This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/OVADbrvDVPwea8LYrO-Mwb3Qj2g.roa File: OVADbrvDVPwea8LYrO-Mwb3Qj2g.roa (raw, json) Hash identifier: 7l0K8yYViyqwamqByXDtNcYGRuw4fCtQkRZ/3UwAsLE= Subject key identifier: 39:50:03:6E:BB:C3:54:FC:1E:6B:C2:D8:AC:EF:8C:C1:BD:D0:8F:68 Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df Certificate serial: 019B78A300576499A14A0EC246D89EAF828F Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/OVADbrvDVPwea8LYrO-Mwb3Qj2g.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 132.64.1.0/24 maxlen: 24 132.64.2.0/24 maxlen: 24 132.64.3.0/24 maxlen: 24 132.64.5.0/24 maxlen: 24 132.64.6.0/24 maxlen: 24 132.64.7.0/24 maxlen: 24 132.64.16.0/24 maxlen: 24 132.64.17.0/24 maxlen: 24 132.64.24.0/22 maxlen: 22 132.64.40.0/24 maxlen: 24 132.64.43.0/24 maxlen: 24 132.64.44.0/24 maxlen: 24 132.64.45.0/24 maxlen: 24 132.64.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:00:57:64:99:a1:4a:0e:c2:46:d8:9e:af:82:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3950036ebbc354fc1e6bc2d8acef8cc1bdd08f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6c:67:76:05:1d:19:0a:0b:65:28:0b:10:f0: 5b:63:9c:93:af:a1:78:91:fa:e7:85:d7:7f:72:36: c6:03:3a:3a:5f:b4:2e:56:ab:00:16:39:ea:23:bb: 68:73:a9:1b:3c:5e:ba:16:ed:33:29:c0:31:e8:28: 69:91:23:80:c1:11:4a:38:f2:e5:4e:e8:b6:e7:be: 37:d9:a0:b0:60:75:d8:da:7d:d0:da:73:ee:09:34: 0e:af:6e:9d:1d:66:c3:47:e8:fe:94:4f:e9:e6:41: fe:5b:a2:3e:99:41:fd:ff:96:b1:83:fb:fe:99:ed: 26:fb:a4:4f:fe:28:e7:a0:32:dd:b6:26:26:b3:09: 1f:e4:dd:d9:ca:ce:4a:07:c6:96:40:32:52:4e:94: e3:87:70:4f:f8:d5:bc:53:4c:7a:39:7d:ec:15:91: 80:05:1f:3d:1b:b2:4e:76:b4:aa:19:12:9a:aa:0e: a3:90:fe:2a:a3:b3:7e:9a:ce:ea:62:90:86:23:4c: f5:93:78:69:33:87:bf:a4:50:d9:0d:de:5d:e1:72: ab:cf:93:9e:e1:4c:02:26:51:22:dc:24:a3:e9:1c: d8:c7:13:62:72:8c:03:a5:36:fb:04:b1:7d:61:b4: ca:6e:9d:47:7a:c1:c8:7d:cf:44:b9:fd:e5:a2:49: 5a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:50:03:6E:BB:C3:54:FC:1E:6B:C2:D8:AC:EF:8C:C1:BD:D0:8F:68 X509v3 Authority Key Identifier: keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/OVADbrvDVPwea8LYrO-Mwb3Qj2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.64.1.0-132.64.3.255 132.64.5.0-132.64.7.255 132.64.16.0/23 132.64.24.0/22 132.64.40.0/24 132.64.43.0-132.64.45.255 132.64.254.0/24 Signature Algorithm: sha256WithRSAEncryption 30:2c:b4:69:52:14:50:52:91:df:20:3d:ea:f2:3a:3a:7f:80: 79:b5:c4:ad:32:1f:1b:e7:46:4c:27:10:50:4a:78:89:4c:9f: c8:f5:99:fc:d3:f9:52:32:c4:63:75:8a:58:b8:95:2e:bf:7b: ab:15:c9:99:c7:8d:f0:26:e1:ee:39:64:dc:53:87:c0:1a:05: 39:99:70:5d:ce:cb:5d:a6:b2:24:75:c5:df:26:83:3d:9e:4d: 24:0a:1e:7f:50:11:0c:b6:5b:f6:24:c8:b0:9f:7e:b7:ed:aa: 80:86:97:64:e0:48:0d:7d:c1:f0:80:9d:11:f9:95:4e:b7:8f: c3:4a:a6:66:ff:a0:9b:82:d4:29:45:5e:2c:97:1b:8f:95:b7: 47:85:1d:db:75:71:cd:de:e7:2c:21:d8:3f:77:86:24:a9:12: 71:d1:66:47:22:c6:cd:d8:46:24:c3:f1:93:06:28:c8:7b:f6: e6:50:91:fa:fc:39:37:05:f8:4b:46:a8:a6:02:4e:11:d9:90: 11:15:98:11:25:e6:c1:70:78:7c:7c:22:7a:21:a9:d6:13:66: 2f:73:80:a5:ed:c1:05:05:59:5a:6c:5b:30:18:23:84:70:76: 7a:be:82:df:55:e2:c1:02:58:c4:f0:0a:33:b2:4b:a6:42:45: 55:a4:28:cc -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt4owBXZJmhSg7CRtier4KPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMTg3MGM5NmVmMDk3MjM4MTFmYjg5MjUwZWVhNmViYTk2 M2MwZGYwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTUwMDM2ZWJiYzM1NGZjMWU2YmMyZDhhY2VmOGNjMWJkZDA4ZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmxndgUdGQoLZSgLEPBbY5yTr6F4 kfrnhdd/cjbGAzo6X7QuVqsAFjnqI7toc6kbPF66Fu0zKcAx6ChpkSOAwRFKOPLl Tui257432aCwYHXY2n3Q2nPuCTQOr26dHWbDR+j+lE/p5kH+W6I+mUH9/5axg/v+ me0m+6RP/ijnoDLdtiYmswkf5N3Zys5KB8aWQDJSTpTjh3BP+NW8U0x6OX3sFZGA BR89G7JOdrSqGRKaqg6jkP4qo7N+ms7qYpCGI0z1k3hpM4e/pFDZDd5d4XKrz5Oe 4UwCJlEi3CSj6RzYxxNicowDpTb7BLF9YbTKbp1HesHIfc9Euf3lokla3wIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFDlQA267w1T8HmvC2KzvjMG90I9oMB8GA1UdIwQY MBaAFAsYcMlu8JcjgR+4klDupuupY8DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMt YTJlMjRmOTgwYjNmLzEvT1ZBRGJydkRWUHdlYThMWXJPLU13YjNRajJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84NzcwMmEtM2FmNi00NmM3LWExMjMtYTJlMjRmOTgwYjNm LzEvQ3hod3lXN3dseU9CSDdpU1VPNm02Nmxqd044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCMAwDBACEQAED BAKEQAAwDAMEAIRABQMEA4RAAAMEAYRAEAMEAoRAGAMEAIRAKDAMAwQAhEArAwQB hEAsAwQAhED+MA0GCSqGSIb3DQEBCwUAA4IBAQAwLLRpUhRQUpHfID3q8jo6f4B5 tcStMh8b50ZMJxBQSniJTJ/I9Zn80/lSMsRjdYpYuJUuv3urFcmZx43wJuHuOWTc U4fAGgU5mXBdzstdprIkdcXfJoM9nk0kCh5/UBEMtlv2JMiwn3637aqAhpdk4EgN fcHwgJ0R+ZVOt4/DSqZm/6CbgtQpRV4slxuPlbdHhR3bdXHN3ucsIdg/d4YkqRJx 0WZHIsbN2EYkw/GTBijIe/bmUJH6/Dk3BfhLRqimAk4R2ZARFZgRJebBcHh8fCJ6 IanWE2Yvc4Cl7cEFBVlabFswGCOEcHZ6voLfVeLBAljE8AozskumQkVVpCjM -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:18 2026 by rpki-client