This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/OUOwliIs5641AqDYA86oi0c89yQ.roa File: OUOwliIs5641AqDYA86oi0c89yQ.roa (raw, json) Hash identifier: 0cWigiA4tDKgfg9QQtnwoIt6kf0foXulxRY+y0Igic4= Subject key identifier: 39:43:B0:96:22:2C:E7:AE:35:02:A0:D8:03:CE:A8:8B:47:3C:F7:24 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F4E121712DCBA79D54DC337F64B9C Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/OUOwliIs5641AqDYA86oi0c89yQ.roa Signing time: Thu 01 Jan 2026 12:19:04 +0000 ROA not before: Thu 01 Jan 2026 12:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209956 IP address blocks: 213.238.166.0/24 maxlen: 24 213.238.184.0/24 maxlen: 24 213.238.187.0/24 maxlen: 24 213.238.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4e:12:17:12:dc:ba:79:d5:4d:c3:37:f6:4b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3943b096222ce7ae3502a0d803cea88b473cf724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:ad:c3:e7:80:25:b4:3c:ec:31:a1:18:e4: b3:27:68:c0:aa:a4:f9:99:51:5d:20:d6:a2:65:f1: 5c:7d:7d:16:d1:75:e8:1f:82:6a:bb:f7:16:e0:13: 20:ea:c3:48:24:8c:83:98:84:be:e0:5d:8d:61:e9: e4:66:bd:df:1e:4a:ff:88:0f:2e:84:5b:29:f6:07: 5f:ee:83:b2:0d:af:a5:d6:7d:6f:c5:0c:3d:e4:ef: 5b:83:24:fb:e6:b0:17:03:ff:4f:7f:9a:52:32:98: 84:07:a9:54:8e:98:60:43:1b:9e:c4:3e:34:a9:22: b2:96:c3:b6:cc:33:13:b5:43:8b:c1:62:e4:81:8c: 4c:37:c7:c4:3c:24:6f:f8:57:63:09:5a:c2:42:7e: 22:0d:5d:14:2b:98:69:e4:3e:f7:58:04:4e:d6:ba: ac:0c:85:48:c9:1c:87:75:ce:29:49:e0:d5:a7:63: d4:2a:9d:0c:dd:e6:03:5c:88:46:c7:c0:5a:da:c6: 2b:27:55:e2:07:90:db:bc:d9:2e:3f:05:66:b8:e6: e7:63:da:93:d1:b3:58:18:f4:db:e6:cd:0b:61:3a: 4f:d2:9b:b8:f3:c2:5e:d0:bc:77:08:66:af:22:d2: 30:b4:c9:c0:53:48:32:85:c8:27:c7:b2:c4:03:76: 00:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:43:B0:96:22:2C:E7:AE:35:02:A0:D8:03:CE:A8:8B:47:3C:F7:24 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/OUOwliIs5641AqDYA86oi0c89yQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.166.0/24 213.238.184.0/24 213.238.187.0/24 213.238.189.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:49:ca:f4:ee:7f:3a:a3:28:6c:7e:88:a0:3b:d5:dd:27:cf: 30:4c:9d:c3:37:7d:2d:fc:cb:d1:8b:2f:3b:b7:41:52:6e:86: d7:c7:c1:a0:68:c9:40:63:27:61:4c:48:50:bf:c2:51:e6:f9: 72:fa:99:ce:43:db:21:35:43:35:aa:9d:12:94:62:21:5e:73: 84:8f:af:b3:c2:fd:b2:24:1f:df:e9:b7:27:53:11:fa:d8:0a: b2:84:dc:2f:47:49:17:49:bf:6c:a8:dc:4b:1b:77:15:45:e5: b1:2c:22:3f:d2:b0:7f:9d:a8:8a:cc:c4:b3:a7:81:2f:da:77: 6e:bd:6b:fa:11:d9:5e:bb:5d:a7:81:ff:7c:eb:d1:6f:96:8f: e8:88:c5:08:08:b7:e2:e5:85:6a:63:21:35:e7:e5:26:57:a1: c2:7e:e2:27:f1:e7:bc:be:d4:a8:ba:95:11:85:d3:25:0a:a1: ac:37:83:ad:61:0e:cc:3e:79:fd:c2:77:22:1d:f3:7a:a9:6b: 8f:aa:04:7b:b6:b1:a6:e0:86:87:91:51:a2:c4:b0:88:d1:43: 97:1c:8c:c0:2c:92:33:12:87:81:69:e6:6e:ae:2d:66:22:bc: 31:09:6f:7e:be:1a:2b:59:9a:9f:d1:2b:8b:d3:23:f6:2e:cd: 07:95:ee:0d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5f04SFxLcunnVTcM39kucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTQzYjA5NjIyMmNlN2FlMzUwMmEwZDgwM2NlYTg4YjQ3M2NmNzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtGtw+eAJbQ87DGhGOSzJ2jAqqT5 mVFdINaiZfFcfX0W0XXoH4Jqu/cW4BMg6sNIJIyDmIS+4F2NYenkZr3fHkr/iA8u hFsp9gdf7oOyDa+l1n1vxQw95O9bgyT75rAXA/9Pf5pSMpiEB6lUjphgQxuexD40 qSKylsO2zDMTtUOLwWLkgYxMN8fEPCRv+FdjCVrCQn4iDV0UK5hp5D73WARO1rqs DIVIyRyHdc4pSeDVp2PUKp0M3eYDXIhGx8Ba2sYrJ1XiB5DbvNkuPwVmuObnY9qT 0bNYGPTb5s0LYTpP0pu488Je0Lx3CGavItIwtMnAU0gyhcgnx7LEA3YAZwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDlDsJYiLOeuNQKg2APOqItHPPckMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvT1VPd2xpSXM1NjQxQXFEWUE4Nm9pMGM4OXlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQA1e6mAwQA 1e64AwQA1e67AwQA1e69MA0GCSqGSIb3DQEBCwUAA4IBAQAtScr07n86oyhsfoig O9XdJ88wTJ3DN30t/MvRiy87t0FSbobXx8GgaMlAYydhTEhQv8JR5vly+pnOQ9sh NUM1qp0SlGIhXnOEj6+zwv2yJB/f6bcnUxH62AqyhNwvR0kXSb9sqNxLG3cVReWx LCI/0rB/naiKzMSzp4Ev2nduvWv6Edleu12ngf9869Fvlo/oiMUICLfi5YVqYyE1 5+UmV6HCfuIn8ee8vtSoupURhdMlCqGsN4OtYQ7MPnn9wnciHfN6qWuPqgR7trGm 4IaHkVGixLCI0UOXHIzALJIzEoeBaeZuri1mIrwxCW9+vhorWZqf0SuL0yP2Ls0H le4N -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:58 2026 by rpki-client