This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/o7HusEMOG9w8i7nPATSfgRZfBxE.roa File: o7HusEMOG9w8i7nPATSfgRZfBxE.roa (raw, json) Hash identifier: ATcUGvTK+Irz8LuUFhLoLKxbO8tkdyx50z3vjTJt9EM= Subject key identifier: A3:B1:EE:B0:43:0E:1B:DC:3C:8B:B9:CF:01:34:9F:81:16:5F:07:11 Certificate issuer: /CN=defc2686c29abef18f40b30e7e9513247a66ef13 Certificate serial: 019B7EA6BB169EB990A46C78DB4AA3831A92 Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/o7HusEMOG9w8i7nPATSfgRZfBxE.roa Signing time: Fri 02 Jan 2026 12:20:14 +0000 ROA not before: Fri 02 Jan 2026 12:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58293 IP address blocks: 212.6.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:bb:16:9e:b9:90:a4:6c:78:db:4a:a3:83:1a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13 Validity Not Before: Jan 2 12:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3b1eeb0430e1bdc3c8bb9cf01349f81165f0711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9d:03:c4:e5:bc:c4:e9:93:1a:b9:94:0a:56: 41:db:3f:3a:71:09:8c:88:7e:cf:c6:fb:f3:c0:73: da:0a:83:b0:e5:ba:22:de:9e:b9:e2:5f:a7:3f:47: d8:e7:fa:6a:f9:04:7e:be:65:6e:67:a2:26:39:a1: d5:dc:c4:a4:37:69:d2:8e:b8:e6:47:c8:ca:a4:a9: f2:e7:e6:01:7b:66:2e:10:16:bb:d1:7f:c4:79:dc: 05:17:8a:9e:cf:a2:23:9f:df:5e:f5:1e:6f:7a:0d: 97:eb:a1:ab:53:31:fd:7d:a7:c4:3a:19:4a:60:51: e3:aa:57:7d:45:13:0f:3e:1b:f8:45:91:84:8a:a1: 35:9a:15:d9:05:97:0f:9a:65:15:12:7f:8a:2d:21: dc:66:34:20:c0:65:65:13:2a:10:3f:ee:1f:ab:fb: 2e:0d:5e:bc:bb:a2:28:86:2a:3f:f2:45:34:0d:9a: fa:3b:2d:1a:31:cd:0b:52:9b:7c:44:70:d1:34:d0: 2e:ca:d9:2b:87:3e:e5:d2:93:e9:ae:17:a4:54:79: 60:a7:6d:58:91:be:de:1c:2a:07:be:ce:d2:dd:93: 51:49:8b:cb:71:70:b7:7e:dc:47:f4:1b:e7:c5:ca: 27:d9:39:f6:7f:84:50:99:38:c7:56:a8:4c:fe:50: 27:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B1:EE:B0:43:0E:1B:DC:3C:8B:B9:CF:01:34:9F:81:16:5F:07:11 X509v3 Authority Key Identifier: keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/o7HusEMOG9w8i7nPATSfgRZfBxE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.6.33.0/24 Signature Algorithm: sha256WithRSAEncryption 16:ca:f9:2e:1a:03:16:ae:8e:48:ac:f6:3d:8a:2f:67:91:60: 26:70:41:46:08:82:05:17:ec:b2:b9:63:68:67:91:5e:7e:a9: 4b:20:2e:f1:e9:60:69:88:00:1f:03:6e:14:df:b0:62:c4:7d: 99:b3:6a:af:f4:7c:80:03:72:69:98:4a:81:2f:91:2c:f0:86: a4:b9:a1:c8:16:49:2d:66:68:2c:6a:db:af:bf:24:e6:ba:84: 6f:03:e7:bd:e2:ab:bb:76:72:4a:97:27:f6:aa:17:ae:16:9e: 3c:6f:a8:fd:a0:48:5f:ff:9f:4b:22:2a:2c:30:4b:81:7c:34: ab:22:01:c4:84:67:90:c6:d9:66:4d:09:38:a7:f3:3f:ba:1a: 6c:7f:9c:fd:66:d9:c5:86:05:97:70:0c:b4:66:cb:77:96:c7: a2:41:59:e6:9d:be:06:8c:54:97:c6:87:63:80:43:74:e0:72: 5a:4a:2e:cf:fe:08:f4:02:3e:a0:a1:e3:10:e6:d6:50:49:84: b0:90:15:d6:64:72:e7:61:f6:ca:dd:a1:90:83:a1:60:2e:ed: 93:c1:74:c6:3f:64:3b:97:97:2f:d1:e4:1b:3b:15:f6:71:c6: 1e:85:66:46:29:6a:85:1b:3a:88:c2:d4:cd:b6:f2:fa:7e:31: 12:61:8d:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+prsWnrmQpGx420qjgxqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZmMyNjg2YzI5YWJlZjE4ZjQwYjMwZTdlOTUxMzI0N2E2 NmVmMTMwHhcNMjYwMTAyMTIyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2IxZWViMDQzMGUxYmRjM2M4YmI5Y2YwMTM0OWY4MTE2NWYwNzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx50DxOW8xOmTGrmUClZB2z86cQmM iH7PxvvzwHPaCoOw5boi3p654l+nP0fY5/pq+QR+vmVuZ6ImOaHV3MSkN2nSjrjm R8jKpKny5+YBe2YuEBa70X/EedwFF4qez6Ijn99e9R5veg2X66GrUzH9fafEOhlK YFHjqld9RRMPPhv4RZGEiqE1mhXZBZcPmmUVEn+KLSHcZjQgwGVlEyoQP+4fq/su DV68u6Iohio/8kU0DZr6Oy0aMc0LUpt8RHDRNNAuytkrhz7l0pPprhekVHlgp21Y kb7eHCoHvs7S3ZNRSYvLcXC3ftxH9Bvnxcon2Tn2f4RQmTjHVqhM/lAnzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKOx7rBDDhvcPIu5zwE0n4EWXwcRMB8GA1UdIwQY MBaAFN78JobCmr7xj0CzDn6VEyR6Zu8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Z3bWhzS2F2dkdQUUxNT2ZwVVRKSHBtN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNDUxNWUtODY0MS00NWIwLWI3NWYt MDk2OTIxYzkxYzQxLzEvbzdIdXNFTU9HOXc4aTduUEFUU2ZnUlpmQnhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iNDUxNWUtODY0MS00NWIwLWI3NWYtMDk2OTIxYzkxYzQx LzEvM3Z3bWhzS2F2dkdQUUxNT2ZwVVRKSHBtN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AYhMA0G CSqGSIb3DQEBCwUAA4IBAQAWyvkuGgMWro5IrPY9ii9nkWAmcEFGCIIFF+yyuWNo Z5FefqlLIC7x6WBpiAAfA24U37BixH2Zs2qv9HyAA3JpmEqBL5Es8IakuaHIFkkt ZmgsatuvvyTmuoRvA+e94qu7dnJKlyf2qheuFp48b6j9oEhf/59LIiosMEuBfDSr IgHEhGeQxtlmTQk4p/M/uhpsf5z9ZtnFhgWXcAy0Zst3lseiQVnmnb4GjFSXxodj gEN04HJaSi7P/gj0Aj6goeMQ5tZQSYSwkBXWZHLnYfbK3aGQg6FgLu2TwXTGP2Q7 l5cv0eQbOxX2ccYehWZGKWqFGzqIwtTNtvL6fjESYY0U -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:16 2026 by rpki-client