This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/osv-bPTm7EkX2UpBKK6PsetzURk.roa File: osv-bPTm7EkX2UpBKK6PsetzURk.roa (raw, json) Hash identifier: YSsmgcD36aEYgXK+zsIFKY4sSvKY/KyPq4ODZAfcm88= Subject key identifier: A2:CB:FE:6C:F4:E6:EC:49:17:D9:4A:41:28:AE:8F:B1:EB:73:51:19 Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b Certificate serial: 019B7EA688EAF5C9618711C659A8F125AB70 Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/osv-bPTm7EkX2UpBKK6PsetzURk.roa Signing time: Fri 02 Jan 2026 12:20:01 +0000 ROA not before: Fri 02 Jan 2026 12:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215806 IP address blocks: 195.47.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:88:ea:f5:c9:61:87:11:c6:59:a8:f1:25:ab:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b Validity Not Before: Jan 2 12:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2cbfe6cf4e6ec4917d94a4128ae8fb1eb735119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f4:30:39:44:fd:3c:06:05:c2:35:46:6a:6c: 59:71:b4:3d:0f:9b:a7:c5:8b:72:a1:20:6e:3b:a8: dc:50:03:db:a6:d9:78:f4:4e:39:ad:4c:7d:ca:7c: 75:bf:fa:96:95:25:6a:db:47:08:71:6f:87:b5:5d: e7:97:49:0f:80:ec:c8:e6:91:93:af:97:d3:e6:dc: f0:d6:5e:c8:7b:3e:9e:17:f3:e3:87:59:90:4c:48: bb:32:01:89:00:3d:24:dc:46:29:f7:22:49:77:79: 4d:2a:4a:20:a0:1c:62:d1:d9:b1:ad:c1:43:5f:13: c6:cd:b2:20:ec:ee:c2:99:88:10:f4:eb:82:dd:51: 8f:c2:04:69:a2:89:22:8d:4f:18:52:90:d8:4a:f0: fb:4e:64:e7:fc:5a:d0:f2:90:68:db:ae:c8:44:8a: af:70:8a:51:5d:c5:29:b3:27:76:52:60:ef:69:b8: df:73:15:be:1d:44:52:28:db:bb:98:f5:98:36:69: 43:68:2e:37:c3:f3:e4:c1:7f:a8:40:1d:f7:77:eb: 12:39:0f:13:4b:bf:d3:f3:3d:f7:9c:5c:92:15:02: 1c:f3:12:03:b3:a8:f8:48:b2:65:7b:6e:99:6a:23: 66:e6:07:ed:ed:9e:03:8d:d0:fa:c4:37:10:da:1c: 9b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CB:FE:6C:F4:E6:EC:49:17:D9:4A:41:28:AE:8F:B1:EB:73:51:19 X509v3 Authority Key Identifier: keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/osv-bPTm7EkX2UpBKK6PsetzURk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.47.252.0/24 Signature Algorithm: sha256WithRSAEncryption 72:62:49:fe:9e:9b:e6:8d:bf:5b:db:3c:20:03:8c:7b:5a:84: 3d:c1:e2:b8:f4:e0:41:92:8d:53:53:4d:6a:80:f0:45:c4:be: cc:7f:2e:c2:8c:7e:a1:2a:5f:1c:0d:c9:b1:3b:ba:51:3e:ca: e4:e6:84:e4:9b:42:8d:24:7a:82:af:1f:f1:10:de:6b:b5:da: 9b:1d:8e:07:d1:61:0f:13:4e:92:ee:ab:f0:64:af:b8:92:3e: 70:a3:24:8c:61:bb:a9:c3:28:7b:a7:49:5d:7e:9e:bf:4d:1c: 24:ad:d2:41:f9:f9:8d:78:54:bf:ca:d6:42:14:fa:1a:fa:23: be:7b:e9:24:eb:d9:95:95:2d:1b:6b:bc:ad:fa:37:bc:06:4a: ac:e2:82:39:7b:78:3d:91:ce:00:cc:9c:db:8c:c6:f1:9a:c7: 97:08:a0:ae:0f:14:2b:28:0b:41:e0:e2:cd:32:2c:87:0f:72: 58:ef:70:97:37:70:70:8d:03:db:39:4c:bf:82:08:4f:bb:00: 81:e1:18:46:2f:16:2b:ca:0a:0a:f9:61:57:67:f9:ad:03:0f: 73:90:a4:2a:21:78:17:04:eb:20:5c:f4:84:ad:e9:96:3d:3b: 2b:b2:68:dc:80:11:5e:28:87:a3:be:31:53:e5:7c:51:e4:6f: 31:a0:73:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pojq9clhhxHGWajxJatwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMDJmMGFhODljMDY3ZDY2MzM4YjRkNTlkMjA1MmJhMzlh OTk0NGIwHhcNMjYwMTAyMTIyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmNiZmU2Y2Y0ZTZlYzQ5MTdkOTRhNDEyOGFlOGZiMWViNzM1MTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/QwOUT9PAYFwjVGamxZcbQ9D5un xYtyoSBuO6jcUAPbptl49E45rUx9ynx1v/qWlSVq20cIcW+HtV3nl0kPgOzI5pGT r5fT5tzw1l7Iez6eF/Pjh1mQTEi7MgGJAD0k3EYp9yJJd3lNKkogoBxi0dmxrcFD XxPGzbIg7O7CmYgQ9OuC3VGPwgRpookijU8YUpDYSvD7TmTn/FrQ8pBo267IRIqv cIpRXcUpsyd2UmDvabjfcxW+HURSKNu7mPWYNmlDaC43w/PkwX+oQB33d+sSOQ8T S7/T8z33nFySFQIc8xIDs6j4SLJle26ZaiNm5gft7Z4DjdD6xDcQ2hybgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKLL/mz05uxJF9lKQSiuj7Hrc1EZMB8GA1UdIwQY MBaAFPIC8KqJwGfWYzi01Z0gUro5qZRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGIt ZjYyNTcwMGU4YTkwLzEvb3N2LWJQVG03RWtYMlVwQktLNlBzZXR6VVJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGItZjYyNTcwMGU4YTkw LzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwy/8MA0G CSqGSIb3DQEBCwUAA4IBAQByYkn+npvmjb9b2zwgA4x7WoQ9weK49OBBko1TU01q gPBFxL7Mfy7CjH6hKl8cDcmxO7pRPsrk5oTkm0KNJHqCrx/xEN5rtdqbHY4H0WEP E06S7qvwZK+4kj5woySMYbupwyh7p0ldfp6/TRwkrdJB+fmNeFS/ytZCFPoa+iO+ e+kk69mVlS0ba7yt+je8Bkqs4oI5e3g9kc4AzJzbjMbxmseXCKCuDxQrKAtB4OLN MiyHD3JY73CXN3BwjQPbOUy/gghPuwCB4RhGLxYrygoK+WFXZ/mtAw9zkKQqIXgX BOsgXPSEremWPTsrsmjcgBFeKIejvjFT5XxR5G8xoHO/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:15 2026 by rpki-client