This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa File: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (raw, json) Hash identifier: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU= Subject key identifier: 38:51:01:CB:08:75:2B:09:F5:23:91:D8:B1:A7:86:C3:83:1A:DA:4E Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d Certificate serial: 019B76EABAF4D355E73E0FA5F832929732E8 Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa Signing time: Thu 01 Jan 2026 00:17:33 +0000 ROA not before: Thu 01 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206804 IP address blocks: 37.77.56.0/24 maxlen: 24 37.77.60.0/24 maxlen: 24 37.77.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ba:f4:d3:55:e7:3e:0f:a5:f8:32:92:97:32:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d Validity Not Before: Jan 1 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=385101cb08752b09f52391d8b1a786c3831ada4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:77:f7:11:54:37:6a:4c:bc:bd:79:1e:ba:33: 4e:71:ac:cf:ad:6b:96:ca:72:77:02:ce:94:09:1d: 3e:f1:87:c2:f6:ef:bd:02:d5:e7:e8:bf:05:bf:bc: e6:cd:2b:e7:02:b5:0b:04:66:71:c8:de:87:d3:16: 44:73:da:ca:3d:6a:85:f7:3c:f2:13:8a:a9:14:c5: f7:92:d8:9a:25:18:08:13:94:63:ed:98:76:85:48: 86:22:77:2a:b6:20:dc:7e:1f:5b:b5:14:46:44:b3: 73:6d:5e:ad:f9:a0:7c:62:6d:23:21:25:e4:fe:29: 7c:d8:88:1b:8f:8f:0f:0e:fe:cd:b6:b3:6e:32:09: c6:9c:1d:77:99:39:fa:55:64:d2:39:a7:64:20:d6: 4c:50:86:3b:99:66:0d:b5:6f:d4:ec:e9:e2:c8:85: b7:02:1c:0f:18:44:18:e9:0a:ba:ee:92:ae:12:1f: ca:ee:19:fd:7c:9b:f7:1e:93:75:1c:8e:4d:9f:cb: f7:a3:5a:ca:2d:0d:f0:8a:49:63:e8:08:f7:42:c1: a9:21:79:ad:e4:7a:bb:e8:65:aa:e5:7e:48:ee:61: b0:4c:c7:43:1e:41:09:9d:e8:ad:f8:a3:59:21:cd: a4:d7:4b:f0:cb:21:08:23:7c:f4:8e:ec:24:28:ee: 8f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:51:01:CB:08:75:2B:09:F5:23:91:D8:B1:A7:86:C3:83:1A:DA:4E X509v3 Authority Key Identifier: keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.56.0/24 37.77.60.0/24 37.77.62.0/24 Signature Algorithm: sha256WithRSAEncryption 81:1a:d8:37:65:79:53:50:4d:cd:d4:22:cb:1f:23:3a:10:b6: 2e:27:be:2d:55:b2:07:b1:63:04:5a:c6:14:23:a5:ac:61:d4: 93:da:32:8b:a0:06:95:5b:de:a4:bb:61:9c:cb:d6:a8:67:22: 43:1e:67:36:e1:8d:b3:c9:98:bb:97:0f:a8:55:e9:b7:e5:88: 40:c0:b5:07:33:ed:6e:c1:c3:80:34:8a:fc:75:91:c2:f7:e0: a3:df:87:d8:a2:70:cc:44:f5:52:f5:34:31:ba:cd:09:84:e6: e6:e0:b7:22:9e:b9:60:9e:34:28:eb:88:bb:d3:cc:03:f3:12: 44:b5:e1:d5:c1:17:32:b9:b6:1b:de:c0:ce:75:59:a1:2e:b6: e1:a5:98:85:f9:fa:c4:db:e6:c9:2e:22:ac:5b:76:0b:b9:e0: 76:d4:fa:2c:49:28:9c:8d:ac:21:30:d0:a0:c2:82:02:d7:11: a7:85:d5:61:51:24:28:6e:ad:79:dd:bd:c5:76:4d:11:6c:3c: 83:bf:30:d9:ae:4b:49:9a:fe:df:7b:9a:23:cb:80:1b:fb:af: 5d:32:9b:1d:56:03:54:8e:f6:7e:59:f6:76:4c:2c:5c:01:0d: 7b:db:7b:b0:8a:de:bd:74:55:59:14:03:98:1d:c7:b3:1b:99: 67:44:7d:c1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt26rr001XnPg+l+DKSlzLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2 Nzc3MGQwHhcNMjYwMTAxMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODUxMDFjYjA4NzUyYjA5ZjUyMzkxZDhiMWE3ODZjMzgzMWFkYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXf3EVQ3aky8vXkeujNOcazPrWuW ynJ3As6UCR0+8YfC9u+9AtXn6L8Fv7zmzSvnArULBGZxyN6H0xZEc9rKPWqF9zzy E4qpFMX3ktiaJRgIE5Rj7Zh2hUiGIncqtiDcfh9btRRGRLNzbV6t+aB8Ym0jISXk /il82Igbj48PDv7NtrNuMgnGnB13mTn6VWTSOadkINZMUIY7mWYNtW/U7OniyIW3 AhwPGEQY6Qq67pKuEh/K7hn9fJv3HpN1HI5Nn8v3o1rKLQ3wiklj6Aj3QsGpIXmt 5Hq76GWq5X5I7mGwTMdDHkEJneit+KNZIc2k10vwyyEII3z0juwkKO6PWQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDhRAcsIdSsJ9SOR2LGnhsODGtpOMB8GA1UdIwQY MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt Y2NmNjQ1NGJiMjRjLzEvT0ZFQnl3aDFLd24xSTVIWXNhZUd3NE1hMms0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJU04AwQA JU08AwQAJU0+MA0GCSqGSIb3DQEBCwUAA4IBAQCBGtg3ZXlTUE3N1CLLHyM6ELYu J74tVbIHsWMEWsYUI6WsYdST2jKLoAaVW96ku2Gcy9aoZyJDHmc24Y2zyZi7lw+o Vem35YhAwLUHM+1uwcOANIr8dZHC9+Cj34fYonDMRPVS9TQxus0JhObm4Lcinrlg njQo64i708wD8xJEteHVwRcyubYb3sDOdVmhLrbhpZiF+frE2+bJLiKsW3YLueB2 1PosSSicjawhMNCgwoIC1xGnhdVhUSQobq153b3Fdk0RbDyDvzDZrktJmv7fe5oj y4Ab+69dMpsdVgNUjvZ+WfZ2TCxcAQ1723uwit69dFVZFAOYHcezG5lnRH3B -----END CERTIFICATE-----Generated at Wed Jan 21 06:08:44 2026 by rpki-client