This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Osov9DxVRVeHCty-zpxQH_azC2o.roa File: Osov9DxVRVeHCty-zpxQH_azC2o.roa (raw, json) Hash identifier: RIo349SETXAtMSkS918nK+WgWJynWchlCOtj6U3mifE= Subject key identifier: 3A:CA:2F:F4:3C:55:45:57:87:0A:DC:BE:CE:9C:50:1F:F6:B3:0B:6A Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B2B24217B606500F0962390C15203 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Osov9DxVRVeHCty-zpxQH_azC2o.roa Signing time: Fri 02 Jan 2026 06:18:05 +0000 ROA not before: Fri 02 Jan 2026 06:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214177 IP address blocks: 91.148.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:2b:24:21:7b:60:65:00:f0:96:23:90:c1:52:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3aca2ff43c554557870adcbece9c501ff6b30b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:34:5a:9b:15:17:cc:e4:3e:ef:d3:b5:a6: ff:d7:9b:3a:30:65:5d:fd:e3:f0:bb:bc:ed:9c:07: d1:c8:42:5e:41:5c:94:7f:bf:34:9a:ad:17:99:f0: 55:cf:18:65:37:e6:37:83:b8:af:6f:b4:fe:b2:90: 33:7f:11:e0:58:e3:a9:27:0a:59:8e:47:49:09:a2: cf:9f:58:dc:c3:59:51:b5:c1:d3:aa:60:8e:14:0e: df:fa:90:d6:25:8a:af:77:ef:6a:86:dd:76:8f:f8: bc:8e:e1:33:fc:c9:3c:fc:d3:f7:9d:3a:cc:c4:99: b8:a2:1b:75:f3:b0:30:f0:2a:06:ac:36:2a:9c:56: 0e:75:93:16:37:54:ba:1d:a5:b1:36:1b:03:e8:99: b3:71:93:c6:27:7f:bf:d7:54:3b:7a:dc:fc:36:e0: 4b:33:32:73:45:3b:f2:2e:a7:bb:79:4d:a8:6a:ea: 0b:f3:6e:01:f1:aa:9a:6a:01:2d:ad:76:42:6f:64: 04:4d:f6:3d:28:df:86:9e:0c:e4:c3:ca:58:98:24: cb:8a:63:27:ae:c2:86:63:5e:bd:62:4a:9d:54:79: 17:be:5b:46:80:09:a5:fc:cd:85:b8:7c:83:50:08: 8b:7d:ee:84:27:07:8c:f2:a5:7c:2d:7b:cb:84:ec: 37:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CA:2F:F4:3C:55:45:57:87:0A:DC:BE:CE:9C:50:1F:F6:B3:0B:6A X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Osov9DxVRVeHCty-zpxQH_azC2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.148.167.0/24 Signature Algorithm: sha256WithRSAEncryption 22:01:15:81:38:52:a5:53:2d:b7:a1:25:aa:f3:21:fe:47:c4: 8a:2d:7d:26:8a:31:3d:07:a0:9a:ac:e4:c7:57:87:98:a8:4a: e1:26:35:32:0a:07:d0:ae:1d:0e:41:a3:df:e7:af:72:bf:17: aa:8b:dd:fb:f0:fe:1b:f4:40:32:ae:a8:79:3b:3b:71:7d:94: 98:f8:d1:6f:4d:e9:05:54:5c:eb:91:8e:a3:c2:f4:85:13:44: 57:1b:36:73:d2:84:6e:4d:0b:d9:44:aa:f5:12:47:89:d2:75: da:d5:dd:fd:27:14:b5:21:b5:0f:20:e4:cc:5f:d9:fd:31:47: d4:82:dd:e5:75:47:9c:b7:78:27:41:cb:ac:ea:a2:f4:14:81: 65:f7:df:22:f6:b4:56:81:47:d2:12:e2:63:5a:27:d4:12:80: 6e:f6:ba:cd:d9:98:6f:07:41:cd:47:c5:69:62:bc:48:a6:33: 82:38:3f:78:e4:3e:81:15:5e:54:11:53:9f:2a:b6:ad:75:9c: 9c:f1:76:03:9d:25:05:3f:76:ed:8e:91:18:56:4b:61:86:7a: 2e:fa:78:22:7a:c7:bc:eb:c6:42:c0:50:59:46:a0:65:c4:3e: e3:8b:c7:a4:7f:04:e0:2e:c4:e8:f7:9a:19:ff:d1:5f:59:88: 76:57:6f:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WyskIXtgZQDwliOQwVIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWNhMmZmNDNjNTU0NTU3ODcwYWRjYmVjZTljNTAxZmY2YjMwYjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvU0WpsVF8zkPu/Ttab/15s6MGVd /ePwu7ztnAfRyEJeQVyUf780mq0XmfBVzxhlN+Y3g7ivb7T+spAzfxHgWOOpJwpZ jkdJCaLPn1jcw1lRtcHTqmCOFA7f+pDWJYqvd+9qht12j/i8juEz/Mk8/NP3nTrM xJm4oht187Aw8CoGrDYqnFYOdZMWN1S6HaWxNhsD6JmzcZPGJ3+/11Q7etz8NuBL MzJzRTvyLqe7eU2oauoL824B8aqaagEtrXZCb2QETfY9KN+Gngzkw8pYmCTLimMn rsKGY169YkqdVHkXvltGgAml/M2FuHyDUAiLfe6EJweM8qV8LXvLhOw3RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDrKL/Q8VUVXhwrcvs6cUB/2swtqMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvT3NvdjlEeFZSVmVIQ3R5LXpweFFIX2F6QzJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5SnMA0G CSqGSIb3DQEBCwUAA4IBAQAiARWBOFKlUy23oSWq8yH+R8SKLX0mijE9B6CarOTH V4eYqErhJjUyCgfQrh0OQaPf569yvxeqi9378P4b9EAyrqh5OztxfZSY+NFvTekF VFzrkY6jwvSFE0RXGzZz0oRuTQvZRKr1EkeJ0nXa1d39JxS1IbUPIOTMX9n9MUfU gt3ldUect3gnQcus6qL0FIFl998i9rRWgUfSEuJjWifUEoBu9rrN2ZhvB0HNR8Vp YrxIpjOCOD945D6BFV5UEVOfKratdZyc8XYDnSUFP3btjpEYVkthhnou+ngiese8 68ZCwFBZRqBlxD7ji8ekfwTgLsTo95oZ/9FfWYh2V29+ -----END CERTIFICATE-----Generated at Fri Jan 23 18:47:59 2026 by rpki-client