This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/dRduPk6jL2FbB0-s8ry1uL0Q-eo.roa File: dRduPk6jL2FbB0-s8ry1uL0Q-eo.roa (raw, json) Hash identifier: lfjBFM+1U9k216beb8eucrAzFXFmpoPSWELuxMZ26Pc= Subject key identifier: 75:17:6E:3E:4E:A3:2F:61:5B:07:4F:AC:F2:BC:B5:B8:BD:10:F9:EA Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019B77C76BF1CC700D54ABD9FBB6728BF333 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/dRduPk6jL2FbB0-s8ry1uL0Q-eo.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 212.116.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6b:f1:cc:70:0d:54:ab:d9:fb:b6:72:8b:f3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75176e3e4ea32f615b074facf2bcb5b8bd10f9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:54:5c:e9:05:cb:bd:ea:c2:9c:bc:80:9c: b9:e0:ce:2e:89:c8:e4:56:73:0d:4d:e2:bd:cd:18: 31:c5:61:e1:37:aa:f5:62:41:2c:ac:37:86:b6:ea: f7:e9:d1:6c:1e:1a:f0:e3:62:16:92:c6:2a:4d:3e: 3c:27:c5:b6:0f:9d:fc:5c:cd:54:a5:3c:2f:23:d8: ed:5f:1f:4e:c4:1c:3f:bf:1d:a0:95:9e:8a:d7:f6: f7:1f:a7:04:77:d1:54:68:30:fe:78:b8:0a:b0:ec: 49:cd:19:0f:28:27:26:7d:08:9d:46:6a:dd:88:27: d2:53:da:8f:f4:68:c0:ad:4d:82:1a:a9:9f:06:78: 13:b7:aa:ee:79:43:f7:4d:8f:a8:9a:dd:bd:0d:89: c7:17:74:26:45:e3:7f:90:65:c6:7b:a8:c2:94:d2: 5e:f1:5b:c3:8b:31:63:17:ac:cb:03:11:fd:ed:c2: eb:27:b4:20:25:05:ea:c3:e2:ae:0c:df:66:4e:06: 14:a3:08:54:9c:fe:d3:d9:9f:3f:bb:58:8b:e9:c2: c2:7a:15:0b:59:2c:eb:1b:70:13:8d:c7:78:a7:a2: bf:37:37:df:f5:e3:6c:1a:8b:93:97:6a:76:54:a3: 27:c3:dc:c9:88:c4:fd:16:f0:a0:5c:f1:03:95:14: d7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:17:6E:3E:4E:A3:2F:61:5B:07:4F:AC:F2:BC:B5:B8:BD:10:F9:EA X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/dRduPk6jL2FbB0-s8ry1uL0Q-eo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.248.0/22 Signature Algorithm: sha256WithRSAEncryption 82:0a:0f:59:e1:11:de:d9:7c:e8:7f:9c:af:f7:04:4f:70:9f: 68:ed:ed:cc:5f:18:53:96:ad:5d:90:72:74:6e:af:a9:cc:ac: 25:22:5a:e9:a5:28:3a:84:ab:28:c8:58:ef:80:9f:8a:7f:eb: 23:17:31:27:7b:d5:93:45:12:3d:c9:e2:46:bf:94:3d:72:31: f5:12:6d:78:51:c9:47:00:82:84:24:7d:55:a9:61:bc:4b:5a: 18:d0:da:d1:43:e2:9f:92:d7:f6:b3:85:7c:98:ed:52:cf:ad: ad:1b:87:19:58:7f:75:57:01:57:73:01:92:6e:ee:75:2c:93: e9:c0:00:7c:77:4a:8a:70:cc:35:54:68:06:58:57:54:49:a6: 45:27:83:ba:e6:67:c1:81:20:b5:e3:ec:ee:77:a6:b1:a9:1e: c4:3a:68:1a:9d:63:67:f4:25:29:56:a6:b3:67:2f:fa:fb:ed: 0b:22:99:8d:c9:ce:a4:7f:a7:26:e1:4f:7d:36:8e:b7:8b:78: a7:af:44:ba:b4:c7:03:00:79:33:c6:82:c6:a9:d1:24:06:52: dd:e3:a2:36:8e:d0:24:ce:5a:29:9e:b4:f7:44:33:a2:36:29: a2:ba:85:24:d6:f9:df:ff:3f:2f:4e:d9:48:f5:02:49:70:18: da:f3:70:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2vxzHANVKvZ+7Zyi/MzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTE3NmUzZTRlYTMyZjYxNWIwNzRmYWNmMmJjYjViOGJkMTBmOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBxUXOkFy73qwpy8gJy54M4uicjk VnMNTeK9zRgxxWHhN6r1YkEsrDeGtur36dFsHhrw42IWksYqTT48J8W2D538XM1U pTwvI9jtXx9OxBw/vx2glZ6K1/b3H6cEd9FUaDD+eLgKsOxJzRkPKCcmfQidRmrd iCfSU9qP9GjArU2CGqmfBngTt6rueUP3TY+omt29DYnHF3QmReN/kGXGe6jClNJe 8VvDizFjF6zLAxH97cLrJ7QgJQXqw+KuDN9mTgYUowhUnP7T2Z8/u1iL6cLCehUL WSzrG3ATjcd4p6K/Nzff9eNsGouTl2p2VKMnw9zJiMT9FvCgXPEDlRTXdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHUXbj5Ooy9hWwdPrPK8tbi9EPnqMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvZFJkdVBrNmpMMkZiQjAtczhyeTF1TDBRLWVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1HT4MA0G CSqGSIb3DQEBCwUAA4IBAQCCCg9Z4RHe2Xzof5yv9wRPcJ9o7e3MXxhTlq1dkHJ0 bq+pzKwlIlrppSg6hKsoyFjvgJ+Kf+sjFzEne9WTRRI9yeJGv5Q9cjH1Em14UclH AIKEJH1VqWG8S1oY0NrRQ+Kfktf2s4V8mO1Sz62tG4cZWH91VwFXcwGSbu51LJPp wAB8d0qKcMw1VGgGWFdUSaZFJ4O65mfBgSC14+zud6axqR7EOmganWNn9CUpVqaz Zy/6++0LIpmNyc6kf6cm4U99No63i3inr0S6tMcDAHkzxoLGqdEkBlLd46I2jtAk zlopnrT3RDOiNimiuoUk1vnf/z8vTtlI9QJJcBja83BX -----END CERTIFICATE-----Generated at Fri Jan 23 00:30:33 2026 by rpki-client