This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OSa05gRWFZtfsPxc_jBOejbRU7k.roa File: OSa05gRWFZtfsPxc_jBOejbRU7k.roa (raw, json) Hash identifier: urNhGqvtD86Iwc9kNwZXdVctjDclpNjWR+i5eq9IwHU= Subject key identifier: 39:26:B4:E6:04:56:15:9B:5F:B0:FC:5C:FE:30:4E:7A:36:D1:53:B9 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A33DFF41102EA734E6A4D9B9B2359F Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OSa05gRWFZtfsPxc_jBOejbRU7k.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211673 IP address blocks: 94.156.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3d:ff:41:10:2e:a7:34:e6:a4:d9:b9:b2:35:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3926b4e60456159b5fb0fc5cfe304e7a36d153b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:68:d8:d7:79:7b:5f:ae:0c:cc:b1:b7:63:3c: 52:34:c2:a5:31:7e:f4:0f:c7:18:83:ec:f7:98:f8: 59:e2:19:dc:e5:53:13:c1:6f:f9:c4:3c:7b:a0:fc: 90:b5:67:04:b9:12:97:f7:9f:62:2b:53:13:24:11: 46:2c:cd:5f:68:5b:07:18:b1:88:90:29:99:3b:81: 8b:3e:37:bd:e4:2e:55:37:75:f3:16:f4:41:e6:8e: 33:75:02:21:c5:92:86:ff:07:74:c0:45:66:5a:14: 92:63:81:8a:07:fd:1c:4a:bb:e5:1a:35:24:7c:e0: 7a:23:ac:f0:a1:29:c5:0c:1d:a6:b8:0b:f1:fe:fa: c7:b1:77:ab:d6:8d:3e:c1:a6:a4:8f:2f:f6:f5:69: 62:e7:6d:0d:b0:3b:ae:7a:a0:7d:e4:29:0d:ef:7f: 6f:c1:3a:d2:83:41:50:3a:00:41:5e:af:dc:7b:55: bc:63:c3:75:0f:48:43:a0:7e:88:fe:35:9c:79:d4: 46:4d:8f:75:89:75:e2:ee:d4:1b:5f:c3:1d:19:db: db:09:16:3b:c5:25:96:35:c8:ec:c7:4c:83:71:ae: d7:f6:99:fa:17:f8:b3:ab:05:2c:00:63:6d:91:73: 79:3e:b5:fa:fa:24:8d:12:bb:49:6b:5e:59:1f:9a: 31:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:26:B4:E6:04:56:15:9B:5F:B0:FC:5C:FE:30:4E:7A:36:D1:53:B9 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OSa05gRWFZtfsPxc_jBOejbRU7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.119.0/24 Signature Algorithm: sha256WithRSAEncryption 57:15:24:3b:d2:41:2f:92:c3:e4:ea:04:f5:b7:04:5e:1f:3e: a8:00:e6:31:73:5d:43:b5:9b:d9:46:08:95:dc:65:17:ec:67: a6:97:4f:f7:34:20:8e:05:0e:94:20:5c:a8:23:47:2b:8f:98: 70:99:0e:f9:0b:f4:1c:82:45:eb:46:25:20:64:ce:7c:0b:ec: c6:88:34:d3:07:b5:67:ea:b4:b9:10:32:a3:7b:d1:41:fa:61: 30:5d:40:60:07:fb:1b:59:35:0d:c3:40:bc:ec:b8:10:ac:f7: 2d:e0:7d:d8:26:4e:19:bc:00:ec:22:d9:b4:78:9d:98:be:bb: 3a:f8:c6:86:f5:c5:e3:2c:8b:99:7f:b5:c2:52:1b:fe:0f:94: 1e:3a:36:58:7e:9f:ff:cf:5b:e9:50:28:ff:7e:a2:83:24:4a: 3d:83:63:bc:13:88:b3:2f:8b:b4:ec:a0:60:18:af:2c:6a:9d: 8a:db:63:24:e5:69:c4:bd:19:b7:0c:ba:aa:c2:bd:00:f9:34: c5:e6:8a:07:7d:2e:10:74:bf:de:fd:84:02:8d:5d:18:25:15: ee:e9:79:96:06:c7:e1:30:c9:5f:25:38:51:96:70:64:cf:4d: 25:c5:ca:7a:08:16:00:90:88:b2:6f:df:db:e8:86:22:5e:48: 7e:8d:1d:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oz3/QRAupzTmpNm5sjWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTI2YjRlNjA0NTYxNTliNWZiMGZjNWNmZTMwNGU3YTM2ZDE1M2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GjY13l7X64MzLG3YzxSNMKlMX70 D8cYg+z3mPhZ4hnc5VMTwW/5xDx7oPyQtWcEuRKX959iK1MTJBFGLM1faFsHGLGI kCmZO4GLPje95C5VN3XzFvRB5o4zdQIhxZKG/wd0wEVmWhSSY4GKB/0cSrvlGjUk fOB6I6zwoSnFDB2muAvx/vrHsXer1o0+waakjy/29Wli520NsDuueqB95CkN739v wTrSg0FQOgBBXq/ce1W8Y8N1D0hDoH6I/jWcedRGTY91iXXi7tQbX8MdGdvbCRY7 xSWWNcjsx0yDca7X9pn6F/izqwUsAGNtkXN5PrX6+iSNErtJa15ZH5oxRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDkmtOYEVhWbX7D8XP4wTno20VO5MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvT1NhMDVnUldGWnRmc1B4Y19qQk9lamJSVTdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpx3MA0G CSqGSIb3DQEBCwUAA4IBAQBXFSQ70kEvksPk6gT1twReHz6oAOYxc11DtZvZRgiV 3GUX7Geml0/3NCCOBQ6UIFyoI0crj5hwmQ75C/QcgkXrRiUgZM58C+zGiDTTB7Vn 6rS5EDKje9FB+mEwXUBgB/sbWTUNw0C87LgQrPct4H3YJk4ZvADsItm0eJ2Yvrs6 +MaG9cXjLIuZf7XCUhv+D5QeOjZYfp//z1vpUCj/fqKDJEo9g2O8E4izL4u07KBg GK8sap2K22Mk5WnEvRm3DLqqwr0A+TTF5ooHfS4QdL/e/YQCjV0YJRXu6XmWBsfh MMlfJThRlnBkz00lxcp6CBYAkIiyb9/b6IYiXkh+jR3n -----END CERTIFICATE-----Generated at Fri Jan 2 12:02:59 2026 by rpki-client