This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/OIno0Fs-55H-D72GQ5c13Zi1CPI.roa File: OIno0Fs-55H-D72GQ5c13Zi1CPI.roa (raw, json) Hash identifier: vmLm0N+PLmnj2GYBUhwxaLjwC8Q7jjZ6RJ/dEke+sus= Subject key identifier: 38:89:E8:D0:5B:3E:E7:91:FE:0F:BD:86:43:97:35:DD:98:B5:08:F2 Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Certificate serial: 019B7D5B45D94A53E19B1CB40094D8B68EF8 Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/OIno0Fs-55H-D72GQ5c13Zi1CPI.roa Signing time: Fri 02 Jan 2026 06:18:12 +0000 ROA not before: Fri 02 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 31.222.208.0/22 maxlen: 24 31.222.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:45:d9:4a:53:e1:9b:1c:b4:00:94:d8:b6:8e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823 Validity Not Before: Jan 2 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3889e8d05b3ee791fe0fbd86439735dd98b508f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:fa:c3:d9:41:fb:87:6c:fd:02:31:62:22: 6a:56:64:3d:89:de:24:82:d2:28:18:e1:f6:7c:79: 66:f2:27:88:56:8e:02:fb:8f:14:9f:35:00:bf:bc: ee:f0:f4:8c:d9:4a:d0:92:1b:49:16:b7:dd:2b:71: f0:16:0e:be:b5:e0:50:cc:88:7d:d4:13:69:6e:84: 6b:c6:56:b4:7f:c3:db:3a:94:7d:12:a3:54:d2:51: 81:71:f5:38:7b:a2:a4:47:4d:fd:a1:1e:b7:c8:b5: dd:18:bf:d8:0b:02:6c:31:ba:f1:4c:64:76:5c:77: b5:4e:9f:d2:e9:f8:d6:08:5e:d4:13:f6:cb:86:81: 6c:96:22:94:8a:94:f0:60:c7:f9:82:7f:16:7a:fc: 60:8b:51:c6:24:76:d1:b9:f6:09:65:1f:4d:db:b7: 35:9c:0b:e2:d8:17:df:a1:2b:61:96:fd:0a:4e:4f: e1:a5:93:9f:1f:4f:32:e9:74:e8:4a:b2:b9:33:51: 8e:02:2f:84:b9:0a:fe:c3:aa:50:a0:13:4a:3b:71: b8:2c:8c:fb:a3:e1:e6:74:99:f1:11:5d:a8:ca:e4: 93:14:b8:a6:b2:b5:0d:15:b5:b7:7f:ba:51:a9:59: b7:7f:21:83:72:5d:76:28:71:61:e5:e1:0b:8f:43: 26:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:89:E8:D0:5B:3E:E7:91:FE:0F:BD:86:43:97:35:DD:98:B5:08:F2 X509v3 Authority Key Identifier: keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/OIno0Fs-55H-D72GQ5c13Zi1CPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.208.0/21 Signature Algorithm: sha256WithRSAEncryption 18:ac:3c:91:6e:84:f8:f4:b2:cb:9e:36:9c:c1:3a:e9:13:cd: 69:db:39:d5:e8:50:a7:fa:62:69:d2:fc:ba:d6:56:d3:83:b6: 82:4c:01:91:60:5e:f8:0a:21:8e:2e:b9:1d:02:50:5b:cc:8c: 4b:38:6d:0b:1f:93:a6:5c:7d:13:d1:ee:d8:26:04:02:e9:c1: 55:b4:28:ab:b6:89:8e:5f:75:2e:02:b4:0b:c0:8f:28:17:e8: 1d:57:03:cb:23:0f:86:4d:32:4d:1a:3c:f7:b3:bc:58:a7:36: 12:3a:1d:3b:0d:9d:8b:7e:13:91:0f:7f:9d:cb:df:4d:b9:cd: 70:56:af:4f:68:b7:54:de:67:b3:99:cd:51:da:fd:d4:e9:99: b3:50:b2:53:7c:a2:7f:f7:41:bc:f1:ec:7e:b0:c6:71:ca:59: 2f:48:31:8a:43:84:51:47:c9:70:68:90:ea:8d:76:69:72:e6: b9:44:9a:e0:b3:ce:58:ff:e1:ac:c1:a6:5b:aa:67:78:8a:63: d0:cc:55:f3:26:f4:04:e2:56:6a:73:8b:48:fa:c8:53:38:ef: a6:30:34:72:8b:23:c2:bd:4d:07:b9:bb:c1:19:43:b6:ce:27: 2b:14:39:79:9a:85:04:4f:24:48:7e:36:1e:fe:d2:a2:2a:78: eb:1e:65:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W0XZSlPhmxy0AJTYto74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh NDA4MjMwHhcNMjYwMTAyMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODg5ZThkMDViM2VlNzkxZmUwZmJkODY0Mzk3MzVkZDk4YjUwOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+H6w9lB+4ds/QIxYiJqVmQ9id4k gtIoGOH2fHlm8ieIVo4C+48UnzUAv7zu8PSM2UrQkhtJFrfdK3HwFg6+teBQzIh9 1BNpboRrxla0f8PbOpR9EqNU0lGBcfU4e6KkR039oR63yLXdGL/YCwJsMbrxTGR2 XHe1Tp/S6fjWCF7UE/bLhoFsliKUipTwYMf5gn8Wevxgi1HGJHbRufYJZR9N27c1 nAvi2BffoSthlv0KTk/hpZOfH08y6XToSrK5M1GOAi+EuQr+w6pQoBNKO3G4LIz7 o+HmdJnxEV2oyuSTFLimsrUNFbW3f7pRqVm3fyGDcl12KHFh5eELj0MmPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDiJ6NBbPueR/g+9hkOXNd2YtQjyMB8GA1UdIwQY MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt ZDJjZDI2YjY5ZGYxLzEvT0lubzBGcy01NUgtRDcyR1E1YzEzWmkxQ1BJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH97QMA0G CSqGSIb3DQEBCwUAA4IBAQAYrDyRboT49LLLnjacwTrpE81p2znV6FCn+mJp0vy6 1lbTg7aCTAGRYF74CiGOLrkdAlBbzIxLOG0LH5OmXH0T0e7YJgQC6cFVtCirtomO X3UuArQLwI8oF+gdVwPLIw+GTTJNGjz3s7xYpzYSOh07DZ2LfhORD3+dy99Nuc1w Vq9PaLdU3mezmc1R2v3U6ZmzULJTfKJ/90G88ex+sMZxylkvSDGKQ4RRR8lwaJDq jXZpcua5RJrgs85Y/+GswaZbqmd4imPQzFXzJvQE4lZqc4tI+shTOO+mMDRyiyPC vU0HubvBGUO2zicrFDl5moUETyRIfjYe/tKiKnjrHmW5 -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:41 2026 by rpki-client