This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa File: OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa (raw, json) Hash identifier: WPn0W+4jICl9OeInrEgUZWegwTFzjRsf+1TWPog3Wy4= Subject key identifier: 38:96:30:C8:DA:2F:08:99:88:29:91:75:9E:4E:43:CF:17:74:45:87 Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66 Certificate serial: 019B7C1262CAB5001D3BFDB0A86E994233CA Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa Signing time: Fri 02 Jan 2026 00:18:58 +0000 ROA not before: Fri 02 Jan 2026 00:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205342 IP address blocks: 91.240.245.0/24 maxlen: 24 2a12:db40::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:62:ca:b5:00:1d:3b:fd:b0:a8:6e:99:42:33:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66 Validity Not Before: Jan 2 00:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=389630c8da2f0899882991759e4e43cf17744587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:f8:5a:5a:e0:51:af:98:65:af:10:01:c4: cd:8f:bd:bb:26:ff:1f:ff:a0:0a:80:84:fe:79:96: 61:7f:81:a8:3a:13:21:06:63:2e:ea:c4:1a:91:98: 58:68:af:c5:1f:8a:50:ec:7e:73:57:1e:c6:e1:27: 0f:12:5e:46:ba:55:84:e7:18:f0:36:19:5a:9a:c0: 68:f7:b0:da:d7:a0:48:c3:40:fa:d4:9c:f4:f3:0a: c4:e2:df:4a:c2:7c:0b:b3:3f:52:19:e4:a9:0a:e7: 76:21:e3:1d:1a:97:c1:7b:93:a4:92:ad:06:fc:39: d2:4a:84:09:7c:83:b1:9d:b0:37:79:9b:52:43:90: 58:fd:d0:72:a7:29:f1:24:9d:d4:38:32:9b:b9:66: ec:99:ea:a2:65:23:4b:12:77:07:fe:20:0a:5a:13: 42:04:7e:d0:a7:ac:f9:58:70:a6:8b:bb:79:34:08: 2d:ce:11:cf:93:69:50:4c:00:8c:77:a2:4b:43:3d: 06:30:1e:d4:f9:7b:a5:40:f1:10:1b:54:8a:0c:ab: 77:fc:f4:40:56:17:a7:ac:a0:d3:66:8c:4b:3c:c5: b5:6e:3d:02:0b:da:b9:a0:f0:1e:de:83:0e:11:2c: 56:94:ba:88:87:b2:24:79:b6:8b:98:1b:9b:61:f8: be:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:96:30:C8:DA:2F:08:99:88:29:91:75:9E:4E:43:CF:17:74:45:87 X509v3 Authority Key Identifier: keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.245.0/24 IPv6: 2a12:db40::/29 Signature Algorithm: sha256WithRSAEncryption 2b:53:60:f0:99:60:ed:92:e9:03:94:b7:fa:47:e0:7f:0d:15: 3e:f7:a6:fd:8b:ff:5f:fd:4b:ad:92:aa:48:1a:ed:d1:34:58: 0c:8c:63:21:49:1d:f7:40:32:a6:c8:b0:a6:78:f1:e6:8e:23: 49:ea:73:85:c9:06:43:31:04:83:0a:2e:81:da:cd:84:c2:04: 73:de:90:f4:fa:0a:9e:03:08:8c:0f:87:c6:b7:db:ec:3a:c8: 44:b6:f1:39:94:8b:e2:ad:63:85:70:fe:6e:f5:7c:c6:d9:e6: 0a:c2:77:0e:0a:5d:db:4e:dc:94:91:6d:aa:54:c8:d6:bb:e7: ef:2b:a3:d2:2c:d6:2d:27:03:13:b2:d6:fe:bb:a3:d2:1f:51: cf:97:73:f3:13:43:47:a2:07:be:89:16:aa:f5:a6:9d:83:1e: a9:f2:20:00:b4:33:6b:9a:72:ea:fd:be:9f:2e:0f:0a:28:f8: 44:0e:0f:31:33:80:41:53:3a:6c:3f:b9:3b:7b:21:5a:3f:1a: 27:04:23:9c:37:ba:b5:cc:1f:2f:c8:34:6f:4a:8e:c8:da:73: e4:3c:70:38:0e:16:94:06:42:4c:8f:90:02:0e:b6:d4:86:02: f4:53:b7:e1:75:ce:fe:6e:e1:74:be:d4:4c:25:66:a2:67:0f: 7b:28:4f:91 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EmLKtQAdO/2wqG6ZQjPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMTg4ZWMyZTQ5YWM5NDU4NTI0NWI0Yjg3NDVhMWJiN2Ex Y2RjNjYwHhcNMjYwMTAyMDAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODk2MzBjOGRhMmYwODk5ODgyOTkxNzU5ZTRlNDNjZjE3NzQ0NTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr634WlrgUa+YZa8QAcTNj727Jv8f /6AKgIT+eZZhf4GoOhMhBmMu6sQakZhYaK/FH4pQ7H5zVx7G4ScPEl5GulWE5xjw NhlamsBo97Da16BIw0D61Jz08wrE4t9KwnwLsz9SGeSpCud2IeMdGpfBe5Okkq0G /DnSSoQJfIOxnbA3eZtSQ5BY/dBypynxJJ3UODKbuWbsmeqiZSNLEncH/iAKWhNC BH7Qp6z5WHCmi7t5NAgtzhHPk2lQTACMd6JLQz0GMB7U+XulQPEQG1SKDKt3/PRA VhenrKDTZoxLPMW1bj0CC9q5oPAe3oMOESxWlLqIh7IkebaLmBubYfi+ZwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDiWMMjaLwiZiCmRdZ5OQ88XdEWHMB8GA1UdIwQY MBaAFN0YjsLkmslFhSRbS4dFobt6HNxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1JpT3d1U2F5VVdGSkZ0TGgwV2h1M29jM0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hNDFlZGItOWRmNS00MGY5LTllY2Ut YjU5MTk4YjkxNTVkLzEvT0pZd3lOb3ZDSm1JS1pGMW5rNUR6eGQwUlljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hNDFlZGItOWRmNS00MGY5LTllY2UtYjU5MTk4YjkxNTVk LzEvM1JpT3d1U2F5VVdGSkZ0TGgwV2h1M29jM0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW/D1MA0E AgACMAcDBQMqEttAMA0GCSqGSIb3DQEBCwUAA4IBAQArU2DwmWDtkukDlLf6R+B/ DRU+96b9i/9f/UutkqpIGu3RNFgMjGMhSR33QDKmyLCmePHmjiNJ6nOFyQZDMQSD Ci6B2s2EwgRz3pD0+gqeAwiMD4fGt9vsOshEtvE5lIvirWOFcP5u9XzG2eYKwncO Cl3bTtyUkW2qVMjWu+fvK6PSLNYtJwMTstb+u6PSH1HPl3PzE0NHoge+iRaq9aad gx6p8iAAtDNrmnLq/b6fLg8KKPhEDg8xM4BBUzpsP7k7eyFaPxonBCOcN7q1zB8v yDRvSo7I2nPkPHA4DhaUBkJMj5ACDrbUhgL0U7fhdc7+buF0vtRMJWaiZw97KE+R -----END CERTIFICATE-----Generated at Mon Jan 26 18:53:41 2026 by rpki-client