This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/OFYlWHvwXE9gqNHVq6EaC3znci0.roa File: OFYlWHvwXE9gqNHVq6EaC3znci0.roa (raw, json) Hash identifier: 3rjgdPpQqg9rUDFn+dwSMF6OJWtKwdxah8PhRfqx0fc= Subject key identifier: 38:56:25:58:7B:F0:5C:4F:60:A8:D1:D5:AB:A1:1A:0B:7C:E7:72:2D Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe Certificate serial: 019B7B35B37DA648CF62871B80C60AF66395 Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/OFYlWHvwXE9gqNHVq6EaC3znci0.roa Signing time: Thu 01 Jan 2026 20:17:55 +0000 ROA not before: Thu 01 Jan 2026 20:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 185.137.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b3:7d:a6:48:cf:62:87:1b:80:c6:0a:f6:63:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe Validity Not Before: Jan 1 20:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=385625587bf05c4f60a8d1d5aba11a0b7ce7722d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:df:6d:e9:a0:57:64:70:9e:d3:6c:d6:9c:51: 99:8c:38:d6:c5:31:1e:2c:4d:9a:8b:de:60:51:b8: bb:ef:3a:bd:29:24:29:8e:04:59:6b:2a:60:73:5a: dd:99:56:47:38:25:55:6b:fd:5c:eb:d9:7e:2f:20: c7:ef:b1:91:a4:4f:29:3b:4b:ac:30:94:e5:14:d2: 0f:60:c5:e8:d1:34:6f:31:d2:e7:b9:d8:98:4d:2e: fa:23:a6:31:5f:b4:20:ea:04:b0:a3:41:a8:4a:84: 60:e2:c1:2e:f5:c4:b4:6d:ec:86:9b:88:bd:b2:d9: 2c:17:d8:01:a0:cf:20:6d:45:c6:6e:63:ba:95:eb: 5b:8b:33:24:50:54:99:a5:d0:55:ad:de:2d:20:ac: fa:c5:06:e1:44:7f:55:44:7b:ec:76:e3:b0:32:b7: d6:2a:7f:f3:11:c9:56:4f:86:9a:bb:51:1f:8d:35: f7:f1:9c:60:db:fd:4b:4c:c1:af:3a:81:97:c8:3f: 22:f5:ba:db:cb:88:16:88:6b:20:87:66:01:7a:62: dc:30:61:21:67:c8:c0:03:e8:33:c5:e2:75:a2:5c: 1f:da:16:b8:05:dc:dd:de:a4:a7:8b:6b:56:db:a5: 10:39:86:8d:19:cf:ad:73:c3:30:b1:b3:7c:fa:9c: 32:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:56:25:58:7B:F0:5C:4F:60:A8:D1:D5:AB:A1:1A:0B:7C:E7:72:2D X509v3 Authority Key Identifier: keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/OFYlWHvwXE9gqNHVq6EaC3znci0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.157.0/24 Signature Algorithm: sha256WithRSAEncryption 61:ee:12:e5:fd:75:14:26:43:4c:45:9f:dd:53:7c:fd:42:03: ad:e9:3a:c2:37:28:d0:1b:f4:3d:74:e2:b7:f8:11:19:26:45: b6:6e:60:36:44:a0:fa:01:e9:7a:d0:31:2c:08:e0:72:f4:25: 57:ab:b4:18:3f:cb:a0:d4:a6:a2:43:b3:83:a0:07:ea:cd:09: bd:04:ae:8e:04:55:c4:dc:d2:23:c0:fb:96:77:9d:9e:4f:c4: eb:71:ac:d5:57:b6:ec:9a:82:f4:38:de:39:ee:44:1c:79:87: ab:e2:22:bf:12:81:a0:3c:a6:5b:3a:f7:91:28:46:89:14:d0: 20:f7:f5:87:7a:ac:38:0e:e5:75:c9:dd:b1:25:99:41:e8:f0: 17:12:98:d4:ad:37:93:9c:11:cc:44:07:7a:bc:dc:07:20:20: ff:98:83:e2:c1:c0:49:40:c1:5d:fb:a7:44:c3:b6:7e:6d:0c: dc:6c:1b:72:f7:4c:1f:ca:c1:d8:35:8a:35:7a:3a:6d:0b:d6: 1e:91:ac:db:94:38:ae:d7:7c:4c:e9:ff:58:0d:4f:19:a4:9d: 55:2e:4a:99:78:0f:fc:94:9b:41:84:1c:7b:7a:12:5b:41:67: 32:ce:7b:b4:b4:04:60:10:b7:bd:f3:c2:6b:80:75:1c:50:91: 7a:92:d5:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NbN9pkjPYocbgMYK9mOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjhkNmYxM2UzNTlkZDBiYjQ1MzRhMjQ2NTU5NzRjNTdk MmIwZmUwHhcNMjYwMTAxMjAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODU2MjU1ODdiZjA1YzRmNjBhOGQxZDVhYmExMWEwYjdjZTc3MjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd9t6aBXZHCe02zWnFGZjDjWxTEe LE2ai95gUbi77zq9KSQpjgRZaypgc1rdmVZHOCVVa/1c69l+LyDH77GRpE8pO0us MJTlFNIPYMXo0TRvMdLnudiYTS76I6YxX7Qg6gSwo0GoSoRg4sEu9cS0beyGm4i9 stksF9gBoM8gbUXGbmO6letbizMkUFSZpdBVrd4tIKz6xQbhRH9VRHvsduOwMrfW Kn/zEclWT4aau1EfjTX38Zxg2/1LTMGvOoGXyD8i9brby4gWiGsgh2YBemLcMGEh Z8jAA+gzxeJ1olwf2ha4Bdzd3qSni2tW26UQOYaNGc+tc8MwsbN8+pwyXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDhWJVh78FxPYKjR1auhGgt853ItMB8GA1UdIwQY MBaAFD4o1vE+NZ3Qu0U0okZVl0xX0rD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEt NTQ4ODE2OTExOWU4LzEvT0ZZbFdIdndYRTlncU5IVnE2RWFDM3puY2kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEtNTQ4ODE2OTExOWU4 LzEvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYmdMA0G CSqGSIb3DQEBCwUAA4IBAQBh7hLl/XUUJkNMRZ/dU3z9QgOt6TrCNyjQG/Q9dOK3 +BEZJkW2bmA2RKD6Ael60DEsCOBy9CVXq7QYP8ug1KaiQ7ODoAfqzQm9BK6OBFXE 3NIjwPuWd52eT8TrcazVV7bsmoL0ON457kQceYer4iK/EoGgPKZbOveRKEaJFNAg 9/WHeqw4DuV1yd2xJZlB6PAXEpjUrTeTnBHMRAd6vNwHICD/mIPiwcBJQMFd+6dE w7Z+bQzcbBty90wfysHYNYo1ejptC9YekazblDiu13xM6f9YDU8ZpJ1VLkqZeA/8 lJtBhBx7ehJbQWcyznu0tARgELe988JrgHUcUJF6ktWF -----END CERTIFICATE-----Generated at Sun Jan 18 04:10:01 2026 by rpki-client