This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/OW0uslrg_GEgmEZG28eR9rKF34M.roa File: OW0uslrg_GEgmEZG28eR9rKF34M.roa (raw, json) Hash identifier: KrRJivtezUitThQ/Pah/fHB0G7rklcjBtZ4pZk0sSHc= Subject key identifier: 39:6D:2E:B2:5A:E0:FC:61:20:98:46:46:DB:C7:91:F6:B2:85:DF:83 Certificate issuer: /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c Certificate serial: 019B7AC838E06BD72B11B1723BA125B3C9BD Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/OW0uslrg_GEgmEZG28eR9rKF34M.roa Signing time: Thu 01 Jan 2026 18:18:20 +0000 ROA not before: Thu 01 Jan 2026 18:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56554 IP address blocks: 31.130.224.0/20 maxlen: 24 31.133.128.0/18 maxlen: 24 2001:67c:370::/48 maxlen: 48 2001:67c:1230::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:38:e0:6b:d7:2b:11:b1:72:3b:a1:25:b3:c9:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c Validity Not Before: Jan 1 18:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=396d2eb25ae0fc6120984646dbc791f6b285df83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:2b:ec:4b:38:37:6d:58:d1:bb:30:2b:a3: 92:8f:29:a6:6c:5e:f4:80:e3:26:9c:71:8f:e9:07: 7c:b2:8b:7e:9a:15:6c:fd:8e:2a:71:d5:db:89:46: ea:29:ed:ce:ce:26:f1:e5:46:eb:c2:b5:9d:93:5e: 8e:97:a4:a0:70:c3:c0:d0:f9:37:4f:ee:a1:89:a6: 4e:ea:35:77:a1:73:0e:53:1a:bc:6c:63:e9:29:a0: 0d:d9:62:49:10:8a:fc:4e:51:a7:60:70:8f:44:53: ce:50:d3:87:c6:4d:1a:9e:34:4a:75:0d:a9:25:d8: 77:35:fe:4d:28:f5:43:8e:00:3f:53:f2:aa:b2:53: be:93:1f:68:88:c7:48:1a:5d:e1:97:c1:03:de:89: 5b:46:87:48:7a:70:8a:8a:2d:0d:1a:dc:6b:89:d3: a8:af:c0:19:af:2b:91:0e:e6:14:f7:2c:1b:83:29: c6:d1:49:56:88:6e:6d:e1:1b:9b:a9:00:03:5a:64: f4:dc:bc:bb:da:33:fe:ea:78:1c:de:53:cd:ca:fe: ae:e1:2e:b6:58:5b:f9:61:0e:d3:1e:1e:d7:21:e6: ce:13:da:52:71:4c:87:55:48:38:22:e4:61:4d:75: 80:08:d1:e6:4a:fe:f1:a5:ac:f0:f1:a9:8f:d8:02: 89:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6D:2E:B2:5A:E0:FC:61:20:98:46:46:DB:C7:91:F6:B2:85:DF:83 X509v3 Authority Key Identifier: keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/OW0uslrg_GEgmEZG28eR9rKF34M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.130.224.0/20 31.133.128.0/18 IPv6: 2001:67c:370::/48 2001:67c:1230::/46 Signature Algorithm: sha256WithRSAEncryption 07:f5:be:35:31:da:c3:55:80:13:96:6d:9a:14:2b:68:72:d5: cb:77:4b:10:9b:52:3a:25:6d:a6:1c:7a:17:83:5e:4f:8a:2b: 02:4c:0d:b6:00:8d:32:aa:d9:4d:61:4d:5e:a9:97:79:a7:b5: 25:a0:cb:f0:7d:0c:45:3f:31:03:97:3b:f1:63:5c:3a:59:99: bb:10:23:94:e3:f5:17:25:12:cd:83:56:76:81:38:1e:77:38: c6:5b:b1:02:9b:be:ac:47:9b:b2:2c:c7:15:5e:6d:d0:55:09: a5:28:61:34:59:2f:a5:04:33:e4:7f:4c:63:40:dc:96:de:29: 12:c9:47:be:bb:66:b6:1c:8a:d2:2f:d8:ee:ca:c8:89:a5:3a: 16:49:1f:d5:49:6d:6a:ad:45:38:72:41:56:7b:d2:f9:0f:41: fd:9b:89:16:f8:f9:93:f6:21:e5:f0:6a:8a:e5:ba:64:e0:0b: 8c:e6:e0:73:b4:c9:65:b1:8a:4a:c6:ab:74:09:3d:60:75:d7: ba:14:15:7d:03:2a:5a:42:d9:3a:61:48:f4:43:08:df:0a:6f: 31:d1:73:cc:92:c6:6d:6e:16:80:6b:df:bd:0e:94:06:bc:98: ee:63:8d:28:68:ff:5f:64:52:35:c6:a6:60:8c:c7:5a:ac:2d: 93:82:d0:5b -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt6yDjga9crEbFyO6Els8m9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNTY2ODg1YTFkNmQ1NTQ0NTQ2Y2QyODVkODZjNGVmZmVh YTNjMmMwHhcNMjYwMTAxMTgxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTZkMmViMjVhZTBmYzYxMjA5ODQ2NDZkYmM3OTFmNmIyODVkZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ0r7Es4N21Y0bswK6OSjymmbF70 gOMmnHGP6Qd8sot+mhVs/Y4qcdXbiUbqKe3Ozibx5UbrwrWdk16Ol6SgcMPA0Pk3 T+6hiaZO6jV3oXMOUxq8bGPpKaAN2WJJEIr8TlGnYHCPRFPOUNOHxk0anjRKdQ2p Jdh3Nf5NKPVDjgA/U/KqslO+kx9oiMdIGl3hl8ED3olbRodIenCKii0NGtxridOo r8AZryuRDuYU9ywbgynG0UlWiG5t4RubqQADWmT03Ly72jP+6ngc3lPNyv6u4S62 WFv5YQ7THh7XIebOE9pScUyHVUg4IuRhTXWACNHmSv7xpazw8amP2AKJIwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFDltLrJa4PxhIJhGRtvHkfayhd+DMB8GA1UdIwQY MBaAFIpWaIWh1tVURUbNKF2GxO/+qjwsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWxab2hhSFcxVlJGUnMwb1hZYkU3XzZxUEN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9kY2ZiYzctNjRiOC00YzkxLTg5YTAt MWFmMDVhMjIzN2MzLzEvT1cwdXNscmdfR0VnbUVaRzI4ZVI5cktGMzRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9kY2ZiYzctNjRiOC00YzkxLTg5YTAtMWFmMDVhMjIzN2Mz LzEvaWxab2hhSFcxVlJGUnMwb1hZYkU3XzZxUEN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQEH4LgAwQG H4WAMBgEAgACMBIDBwAgAQZ8A3ADBwIgAQZ8EjAwDQYJKoZIhvcNAQELBQADggEB AAf1vjUx2sNVgBOWbZoUK2hy1ct3SxCbUjolbaYceheDXk+KKwJMDbYAjTKq2U1h TV6pl3mntSWgy/B9DEU/MQOXO/FjXDpZmbsQI5Tj9RclEs2DVnaBOB53OMZbsQKb vqxHm7IsxxVebdBVCaUoYTRZL6UEM+R/TGNA3JbeKRLJR767ZrYcitIv2O7KyIml OhZJH9VJbWqtRThyQVZ70vkPQf2biRb4+ZP2IeXwaorlumTgC4zm4HO0yWWxikrG q3QJPWB117oUFX0DKlpC2TphSPRDCN8KbzHRc8ySxm1uFoBr370OlAa8mO5jjSho /19kUjXGpmCMx1qsLZOC0Fs= -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:14 2026 by rpki-client