This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/OWSyw8dA70bFmnn5G8M7bjuM9OE.roa File: OWSyw8dA70bFmnn5G8M7bjuM9OE.roa (raw, json) Hash identifier: nZLUR/StXNeBBc9JUE1Pi6oNR3MzLcUIX/L4nVvuTC8= Subject key identifier: 39:64:B2:C3:C7:40:EF:46:C5:9A:79:F9:1B:C3:3B:6E:3B:8C:F4:E1 Certificate issuer: /CN=5bf81435ed13789895f375dc34d04ce91aca4744 Certificate serial: 019C42216E11AB19E2CABAC7B715BCF9AA7D Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/OWSyw8dA70bFmnn5G8M7bjuM9OE.roa Signing time: Mon 09 Feb 2026 11:20:12 +0000 ROA not before: Mon 09 Feb 2026 11:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201271 IP address blocks: 158.233.224.0/24 maxlen: 24 158.233.227.0/24 maxlen: 24 158.233.228.0/23 maxlen: 23 158.233.228.0/24 maxlen: 24 158.233.229.0/24 maxlen: 24 158.233.230.0/23 maxlen: 23 158.233.230.0/24 maxlen: 24 158.233.231.0/24 maxlen: 24 158.233.242.0/23 maxlen: 23 158.233.242.0/24 maxlen: 24 158.233.243.0/24 maxlen: 24 158.233.244.0/23 maxlen: 23 158.233.244.0/24 maxlen: 24 158.233.245.0/24 maxlen: 24 158.233.246.0/23 maxlen: 23 158.233.246.0/24 maxlen: 24 158.233.247.0/24 maxlen: 24 158.233.248.0/23 maxlen: 23 158.233.248.0/24 maxlen: 24 158.233.249.0/24 maxlen: 24 158.233.250.0/23 maxlen: 23 158.233.250.0/24 maxlen: 24 158.233.251.0/24 maxlen: 24 2001:67c:2af0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:21:6e:11:ab:19:e2:ca:ba:c7:b7:15:bc:f9:aa:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744 Validity Not Before: Feb 9 11:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3964b2c3c740ef46c59a79f91bc33b6e3b8cf4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:57:80:e2:5e:70:e9:5a:aa:0a:b4:21:75: 82:a6:e1:ed:db:d6:c7:6e:7d:bf:f2:2f:26:33:7b: 6b:35:8c:a6:ae:ca:a3:97:fb:5a:26:f5:d3:45:21: 58:33:e8:03:8a:ae:e6:74:2e:29:57:d7:9b:71:bc: da:8f:2f:35:17:67:87:70:33:7a:54:44:7b:b4:fe: 6b:1d:89:7b:4b:dc:3a:bb:25:44:87:47:73:9a:bf: e2:9f:a8:c7:cb:12:4f:9e:28:6d:a9:c4:d4:3d:1b: 65:ea:be:fe:36:40:fa:76:dc:2f:6f:dd:3e:a8:72: 96:6c:03:44:8e:6e:4e:4d:b9:1c:23:60:a1:ef:ac: c2:0b:ff:cb:d1:b4:10:1c:b5:1a:7d:45:a8:06:47: 9c:0d:2c:fc:9c:2e:f0:05:d2:31:f6:4d:78:82:df: 8f:9f:c3:3d:89:e7:a3:9a:00:bf:5c:99:58:f4:83: fb:cf:18:95:62:be:c0:2b:35:a4:e2:d3:88:ba:5a: 73:51:a3:49:a6:2d:33:54:cc:4b:b2:bd:68:cb:b9: c3:eb:d4:4c:ad:db:08:62:a2:80:75:db:fa:24:92: bf:41:c4:dd:0f:4b:4b:0f:7e:ad:db:51:e6:2f:3f: fa:45:57:09:0a:49:2c:46:e3:73:3d:e2:10:9d:29: 0e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:64:B2:C3:C7:40:EF:46:C5:9A:79:F9:1B:C3:3B:6E:3B:8C:F4:E1 X509v3 Authority Key Identifier: keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/OWSyw8dA70bFmnn5G8M7bjuM9OE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.233.224.0/24 158.233.227.0-158.233.231.255 158.233.242.0-158.233.251.255 IPv6: 2001:67c:2af0::/48 Signature Algorithm: sha256WithRSAEncryption 3c:e9:7c:e8:46:a5:ee:7d:29:2b:c5:1d:00:65:79:6a:e8:bd: f6:75:34:e7:3f:4b:46:25:87:42:ae:bb:f4:3f:b9:e5:9c:b3: cb:10:83:5c:c4:57:a1:11:62:89:5c:2a:8b:c6:42:15:0b:d3: a8:e0:dc:28:eb:9a:49:d6:3d:96:7a:6f:50:cd:03:27:f5:f9: 42:e9:f8:48:07:1b:cd:6f:5d:11:35:02:d5:50:e4:4e:f9:1e: 6b:4c:e9:0e:a9:95:7a:f1:1a:aa:9c:47:af:b4:d2:b1:52:be: 80:13:4e:24:d7:7e:50:c0:f1:67:67:4e:7f:45:4b:dd:ee:b1: 03:3c:c0:7a:d3:f4:aa:41:50:af:b4:06:13:f6:90:f0:91:1e: 1b:5b:aa:3f:01:bf:1a:29:cd:f0:93:e7:d6:eb:fb:36:2f:e3: db:95:c4:fc:53:02:66:d7:17:cf:d4:c9:ab:b7:35:90:df:8d: e1:de:cb:89:e9:5f:58:1a:a2:fc:7c:f4:92:c0:57:78:83:57: b1:2b:de:c0:63:a1:82:f0:a5:6c:c3:95:54:8f:2f:25:1d:a0: 07:9e:af:1d:ab:83:f0:09:36:36:4e:76:29:32:44:5a:2d:92: 8c:9a:49:d7:aa:0a:2d:07:4f:08:f5:1f:95:a9:52:0e:33:30: 16:55:17:d1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZxCIW4RqxniyrrHtxW8+ap9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZjgxNDM1ZWQxMzc4OTg5NWYzNzVkYzM0ZDA0Y2U5MWFj YTQ3NDQwHhcNMjYwMjA5MTEyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTY0YjJjM2M3NDBlZjQ2YzU5YTc5ZjkxYmMzM2I2ZTNiOGNmNGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcZXgOJecOlaqgq0IXWCpuHt29bH bn2/8i8mM3trNYymrsqjl/taJvXTRSFYM+gDiq7mdC4pV9ebcbzajy81F2eHcDN6 VER7tP5rHYl7S9w6uyVEh0dzmr/in6jHyxJPnihtqcTUPRtl6r7+NkD6dtwvb90+ qHKWbANEjm5OTbkcI2Ch76zCC//L0bQQHLUafUWoBkecDSz8nC7wBdIx9k14gt+P n8M9ieejmgC/XJlY9IP7zxiVYr7AKzWk4tOIulpzUaNJpi0zVMxLsr1oy7nD69RM rdsIYqKAddv6JJK/QcTdD0tLD36t21HmLz/6RVcJCkksRuNzPeIQnSkOZQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFDlkssPHQO9GxZp5+RvDO247jPThMB8GA1UdIwQY MBaAFFv4FDXtE3iYlfN13DTQTOkaykdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV19nVU5lMFRlSmlWODNYY05OQk02UnJLUjBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zZDRiYzUtYzM2My00MTVmLWIzZGEt NDhlNGNjNmIzM2EzLzEvT1dTeXc4ZEE3MGJGbW5uNUc4TTdianVNOU9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zZDRiYzUtYzM2My00MTVmLWIzZGEtNDhlNGNjNmIzM2Ez LzEvV19nVU5lMFRlSmlWODNYY05OQk02UnJLUjBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAoBAIAATAiAwQAnungMAwD BACe6eMDBAOe6eAwDAMEAZ7p8gMEAp7p+DAPBAIAAjAJAwcAIAEGfCrwMA0GCSqG SIb3DQEBCwUAA4IBAQA86XzoRqXufSkrxR0AZXlq6L32dTTnP0tGJYdCrrv0P7nl nLPLEINcxFehEWKJXCqLxkIVC9Oo4Nwo65pJ1j2Wem9QzQMn9flC6fhIBxvNb10R NQLVUORO+R5rTOkOqZV68RqqnEevtNKxUr6AE04k135QwPFnZ05/RUvd7rEDPMB6 0/SqQVCvtAYT9pDwkR4bW6o/Ab8aKc3wk+fW6/s2L+PblcT8UwJm1xfP1MmrtzWQ 343h3suJ6V9YGqL8fPSSwFd4g1exK97AY6GC8KVsw5VUjy8lHaAHnq8dq4PwCTY2 TnYpMkRaLZKMmknXqgotB08I9R+VqVIOMzAWVRfR -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:08 2026 by rpki-client