This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/OLnzxAlUC3QhNrKWLOgcy2U30To.roa File: OLnzxAlUC3QhNrKWLOgcy2U30To.roa (raw, json) Hash identifier: lX5neqnKug6Y4cQTPSta0w75qmPdh3MW8Tx/neXnEbc= Subject key identifier: 38:B9:F3:C4:09:54:0B:74:21:36:B2:96:2C:E8:1C:CB:65:37:D1:3A Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b Certificate serial: 019B7EA48BB0B27862766ADB2134BA36D2CE Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/OLnzxAlUC3QhNrKWLOgcy2U30To.roa Signing time: Fri 02 Jan 2026 12:17:51 +0000 ROA not before: Fri 02 Jan 2026 12:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57231 IP address blocks: 109.105.159.0/24 maxlen: 24 185.149.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:8b:b0:b2:78:62:76:6a:db:21:34:ba:36:d2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b Validity Not Before: Jan 2 12:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38b9f3c409540b742136b2962ce81ccb6537d13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d3:f7:0f:e7:aa:e9:fe:50:2a:6d:e7:06:0d: 38:ac:63:d4:ae:9c:80:24:61:41:54:bf:82:8d:0b: 83:83:60:24:d3:97:d5:c1:28:74:33:5e:43:bf:32: 2b:aa:f4:ae:06:63:61:45:95:aa:d8:b1:c9:4e:66: f0:7c:34:93:c2:20:15:70:06:71:af:52:4a:9b:51: bb:fa:88:1a:2d:c7:9e:45:64:6d:99:ba:bc:d0:81: 89:ec:7a:c3:d9:b0:7c:33:0a:82:6f:d1:c0:a3:d4: 48:82:93:7f:8c:b5:72:98:54:c5:4b:a3:4c:28:f8: 2d:cd:7c:7c:54:12:f4:00:b6:c7:a8:a4:c6:16:b3: 38:e1:f1:82:64:63:ae:30:29:6f:27:ab:21:25:4b: b7:9c:f0:4b:86:79:7f:9a:43:df:d4:37:06:6a:81: 25:6c:c2:20:6a:ed:aa:c5:5c:2d:10:bf:9f:45:4d: 4f:c8:b1:2d:48:6f:c8:47:a0:d9:de:2f:52:31:87: f9:2b:4b:5c:6d:d9:43:43:97:f9:12:c8:19:40:9f: a3:42:32:06:07:71:aa:24:d0:e5:af:ae:46:3d:87: 34:0b:4d:ac:be:3c:71:43:b8:f9:fa:4c:97:47:fd: 7d:5a:92:34:c6:07:c3:d5:59:29:a9:e6:a1:1b:50: 4e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B9:F3:C4:09:54:0B:74:21:36:B2:96:2C:E8:1C:CB:65:37:D1:3A X509v3 Authority Key Identifier: keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/OLnzxAlUC3QhNrKWLOgcy2U30To.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.105.159.0/24 185.149.174.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:76:cb:2f:68:19:25:5f:91:f8:75:57:b8:2d:12:f2:81:a3: ca:f5:a5:25:83:2a:a3:de:8f:98:7e:a3:af:f5:10:9c:c1:3d: 06:32:cc:35:06:ee:5d:43:8f:4c:a0:38:5f:69:e0:67:c5:69: 46:97:40:db:81:c1:9e:fd:e6:af:6a:39:23:2f:6f:1a:98:99: 1b:e4:95:12:ae:d3:e8:84:29:62:ca:6a:aa:11:6e:6e:ec:0f: a3:b7:70:c8:f0:e2:0d:c2:5b:ab:8e:7a:17:c5:f9:ed:70:bf: 44:25:7f:7b:13:ac:35:47:e5:cb:ca:48:27:58:1c:3a:4c:06: a3:71:2d:65:41:a2:35:f3:f9:fd:6d:d7:4f:4c:77:f1:93:3a: df:2d:d0:e0:a1:22:b5:3f:51:a5:fb:39:d9:14:47:9d:90:31: a9:3c:8e:30:f1:c4:e7:58:5d:67:e8:4f:d6:84:2c:b6:ab:d7: f6:b0:6a:35:d3:57:e4:76:05:1d:f1:11:02:59:c6:15:dd:89: 47:88:df:28:11:83:af:4d:90:f9:22:3a:e5:3b:48:b3:22:c6: 49:ef:9c:16:64:db:4a:4c:54:d4:60:ec:d4:86:2f:6f:c7:86: 35:92:70:9f:20:42:b5:52:87:0c:78:9d:4f:ab:94:71:e6:2f: ad:40:d6:de -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pIuwsnhidmrbITS6NtLOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZWIyM2UyYzVkOWYyYzczNDQ4ODkwNDUwNTgzNWVmMjgw OWZiM2IwHhcNMjYwMTAyMTIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGI5ZjNjNDA5NTQwYjc0MjEzNmIyOTYyY2U4MWNjYjY1MzdkMTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tP3D+eq6f5QKm3nBg04rGPUrpyA JGFBVL+CjQuDg2Ak05fVwSh0M15DvzIrqvSuBmNhRZWq2LHJTmbwfDSTwiAVcAZx r1JKm1G7+ogaLceeRWRtmbq80IGJ7HrD2bB8MwqCb9HAo9RIgpN/jLVymFTFS6NM KPgtzXx8VBL0ALbHqKTGFrM44fGCZGOuMClvJ6shJUu3nPBLhnl/mkPf1DcGaoEl bMIgau2qxVwtEL+fRU1PyLEtSG/IR6DZ3i9SMYf5K0tcbdlDQ5f5EsgZQJ+jQjIG B3GqJNDlr65GPYc0C02svjxxQ7j5+kyXR/19WpI0xgfD1VkpqeahG1BOsQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDi588QJVAt0ITaylizoHMtlN9E6MB8GA1UdIwQY MBaAFIzrI+LF2fLHNEiJBFBYNe8oCfs7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak9zajRzWFo4c2MwU0lrRVVGZzE3eWdKLXpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82OTkyOTItM2RhMC00NzcyLWFmODIt ODMzNGUzNjIyMzZkLzEvT0xuenhBbFVDM1FoTnJLV0xPZ2N5MlUzMFRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82OTkyOTItM2RhMC00NzcyLWFmODItODMzNGUzNjIyMzZk LzEvak9zajRzWFo4c2MwU0lrRVVGZzE3eWdKLXpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbWmfAwQA uZWuMA0GCSqGSIb3DQEBCwUAA4IBAQBMdssvaBklX5H4dVe4LRLygaPK9aUlgyqj 3o+YfqOv9RCcwT0GMsw1Bu5dQ49MoDhfaeBnxWlGl0DbgcGe/eavajkjL28amJkb 5JUSrtPohCliymqqEW5u7A+jt3DI8OINwlurjnoXxfntcL9EJX97E6w1R+XLykgn WBw6TAajcS1lQaI18/n9bddPTHfxkzrfLdDgoSK1P1Gl+znZFEedkDGpPI4w8cTn WF1n6E/WhCy2q9f2sGo101fkdgUd8RECWcYV3YlHiN8oEYOvTZD5IjrlO0izIsZJ 75wWZNtKTFTUYOzUhi9vx4Y1knCfIEK1UocMeJ1Pq5Rx5i+tQNbe -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:40 2026 by rpki-client