This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/dAoZyIJ16f4Yu4wld0MaXgjLlhk.roa File: dAoZyIJ16f4Yu4wld0MaXgjLlhk.roa (raw, json) Hash identifier: U+V5PDWHGzFUktN8s1i7wBaq0PMN66VwF9myJbI6I14= Subject key identifier: 74:0A:19:C8:82:75:E9:FE:18:BB:8C:25:77:43:1A:5E:08:CB:96:19 Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019B9E274D414CC9DD85BFEF7DCCFD0AF9B9 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/dAoZyIJ16f4Yu4wld0MaXgjLlhk.roa Signing time: Thu 08 Jan 2026 15:08:54 +0000 ROA not before: Thu 08 Jan 2026 15:08:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 212.116.237.0/24 maxlen: 24 212.116.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:27:4d:41:4c:c9:dd:85:bf:ef:7d:cc:fd:0a:f9:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Jan 8 15:08:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=740a19c88275e9fe18bb8c2577431a5e08cb9619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:7e:54:19:85:af:9e:8b:90:d1:28:ee:21: c0:00:c6:99:c6:75:97:d5:3a:87:1c:aa:79:5f:cc: 71:e0:fd:28:9c:c7:72:b4:94:64:39:e6:39:de:2a: 0f:02:50:ec:06:ce:21:3d:7e:0e:8b:aa:e9:49:f8: a0:fd:bb:3a:5e:60:f1:8d:65:04:88:eb:47:08:dc: b5:f3:99:80:23:72:5f:1c:c6:51:49:b0:2c:fd:8c: fe:3a:45:a9:c7:ee:7c:e6:10:3f:aa:b0:60:b4:a4: 8c:6b:b6:e2:be:63:ff:b9:b0:c1:4b:a0:f6:50:1c: 17:fc:91:e2:52:c6:8d:8b:e7:b7:2d:34:d4:5a:c3: da:d4:cf:3f:b5:5b:2c:00:ce:de:8d:c5:43:5b:10: 46:05:cb:16:67:82:df:9e:ae:21:a2:3b:ef:fb:94: 1c:d4:cf:0a:c0:98:74:b5:eb:b9:96:0c:58:00:e8: 96:b6:6a:34:07:63:72:e0:40:b4:b6:45:98:a5:f9: 65:74:11:62:af:65:d9:3d:c4:95:f9:ee:70:47:89: 3e:e8:b4:5c:3c:27:1e:b5:5b:22:35:98:ba:db:93: 75:28:9d:1c:61:96:53:b3:06:68:6c:b0:4f:34:bb: 04:c8:57:2c:ed:4f:d2:be:65:de:cf:48:d3:e3:76: 77:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0A:19:C8:82:75:E9:FE:18:BB:8C:25:77:43:1A:5E:08:CB:96:19 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/dAoZyIJ16f4Yu4wld0MaXgjLlhk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.237.0/24 212.116.244.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:27:85:ab:79:6b:7c:83:82:ad:da:28:25:4a:3e:e6:12:c5: 02:88:01:ca:d1:71:f3:9a:19:35:9b:c1:83:d6:f3:15:8d:35: 02:1c:30:be:d7:2b:7f:92:b9:c0:b0:2a:44:48:f9:65:1d:0c: d1:f4:f1:4a:d6:d4:01:9f:35:73:6e:d8:6e:61:87:e3:dc:86: 76:14:6b:d1:6f:49:3c:a3:6f:53:f1:05:08:2c:57:4e:84:98: 74:fd:cf:34:59:e6:48:21:34:18:55:54:c7:9b:bc:7f:4a:67: 56:89:f4:ca:8d:05:71:b9:fd:08:0a:07:b5:38:82:c2:68:df: f4:f1:ae:ca:fb:db:dd:70:46:3d:37:3b:00:73:04:c7:a3:d7: 57:ab:ff:35:bf:d4:c2:89:8d:5e:89:f3:d0:9c:a1:17:11:f2: 75:ba:47:0c:e8:27:b2:51:1c:0f:be:3e:56:7a:e6:df:70:d2: 63:1e:aa:71:35:7a:c6:1c:29:19:0a:41:87:c2:07:b8:af:cb: a7:ba:f3:5d:72:52:22:b9:1a:a2:a4:54:a5:bb:9d:b6:d6:91: 70:80:b6:43:79:1f:07:e2:ed:a5:12:e1:d0:71:58:4c:ce:43: 80:85:e4:3b:b7:91:75:56:af:7d:60:73:a8:fa:13:b2:5e:db: 68:6d:4f:2d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZueJ01BTMndhb/vfcz9Cvm5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjYwMTA4MTUwODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDBhMTljODgyNzVlOWZlMThiYjhjMjU3NzQzMWE1ZTA4Y2I5NjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA9+VBmFr56LkNEo7iHAAMaZxnWX 1TqHHKp5X8xx4P0onMdytJRkOeY53ioPAlDsBs4hPX4Oi6rpSfig/bs6XmDxjWUE iOtHCNy185mAI3JfHMZRSbAs/Yz+OkWpx+585hA/qrBgtKSMa7bivmP/ubDBS6D2 UBwX/JHiUsaNi+e3LTTUWsPa1M8/tVssAM7ejcVDWxBGBcsWZ4Lfnq4hojvv+5Qc 1M8KwJh0teu5lgxYAOiWtmo0B2Ny4EC0tkWYpflldBFir2XZPcSV+e5wR4k+6LRc PCcetVsiNZi625N1KJ0cYZZTswZobLBPNLsEyFcs7U/SvmXez0jT43Z3MwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHQKGciCden+GLuMJXdDGl4Iy5YZMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvZEFvWnlJSjE2ZjRZdTR3bGQwTWFYZ2pMbGhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1HTtAwQA 1HT0MA0GCSqGSIb3DQEBCwUAA4IBAQCNJ4WreWt8g4Kt2iglSj7mEsUCiAHK0XHz mhk1m8GD1vMVjTUCHDC+1yt/krnAsCpESPllHQzR9PFK1tQBnzVzbthuYYfj3IZ2 FGvRb0k8o29T8QUILFdOhJh0/c80WeZIITQYVVTHm7x/SmdWifTKjQVxuf0ICge1 OILCaN/08a7K+9vdcEY9NzsAcwTHo9dXq/81v9TCiY1eifPQnKEXEfJ1ukcM6Cey URwPvj5WeubfcNJjHqpxNXrGHCkZCkGHwge4r8unuvNdclIiuRqipFSlu5221pFw gLZDeR8H4u2lEuHQcVhMzkOAheQ7t5F1Vq99YHOo+hOyXttobU8t -----END CERTIFICATE-----Generated at Mon Jan 19 17:10:33 2026 by rpki-client