This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OC03yQTNZ9W5Qm5Fm2niz5AZR0Q.roa File: OC03yQTNZ9W5Qm5Fm2niz5AZR0Q.roa (raw, json) Hash identifier: pNfL+CPd4jOBe8Kuav9QASAwo3YBi7Cv9vNweCQO8Uk= Subject key identifier: 38:2D:37:C9:04:CD:67:D5:B9:42:6E:45:9B:69:E2:CF:90:19:47:44 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E6469A6F6006593A92AC5AB4AE388 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OC03yQTNZ9W5Qm5Fm2niz5AZR0Q.roa Signing time: Thu 01 Jan 2026 12:18:04 +0000 ROA not before: Thu 01 Jan 2026 12:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 91.210.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 02:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:64:69:a6:f6:00:65:93:a9:2a:c5:ab:4a:e3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=382d37c904cd67d5b9426e459b69e2cf90194744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:56:84:76:9e:67:55:fc:d5:73:63:21:ff:17: 3f:dd:6e:d0:34:7d:9f:40:58:86:c4:13:4f:63:9b: b1:75:01:ee:77:e4:45:be:12:34:57:95:2b:95:ec: 53:b9:75:d2:30:f2:9a:d3:da:c8:22:d3:60:cf:ed: 7f:76:18:a7:a1:42:1f:41:21:7c:45:85:a5:a7:91: b4:83:9d:00:37:21:69:dc:7c:cd:f8:6b:a3:11:d1: 8a:7b:23:02:af:fa:33:45:9f:5e:7c:11:88:1e:9c: b6:bc:4b:2e:54:9d:28:ab:ce:c5:f2:b0:c8:25:2f: 0a:19:ec:92:59:3a:d5:be:59:cd:84:f2:55:24:25: 49:09:3b:13:50:29:85:cb:40:77:18:b8:08:ad:12: 5c:fb:7c:80:4a:08:aa:ab:7b:8b:15:32:85:53:8a: 38:98:67:d7:f7:14:33:a5:b4:a4:d1:ae:f9:8f:4e: 1a:b0:be:c7:5d:71:0c:12:35:2b:ed:cb:b0:34:8b: 3e:95:c3:79:ba:aa:0f:98:93:82:5d:05:3f:46:4a: 05:50:22:18:b7:e8:47:85:36:e2:52:53:0d:fb:11: bd:13:70:bf:d0:40:f3:ec:dd:64:e3:79:b4:23:5f: 30:3d:1d:a5:07:19:c9:e8:cd:c2:b5:00:a1:4c:e1: b0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2D:37:C9:04:CD:67:D5:B9:42:6E:45:9B:69:E2:CF:90:19:47:44 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OC03yQTNZ9W5Qm5Fm2niz5AZR0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.144.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:21:8e:19:be:33:df:5f:35:70:ea:fb:37:5b:f0:e4:52:1d: 61:b2:20:af:9b:d6:a9:02:e5:5d:fa:c6:bf:fb:e8:84:cb:f8: 5a:80:f4:b8:6e:fc:d0:ac:06:36:b1:6e:97:52:18:eb:f8:20: 77:77:c8:62:14:5d:6b:3c:69:ca:72:af:79:05:ab:d1:09:e7: c3:7d:03:1c:2b:2c:e2:ce:1f:0c:04:16:8a:bd:0b:be:39:dd: 3a:ab:c3:1b:92:08:60:64:25:64:7a:a2:f0:5f:24:3c:43:93: 80:4f:7d:a6:57:89:af:5f:d4:e3:1c:8a:88:eb:34:3d:e6:06: 6d:a8:1f:48:40:f1:23:34:9b:61:ba:2d:a2:d5:a2:9e:43:71: 6f:e8:6a:c2:2b:21:6a:04:a1:32:f1:e6:6f:c9:b8:53:5f:76: e6:5f:47:20:df:1b:ae:76:a6:b7:69:8d:9f:d0:a1:8a:17:03: d0:ba:9c:95:36:7f:91:3a:ae:f0:16:ab:91:8a:b0:4f:69:07: f4:df:24:2f:45:0a:82:5a:d9:7a:2d:d0:27:6b:2f:d1:0e:f3: 89:44:71:33:58:b4:aa:42:a1:69:ce:3d:cb:61:51:62:74:43: 69:8a:47:f2:da:f3:52:94:7d:57:cc:14:52:6f:61:c8:4d:46: ec:5d:52:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmRppvYAZZOpKsWrSuOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODJkMzdjOTA0Y2Q2N2Q1Yjk0MjZlNDU5YjY5ZTJjZjkwMTk0NzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FaEdp5nVfzVc2Mh/xc/3W7QNH2f QFiGxBNPY5uxdQHud+RFvhI0V5UrlexTuXXSMPKa09rIItNgz+1/dhinoUIfQSF8 RYWlp5G0g50ANyFp3HzN+GujEdGKeyMCr/ozRZ9efBGIHpy2vEsuVJ0oq87F8rDI JS8KGeySWTrVvlnNhPJVJCVJCTsTUCmFy0B3GLgIrRJc+3yASgiqq3uLFTKFU4o4 mGfX9xQzpbSk0a75j04asL7HXXEMEjUr7cuwNIs+lcN5uqoPmJOCXQU/RkoFUCIY t+hHhTbiUlMN+xG9E3C/0EDz7N1k43m0I18wPR2lBxnJ6M3CtQChTOGwEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDgtN8kEzWfVuUJuRZtp4s+QGUdEMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvT0MwM3lRVE5aOVc1UW01Rm0ybml6NUFaUjBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9KQMA0G CSqGSIb3DQEBCwUAA4IBAQAeIY4ZvjPfXzVw6vs3W/DkUh1hsiCvm9apAuVd+sa/ ++iEy/hagPS4bvzQrAY2sW6XUhjr+CB3d8hiFF1rPGnKcq95BavRCefDfQMcKyzi zh8MBBaKvQu+Od06q8MbkghgZCVkeqLwXyQ8Q5OAT32mV4mvX9TjHIqI6zQ95gZt qB9IQPEjNJthui2i1aKeQ3Fv6GrCKyFqBKEy8eZvybhTX3bmX0cg3xuudqa3aY2f 0KGKFwPQupyVNn+ROq7wFquRirBPaQf03yQvRQqCWtl6LdAnay/RDvOJRHEzWLSq QqFpzj3LYVFidENpikfy2vNSlH1XzBRSb2HITUbsXVL+ -----END CERTIFICATE-----Generated at Mon Jan 19 11:51:32 2026 by rpki-client