This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/OYpCQdK7lNSRzIdlHHMMZTxhha0.roa File: OYpCQdK7lNSRzIdlHHMMZTxhha0.roa (raw, json) Hash identifier: hLxZ48pmO0NghpmoI7b6iic2RgENYFKFAU8pL6U0sxU= Subject key identifier: 39:8A:42:41:D2:BB:94:D4:91:CC:87:65:1C:73:0C:65:3C:61:85:AD Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Certificate serial: 019B9FD6831B25ABECE167870927CE3CAC09 Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/OYpCQdK7lNSRzIdlHHMMZTxhha0.roa Signing time: Thu 08 Jan 2026 22:59:54 +0000 ROA not before: Thu 08 Jan 2026 22:59:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199950 IP address blocks: 31.22.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:d6:83:1b:25:ab:ec:e1:67:87:09:27:ce:3c:ac:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Validity Not Before: Jan 8 22:59:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=398a4241d2bb94d491cc87651c730c653c6185ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a4:51:13:2f:6c:1b:f0:a2:89:9c:d5:68:99: 02:96:54:cb:dc:7a:4c:34:51:1b:f4:e3:13:3b:74: 5c:86:c9:c2:14:e1:03:3b:58:be:2c:b2:5e:a2:60: 22:90:00:3a:db:12:c3:d9:5d:30:26:0a:50:43:d4: 33:47:be:2d:67:1c:09:4a:76:1f:26:b3:e7:d9:03: 06:a6:b1:1a:78:1f:19:1c:dd:9c:2c:e4:74:95:53: 58:31:18:ab:44:49:22:fe:98:34:fe:78:7e:31:81: 1e:7a:12:be:86:06:a3:fe:46:7c:1e:28:18:46:58: e5:ee:ba:42:c7:ef:d4:fc:d9:31:a5:86:0d:ab:dd: e4:b4:00:52:bd:6c:fd:84:31:72:4a:83:26:0d:fc: b9:53:b6:89:8d:a2:cf:6c:9b:ea:a6:c2:c6:7a:5b: b2:80:b3:26:41:0e:ea:a0:39:db:f4:4e:57:28:ac: b1:a9:97:96:e4:84:7a:5a:70:f4:46:be:37:96:eb: b6:0c:17:85:98:db:9a:18:3d:25:49:54:f0:7e:f7: be:1a:76:18:da:a1:08:d3:03:0c:e0:40:9c:c9:8e: 72:4e:de:26:5f:82:de:f3:e6:e6:2e:fe:00:bc:2a: cd:dd:ee:51:78:c7:39:ab:de:a6:11:d9:c7:b3:89: ba:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8A:42:41:D2:BB:94:D4:91:CC:87:65:1C:73:0C:65:3C:61:85:AD X509v3 Authority Key Identifier: keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/OYpCQdK7lNSRzIdlHHMMZTxhha0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.95.0/24 Signature Algorithm: sha256WithRSAEncryption 36:06:a4:14:46:29:41:4e:9e:2f:60:2a:87:a6:48:14:1e:fb: 34:2e:39:73:0b:ab:e1:74:d3:71:8b:49:6d:a9:6d:7a:03:41: fd:0c:43:7b:9c:1d:87:e6:74:75:ab:5f:41:99:c4:98:aa:17: 91:d7:82:90:60:5d:f1:86:6d:59:f4:44:2e:46:ef:45:00:f8: 49:4d:4b:0c:bd:2a:1d:28:48:02:fe:27:2c:25:89:bf:75:44: 5f:fb:dc:09:48:bd:9e:3b:a5:85:10:6d:f1:01:ab:18:7d:79: b4:23:58:62:5b:ff:d4:13:35:4b:cf:d7:54:99:4d:1d:84:6a: 2b:63:d6:e2:64:64:d5:54:41:2c:df:f6:64:48:82:04:ac:fc: bd:03:71:2f:b1:78:73:97:fb:8f:fd:d9:34:f5:72:2b:2e:ee: 1f:1a:50:45:df:34:cc:87:3b:08:38:75:6a:14:c6:79:11:0e: c1:aa:89:f5:ba:8b:3f:08:fb:43:00:e8:eb:18:dd:e5:b0:1c: 4b:14:cd:0e:8d:4a:3b:35:2a:8b:0b:3a:1b:43:5c:44:a1:3d: d3:bf:96:f8:a5:c3:6d:01:f6:7f:3f:8f:76:92:9f:3c:e1:fd: a9:62:64:77:b8:c1:9a:c1:0a:9e:77:ff:cc:1d:5b:ce:6a:5b: 06:06:6e:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuf1oMbJavs4WeHCSfOPKwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDg0NmYyMWM1NmE4NTEzZDMxYzE1NWRkMTk5MTk3YTNm ZmM3YzAwHhcNMjYwMTA4MjI1OTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOThhNDI0MWQyYmI5NGQ0OTFjYzg3NjUxYzczMGM2NTNjNjE4NWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKRREy9sG/CiiZzVaJkCllTL3HpM NFEb9OMTO3RchsnCFOEDO1i+LLJeomAikAA62xLD2V0wJgpQQ9QzR74tZxwJSnYf JrPn2QMGprEaeB8ZHN2cLOR0lVNYMRirREki/pg0/nh+MYEeehK+hgaj/kZ8HigY Rljl7rpCx+/U/NkxpYYNq93ktABSvWz9hDFySoMmDfy5U7aJjaLPbJvqpsLGeluy gLMmQQ7qoDnb9E5XKKyxqZeW5IR6WnD0Rr43luu2DBeFmNuaGD0lSVTwfve+GnYY 2qEI0wMM4ECcyY5yTt4mX4Le8+bmLv4AvCrN3e5ReMc5q96mEdnHs4m6QQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDmKQkHSu5TUkcyHZRxzDGU8YYWtMB8GA1UdIwQY MBaAFPYIRvIcVqhRPTHBVd0ZkZej/8fAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYt YTZkNDVlZjdkMjI3LzEvT1lwQ1FkSzdsTlNSeklkbEhITU1aVHhoaGEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYtYTZkNDVlZjdkMjI3 LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHxZfMA0G CSqGSIb3DQEBCwUAA4IBAQA2BqQURilBTp4vYCqHpkgUHvs0LjlzC6vhdNNxi0lt qW16A0H9DEN7nB2H5nR1q19BmcSYqheR14KQYF3xhm1Z9EQuRu9FAPhJTUsMvSod KEgC/icsJYm/dURf+9wJSL2eO6WFEG3xAasYfXm0I1hiW//UEzVLz9dUmU0dhGor Y9biZGTVVEEs3/ZkSIIErPy9A3EvsXhzl/uP/dk09XIrLu4fGlBF3zTMhzsIOHVq FMZ5EQ7Bqon1uos/CPtDAOjrGN3lsBxLFM0OjUo7NSqLCzobQ1xEoT3Tv5b4pcNt AfZ/P492kp884f2pYmR3uMGawQqed//MHVvOalsGBm4U -----END CERTIFICATE-----Generated at Mon Jan 26 13:10:49 2026 by rpki-client