This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/OztHm958aRJRxZODVtzftmoIutM.roa File: OztHm958aRJRxZODVtzftmoIutM.roa (raw, json) Hash identifier: LyCjNgF1WRtdSw3T7qrOJsi3Hm2+foAc8JYBqHMHMdE= Subject key identifier: 3B:3B:47:9B:DE:7C:69:12:51:C5:93:83:56:DC:DF:B6:6A:08:BA:D3 Certificate issuer: /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087 Certificate serial: 019B797E7CABA1D8EB3655EF63B9427B8DAA Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/OztHm958aRJRxZODVtzftmoIutM.roa Signing time: Thu 01 Jan 2026 12:18:11 +0000 ROA not before: Thu 01 Jan 2026 12:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213011 IP address blocks: 91.211.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:7c:ab:a1:d8:eb:36:55:ef:63:b9:42:7b:8d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087 Validity Not Before: Jan 1 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b3b479bde7c691251c5938356dcdfb66a08bad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4c:c6:e4:eb:b7:6a:d5:73:79:d5:4c:3f:16: 35:ef:30:d0:e5:a7:69:d1:f6:90:b6:b3:bf:91:56: 88:87:2f:47:33:30:f1:3a:29:09:e9:28:ee:07:fa: 38:12:58:ac:d6:6c:c5:31:65:0b:92:e0:da:a8:44: 89:4b:8e:3c:9c:9c:dc:05:72:3c:e5:92:fb:09:3f: 80:64:b5:57:f2:fe:40:44:4d:9b:7a:18:c1:5b:5e: 35:b3:58:18:a6:17:a2:8e:72:67:1c:93:f2:ea:64: c8:cd:cf:ac:52:ef:3e:f6:d5:1f:ef:82:2e:cf:73: 33:b9:55:90:96:1c:0c:fe:3c:34:e8:87:30:0f:80: 36:4d:6f:4d:d5:4d:21:f4:af:3c:20:af:3e:d0:1d: fe:48:c7:32:57:0a:f9:60:2a:87:4f:31:d6:b8:cf: 7c:5a:ae:79:c7:43:6e:cb:ca:3a:2c:00:ed:ac:9e: fa:be:f6:be:00:03:89:7a:a4:c8:03:dc:61:1a:2e: 45:b9:ba:94:ab:26:c4:e9:04:67:25:f2:64:f5:b6: 0b:01:5e:7b:f6:69:14:48:d8:2a:9f:37:12:5d:d1: b5:6b:4c:80:b5:26:d6:0c:7d:89:c4:3c:c6:e0:64: 1c:a0:3d:d3:34:b6:e2:9f:f7:8f:4f:0b:8e:ab:78: d1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3B:47:9B:DE:7C:69:12:51:C5:93:83:56:DC:DF:B6:6A:08:BA:D3 X509v3 Authority Key Identifier: keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/OztHm958aRJRxZODVtzftmoIutM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.1.0/24 Signature Algorithm: sha256WithRSAEncryption 00:bb:6f:de:3d:cc:d7:1a:e1:d3:b4:4e:8a:3b:2e:b6:8a:cd: a8:a4:89:06:94:0c:c5:2f:1b:21:d1:11:9c:52:8e:7b:fb:33: e3:d3:d8:d2:06:a8:68:52:8f:74:49:89:e1:67:6d:22:63:48: f3:2d:0c:5f:b0:9b:35:ad:d9:e7:2e:32:a3:a7:cd:6d:8f:c0: 13:32:25:b1:bb:06:04:4d:84:15:1e:ca:0d:ac:d6:7f:f9:19: bf:a4:f0:a9:51:1b:a8:b7:49:07:6d:c7:be:c7:ea:49:c1:a2: 6a:2d:57:c6:06:b2:82:7f:c0:75:c5:4d:8d:56:a4:45:4c:f4: c1:bb:c6:5a:b2:47:1c:4e:d2:ca:a5:98:ce:13:a6:34:bd:c8: 3c:b2:59:89:2a:b7:b1:89:dc:3f:36:88:96:1e:dc:f2:1a:87: 6f:e0:93:b7:fc:c1:23:fe:f0:0c:0f:64:6a:be:23:a6:e6:8e: 8e:bf:1a:38:ca:ab:4a:2b:2b:91:f4:4f:9c:9c:fb:a0:61:a1: 5d:65:3f:d5:e1:e5:eb:f5:ef:44:43:9b:0b:b4:48:6a:b0:cd: 41:36:4b:10:44:15:20:0e:f0:6c:5a:32:84:74:6a:d9:b7:6c: 21:ce:f5:da:75:76:16:79:04:2c:a8:bf:d6:c1:4c:16:12:f3: ae:94:94:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnyrodjrNlXvY7lCe42qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOGM0YTQzMDA4MzdjNGVhMTdhZDFlMzgyMWEwOWFkNTM3 NjQwODcwHhcNMjYwMTAxMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjNiNDc5YmRlN2M2OTEyNTFjNTkzODM1NmRjZGZiNjZhMDhiYWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0zG5Ou3atVzedVMPxY17zDQ5adp 0faQtrO/kVaIhy9HMzDxOikJ6SjuB/o4Elis1mzFMWULkuDaqESJS448nJzcBXI8 5ZL7CT+AZLVX8v5ARE2behjBW141s1gYpheijnJnHJPy6mTIzc+sUu8+9tUf74Iu z3MzuVWQlhwM/jw06IcwD4A2TW9N1U0h9K88IK8+0B3+SMcyVwr5YCqHTzHWuM98 Wq55x0Nuy8o6LADtrJ76vva+AAOJeqTIA9xhGi5FubqUqybE6QRnJfJk9bYLAV57 9mkUSNgqnzcSXdG1a0yAtSbWDH2JxDzG4GQcoD3TNLbin/ePTwuOq3jR/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDs7R5vefGkSUcWTg1bc37ZqCLrTMB8GA1UdIwQY MBaAFLGMSkMAg3xOoXrR44IaCa1TdkCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1l4S1F3Q0RmRTZoZXRIamdob0pyVk4yUUljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hZjRlNGItMjAyNi00YmJiLTk2Mjgt ZjA4YTBhZTkyYjhkLzEvT3p0SG05NThhUkpSeFpPRFZ0emZ0bW9JdXRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9hZjRlNGItMjAyNi00YmJiLTk2MjgtZjA4YTBhZTkyYjhk LzEvc1l4S1F3Q0RmRTZoZXRIamdob0pyVk4yUUljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9MBMA0G CSqGSIb3DQEBCwUAA4IBAQAAu2/ePczXGuHTtE6KOy62is2opIkGlAzFLxsh0RGc Uo57+zPj09jSBqhoUo90SYnhZ20iY0jzLQxfsJs1rdnnLjKjp81tj8ATMiWxuwYE TYQVHsoNrNZ/+Rm/pPCpURuot0kHbce+x+pJwaJqLVfGBrKCf8B1xU2NVqRFTPTB u8ZaskccTtLKpZjOE6Y0vcg8slmJKrexidw/NoiWHtzyGodv4JO3/MEj/vAMD2Rq viOm5o6Ovxo4yqtKKyuR9E+cnPugYaFdZT/V4eXr9e9EQ5sLtEhqsM1BNksQRBUg DvBsWjKEdGrZt2whzvXadXYWeQQsqL/WwUwWEvOulJQq -----END CERTIFICATE-----Generated at Mon Jan 26 21:04:35 2026 by rpki-client