This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oSVvPOy3DcS_J21hCHOPnBixIsY.roa File: oSVvPOy3DcS_J21hCHOPnBixIsY.roa (raw, json) Hash identifier: DFtHinQdzCM+BlKU8F5bIFjAI/DQwKU4K4hplb7qoKM= Subject key identifier: A1:25:6F:3C:EC:B7:0D:C4:BF:27:6D:61:08:73:8F:9C:18:B1:22:C6 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F84489EBF036F4308EE7829DFDA1089 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oSVvPOy3DcS_J21hCHOPnBixIsY.roa Signing time: Fri 02 Jan 2026 16:22:14 +0000 ROA not before: Fri 02 Jan 2026 16:22:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62163 IP address blocks: 46.161.216.0/24 maxlen: 24 46.161.217.0/24 maxlen: 24 46.161.218.0/24 maxlen: 24 46.161.219.0/24 maxlen: 24 193.56.239.0/24 maxlen: 24 194.40.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:48:9e:bf:03:6f:43:08:ee:78:29:df:da:10:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1256f3cecb70dc4bf276d6108738f9c18b122c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1b:cc:4d:d1:61:8c:39:5a:bd:45:b8:72:84: 57:2c:b4:70:2a:bb:2c:fc:39:7d:fc:b3:fc:ac:b5: 52:a2:b3:81:27:c3:b0:b1:fd:62:4c:dd:60:74:b6: f9:8f:7d:f5:b7:61:92:71:44:97:78:61:ab:eb:fb: 6a:b2:d8:37:a4:c3:d3:4a:32:45:b3:84:05:a1:fb: cf:85:2c:09:02:38:08:e2:81:e1:0a:00:55:82:55: 5a:e0:4f:27:54:7f:ee:2a:d3:88:4c:97:01:48:37: 38:db:4b:9a:26:8c:03:d1:95:97:f0:1d:97:db:94: 5d:af:ad:17:32:29:94:fd:9f:cb:9d:b4:35:d4:10: ea:15:50:52:0a:ee:a7:40:7b:9d:35:9d:70:b2:67: 8f:ef:5d:d8:91:a9:0a:ca:a1:82:07:d0:b0:5f:27: 85:51:da:2b:8d:04:74:54:4a:c6:7a:b1:2d:23:5c: 38:59:07:38:51:ea:eb:a1:eb:5b:75:a8:79:db:2c: 7a:c7:93:d9:33:df:57:ba:a4:5c:48:cc:89:bc:6e: cd:43:83:82:94:88:48:1c:8e:1e:7a:c5:b1:70:cd: 1d:52:7e:82:74:06:5e:86:c3:43:6a:11:55:f5:21: b2:75:ff:e4:75:87:3f:aa:27:64:d8:da:22:35:25: f8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:25:6F:3C:EC:B7:0D:C4:BF:27:6D:61:08:73:8F:9C:18:B1:22:C6 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oSVvPOy3DcS_J21hCHOPnBixIsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.161.216.0/22 193.56.239.0/24 194.40.246.0/23 Signature Algorithm: sha256WithRSAEncryption bd:5a:e1:a0:ac:11:ff:ae:b7:1d:ad:c6:51:3c:05:01:91:67: a6:52:b3:e8:c9:74:40:c5:e6:2b:32:ff:e8:95:0f:27:6f:89: 47:86:de:96:c2:1b:20:6b:1f:2b:46:51:58:32:16:e6:bc:97: 38:a3:c8:8b:46:5d:5c:4b:42:61:ae:97:86:d6:85:8f:b6:e0: 83:75:23:b5:01:d7:41:e4:48:21:37:a7:67:20:1d:f9:73:b8: c4:0a:6d:eb:d1:8f:27:91:6c:30:12:09:ef:b2:d2:f8:ff:bd: 78:94:6b:d4:39:ae:65:c2:8e:a9:d8:40:62:95:85:d0:75:4e: c8:cc:2d:33:5f:04:7a:d6:0e:c4:29:14:ab:09:c3:1d:84:b5: d7:a4:df:15:cf:27:16:a2:c9:63:a0:57:9a:6b:d5:e1:6e:79: 0a:dc:c3:7d:28:99:fb:c2:2d:91:31:5d:76:4e:8c:71:0f:02: 7a:47:e7:76:06:cb:8e:84:c9:4a:b8:1b:73:bc:9d:5c:4f:d3: df:cc:0f:6d:00:31:d2:b5:74:d4:02:3b:cf:67:51:86:10:de: b4:01:95:18:f1:b6:38:ab:d9:9b:64:65:8e:91:fe:6b:9f:b2: 02:81:a1:dc:c9:39:3c:92:a8:78:3d:20:46:dc:eb:c0:d5:db: c8:d3:e8:40 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hEievwNvQwjueCnf2hCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTI1NmYzY2VjYjcwZGM0YmYyNzZkNjEwODczOGY5YzE4YjEyMmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xvMTdFhjDlavUW4coRXLLRwKrss /Dl9/LP8rLVSorOBJ8Owsf1iTN1gdLb5j331t2GScUSXeGGr6/tqstg3pMPTSjJF s4QFofvPhSwJAjgI4oHhCgBVglVa4E8nVH/uKtOITJcBSDc420uaJowD0ZWX8B2X 25Rdr60XMimU/Z/LnbQ11BDqFVBSCu6nQHudNZ1wsmeP713YkakKyqGCB9CwXyeF UdorjQR0VErGerEtI1w4WQc4Uerroetbdah52yx6x5PZM99XuqRcSMyJvG7NQ4OC lIhIHI4eesWxcM0dUn6CdAZehsNDahFV9SGydf/kdYc/qidk2NoiNSX4WwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKElbzzstw3EvydtYQhzj5wYsSLGMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvb1NWdlBPeTNEY1NfSjIxaENIT1BuQml4SXNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLqHYAwQA wTjvAwQBwij2MA0GCSqGSIb3DQEBCwUAA4IBAQC9WuGgrBH/rrcdrcZRPAUBkWem UrPoyXRAxeYrMv/olQ8nb4lHht6Wwhsgax8rRlFYMhbmvJc4o8iLRl1cS0JhrpeG 1oWPtuCDdSO1AddB5EghN6dnIB35c7jECm3r0Y8nkWwwEgnvstL4/714lGvUOa5l wo6p2EBilYXQdU7IzC0zXwR61g7EKRSrCcMdhLXXpN8VzycWosljoFeaa9XhbnkK 3MN9KJn7wi2RMV12ToxxDwJ6R+d2BsuOhMlKuBtzvJ1cT9PfzA9tADHStXTUAjvP Z1GGEN60AZUY8bY4q9mbZGWOkf5rn7ICgaHcyTk8kqh4PSBG3OvA1dvI0+hA -----END CERTIFICATE-----Generated at Wed Jan 21 16:57:12 2026 by rpki-client