This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/O3NHX1xusGOC_jwAncPD2CBztNE.roa File: O3NHX1xusGOC_jwAncPD2CBztNE.roa (raw, json) Hash identifier: tIvb5cVDrsiT8uq8kfesqrbk5rRYub73yqvQwpeTOXo= Subject key identifier: 3B:73:47:5F:5C:6E:B0:63:82:FE:3C:00:9D:C3:C3:D8:20:73:B4:D1 Certificate issuer: /CN=d604e49e928305abcb8f32def3fefc03ebbcde44 Certificate serial: 019B7C1349075295F1FE7909F7D55D05CA73 Authority key identifier: D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/O3NHX1xusGOC_jwAncPD2CBztNE.roa Signing time: Fri 02 Jan 2026 00:19:57 +0000 ROA not before: Fri 02 Jan 2026 00:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 553 IP address blocks: 141.19.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:49:07:52:95:f1:fe:79:09:f7:d5:5d:05:ca:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d604e49e928305abcb8f32def3fefc03ebbcde44 Validity Not Before: Jan 2 00:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b73475f5c6eb06382fe3c009dc3c3d82073b4d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9e:11:ff:32:34:ff:df:4e:a6:6c:47:0a:51: ab:69:a1:9e:3d:59:10:db:02:6b:59:4c:ef:d6:e8: 73:ec:14:f8:b2:78:ab:42:d8:98:a8:a1:74:5d:bb: c4:18:f3:e3:23:0d:49:ce:b2:d4:8a:a7:27:5e:27: 00:2f:c4:fc:9a:88:e1:4e:9d:f6:13:12:bf:d2:89: b6:78:b0:c0:cc:9e:4a:6d:d8:c8:a4:e2:b7:be:c2: a1:ed:37:99:11:b3:9e:81:60:25:ed:f2:de:54:60: 48:ac:e5:1c:00:a3:11:30:32:a5:b8:f9:a6:e9:19: ff:a9:b0:86:6e:b0:82:90:dd:39:8c:82:a7:86:d9: d1:b8:c3:08:38:ea:87:66:59:e3:7e:76:5b:1e:5d: fe:c3:56:32:be:f1:5b:c5:b3:04:9b:01:0f:bb:f1: 44:33:e2:14:e1:75:4e:e2:b8:25:d9:be:ac:88:eb: 70:ef:c0:32:a4:8e:1f:51:b2:bd:df:9c:88:95:46: 61:3f:8a:0f:fa:0c:2c:6c:89:20:f2:60:12:34:4a: 5b:30:2d:d8:12:4c:79:bd:6c:9b:a9:4c:b2:ac:4a: ce:b0:72:00:d2:cc:a7:ca:7b:ef:19:99:11:1f:d0: d7:f4:35:fd:73:7a:5f:62:b6:fa:bd:ac:74:2d:18: 6a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:73:47:5F:5C:6E:B0:63:82:FE:3C:00:9D:C3:C3:D8:20:73:B4:D1 X509v3 Authority Key Identifier: keyid:D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/O3NHX1xusGOC_jwAncPD2CBztNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.19.0.0/16 Signature Algorithm: sha256WithRSAEncryption 87:64:0e:45:58:ea:9a:d5:13:0d:10:7a:b6:05:d0:3b:28:b2: 20:03:77:c0:8e:61:97:3a:84:19:11:a0:33:10:0f:ec:56:55: fb:4b:d0:ae:39:45:6f:ec:06:14:c1:04:04:d2:ce:90:dd:65: 86:96:02:67:10:15:76:e5:0b:6e:59:03:7d:04:0d:99:bf:13: b2:1f:cf:8f:ef:58:ce:78:ee:f7:9c:bf:5f:ba:07:fc:6c:d6: 3e:a2:29:af:8a:01:99:30:d4:82:ac:86:de:ee:20:34:b7:d3: 0e:57:4f:01:91:af:93:e8:e4:a5:b7:bb:b6:bc:0c:f6:1b:0e: 00:d0:6c:8f:0e:c1:24:20:be:fa:ed:d4:09:f6:aa:7a:80:92: b8:17:21:04:8e:4b:82:8a:50:87:ba:e4:73:80:5f:3a:c8:ea: 98:32:6a:1e:6c:47:a3:d3:2f:9f:43:98:13:29:02:da:4d:36: 76:cc:e2:9e:46:58:1c:43:8e:d2:27:6a:c8:36:48:bc:3d:0d: db:d7:ba:23:45:01:3d:93:03:60:a9:31:0a:70:ba:06:8c:11: 2c:b0:4f:27:bc:c3:f6:87:05:6f:93:e1:5f:e0:24:01:e5:ee: 18:8f:d5:88:74:02:51:f9:e2:50:b4:e1:ff:2f:65:ba:41:3c: 2e:30:56:1a -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt8E0kHUpXx/nkJ99VdBcpzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDRlNDllOTI4MzA1YWJjYjhmMzJkZWYzZmVmYzAzZWJi Y2RlNDQwHhcNMjYwMTAyMDAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjczNDc1ZjVjNmViMDYzODJmZTNjMDA5ZGMzYzNkODIwNzNiNGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5J4R/zI0/99OpmxHClGraaGePVkQ 2wJrWUzv1uhz7BT4snirQtiYqKF0XbvEGPPjIw1JzrLUiqcnXicAL8T8mojhTp32 ExK/0om2eLDAzJ5KbdjIpOK3vsKh7TeZEbOegWAl7fLeVGBIrOUcAKMRMDKluPmm 6Rn/qbCGbrCCkN05jIKnhtnRuMMIOOqHZlnjfnZbHl3+w1YyvvFbxbMEmwEPu/FE M+IU4XVO4rgl2b6siOtw78AypI4fUbK935yIlUZhP4oP+gwsbIkg8mASNEpbMC3Y Ekx5vWybqUyyrErOsHIA0synynvvGZkRH9DX9DX9c3pfYrb6vax0LRhqEQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFDtzR19cbrBjgv48AJ3Dw9ggc7TRMB8GA1UdIwQY MBaAFNYE5J6SgwWry48y3vP+/APrvN5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdUa25wS0RCYXZManpMZThfNzhBLXU4M2tRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hODMwYTItMDI3MS00ZGU5LWJjMzgt MDNjODIxNTc0MjFhLzEvTzNOSFgxeHVzR09DX2p3QW5jUEQyQ0J6dE5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9hODMwYTItMDI3MS00ZGU5LWJjMzgtMDNjODIxNTc0MjFh LzEvMWdUa25wS0RCYXZManpMZThfNzhBLXU4M2tRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjRMwDQYJ KoZIhvcNAQELBQADggEBAIdkDkVY6prVEw0QerYF0DsosiADd8COYZc6hBkRoDMQ D+xWVftL0K45RW/sBhTBBATSzpDdZYaWAmcQFXblC25ZA30EDZm/E7Ifz4/vWM54 7vecv1+6B/xs1j6iKa+KAZkw1IKsht7uIDS30w5XTwGRr5Po5KW3u7a8DPYbDgDQ bI8OwSQgvvrt1An2qnqAkrgXIQSOS4KKUIe65HOAXzrI6pgyah5sR6PTL59DmBMp AtpNNnbM4p5GWBxDjtInasg2SLw9DdvXuiNFAT2TA2CpMQpwugaMESywTye8w/aH BW+T4V/gJAHl7hiP1Yh0AlH54lC04f8vZbpBPC4wVho= -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:43 2026 by rpki-client