This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/olOKcJA3lY2C5AHAA9EvwRDOMTk.roa File: olOKcJA3lY2C5AHAA9EvwRDOMTk.roa (raw, json) Hash identifier: 2fXZ6uCGSZ0urqxK7sMB+s4D2FSNMW1R9BEHHUDguZE= Subject key identifier: A2:53:8A:70:90:37:95:8D:82:E4:01:C0:03:D1:2F:C1:10:CE:31:39 Certificate issuer: /CN=909b5788960bd179056848ec956fd611d4cf8094 Certificate serial: 019B7F818552AB5A83D63ADECFB02F8CA202 Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/olOKcJA3lY2C5AHAA9EvwRDOMTk.roa Signing time: Fri 02 Jan 2026 16:19:13 +0000 ROA not before: Fri 02 Jan 2026 16:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197768 IP address blocks: 31.133.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:85:52:ab:5a:83:d6:3a:de:cf:b0:2f:8c:a2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094 Validity Not Before: Jan 2 16:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2538a709037958d82e401c003d12fc110ce3139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ed:56:84:b7:a3:48:0b:87:19:ea:e5:ce:4c: 79:95:75:45:3c:4c:a8:11:2b:f0:5c:d8:72:94:20: f4:89:56:8e:a5:aa:71:14:2e:02:ee:56:ae:4e:33: c2:ad:8a:4c:38:41:a1:27:9e:6a:16:b1:f3:59:3e: 00:4a:c0:77:83:4c:99:4e:79:c8:5a:d0:89:6b:79: 48:3c:64:14:bb:58:83:84:4a:ac:5a:08:7d:75:90: 83:aa:36:47:d9:2e:78:79:58:7f:a5:8c:bd:cd:36: f1:2e:55:8e:ef:86:5c:8a:f8:22:31:f6:7d:70:53: 7a:b4:8d:2b:fb:ac:2d:42:f6:5c:92:a3:e3:ed:31: 0b:7c:52:fd:82:51:f5:ba:bc:1f:32:a9:20:8c:0d: 34:32:19:82:b7:12:7e:d4:60:37:cf:25:7d:56:a2: a8:61:b7:8a:b3:69:74:df:c2:79:c8:60:a7:8e:2a: 12:0c:a4:8b:26:b3:fd:f4:ef:c1:e0:c2:6d:27:e3: f8:ef:42:4a:40:08:63:10:c9:5a:a4:d3:66:f5:08: 65:8d:70:19:57:b9:59:5b:18:c8:c6:09:f6:78:ab: 6d:34:60:5a:d6:1e:40:91:04:fd:8f:7c:d4:4e:aa: fe:73:65:16:25:f7:c4:64:97:5e:75:2b:0f:54:c3: 02:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:53:8A:70:90:37:95:8D:82:E4:01:C0:03:D1:2F:C1:10:CE:31:39 X509v3 Authority Key Identifier: keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/olOKcJA3lY2C5AHAA9EvwRDOMTk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.104.0/21 Signature Algorithm: sha256WithRSAEncryption d7:d4:6e:90:f8:11:cb:6e:a3:40:73:37:0d:1e:2c:5b:33:db: 20:17:1b:57:7d:c7:d8:8d:74:7b:8a:a8:59:33:16:5c:11:50: 1b:4e:ee:20:bf:76:ce:f7:ce:bc:04:8f:28:7e:23:73:a3:44: b9:30:e4:ca:1f:80:82:31:4b:cd:1f:05:b8:82:9e:79:dc:08: 86:d9:6c:40:5a:a2:56:c0:65:ab:c2:da:86:0a:dc:60:fb:57: 7f:08:1e:23:46:e9:18:3a:b4:e4:80:93:13:bc:ff:97:b4:f9: 32:e6:27:00:fc:3d:1d:59:a1:01:84:c1:49:8f:ea:50:81:a2: cc:1c:d3:a1:41:80:0d:c1:6f:3a:58:1f:f3:e2:a2:8c:72:2b: e8:ac:ed:9f:e7:1a:16:4f:c9:29:80:6b:a6:45:8a:28:27:e5: d6:81:4c:00:ba:ed:7b:2d:66:ee:96:d6:c0:5e:2a:87:d0:cd: f6:bb:63:8e:fa:0d:13:dc:b7:66:86:df:ff:74:8d:9c:e2:a8: f8:89:7a:d6:f0:ef:cc:03:9c:ea:13:a7:2f:e8:e5:24:08:2e: af:6e:0b:04:3f:7a:34:a6:a7:fe:2d:3c:b3:03:14:c6:31:50: 50:f1:68:42:4b:33:fc:d0:ab:88:67:04:9a:96:a6:10:00:04: 45:49:b2:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gYVSq1qD1jrez7AvjKICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOWI1Nzg4OTYwYmQxNzkwNTY4NDhlYzk1NmZkNjExZDRj ZjgwOTQwHhcNMjYwMTAyMTYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjUzOGE3MDkwMzc5NThkODJlNDAxYzAwM2QxMmZjMTEwY2UzMTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu1WhLejSAuHGerlzkx5lXVFPEyo ESvwXNhylCD0iVaOpapxFC4C7lauTjPCrYpMOEGhJ55qFrHzWT4ASsB3g0yZTnnI WtCJa3lIPGQUu1iDhEqsWgh9dZCDqjZH2S54eVh/pYy9zTbxLlWO74ZcivgiMfZ9 cFN6tI0r+6wtQvZckqPj7TELfFL9glH1urwfMqkgjA00MhmCtxJ+1GA3zyV9VqKo YbeKs2l038J5yGCnjioSDKSLJrP99O/B4MJtJ+P470JKQAhjEMlapNNm9QhljXAZ V7lZWxjIxgn2eKttNGBa1h5AkQT9j3zUTqr+c2UWJffEZJdedSsPVMMCxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKJTinCQN5WNguQBwAPRL8EQzjE5MB8GA1UdIwQY MBaAFJCbV4iWC9F5BWhI7JVv1hHUz4CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0p0WGlKWUwwWGtGYUVqc2xXX1dFZFRQZ0pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82YzBlMjUtODFhNS00OTAwLWI2Yjct ZGY0YzlmMzRkYzViLzEvb2xPS2NKQTNsWTJDNUFIQUE5RXZ3UkRPTVRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82YzBlMjUtODFhNS00OTAwLWI2YjctZGY0YzlmMzRkYzVi LzEva0p0WGlKWUwwWGtGYUVqc2xXX1dFZFRQZ0pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH4VoMA0G CSqGSIb3DQEBCwUAA4IBAQDX1G6Q+BHLbqNAczcNHixbM9sgFxtXfcfYjXR7iqhZ MxZcEVAbTu4gv3bO9868BI8ofiNzo0S5MOTKH4CCMUvNHwW4gp553AiG2WxAWqJW wGWrwtqGCtxg+1d/CB4jRukYOrTkgJMTvP+XtPky5icA/D0dWaEBhMFJj+pQgaLM HNOhQYANwW86WB/z4qKMcivorO2f5xoWT8kpgGumRYooJ+XWgUwAuu17LWbultbA XiqH0M32u2OO+g0T3Ldmht//dI2c4qj4iXrW8O/MA5zqE6cv6OUkCC6vbgsEP3o0 pqf+LTyzAxTGMVBQ8WhCSzP80KuIZwSalqYQAARFSbL6 -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:15 2026 by rpki-client