This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/9Oc3Qrkh-WGI82en3F3kWexrfy0.roa File: 9Oc3Qrkh-WGI82en3F3kWexrfy0.roa (raw, json) Hash identifier: g6ufVMQ2+i4B4SEYwZTcvbXAAfQ4pevHKfoq/wjdF2w= Subject key identifier: F4:E7:37:42:B9:21:F9:61:88:F3:67:A7:DC:5D:E4:59:EC:6B:7F:2D Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0 Certificate serial: 019B77C661733128C1CAB7B2409FD6F1FCE7 Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/9Oc3Qrkh-WGI82en3F3kWexrfy0.roa Signing time: Thu 01 Jan 2026 04:17:28 +0000 ROA not before: Thu 01 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51682 IP address blocks: 46.16.248.0/22 maxlen: 22 46.16.248.0/24 maxlen: 24 46.16.249.0/24 maxlen: 24 46.16.250.0/24 maxlen: 24 46.16.251.0/24 maxlen: 24 46.16.252.0/22 maxlen: 22 46.16.252.0/24 maxlen: 24 46.16.253.0/24 maxlen: 24 46.16.254.0/24 maxlen: 24 46.16.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:61:73:31:28:c1:ca:b7:b2:40:9f:d6:f1:fc:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0 Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4e73742b921f96188f367a7dc5de459ec6b7f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:48:65:a4:98:23:7d:28:52:4c:6f:8e:2a:b5: 74:f2:8d:15:2d:8d:16:2a:92:3b:59:97:f2:5d:9a: 37:92:82:2d:5c:d2:b3:bb:8a:79:c7:88:d3:7d:a3: be:06:5b:d1:31:39:69:b2:a4:70:46:13:60:d7:63: 01:ca:8b:82:75:a6:22:88:35:e9:f1:aa:e0:c1:bd: 53:c8:20:ff:0f:b5:52:12:cd:96:e9:2a:6a:1b:55: 9c:49:1f:0d:ed:3f:ee:2e:d2:92:59:a7:63:55:d0: a8:29:c0:79:d0:81:83:79:62:95:52:df:68:3b:16: cf:d7:eb:42:f3:7f:70:82:05:9a:f5:80:f4:08:15: 7b:0f:48:3f:fb:e4:53:f8:62:3f:15:1d:bf:29:d4: 9f:f2:9d:4f:c2:f9:ea:93:a6:d5:cd:a5:ae:40:f1: ca:f0:17:99:b9:17:77:56:d5:6b:76:6e:6d:d4:b7: 94:73:aa:e6:6e:19:93:ff:5d:36:e0:a6:91:75:28: 1a:84:50:03:2d:26:34:1f:bf:d1:fe:db:d8:a3:2d: 3a:4e:17:7a:f4:ab:f1:00:c5:2f:1e:8c:1c:9b:ae: 61:c7:34:4e:aa:f8:4e:b0:52:b8:97:3c:9c:8b:50: 0c:2b:0e:42:6e:89:74:23:5f:45:18:73:db:da:db: b7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E7:37:42:B9:21:F9:61:88:F3:67:A7:DC:5D:E4:59:EC:6B:7F:2D X509v3 Authority Key Identifier: keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/9Oc3Qrkh-WGI82en3F3kWexrfy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.248.0/21 Signature Algorithm: sha256WithRSAEncryption 91:a9:34:09:27:13:3a:f3:97:a6:c5:7f:85:cc:13:e4:79:70: 2d:96:1b:b4:01:a5:f1:e8:28:94:77:93:65:a8:47:3d:11:dd: 3a:90:68:b7:fa:37:db:9d:66:eb:66:d2:6b:c4:43:bb:b1:c2: 95:84:76:c3:9b:9e:09:e5:1d:ea:a1:35:78:33:53:d0:ff:77: 8a:28:ef:2a:44:1b:64:79:86:cc:8c:b2:b4:3f:aa:be:e6:76: 77:8c:67:00:d8:bc:c9:63:58:58:af:e3:d3:a3:14:5c:7a:fd: f0:6b:9e:32:69:3f:34:1b:f4:f0:b8:9a:9b:99:78:3a:2c:fb: 64:62:51:25:b3:ac:fa:09:9d:41:2a:68:04:f0:51:df:6f:02: 29:94:9c:a0:58:a3:45:2f:95:7b:cf:a1:cc:69:da:11:b9:0a: d4:a0:38:9d:03:b9:cb:cf:df:5a:f9:6b:dd:dc:45:a9:ef:25: 51:6c:81:8e:87:d5:a6:d2:f5:28:86:2d:b2:aa:f7:ef:5f:cb: e9:7f:e4:c8:f0:b3:57:b4:8d:fd:d7:7c:a9:e3:5a:b9:fa:b7: b2:eb:5f:cb:c1:63:ca:87:41:d2:df:41:40:81:be:51:bf:11: e9:e4:4b:04:2b:4a:6e:96:a2:30:83:f9:d7:6e:c7:3a:e6:e4: 5d:bd:05:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmFzMSjByreyQJ/W8fznMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NjZhZGRmOWNhMGRlNDlhNmVlZjQ5ODU4Mzg0ZjU0ZjQ3 YTU2ZjAwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGU3Mzc0MmI5MjFmOTYxODhmMzY3YTdkYzVkZTQ1OWVjNmI3ZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUhlpJgjfShSTG+OKrV08o0VLY0W KpI7WZfyXZo3koItXNKzu4p5x4jTfaO+BlvRMTlpsqRwRhNg12MByouCdaYiiDXp 8argwb1TyCD/D7VSEs2W6SpqG1WcSR8N7T/uLtKSWadjVdCoKcB50IGDeWKVUt9o OxbP1+tC839wggWa9YD0CBV7D0g/++RT+GI/FR2/KdSf8p1Pwvnqk6bVzaWuQPHK 8BeZuRd3VtVrdm5t1LeUc6rmbhmT/1024KaRdSgahFADLSY0H7/R/tvYoy06Thd6 9KvxAMUvHowcm65hxzROqvhOsFK4lzyci1AMKw5Cbol0I19FGHPb2tu3UQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPTnN0K5IflhiPNnp9xd5Fnsa38tMB8GA1UdIwQY MBaAFGVmrd+coN5Jpu70mFg4T1T0elbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWldhdDM1eWcza21tN3ZTWVdEaFBWUFI2VnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZDU2ZDctMzg5OS00MGU1LTk2MTIt M2YyOGI2YWRiZGE5LzEvOU9jM1Fya2gtV0dJODJlbjNGM2tXZXhyZnkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iZDU2ZDctMzg5OS00MGU1LTk2MTItM2YyOGI2YWRiZGE5 LzEvWldhdDM1eWcza21tN3ZTWVdEaFBWUFI2VnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLhD4MA0G CSqGSIb3DQEBCwUAA4IBAQCRqTQJJxM685emxX+FzBPkeXAtlhu0AaXx6CiUd5Nl qEc9Ed06kGi3+jfbnWbrZtJrxEO7scKVhHbDm54J5R3qoTV4M1PQ/3eKKO8qRBtk eYbMjLK0P6q+5nZ3jGcA2LzJY1hYr+PToxRcev3wa54yaT80G/TwuJqbmXg6LPtk YlEls6z6CZ1BKmgE8FHfbwIplJygWKNFL5V7z6HMadoRuQrUoDidA7nLz99a+Wvd 3EWp7yVRbIGOh9Wm0vUohi2yqvfvX8vpf+TI8LNXtI3913yp41q5+rey61/LwWPK h0HS30FAgb5RvxHp5EsEK0pulqIwg/nXbsc65uRdvQVf -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:09 2026 by rpki-client