg2XxAgAQlYjxy5IZdh4hSNy4lKeiOlx44ELwmYtOb sdf4DvvtPrBzt+rQuwAQ7Fg1CDCc4+nywka2dRzff9miN68upLCq+RVpUF6L2zLZ sxKZ4/NOUBTRHB04Pbo3gbprcBnKnvgXhMpA9huWplt3NxUqTwILh2pzJSy5yhDN ExalEaGWntO9qA9NHpFrgwpiu/4+dqxic4UWPower8MeDyr4ukCyUCUVeTl3nCGA ft68dxeogMhoDgzNuDPRbRRetCLWmotwpTZ15uflX6iPnhrCVnKBq/oTUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDiH+aN07lGkxglkdRsmSfM8q9Q1MB8GA1UdIwQY MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct MWM2ZWU0NGUxMWFkLzEvT0lmNW8zVHVVYVRHQ1dSMUd5Wko4enlyMURVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2alMA0G CSqGSIb3DQEBCwUAA4IBAQAUvVA0sFwElUSDdRbXY4BwgtoFDzKC6PSUY2473Ao3 6nF08CPNXwdr+thCN+8G5ZwgA3X12wuTutSleClhnKeISjPaiz5DbuhCLVnMVGXG eiMXqreOIoYloWYszbYF+qGhpwFPX5zq9hmCd6eKVnJwIy4kNpN5mNrRkzadTlQZ tQFeRiClCtPqqXOKUfth5/uU1EoV4VXtIat0KAfPRcAyHdb2gKIFNwn+WYuh3Fyq zNRSk9lPTI9TGhIHShBFLXRPznpr+KEUUAY6jJHUT7IfqouPLrwD5S9E03NrEdNS suVa5yMgpyL5Q7A65JsrCf5V5jYcasTkTdIb55YA77Ib -----END CERTIFICATE-----Generated at Sat Jan 17 06:45:58 2026 by rpki-client