This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OuPbqDwHOwoTMaEBwyqKi5GACzQ.roa File: OuPbqDwHOwoTMaEBwyqKi5GACzQ.roa (raw, json) Hash identifier: FOVeb+lPG2TPpqME1MwFCQNaRp/d3Z/2W3iufv2flQ0= Subject key identifier: 3A:E3:DB:A8:3C:07:3B:0A:13:31:A1:01:C3:2A:8A:8B:91:80:0B:34 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2F60710C2520BBC0A47811B8C3FCB Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OuPbqDwHOwoTMaEBwyqKi5GACzQ.roa Signing time: Thu 01 Jan 2026 08:18:24 +0000 ROA not before: Thu 01 Jan 2026 08:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41624 IP address blocks: 87.120.152.0/22 maxlen: 22 212.73.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f6:07:10:c2:52:0b:bc:0a:47:81:1b:8c:3f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ae3dba83c073b0a1331a101c32a8a8b91800b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:49:4d:c1:35:4d:64:fb:14:e9:ac:93:26:69: f0:ab:a4:0c:a6:8f:21:b8:9b:95:2e:d5:e2:1d:bf: c8:96:6b:8f:36:2a:55:8f:f5:f8:23:ce:45:f1:37: e3:25:4d:d9:2d:07:85:32:69:7a:b4:10:48:08:2c: 64:c9:c5:18:13:e2:a6:07:f4:5c:ca:0f:c0:f0:a2: 38:b7:9e:77:cc:f2:0d:73:49:5c:18:ad:3a:e0:70: 67:7e:74:7a:79:4c:e2:94:37:32:a8:dc:a0:91:c0: 00:00:74:ab:21:f2:ae:e1:3a:70:1f:99:8a:bc:68: 30:2e:86:c4:10:3f:15:af:01:98:77:74:7e:29:4b: 9b:d6:33:de:12:12:67:2c:93:67:93:8e:bf:b9:ef: 0b:03:92:8a:7d:be:d6:1e:c2:f3:bb:30:05:36:52: 6b:2e:e1:f9:65:2d:95:29:a1:4c:fe:d9:1b:ec:a4: 25:c9:c0:70:61:7a:43:28:73:f3:18:a8:0f:29:e6: 63:5b:73:c7:bc:37:33:5e:2b:f2:64:52:f0:dc:a6: 4a:a6:3c:67:72:60:9d:4e:33:41:d2:ee:61:58:eb: 92:da:a6:61:2e:2a:2f:8a:82:53:96:55:a8:11:ac: 95:bb:ac:22:d8:53:be:94:d6:d6:37:45:d4:2d:10: a6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E3:DB:A8:3C:07:3B:0A:13:31:A1:01:C3:2A:8A:8B:91:80:0B:34 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OuPbqDwHOwoTMaEBwyqKi5GACzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.152.0/22 212.73.158.0/23 Signature Algorithm: sha256WithRSAEncryption 82:3c:c9:ce:4e:d8:e3:78:ea:2f:80:67:db:cd:08:21:41:cd: 2d:8e:1e:80:df:bd:88:a8:06:0e:98:15:bf:20:56:48:81:8f: 7f:0f:73:23:fe:61:d8:0d:5e:2b:34:47:a7:95:97:32:c0:56: 13:87:70:fb:94:63:31:35:ce:ee:19:c2:77:87:f9:78:d3:34: ac:8d:80:cb:dd:3b:f4:8a:23:73:34:13:25:17:70:fb:db:36: b6:86:d4:7c:aa:a5:0f:dc:bd:55:95:4c:96:3f:6e:87:86:cd: 68:c0:6c:a1:9b:1b:42:55:79:88:8f:34:ce:8a:fc:08:fc:97: 1d:cf:3f:f0:ff:be:fb:55:48:f1:03:b1:87:37:f3:b1:d7:95: b0:60:05:0e:9c:86:11:ac:47:3d:2d:10:bc:57:66:71:3d:5b: 55:9e:31:8b:0f:af:a2:31:b9:90:3b:6b:a9:b2:a1:d9:2d:64: 0a:34:ac:28:28:cb:91:f1:38:47:b1:35:c7:47:90:e0:76:6a: 8a:7b:38:35:ce:f2:d7:a7:f6:4e:91:3e:1c:a4:b0:a0:2c:4f: f2:89:d6:d8:de:37:69:54:6a:fa:4a:2e:6d:bf:a2:42:eb:30: 40:bf:d5:fb:e8:d4:02:0b:2c:4f:41:14:77:c4:6f:9e:c5:a3: b3:76:99:34 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ovYHEMJSC7wKR4EbjD/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWUzZGJhODNjMDczYjBhMTMzMWExMDFjMzJhOGE4YjkxODAwYjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUlNwTVNZPsU6ayTJmnwq6QMpo8h uJuVLtXiHb/IlmuPNipVj/X4I85F8TfjJU3ZLQeFMml6tBBICCxkycUYE+KmB/Rc yg/A8KI4t553zPINc0lcGK064HBnfnR6eUzilDcyqNygkcAAAHSrIfKu4TpwH5mK vGgwLobEED8VrwGYd3R+KUub1jPeEhJnLJNnk46/ue8LA5KKfb7WHsLzuzAFNlJr LuH5ZS2VKaFM/tkb7KQlycBwYXpDKHPzGKgPKeZjW3PHvDczXivyZFLw3KZKpjxn cmCdTjNB0u5hWOuS2qZhLiovioJTllWoEayVu6wi2FO+lNbWN0XULRCmWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDrj26g8BzsKEzGhAcMqiouRgAs0MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvT3VQYnFEd0hPd29UTWFFQnd5cUtpNUdBQ3pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCV3iYAwQB 1EmeMA0GCSqGSIb3DQEBCwUAA4IBAQCCPMnOTtjjeOovgGfbzQghQc0tjh6A372I qAYOmBW/IFZIgY9/D3Mj/mHYDV4rNEenlZcywFYTh3D7lGMxNc7uGcJ3h/l40zSs jYDL3Tv0iiNzNBMlF3D72za2htR8qqUP3L1VlUyWP26Hhs1owGyhmxtCVXmIjzTO ivwI/Jcdzz/w/777VUjxA7GHN/Ox15WwYAUOnIYRrEc9LRC8V2ZxPVtVnjGLD6+i MbmQO2upsqHZLWQKNKwoKMuR8ThHsTXHR5DgdmqKezg1zvLXp/ZOkT4cpLCgLE/y idbY3jdpVGr6Si5tv6JC6zBAv9X76NQCCyxPQRR3xG+exaOzdpk0 -----END CERTIFICATE-----Generated at Fri Jan 2 12:08:25 2026 by rpki-client