This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/OLJzyjdEnpFoCqzcRr-2whD4cZw.roa File: OLJzyjdEnpFoCqzcRr-2whD4cZw.roa (raw, json) Hash identifier: nQWtfqNzr6fa7Z+xPVeAmqrV/E7CMaeD5oxb6Sg1qY8= Subject key identifier: 38:B2:73:CA:37:44:9E:91:68:0A:AC:DC:46:BF:B6:C2:10:F8:71:9C Certificate issuer: /CN=b93ca6fd00327aedf1d4e3275562cae733b4e743 Certificate serial: 019B7D5C2AB09646EA87A164AC567202A7AC Authority key identifier: B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/OLJzyjdEnpFoCqzcRr-2whD4cZw.roa Signing time: Fri 02 Jan 2026 06:19:10 +0000 ROA not before: Fri 02 Jan 2026 06:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34301 IP address blocks: 195.242.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:2a:b0:96:46:ea:87:a1:64:ac:56:72:02:a7:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93ca6fd00327aedf1d4e3275562cae733b4e743 Validity Not Before: Jan 2 06:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38b273ca37449e91680aacdc46bfb6c210f8719c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:a5:93:96:e8:a2:18:1f:d6:2b:71:9b:37: d6:37:1d:82:11:d9:70:38:e5:e4:e0:d4:54:b5:01: 97:37:ba:88:fa:39:a0:15:80:1d:4e:78:fe:71:16: 40:20:d2:6b:54:bc:a0:d6:d0:c3:dd:af:a0:11:63: 69:4e:9b:42:86:61:4f:b0:20:1a:44:00:cc:cc:f5: 13:be:62:42:8c:49:6e:6f:f9:25:33:f0:79:81:de: 8f:d0:9e:2f:f6:2d:7b:b1:fd:72:a0:3a:16:a4:f4: 27:1d:b8:44:68:aa:71:25:19:06:16:2c:27:81:65: a8:6d:8c:5d:e8:67:aa:a9:db:c1:26:13:27:64:de: b6:2b:2c:dd:68:a8:22:51:70:71:08:de:04:49:e4: ed:3f:a3:e5:8a:be:3e:08:cf:b6:ab:a2:92:87:89: 97:af:47:ec:d8:48:7a:ff:91:13:a9:71:08:89:a9: 0a:45:fd:2d:a9:e2:00:36:2c:9e:82:05:48:9c:52: e8:26:aa:b2:ed:ef:b4:fa:92:bd:5b:86:bf:ec:0d: b1:70:75:6e:24:1b:7d:80:d3:10:9f:88:1f:8d:ef: e7:cc:4f:2a:74:64:f6:61:1b:12:ea:7e:23:48:c9: 0d:64:11:3b:2e:52:1f:10:d6:b5:c7:91:70:29:62: 68:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B2:73:CA:37:44:9E:91:68:0A:AC:DC:46:BF:B6:C2:10:F8:71:9C X509v3 Authority Key Identifier: keyid:B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/OLJzyjdEnpFoCqzcRr-2whD4cZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.88.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:07:71:c9:70:96:6a:6b:aa:26:1f:e2:fd:40:7a:b5:59:a6: 3d:02:e1:5c:e2:69:3d:09:c0:3e:cc:7c:93:17:fc:34:38:07: 2a:9b:ac:fc:11:81:e2:70:73:a3:8e:37:38:c2:fa:8d:86:18: 5b:17:f6:ce:e5:96:d4:00:34:07:5f:7f:c9:89:44:64:13:48: 07:2b:6e:65:45:15:76:5d:d3:8b:09:d8:b6:a0:dc:b3:76:b5: cc:09:8d:80:1d:cb:11:e2:3c:ca:79:61:fd:1e:02:f0:f0:f2: e7:e6:71:b8:10:66:06:27:26:5a:2a:ff:4f:c8:ba:91:80:4d: 13:f0:9e:71:df:ca:b8:01:fd:92:40:0e:98:95:35:8b:e7:a9: 6e:e1:99:ab:6f:95:ef:6e:17:af:3e:f7:33:8a:8a:42:04:98: 02:a9:1a:b3:30:d8:fc:2d:81:6d:42:00:51:c6:85:dd:6f:db: 75:21:8d:4e:2d:56:d1:6b:8b:4c:cd:bf:1a:dd:ed:60:77:79: e7:14:d4:c9:2a:3e:98:71:d0:fe:cb:fb:11:bf:4c:ab:df:1f: e0:98:97:9b:d9:e0:a8:35:4e:12:a4:75:c3:f4:bb:b8:70:b5: 95:46:8c:a5:94:cc:e7:d9:24:7a:2e:c8:0a:b2:f1:0d:5b:83: 93:20:03:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XCqwlkbqh6FkrFZyAqesMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5M2NhNmZkMDAzMjdhZWRmMWQ0ZTMyNzU1NjJjYWU3MzNi NGU3NDMwHhcNMjYwMTAyMDYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGIyNzNjYTM3NDQ5ZTkxNjgwYWFjZGM0NmJmYjZjMjEwZjg3MTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaSlk5boohgf1itxmzfWNx2CEdlw OOXk4NRUtQGXN7qI+jmgFYAdTnj+cRZAINJrVLyg1tDD3a+gEWNpTptChmFPsCAa RADMzPUTvmJCjElub/klM/B5gd6P0J4v9i17sf1yoDoWpPQnHbhEaKpxJRkGFiwn gWWobYxd6GeqqdvBJhMnZN62KyzdaKgiUXBxCN4ESeTtP6Plir4+CM+2q6KSh4mX r0fs2Eh6/5ETqXEIiakKRf0tqeIANiyeggVInFLoJqqy7e+0+pK9W4a/7A2xcHVu JBt9gNMQn4gfje/nzE8qdGT2YRsS6n4jSMkNZBE7LlIfENa1x5FwKWJoWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDiyc8o3RJ6RaAqs3Ea/tsIQ+HGcMB8GA1UdIwQY MBaAFLk8pv0AMnrt8dTjJ1ViyucztOdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hNDI4MGUtZDA5NC00YTc0LWI4ZjYt N2U4NTlmZjQ2NTFjLzEvT0xKenlqZEVucEZvQ3F6Y1JyLTJ3aEQ0Y1p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9hNDI4MGUtZDA5NC00YTc0LWI4ZjYtN2U4NTlmZjQ2NTFj LzEvdVR5bV9RQXlldTN4MU9NblZXTEs1ek8wNTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/JYMA0G CSqGSIb3DQEBCwUAA4IBAQBMB3HJcJZqa6omH+L9QHq1WaY9AuFc4mk9CcA+zHyT F/w0OAcqm6z8EYHicHOjjjc4wvqNhhhbF/bO5ZbUADQHX3/JiURkE0gHK25lRRV2 XdOLCdi2oNyzdrXMCY2AHcsR4jzKeWH9HgLw8PLn5nG4EGYGJyZaKv9PyLqRgE0T 8J5x38q4Af2SQA6YlTWL56lu4Zmrb5XvbhevPvcziopCBJgCqRqzMNj8LYFtQgBR xoXdb9t1IY1OLVbRa4tMzb8a3e1gd3nnFNTJKj6YcdD+y/sRv0yr3x/gmJeb2eCo NU4SpHXD9Lu4cLWVRoyllMzn2SR6LsgKsvENW4OTIAMy -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:06 2026 by rpki-client