This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/OWX2u3h86crIqlZrJEDgTq1vnqE.roa File: OWX2u3h86crIqlZrJEDgTq1vnqE.roa (raw, json) Hash identifier: LsGVcbsq1OthlSGdFhoXpBIhd+P4m0nMhxD/QuTqmCw= Subject key identifier: 39:65:F6:BB:78:7C:E9:CA:C8:AA:56:6B:24:40:E0:4E:AD:6F:9E:A1 Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8 Certificate serial: 019B7BA3341D9EEB0D8800EF53DDA84A59D5 Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/OWX2u3h86crIqlZrJEDgTq1vnqE.roa Signing time: Thu 01 Jan 2026 22:17:31 +0000 ROA not before: Thu 01 Jan 2026 22:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49552 IP address blocks: 91.213.36.0/24 maxlen: 24 2001:67c:24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:34:1d:9e:eb:0d:88:00:ef:53:dd:a8:4a:59:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8 Validity Not Before: Jan 1 22:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3965f6bb787ce9cac8aa566b2440e04ead6f9ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d1:54:6e:6f:85:86:88:ea:fc:31:df:57:c5: 5a:0a:be:f6:31:d7:63:d3:85:ee:2b:7f:b3:e5:98: 60:27:9d:62:d0:0c:61:1e:05:e6:cb:bd:0b:62:0b: 45:b8:3b:c9:f6:91:91:e4:c9:c7:ee:f1:e9:58:6b: 93:12:08:6f:fd:6b:cd:53:a5:a3:70:34:02:3a:69: 6a:78:ad:3f:00:5c:06:90:72:97:64:e7:f0:57:16: 74:a8:a0:aa:05:44:be:bb:9e:f7:94:a4:06:d5:3b: 08:cc:37:43:e3:e6:75:d1:a3:12:d6:99:da:a6:a2: d1:3f:68:74:84:fb:1b:c6:bf:5f:d7:43:b4:d2:8e: a5:7b:52:a4:e3:28:e1:60:e4:db:4b:ae:55:df:33: 25:ec:6e:54:42:5f:e0:dc:05:8e:8f:f8:c8:73:44: 78:a1:05:ee:9e:38:3d:17:d5:fc:e4:b4:36:d9:ed: 34:d7:ac:a1:30:8d:bd:0d:66:cc:0f:1a:cb:6c:2c: 5b:3d:29:e1:fa:c5:f3:0e:e5:b8:51:9c:cd:1a:3d: 80:5a:e6:56:77:f7:56:15:3f:64:e4:ca:08:c4:65: df:07:bc:2a:bc:bb:0f:e0:8a:b8:75:ce:22:82:80: 62:64:dd:0f:ef:40:b4:e9:dd:47:ae:a3:8a:0d:ef: 1b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:65:F6:BB:78:7C:E9:CA:C8:AA:56:6B:24:40:E0:4E:AD:6F:9E:A1 X509v3 Authority Key Identifier: keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/OWX2u3h86crIqlZrJEDgTq1vnqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.36.0/24 IPv6: 2001:67c:24::/48 Signature Algorithm: sha256WithRSAEncryption 12:63:f3:1e:91:3c:62:48:dd:2b:d0:15:10:85:87:6d:07:0f: 28:45:da:6f:62:e1:ca:12:37:05:d9:b1:dc:39:3c:f8:8b:99: c1:7a:cd:8a:97:6d:1e:4b:5c:27:f6:44:09:f8:ed:fc:b2:88: 84:67:31:4d:30:0f:7e:66:4e:8b:45:01:25:a3:79:cd:c3:e8: c9:7b:32:7c:6e:74:69:c8:3d:dc:ac:b3:10:6f:cc:2b:d4:75: 0e:a6:f0:d0:72:dd:37:7d:0c:23:87:00:3f:6e:e9:93:35:19: 2e:cd:11:c6:19:6e:1f:53:48:a0:58:b5:d2:48:ba:63:6f:50: 51:75:6d:cc:da:46:b3:bc:e0:05:0e:d9:cd:07:5b:18:c2:6d: cd:63:be:26:a2:70:a1:b8:ef:b6:0a:13:7a:13:d3:69:d0:6f: 3e:e2:37:78:05:96:27:7c:2c:75:32:15:d5:dc:42:bf:8e:e2: bb:17:f1:7d:bf:5d:56:97:ed:39:24:66:cd:cd:6d:8a:0a:fe: 67:95:a9:72:85:a0:56:14:61:f3:f7:30:05:f7:3f:04:cd:3a: ff:8f:c8:03:e6:75:e6:57:73:ca:67:2e:10:ef:26:64:d1:48: 0b:5d:ef:a4:59:f3:e5:b9:61:b2:c7:df:65:22:89:32:50:cc: eb:71:75:4b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7ozQdnusNiADvU92oSlnVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YWU5NDFhNjgxYzE1ODYzNzllMDcyNDdkY2MxOWYzZjQx MDM1ZDgwHhcNMjYwMTAxMjIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTY1ZjZiYjc4N2NlOWNhYzhhYTU2NmIyNDQwZTA0ZWFkNmY5ZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNFUbm+Fhojq/DHfV8VaCr72Mddj 04XuK3+z5ZhgJ51i0AxhHgXmy70LYgtFuDvJ9pGR5MnH7vHpWGuTEghv/WvNU6Wj cDQCOmlqeK0/AFwGkHKXZOfwVxZ0qKCqBUS+u573lKQG1TsIzDdD4+Z10aMS1pna pqLRP2h0hPsbxr9f10O00o6le1Kk4yjhYOTbS65V3zMl7G5UQl/g3AWOj/jIc0R4 oQXunjg9F9X85LQ22e0016yhMI29DWbMDxrLbCxbPSnh+sXzDuW4UZzNGj2AWuZW d/dWFT9k5MoIxGXfB7wqvLsP4Iq4dc4igoBiZN0P70C06d1HrqOKDe8bLQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDll9rt4fOnKyKpWayRA4E6tb56hMB8GA1UdIwQY MBaAFHSulBpoHBWGN54HJH3MGfP0EDXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEs2VUdtZ2NGWVkzbmdja2Zjd1o4X1FRTmRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8xNGU0YzItOGE5OC00NTZlLTk2MTIt OTQyOWRhODdiZDUwLzEvT1dYMnUzaDg2Y3JJcWxackpFRGdUcTF2bnFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8xNGU0YzItOGE5OC00NTZlLTk2MTItOTQyOWRhODdiZDUw LzEvZEs2VUdtZ2NGWVkzbmdja2Zjd1o4X1FRTmRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9UkMA8E AgACMAkDBwAgAQZ8ACQwDQYJKoZIhvcNAQELBQADggEBABJj8x6RPGJI3SvQFRCF h20HDyhF2m9i4coSNwXZsdw5PPiLmcF6zYqXbR5LXCf2RAn47fyyiIRnMU0wD35m TotFASWjec3D6Ml7MnxudGnIPdyssxBvzCvUdQ6m8NBy3Td9DCOHAD9u6ZM1GS7N EcYZbh9TSKBYtdJIumNvUFF1bczaRrO84AUO2c0HWxjCbc1jviaicKG477YKE3oT 02nQbz7iN3gFlid8LHUyFdXcQr+O4rsX8X2/XVaX7TkkZs3NbYoK/meVqXKFoFYU YfP3MAX3PwTNOv+PyAPmdeZXc8pnLhDvJmTRSAtd76RZ8+W5YbLH32UiiTJQzOtx dUs= -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:08 2026 by rpki-client