This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/O203bP1wCT1tFTJWpeV4GwvRr-E.roa File: O203bP1wCT1tFTJWpeV4GwvRr-E.roa (raw, json) Hash identifier: M8T4zxdIfcPsrQz2e4NE8yV9cJaheu4EatHoWhBRGz0= Subject key identifier: 3B:6D:37:6C:FD:70:09:3D:6D:15:32:56:A5:E5:78:1B:0B:D1:AF:E1 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019B8D707B1D0A8F964CA76E04CEB4538EAB Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/O203bP1wCT1tFTJWpeV4GwvRr-E.roa Signing time: Mon 05 Jan 2026 09:15:17 +0000 ROA not before: Mon 05 Jan 2026 09:15:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211443 IP address blocks: 94.26.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 08:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:70:7b:1d:0a:8f:96:4c:a7:6e:04:ce:b4:53:8e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Jan 5 09:15:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b6d376cfd70093d6d153256a5e5781b0bd1afe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a7:25:92:61:27:c2:e6:20:38:db:66:e6:6b: cc:3d:49:c9:4e:6f:20:08:82:cc:c8:ac:59:9e:48: f4:ea:8c:38:46:18:f3:5c:7a:db:be:22:b7:ed:fa: 99:07:52:8e:c5:b9:84:f7:f0:17:00:eb:d8:eb:20: 33:d8:79:4b:74:35:60:d6:14:b3:75:48:de:1e:01: 40:9c:07:57:b0:86:74:5c:26:21:69:f4:21:08:8c: eb:a2:ad:73:4b:37:07:2b:d1:ba:3f:c6:3e:81:cb: 7c:84:9f:07:83:a5:d5:56:5d:20:cd:33:b5:35:8c: 42:b4:38:aa:57:64:d8:8a:4c:09:26:a7:e7:9f:c7: b3:0b:3f:e1:bb:24:80:46:28:52:63:c1:4c:17:c2: 69:fe:c5:e0:58:c9:41:5f:33:2a:67:ba:04:f0:fb: 7d:cd:6f:d2:92:42:fa:3a:75:10:28:95:8e:b0:a1: 15:e5:ab:88:14:32:ce:fa:7c:61:44:d0:54:15:00: af:5e:77:6c:ff:2a:4c:61:30:a9:0e:d2:ed:75:04: 09:68:40:bb:89:cd:3a:ae:04:fb:65:3d:06:b2:ed: 30:06:30:d7:cb:2a:36:73:52:37:15:d4:35:99:ef: ff:b0:a4:19:69:4b:43:9e:17:c3:35:3f:17:a9:51: ff:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6D:37:6C:FD:70:09:3D:6D:15:32:56:A5:E5:78:1B:0B:D1:AF:E1 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/O203bP1wCT1tFTJWpeV4GwvRr-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.26.32.0/24 Signature Algorithm: sha256WithRSAEncryption d8:ed:50:d4:ab:fc:60:c7:ad:41:5a:b6:2f:93:7d:bc:a7:cb: a1:10:e9:c5:60:c1:88:99:86:84:ae:64:f2:46:f5:50:ea:49: be:5f:f6:c8:59:3f:9d:38:06:c3:17:8e:8c:0f:c3:dc:da:9a: de:17:a4:ae:12:f2:bf:c2:99:cd:08:06:33:c4:82:9b:de:1e: 82:ca:cd:98:ad:ca:c8:ff:d2:26:84:78:43:39:c6:89:61:5d: 81:2d:33:55:07:3e:0c:54:80:87:84:3b:d3:0d:38:f8:87:4f: b4:b6:ab:29:87:15:46:c2:42:c9:2a:23:95:ac:06:9d:dc:5c: 25:b3:96:c4:35:d4:52:47:7e:b5:f4:a6:ac:86:43:d9:cf:31: 67:2f:32:e9:07:c0:2d:79:3a:65:77:98:ad:39:07:4c:72:bd: a7:87:b2:37:c6:94:b9:dd:4b:50:e2:44:8f:5d:47:f4:99:b8: 1a:a0:11:e9:67:bc:1b:b5:2f:81:d7:78:bf:3e:19:93:f1:99: 2a:bc:0d:32:ac:d3:56:e7:35:7c:1f:5a:3a:0d:a1:cc:bf:4f: 64:41:08:47:68:ad:6a:7e:45:1f:aa:11:05:82:0f:c2:31:bd: 84:7c:94:5e:b4:5b:be:1e:2d:52:fd:be:49:ee:71:aa:51:fe: 22:1b:ee:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuNcHsdCo+WTKduBM60U46rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwMTA1MDkxNTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjZkMzc2Y2ZkNzAwOTNkNmQxNTMyNTZhNWU1NzgxYjBiZDFhZmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6clkmEnwuYgONtm5mvMPUnJTm8g CILMyKxZnkj06ow4RhjzXHrbviK37fqZB1KOxbmE9/AXAOvY6yAz2HlLdDVg1hSz dUjeHgFAnAdXsIZ0XCYhafQhCIzroq1zSzcHK9G6P8Y+gct8hJ8Hg6XVVl0gzTO1 NYxCtDiqV2TYikwJJqfnn8ezCz/huySARihSY8FMF8Jp/sXgWMlBXzMqZ7oE8Pt9 zW/SkkL6OnUQKJWOsKEV5auIFDLO+nxhRNBUFQCvXnds/ypMYTCpDtLtdQQJaEC7 ic06rgT7ZT0Gsu0wBjDXyyo2c1I3FdQ1me//sKQZaUtDnhfDNT8XqVH/SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDttN2z9cAk9bRUyVqXleBsL0a/hMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvTzIwM2JQMXdDVDF0RlRKV3BlVjRHd3ZSci1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXhogMA0G CSqGSIb3DQEBCwUAA4IBAQDY7VDUq/xgx61BWrYvk328p8uhEOnFYMGImYaErmTy RvVQ6km+X/bIWT+dOAbDF46MD8Pc2preF6SuEvK/wpnNCAYzxIKb3h6Cys2YrcrI /9ImhHhDOcaJYV2BLTNVBz4MVICHhDvTDTj4h0+0tqsphxVGwkLJKiOVrAad3Fwl s5bENdRSR3619KashkPZzzFnLzLpB8AteTpld5itOQdMcr2nh7I3xpS53UtQ4kSP XUf0mbgaoBHpZ7wbtS+B13i/PhmT8ZkqvA0yrNNW5zV8H1o6DaHMv09kQQhHaK1q fkUfqhEFgg/CMb2EfJRetFu+Hi1S/b5J7nGqUf4iG+5C -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:56 2026 by rpki-client