This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/o_T_HTHs0KSiz-VeTzvUEtH700c.roa File: o_T_HTHs0KSiz-VeTzvUEtH700c.roa (raw, json) Hash identifier: j5lWUOt2iKu1wnonlrAU9TS/DtJ/+Bc/VySYwnhPo7M= Subject key identifier: A3:F4:FF:1D:31:EC:D0:A4:A2:CF:E5:5E:4F:3B:D4:12:D1:FB:D3:47 Certificate issuer: /CN=fc59549f6dd2b83144b880c23f06fba3b25d3986 Certificate serial: 019B77C721144AD816F962BD9A577C123B50 Authority key identifier: FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/o_T_HTHs0KSiz-VeTzvUEtH700c.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198841 IP address blocks: 91.239.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:21:14:4a:d8:16:f9:62:bd:9a:57:7c:12:3b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc59549f6dd2b83144b880c23f06fba3b25d3986 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3f4ff1d31ecd0a4a2cfe55e4f3bd412d1fbd347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a1:46:3f:a8:c9:ab:f6:ba:d0:0f:ab:56:6a: 51:73:3c:74:59:e9:d5:d7:13:7d:a2:b0:c3:cb:de: 70:c5:e2:a4:49:00:47:3c:f1:85:13:ae:c5:14:6f: 86:a3:52:11:31:c7:39:77:87:13:92:a2:90:c0:96: 40:e2:24:19:38:7c:24:a5:85:93:7d:58:14:90:c8: cc:ce:b4:06:20:96:c9:e4:37:60:24:50:95:97:75: 94:ac:03:52:f2:89:2f:01:1e:35:f6:91:48:d5:c1: 4c:1b:a3:f6:fb:3a:3d:d9:13:d9:61:e6:6c:19:8a: 1c:ca:01:82:ae:34:7a:ca:63:a8:57:9e:ee:1c:8e: 6f:94:65:c4:e6:4b:3f:ee:5b:be:7a:12:40:18:ec: 1a:b2:8b:ab:d5:75:63:5c:bd:23:64:0d:60:92:c1: da:2e:6c:e1:9a:9a:19:e1:59:42:a9:88:f7:59:99: ff:8f:28:1f:33:81:ec:41:73:f5:f6:78:d9:76:68: 58:24:3f:2b:6b:0c:5a:a6:0a:83:a3:a7:5f:c3:5c: 23:89:d8:3b:39:8a:da:44:e3:86:76:7c:92:f9:7a: df:2f:88:ef:21:5a:cc:62:f8:ef:68:77:3f:33:a0: 1d:67:80:42:ee:98:33:ab:c2:91:d1:c2:5f:e9:23: 63:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F4:FF:1D:31:EC:D0:A4:A2:CF:E5:5E:4F:3B:D4:12:D1:FB:D3:47 X509v3 Authority Key Identifier: keyid:FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/o_T_HTHs0KSiz-VeTzvUEtH700c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.243.0/24 Signature Algorithm: sha256WithRSAEncryption 96:ee:87:f3:eb:7e:5c:c3:b7:f8:ab:35:5b:50:39:57:07:23: 05:47:b1:81:46:1e:31:20:11:61:27:99:15:88:c8:ad:f1:86: 40:60:b3:6b:d9:cd:58:4b:2c:fd:62:be:d8:4c:17:2b:4f:df: b6:f1:09:5e:ad:2c:93:00:b3:8c:eb:b9:b0:17:69:56:a2:3e: 95:17:ec:d4:40:a2:92:d5:df:f3:02:d4:0e:33:d7:db:6a:9e: ed:62:3e:18:2d:b6:89:c9:1b:66:42:ae:3e:32:15:52:2b:e4: 5f:6a:18:34:18:72:c1:e6:8a:2d:19:17:d5:db:29:c8:40:25: 0c:7b:f3:2e:82:a6:69:82:9d:88:70:48:66:be:3e:82:81:72: 09:db:11:7c:70:45:dd:ed:3e:d4:43:87:33:97:cd:0b:44:50: c6:64:12:68:3f:fe:93:ba:b8:33:fc:ae:c4:e8:e3:ce:99:eb: 48:09:20:89:33:62:6a:30:c7:6f:21:83:da:97:27:af:73:e8: ea:17:ae:13:93:6a:dc:dd:58:79:4c:a6:e4:85:93:93:a1:82: 06:b7:80:cd:d2:36:f0:6f:87:2d:2b:ec:b2:f2:04:d5:e6:5d: 0e:58:0f:e8:6d:35:e2:c5:99:75:97:65:f7:89:55:30:c0:e9: 51:2c:a7:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xyEUStgW+WK9mld8EjtQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNTk1NDlmNmRkMmI4MzE0NGI4ODBjMjNmMDZmYmEzYjI1 ZDM5ODYwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2Y0ZmYxZDMxZWNkMGE0YTJjZmU1NWU0ZjNiZDQxMmQxZmJkMzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKFGP6jJq/a60A+rVmpRczx0WenV 1xN9orDDy95wxeKkSQBHPPGFE67FFG+Go1IRMcc5d4cTkqKQwJZA4iQZOHwkpYWT fVgUkMjMzrQGIJbJ5DdgJFCVl3WUrANS8okvAR419pFI1cFMG6P2+zo92RPZYeZs GYocygGCrjR6ymOoV57uHI5vlGXE5ks/7lu+ehJAGOwasour1XVjXL0jZA1gksHa LmzhmpoZ4VlCqYj3WZn/jygfM4HsQXP19njZdmhYJD8rawxapgqDo6dfw1wjidg7 OYraROOGdnyS+XrfL4jvIVrMYvjvaHc/M6AdZ4BC7pgzq8KR0cJf6SNj8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKP0/x0x7NCkos/lXk871BLR+9NHMB8GA1UdIwQY MBaAFPxZVJ9t0rgxRLiAwj8G+6OyXTmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0ZsVW4yM1N1REZFdUlEQ1B3YjdvN0pkT1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85NjQwMzUtMzgxYS00MWIwLTlmZGQt ZjY1ZDMzYTk5MjZiLzEvb19UX0hUSHMwS1Npei1WZVR6dlVFdEg3MDBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy85NjQwMzUtMzgxYS00MWIwLTlmZGQtZjY1ZDMzYTk5MjZi LzEvX0ZsVW4yM1N1REZFdUlEQ1B3YjdvN0pkT1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+/zMA0G CSqGSIb3DQEBCwUAA4IBAQCW7ofz635cw7f4qzVbUDlXByMFR7GBRh4xIBFhJ5kV iMit8YZAYLNr2c1YSyz9Yr7YTBcrT9+28QlerSyTALOM67mwF2lWoj6VF+zUQKKS 1d/zAtQOM9fbap7tYj4YLbaJyRtmQq4+MhVSK+Rfahg0GHLB5ootGRfV2ynIQCUM e/MugqZpgp2IcEhmvj6CgXIJ2xF8cEXd7T7UQ4czl80LRFDGZBJoP/6Turgz/K7E 6OPOmetICSCJM2JqMMdvIYPalyevc+jqF64Tk2rc3Vh5TKbkhZOToYIGt4DN0jbw b4ctK+yy8gTV5l0OWA/obTXixZl1l2X3iVUwwOlRLKeh -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:51 2026 by rpki-client