This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/OvuFRaLZBweBmLxOWrEZAm-sbiY.roa File: OvuFRaLZBweBmLxOWrEZAm-sbiY.roa (raw, json) Hash identifier: tSiVvkoHjhNkKCRQBHrWvEoarLLIEtpHVmr673up4S4= Subject key identifier: 3A:FB:85:45:A2:D9:07:07:81:98:BC:4E:5A:B1:19:02:6F:AC:6E:26 Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617 Certificate serial: 019B7E384D806CDE42CBB293FAE56ECA960A Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/OvuFRaLZBweBmLxOWrEZAm-sbiY.roa Signing time: Fri 02 Jan 2026 10:19:37 +0000 ROA not before: Fri 02 Jan 2026 10:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 195.182.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4d:80:6c:de:42:cb:b2:93:fa:e5:6e:ca:96:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617 Validity Not Before: Jan 2 10:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3afb8545a2d907078198bc4e5ab119026fac6e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:40:84:dd:9d:41:c5:fd:68:5b:69:d2:fe:a7: 1b:05:b9:c9:3b:77:57:6c:49:2a:cf:4b:c1:7c:e7: 8c:f1:f1:fc:95:59:30:cc:9d:5b:db:41:1d:c8:cf: 92:5d:ad:db:16:df:8e:cb:77:6e:f7:36:b0:7b:f8: e1:d9:61:4b:34:c1:cb:30:fc:aa:04:66:ae:56:ca: 7e:fd:ed:fe:02:d9:93:44:c0:44:bf:1e:5a:45:b8: d8:00:04:4d:9d:82:fc:d0:fc:01:e3:a2:77:0c:3f: bd:1e:65:1d:c5:45:54:fd:33:b2:49:11:96:d5:ed: f5:da:7e:14:22:63:e7:5d:9b:33:7d:1f:87:57:d3: 45:e4:58:6c:7f:6d:f3:90:1b:c7:d4:8c:cb:4b:17: ba:ff:52:27:9e:0e:89:75:14:7b:e6:8a:e8:44:ad: cc:1a:ad:14:5e:d5:e8:da:94:38:22:e7:c2:7c:a9: fe:84:e3:10:70:59:79:a6:ad:00:85:7b:1f:8e:6b: ea:74:e8:e0:0e:bd:2e:22:db:56:a0:42:a4:f2:7b: f5:1b:44:6c:a2:97:96:5b:d6:f7:cb:60:00:51:dd: 71:13:91:7d:b7:fd:90:16:5b:d0:68:94:f7:44:9a: 9a:66:02:52:52:2a:2d:78:ce:89:32:61:89:c6:dd: 12:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FB:85:45:A2:D9:07:07:81:98:BC:4E:5A:B1:19:02:6F:AC:6E:26 X509v3 Authority Key Identifier: keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/OvuFRaLZBweBmLxOWrEZAm-sbiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.62.0/24 Signature Algorithm: sha256WithRSAEncryption 62:28:f4:5f:3c:87:88:7d:e7:12:23:46:de:90:24:97:b4:1e: 89:ae:93:37:79:57:bc:1a:da:f6:28:4a:fc:f3:e8:2d:c5:8d: 7d:4e:69:c1:8d:59:39:35:70:ed:7e:cf:c9:7e:94:16:a5:c2: 9c:a3:8c:c0:63:be:0f:1a:50:47:81:8b:e1:0a:a2:f4:1b:e1: 19:2b:6b:ea:b2:f7:bd:e6:71:c7:f2:da:0e:bd:1e:9e:05:f6: cf:e8:90:57:2d:45:22:60:f1:1c:49:1d:fa:c5:fb:7c:ca:bb: bd:15:01:25:d8:25:01:d8:eb:2a:25:71:7c:72:94:f6:63:f7: 4e:f6:29:f5:94:10:69:f4:a3:0b:26:83:40:bf:b5:28:d4:72: fe:c9:a9:21:ed:55:82:94:76:2e:13:b8:3a:41:83:02:84:7d: df:d3:1a:f7:c7:18:22:e2:bf:f0:86:a7:1c:9f:d1:e0:df:d2: 65:e2:d8:2d:e5:6d:34:c5:e8:7f:ad:a7:5f:38:e1:79:a3:69: ba:42:14:d7:9f:a4:36:71:97:bd:e9:0a:d7:db:dc:87:5e:ad: 60:a3:ab:0f:48:64:bf:07:26:18:52:57:6d:3e:99:e9:ee:a4: ae:a5:8e:96:77:ce:4a:53:ee:c4:75:74:1f:31:ae:41:1f:54: ca:f5:a4:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OE2AbN5Cy7KT+uVuypYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzViZThlZjBkY2U5ZDFlNjcwNzFhYjdjYjA3Y2Y1MGQ1 M2Y2MTcwHhcNMjYwMTAyMTAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWZiODU0NWEyZDkwNzA3ODE5OGJjNGU1YWIxMTkwMjZmYWM2ZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kCE3Z1Bxf1oW2nS/qcbBbnJO3dX bEkqz0vBfOeM8fH8lVkwzJ1b20EdyM+SXa3bFt+Oy3du9zawe/jh2WFLNMHLMPyq BGauVsp+/e3+AtmTRMBEvx5aRbjYAARNnYL80PwB46J3DD+9HmUdxUVU/TOySRGW 1e312n4UImPnXZszfR+HV9NF5Fhsf23zkBvH1IzLSxe6/1Inng6JdRR75oroRK3M Gq0UXtXo2pQ4IufCfKn+hOMQcFl5pq0AhXsfjmvqdOjgDr0uIttWoEKk8nv1G0Rs opeWW9b3y2AAUd1xE5F9t/2QFlvQaJT3RJqaZgJSUioteM6JMmGJxt0S1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDr7hUWi2QcHgZi8TlqxGQJvrG4mMB8GA1UdIwQY MBaAFJE1vo7w3OnR5nBxq3ywfPUNU/YXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RXLWp2RGM2ZEhtY0hHcmZMQjg5UTFUOWhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kMjFlMDItNTRiNy00OWRlLWIxNWYt NzI5Mjk4MjEyZjU0LzEvT3Z1RlJhTFpCd2VCbUx4T1dyRVpBbS1zYmlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kMjFlMDItNTRiNy00OWRlLWIxNWYtNzI5Mjk4MjEyZjU0 LzEva1RXLWp2RGM2ZEhtY0hHcmZMQjg5UTFUOWhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7Y+MA0G CSqGSIb3DQEBCwUAA4IBAQBiKPRfPIeIfecSI0bekCSXtB6JrpM3eVe8Gtr2KEr8 8+gtxY19TmnBjVk5NXDtfs/JfpQWpcKco4zAY74PGlBHgYvhCqL0G+EZK2vqsve9 5nHH8toOvR6eBfbP6JBXLUUiYPEcSR36xft8yru9FQEl2CUB2OsqJXF8cpT2Y/dO 9in1lBBp9KMLJoNAv7Uo1HL+yakh7VWClHYuE7g6QYMChH3f0xr3xxgi4r/whqcc n9Hg39Jl4tgt5W00xeh/radfOOF5o2m6QhTXn6Q2cZe96QrX29yHXq1go6sPSGS/ ByYYUldtPpnp7qSupY6Wd85KU+7EdXQfMa5BH1TK9aQL -----END CERTIFICATE-----Generated at Thu Jan 8 17:33:02 2026 by rpki-client