This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/V0-osk911oZBoXIEbj4rnci62yY.roa File: V0-osk911oZBoXIEbj4rnci62yY.roa (raw, json) Hash identifier: rYxJFA3gAE6iirrxlQ+evDRo4zqxQB5y71GogsBIQ7c= Subject key identifier: 57:4F:A8:B2:4F:75:D6:86:41:A1:72:04:6E:3E:2B:9D:C8:BA:DB:26 Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae Certificate serial: 019B7C7FFE027764618B78F0A2A1F4CAC6A3 Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/V0-osk911oZBoXIEbj4rnci62yY.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31662 IP address blocks: 64.239.60.0/24 maxlen: 24 64.239.61.0/24 maxlen: 24 193.186.252.0/24 maxlen: 24 2001:678:1150::/48 maxlen: 48 2001:67c:934::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fe:02:77:64:61:8b:78:f0:a2:a1:f4:ca:c6:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=574fa8b24f75d68641a172046e3e2b9dc8badb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3f:79:8a:ca:bd:46:1a:e8:d3:03:a0:d7:18: 0c:2b:5c:29:59:d0:a0:c7:eb:ad:d6:db:9f:18:17: cb:4f:57:df:bc:70:46:28:8f:f3:63:1e:86:82:1d: 8f:66:f8:18:73:72:05:98:e8:41:a7:5d:71:e7:fc: e9:b6:2d:e9:72:f4:67:4e:79:19:51:ad:6a:35:42: 8d:66:74:ce:47:56:6a:34:72:45:b7:10:37:55:e3: b8:4c:55:ae:f7:fe:27:ac:71:b2:57:d6:00:f0:46: 2b:e9:c5:dc:99:d2:3e:f0:8c:e6:ba:f8:fc:fc:bb: b8:68:76:99:93:10:14:29:37:28:97:e8:ee:c6:6a: 70:f4:5c:f7:7c:99:f0:15:a1:e7:2e:2c:ab:1d:ff: fb:46:b5:66:33:bd:92:72:99:be:45:53:b7:c8:51: 66:e1:8e:11:55:ee:19:ce:cd:1f:47:04:68:ff:3c: 45:b3:05:f5:ed:fc:3e:92:38:e0:6b:fc:75:f4:cc: 39:cc:19:58:54:e7:1c:56:6c:b4:67:4f:6e:fc:6f: e5:cd:88:d1:32:85:52:dd:7a:ae:5b:c7:41:00:8a: 32:5f:08:92:8d:61:7e:1d:ba:cd:11:2d:c8:ef:5d: 3b:41:1f:38:9d:c2:9a:82:52:22:5d:7c:59:86:ce: 06:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4F:A8:B2:4F:75:D6:86:41:A1:72:04:6E:3E:2B:9D:C8:BA:DB:26 X509v3 Authority Key Identifier: keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/V0-osk911oZBoXIEbj4rnci62yY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.239.60.0/23 193.186.252.0/24 IPv6: 2001:678:1150::/48 2001:67c:934::/48 Signature Algorithm: sha256WithRSAEncryption 2e:cc:b9:08:3f:b4:04:6f:4b:63:9a:78:d4:6f:17:0b:09:b4: 9f:a4:05:22:a4:c1:28:51:0c:90:c9:d2:16:ce:4c:c0:eb:ec: ca:e7:52:48:b1:ae:13:80:fe:68:46:a8:ac:42:93:a5:35:96: 73:ad:13:c6:5e:51:4c:54:cc:42:33:12:7d:1c:72:86:fa:ce: c2:03:05:b8:ec:5a:b9:4d:b9:b2:4e:3c:60:56:b6:89:d9:76: ae:1f:7a:7c:84:7f:6a:31:cc:57:6e:f3:c1:d6:f2:ef:03:ee: 2a:5e:24:a6:1d:ec:f3:dc:e6:09:60:29:27:9c:a1:0f:28:55: 94:73:9e:ca:5b:32:e6:ea:d6:b8:f5:ab:1c:31:29:15:bd:b3: 85:b0:38:5c:51:05:71:db:38:a0:77:66:b4:1a:2d:20:5e:5a: d3:a8:df:33:21:d1:35:5c:84:45:ff:e1:94:40:2b:37:4a:4c: 28:f1:a8:d2:6b:e6:eb:3c:73:b6:b8:62:75:3f:c6:5c:5e:cf: 62:85:c4:a0:63:37:f3:26:65:d4:4e:17:1b:24:78:15:89:01: 0d:aa:a6:aa:0d:ec:15:a4:20:71:5c:1d:f7:04:2f:30:ed:92: 03:16:99:47:a7:55:01:fd:ce:da:c7:2f:e3:93:89:e5:fb:5e: d5:45:8b:ea -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt8f/4Cd2Rhi3jwoqH0ysajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NTRiZDhhODYzYTMxODk1Y2M2Y2I5MjJmMzAwOGIzZjA4 YWFkYWUwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzRmYThiMjRmNzVkNjg2NDFhMTcyMDQ2ZTNlMmI5ZGM4YmFkYjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D95isq9Rhro0wOg1xgMK1wpWdCg x+ut1tufGBfLT1ffvHBGKI/zYx6Ggh2PZvgYc3IFmOhBp11x5/zpti3pcvRnTnkZ Ua1qNUKNZnTOR1ZqNHJFtxA3VeO4TFWu9/4nrHGyV9YA8EYr6cXcmdI+8Izmuvj8 /Lu4aHaZkxAUKTcol+juxmpw9Fz3fJnwFaHnLiyrHf/7RrVmM72Scpm+RVO3yFFm 4Y4RVe4Zzs0fRwRo/zxFswX17fw+kjjga/x19Mw5zBlYVOccVmy0Z09u/G/lzYjR MoVS3XquW8dBAIoyXwiSjWF+HbrNES3I7107QR84ncKaglIiXXxZhs4G7QIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFFdPqLJPddaGQaFyBG4+K53IutsmMB8GA1UdIwQY MBaAFJhUvYqGOjGJXMbLki8wCLPwiq2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODIt YzUyMmI3NGRkY2ZkLzEvVjAtb3NrOTExb1pCb1hJRWJqNHJuY2k2MnlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODItYzUyMmI3NGRkY2Zk LzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBQO88AwQA wbr8MBgEAgACMBIDBwAgAQZ4EVADBwAgAQZ8CTQwDQYJKoZIhvcNAQELBQADggEB AC7MuQg/tARvS2OaeNRvFwsJtJ+kBSKkwShRDJDJ0hbOTMDr7MrnUkixrhOA/mhG qKxCk6U1lnOtE8ZeUUxUzEIzEn0ccob6zsIDBbjsWrlNubJOPGBWtonZdq4fenyE f2oxzFdu88HW8u8D7ipeJKYd7PPc5glgKSecoQ8oVZRznspbMubq1rj1qxwxKRW9 s4WwOFxRBXHbOKB3ZrQaLSBeWtOo3zMh0TVchEX/4ZRAKzdKTCjxqNJr5us8c7a4 YnU/xlxez2KFxKBjN/MmZdROFxskeBWJAQ2qpqoN7BWkIHFcHfcELzDtkgMWmUen VQH9ztrHL+OTieX7XtVFi+o= -----END CERTIFICATE-----Generated at Tue Feb 10 04:53:46 2026 by rpki-client