This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/OsfgOgchwXGB3oJqB3a7m1Oa_FU.roa File: OsfgOgchwXGB3oJqB3a7m1Oa_FU.roa (raw, json) Hash identifier: Gff4FAc0x1oRI71/96AW462cCchXrhxYJx69los4A7U= Subject key identifier: 3A:C7:E0:3A:07:21:C1:71:81:DE:82:6A:07:76:BB:9B:53:9A:FC:55 Certificate issuer: /CN=22c152606125eb66d522263fa03109bbf0bba3da Certificate serial: 019B7CEE5F4D9B61589163911DCEDB4FCCCD Authority key identifier: 22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/OsfgOgchwXGB3oJqB3a7m1Oa_FU.roa Signing time: Fri 02 Jan 2026 04:19:15 +0000 ROA not before: Fri 02 Jan 2026 04:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198874 IP address blocks: 91.234.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5f:4d:9b:61:58:91:63:91:1d:ce:db:4f:cc:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c152606125eb66d522263fa03109bbf0bba3da Validity Not Before: Jan 2 04:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ac7e03a0721c17181de826a0776bb9b539afc55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:4d:b9:af:b3:c7:ff:44:d5:09:16:03:e7: 68:93:7b:d7:da:b3:1b:3a:e8:ff:1d:1d:f2:a9:96: 7f:93:cf:49:4f:4a:0e:ed:49:56:03:3a:3a:39:42: b9:a0:53:24:60:39:cb:b4:ae:83:29:f6:94:46:1e: 60:ff:f6:74:ff:98:d4:0e:76:a3:fa:ee:cd:d5:2d: 87:60:d7:7d:45:20:13:e7:dc:78:7e:84:a7:24:ff: f9:cd:d0:fb:42:cd:53:19:48:da:fb:21:be:84:67: fc:9f:38:7e:d3:98:01:0a:cd:9a:52:f9:79:a9:87: 65:49:34:d8:c5:83:b9:c1:6a:a6:4e:f5:aa:9f:ca: 32:a4:47:0d:ff:58:cd:1d:62:d8:2f:ca:c5:8b:1f: 0a:d9:25:7a:9c:7f:f1:4f:5a:4c:ea:fa:38:90:c4: 1e:80:a6:58:08:80:3d:cf:ee:4b:e5:b7:fa:56:b5: 2a:b1:0f:16:db:a0:d4:97:c2:6b:db:b4:d6:c9:46: 04:da:be:8c:99:11:ba:50:dc:97:fd:fb:9d:72:65: e6:53:da:3d:95:2e:66:ed:ae:a9:78:72:a9:a3:30: 29:2d:c7:35:78:bd:42:d2:f5:39:39:ec:62:bc:10: 46:b8:5f:9e:76:91:8c:ae:06:98:ce:15:0a:70:39: d9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C7:E0:3A:07:21:C1:71:81:DE:82:6A:07:76:BB:9B:53:9A:FC:55 X509v3 Authority Key Identifier: keyid:22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/OsfgOgchwXGB3oJqB3a7m1Oa_FU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.228.0/24 Signature Algorithm: sha256WithRSAEncryption aa:c9:eb:27:58:8b:40:a4:4f:d5:15:c7:a5:29:ca:e7:c8:eb: 78:26:1d:cf:6f:13:0b:5d:01:95:bf:fe:33:66:98:d9:56:33: 27:07:3d:48:20:62:2c:56:9d:6b:0b:90:9f:70:08:8a:7c:6d: 49:57:9e:96:16:70:c6:ab:4b:fd:86:a3:12:05:1c:70:a4:6d: c9:55:d1:52:c1:c0:04:09:6d:ee:02:3b:cc:36:12:54:0c:bc: 05:67:0a:81:2f:87:7d:0e:f4:2d:16:49:3d:9a:c9:e4:83:5e: 1f:87:9b:f3:e0:67:d1:de:e0:53:8c:c2:53:38:88:e5:91:12: 8e:64:f7:8b:56:f3:5e:0e:31:6c:27:fd:26:db:f1:30:b8:6e: 93:29:69:b1:a6:87:34:09:53:35:35:ae:5c:75:93:62:b2:43: 11:8b:c8:5a:e9:15:5c:db:8c:1e:4a:a4:e0:14:17:bf:2d:4e: aa:93:74:a0:08:71:16:79:d1:1d:8d:73:57:78:ec:5e:84:d7: 4b:48:57:0d:63:4f:41:97:2c:70:68:7f:81:32:66:5d:2c:5c: 68:88:9b:78:3a:05:0a:c1:6e:b6:b5:af:b5:3c:3f:f1:80:b5: 99:3c:6f:55:08:35:75:e9:aa:be:50:55:33:ba:92:1e:df:21: db:b7:44:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87l9Nm2FYkWORHc7bT8zNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzE1MjYwNjEyNWViNjZkNTIyMjYzZmEwMzEwOWJiZjBi YmEzZGEwHhcNMjYwMTAyMDQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWM3ZTAzYTA3MjFjMTcxODFkZTgyNmEwNzc2YmI5YjUzOWFmYzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtANNua+zx/9E1QkWA+dok3vX2rMb Ouj/HR3yqZZ/k89JT0oO7UlWAzo6OUK5oFMkYDnLtK6DKfaURh5g//Z0/5jUDnaj +u7N1S2HYNd9RSAT59x4foSnJP/5zdD7Qs1TGUja+yG+hGf8nzh+05gBCs2aUvl5 qYdlSTTYxYO5wWqmTvWqn8oypEcN/1jNHWLYL8rFix8K2SV6nH/xT1pM6vo4kMQe gKZYCIA9z+5L5bf6VrUqsQ8W26DUl8Jr27TWyUYE2r6MmRG6UNyX/fudcmXmU9o9 lS5m7a6peHKpozApLcc1eL1C0vU5OexivBBGuF+edpGMrgaYzhUKcDnZOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDrH4DoHIcFxgd6Cagd2u5tTmvxVMB8GA1UdIwQY MBaAFCLBUmBhJetm1SImP6AxCbvwu6PaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hYzI1YjQtMTk0ZS00OWM0LWFhYjEt MGZlNGQ3ZjdkYjNkLzEvT3NmZ09nY2h3WEdCM29KcUIzYTdtMU9hX0ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hYzI1YjQtMTk0ZS00OWM0LWFhYjEtMGZlNGQ3ZjdkYjNk LzEvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+rkMA0G CSqGSIb3DQEBCwUAA4IBAQCqyesnWItApE/VFcelKcrnyOt4Jh3PbxMLXQGVv/4z ZpjZVjMnBz1IIGIsVp1rC5CfcAiKfG1JV56WFnDGq0v9hqMSBRxwpG3JVdFSwcAE CW3uAjvMNhJUDLwFZwqBL4d9DvQtFkk9msnkg14fh5vz4GfR3uBTjMJTOIjlkRKO ZPeLVvNeDjFsJ/0m2/EwuG6TKWmxpoc0CVM1Na5cdZNiskMRi8ha6RVc24weSqTg FBe/LU6qk3SgCHEWedEdjXNXeOxehNdLSFcNY09BlyxwaH+BMmZdLFxoiJt4OgUK wW62ta+1PD/xgLWZPG9VCDV16aq+UFUzupIe3yHbt0QN -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:08 2026 by rpki-client