This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/osYf6Af5x6cpqN_TlmUFOmqbliA.roa File: osYf6Af5x6cpqN_TlmUFOmqbliA.roa (raw, json) Hash identifier: zUPEdLrB8fQAi3Gqc7ReZpmMZEF3HQ9UfPkoknjyYy8= Subject key identifier: A2:C6:1F:E8:07:F9:C7:A7:29:A8:DF:D3:96:65:05:3A:6A:9B:96:20 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12F346FFA186E6B975242E42AACEA3 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/osYf6Af5x6cpqN_TlmUFOmqbliA.roa Signing time: Fri 02 Jan 2026 00:19:35 +0000 ROA not before: Fri 02 Jan 2026 00:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30934 IP address blocks: 195.65.103.0/24 maxlen: 24 212.243.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f3:46:ff:a1:86:e6:b9:75:24:2e:42:aa:ce:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2c61fe807f9c7a729a8dfd39665053a6a9b9620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d9:06:12:2d:6a:6e:60:8d:8a:3d:52:2c:4c: 6d:5d:97:01:dc:32:c0:bb:33:e9:f1:15:c2:61:26: 66:20:8c:84:21:88:f9:87:09:ec:2c:7a:d1:e2:b8: 15:47:e8:d9:a7:90:3e:0d:a0:85:31:6e:87:0f:bc: 2b:5f:49:c8:32:e1:5e:d0:c0:0d:80:74:cd:05:59: 28:f4:51:ef:ce:82:d4:19:c5:d9:29:03:d0:b8:f9: 28:31:07:6d:d2:84:39:fb:52:44:b2:41:74:1c:4d: 3f:04:a6:7c:8d:1d:14:10:b0:28:b2:a3:02:3f:16: ab:d0:17:05:a3:5d:64:75:e1:a6:ed:c3:36:2c:7b: 16:8d:35:eb:84:c2:f5:d9:9c:43:e8:94:87:e6:85: ea:bf:8f:85:85:42:a4:38:43:0b:65:93:d1:f1:fd: 8c:4a:13:32:a9:89:c0:8e:9a:ac:70:bf:55:fb:b8: 46:b8:31:52:87:aa:d1:3e:96:58:cd:8b:96:26:e4: 2d:5d:31:40:06:ab:36:9b:01:ac:e2:7f:9c:38:b9: 7c:b3:d3:cd:bc:b3:48:00:ca:74:10:a6:b4:38:87: c0:55:19:4d:99:5c:b1:d3:11:c7:0b:c8:99:bf:a8: a6:d6:c1:45:48:a1:45:55:7c:8d:f8:bb:c5:45:94: ff:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C6:1F:E8:07:F9:C7:A7:29:A8:DF:D3:96:65:05:3A:6A:9B:96:20 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/osYf6Af5x6cpqN_TlmUFOmqbliA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.65.103.0/24 212.243.12.0/24 Signature Algorithm: sha256WithRSAEncryption 90:c4:43:ae:d5:0d:04:06:44:a7:56:15:ae:11:37:b0:5a:df: 8d:b2:41:05:7a:fc:af:6f:16:bc:cf:06:33:7e:f1:78:08:78: ee:40:19:84:f3:24:bf:75:5e:88:76:55:0b:b9:20:42:93:a2: d9:61:8c:40:47:fb:f5:71:08:b7:cf:12:aa:58:59:d0:89:19: 85:d0:1b:f4:62:9c:5a:77:b9:45:25:0d:90:cd:16:12:49:39: f9:2e:b3:7f:c0:78:d4:73:cc:39:0f:a8:04:4b:ec:73:f7:c9: 06:e2:66:1f:3c:f7:32:a7:20:db:ab:6d:f8:4c:d0:46:37:dd: 3f:84:68:af:6e:66:6f:f2:b3:ec:d2:b0:54:4e:c7:31:4f:97: 3c:55:0c:76:3c:20:62:8d:28:49:89:cf:32:c9:ec:ac:53:36: 63:3a:b9:73:dc:d0:0b:a9:8a:e0:22:91:53:74:83:7d:5f:2a: 7d:e5:53:f8:76:57:11:dd:ad:f8:f4:b5:b8:03:c4:be:82:5d: de:d9:11:63:87:1a:28:57:92:46:f5:0b:85:9f:dc:93:d6:5d: 0c:14:28:a0:01:5b:c9:28:83:80:fd:22:aa:0f:0d:a9:93:62: 4e:76:c7:43:23:21:de:2f:c8:dc:cf:e3:25:c7:f2:5e:0b:4b: b4:b2:6f:a6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EvNG/6GG5rl1JC5Cqs6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmM2MWZlODA3ZjljN2E3MjlhOGRmZDM5NjY1MDUzYTZhOWI5NjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdkGEi1qbmCNij1SLExtXZcB3DLA uzPp8RXCYSZmIIyEIYj5hwnsLHrR4rgVR+jZp5A+DaCFMW6HD7wrX0nIMuFe0MAN gHTNBVko9FHvzoLUGcXZKQPQuPkoMQdt0oQ5+1JEskF0HE0/BKZ8jR0UELAosqMC Pxar0BcFo11kdeGm7cM2LHsWjTXrhML12ZxD6JSH5oXqv4+FhUKkOEMLZZPR8f2M ShMyqYnAjpqscL9V+7hGuDFSh6rRPpZYzYuWJuQtXTFABqs2mwGs4n+cOLl8s9PN vLNIAMp0EKa0OIfAVRlNmVyx0xHHC8iZv6im1sFFSKFFVXyN+LvFRZT/pwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKLGH+gH+cenKajf05ZlBTpqm5YgMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvb3NZZjZBZjV4NmNwcU5fVGxtVUZPbXFibGlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw0FnAwQA 1PMMMA0GCSqGSIb3DQEBCwUAA4IBAQCQxEOu1Q0EBkSnVhWuETewWt+NskEFevyv bxa8zwYzfvF4CHjuQBmE8yS/dV6IdlULuSBCk6LZYYxAR/v1cQi3zxKqWFnQiRmF 0Bv0Ypxad7lFJQ2QzRYSSTn5LrN/wHjUc8w5D6gES+xz98kG4mYfPPcypyDbq234 TNBGN90/hGivbmZv8rPs0rBUTscxT5c8VQx2PCBijShJic8yyeysUzZjOrlz3NAL qYrgIpFTdIN9Xyp95VP4dlcR3a349LW4A8S+gl3e2RFjhxooV5JG9QuFn9yT1l0M FCigAVvJKIOA/SKqDw2pk2JOdsdDIyHeL8jcz+Mlx/JeC0u0sm+m -----END CERTIFICATE-----Generated at Mon Jan 26 17:46:28 2026 by rpki-client