This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OS74znoWKBnxwaTrycqK6I9lJ7Y.roa File: OS74znoWKBnxwaTrycqK6I9lJ7Y.roa (raw, json) Hash identifier: VkJq7v6/JXtySBZeZuPy9SVHMg1CA+83rFeiB8MZt2Q= Subject key identifier: 39:2E:F8:CE:7A:16:28:19:F1:C1:A4:EB:C9:CA:8A:E8:8F:65:27:B6 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3921A908F2CCBB335A613E01951F71 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OS74znoWKBnxwaTrycqK6I9lJ7Y.roa Signing time: Fri 02 Jan 2026 10:20:31 +0000 ROA not before: Fri 02 Jan 2026 10:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46450 IP address blocks: 163.5.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:21:a9:08:f2:cc:bb:33:5a:61:3e:01:95:1f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=392ef8ce7a162819f1c1a4ebc9ca8ae88f6527b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:1f:4d:6d:d8:5f:77:0b:b1:a6:1f:38:11: cd:1b:41:f1:67:b2:1b:31:87:86:c5:51:17:c1:0b: f2:6e:59:c8:eb:9c:5b:b5:77:14:fa:a9:ff:a2:d7: 2e:b9:ca:f6:e8:82:6f:4f:b7:df:b6:f3:ae:68:0d: e5:6f:83:a9:ae:97:f0:ff:fa:e2:9a:15:71:41:c6: 38:27:dc:37:92:b7:77:07:e9:e4:b7:ef:aa:e6:8e: 30:02:5c:a2:81:64:d5:9d:4c:ab:34:25:08:cb:f7: 43:9c:ee:3e:1f:ef:93:ec:7c:32:72:b0:56:f8:4e: 06:61:35:c4:14:85:71:ab:f5:29:f6:93:29:85:46: a4:3c:cb:f5:88:f9:5b:5a:f2:6e:94:d3:46:64:9a: 5d:59:a7:da:19:4b:67:8d:9b:7e:f7:32:43:e5:1c: 9a:7d:13:fa:05:e9:92:13:61:7b:44:63:1e:4c:39: 0f:1c:11:b0:a1:d4:3d:3a:be:51:57:c9:a3:bd:18: 39:bd:0c:4f:fb:88:f7:64:56:fa:c8:82:ac:9a:db: a9:9e:ff:bc:5e:84:d4:f3:f3:65:b6:17:22:c7:73: 91:74:d2:46:01:b3:e8:86:d7:60:87:f8:ec:74:15: 3d:29:90:e9:94:f3:1b:29:59:2c:5f:a9:41:72:12: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2E:F8:CE:7A:16:28:19:F1:C1:A4:EB:C9:CA:8A:E8:8F:65:27:B6 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OS74znoWKBnxwaTrycqK6I9lJ7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.162.0/24 Signature Algorithm: sha256WithRSAEncryption 01:9f:10:0b:5b:50:68:3f:56:ff:7a:51:a1:ff:18:b1:99:b7: db:6f:15:04:28:b9:bd:d6:99:0b:a0:7d:23:9d:4e:52:b3:97: ad:db:d6:9b:c8:11:9c:cd:cc:d4:a9:ed:e0:75:94:ca:18:fb: 48:55:d0:2a:c7:e2:4f:5a:c8:4c:64:68:d0:4d:0e:5b:51:86: 38:fc:ab:81:64:71:8b:c2:be:13:45:6c:34:6d:3f:dd:04:6b: 74:8a:72:d1:fa:8c:f4:15:1b:c5:80:86:21:5e:ee:8e:42:db: c7:9e:7c:d6:11:99:1e:82:18:62:33:91:1f:c3:48:e0:de:36: bc:07:33:54:57:7f:25:3d:92:6c:fa:d4:f0:ec:4d:ef:df:99: 29:29:6e:e1:6a:e5:4b:ab:ab:a1:47:3a:e1:3a:0b:14:02:93: 35:71:0e:7a:2e:43:1c:c7:35:51:ed:43:1d:f0:48:fc:17:2e: ea:46:4c:69:7f:94:df:a8:b1:69:74:c6:2f:2c:9f:c6:7b:73: 2a:65:67:09:f4:b7:ee:49:22:d7:aa:3e:8e:9d:f5:dd:b8:35: 5f:c1:94:48:87:e6:99:2c:38:f7:c8:0a:25:be:9a:91:b4:e1: 12:93:14:14:7f:67:5d:f5:b2:01:1d:bf:89:67:98:de:af:ed: 81:a5:76:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSGpCPLMuzNaYT4BlR9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTJlZjhjZTdhMTYyODE5ZjFjMWE0ZWJjOWNhOGFlODhmNjUyN2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRkfTW3YX3cLsaYfOBHNG0HxZ7Ib MYeGxVEXwQvyblnI65xbtXcU+qn/otcuucr26IJvT7fftvOuaA3lb4Oprpfw//ri mhVxQcY4J9w3krd3B+nkt++q5o4wAlyigWTVnUyrNCUIy/dDnO4+H++T7HwycrBW +E4GYTXEFIVxq/Up9pMphUakPMv1iPlbWvJulNNGZJpdWafaGUtnjZt+9zJD5Rya fRP6BemSE2F7RGMeTDkPHBGwodQ9Or5RV8mjvRg5vQxP+4j3ZFb6yIKsmtupnv+8 XoTU8/Nlthcix3ORdNJGAbPohtdgh/jsdBU9KZDplPMbKVksX6lBchK1EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDku+M56FigZ8cGk68nKiuiPZSe2MB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvT1M3NHpub1dLQm54d2FUcnljcUs2STlsSjdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWiMA0G CSqGSIb3DQEBCwUAA4IBAQABnxALW1BoP1b/elGh/xixmbfbbxUEKLm91pkLoH0j nU5Ss5et29abyBGczczUqe3gdZTKGPtIVdAqx+JPWshMZGjQTQ5bUYY4/KuBZHGL wr4TRWw0bT/dBGt0inLR+oz0FRvFgIYhXu6OQtvHnnzWEZkeghhiM5Efw0jg3ja8 BzNUV38lPZJs+tTw7E3v35kpKW7hauVLq6uhRzrhOgsUApM1cQ56LkMcxzVR7UMd 8Ej8Fy7qRkxpf5TfqLFpdMYvLJ/Ge3MqZWcJ9LfuSSLXqj6OnfXduDVfwZRIh+aZ LDj3yAolvpqRtOESkxQUf2dd9bIBHb+JZ5jer+2BpXYN -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:00 2026 by rpki-client