This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/O9Prh0bHygAMlcVjAjhGkRfKOeM.roa File: O9Prh0bHygAMlcVjAjhGkRfKOeM.roa (raw, json) Hash identifier: AnpU4qxSDweY2PLZMgIh1u72ZCwp2xXOzI9oanyv9vI= Subject key identifier: 3B:D3:EB:87:46:C7:CA:00:0C:95:C5:63:02:38:46:91:17:CA:39:E3 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019B7BA3537B0A175FB2FB5B7DCDCA9FF7B0 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/O9Prh0bHygAMlcVjAjhGkRfKOeM.roa Signing time: Thu 01 Jan 2026 22:17:39 +0000 ROA not before: Thu 01 Jan 2026 22:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 159.197.224.0/19 maxlen: 24 161.8.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:53:7b:0a:17:5f:b2:fb:5b:7d:cd:ca:9f:f7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Jan 1 22:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bd3eb8746c7ca000c95c5630238469117ca39e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:af:98:96:7a:60:2d:b0:b8:f4:67:27:c1: aa:1d:05:58:bb:d8:ca:5c:39:8b:91:50:82:fc:99: 45:ab:e0:3b:d0:86:7d:c7:f5:81:5e:44:52:40:a4: 3f:8e:6f:d8:d2:93:cd:cb:92:94:51:05:dc:30:17: b9:58:8f:db:91:b7:55:94:10:46:1d:ef:b3:73:fa: 47:ee:b0:2d:2a:41:f0:d6:f1:05:6a:b1:e3:03:46: a0:92:3c:96:0c:dd:75:f4:67:ee:d1:c1:80:bc:61: f7:fa:71:96:a9:25:bc:d2:a6:6d:d4:00:42:df:55: 1d:c1:8c:f9:f4:7e:73:7f:78:7c:6b:57:72:48:2c: 2c:ac:83:be:ec:37:db:a8:53:15:6c:3a:7e:4f:57: 02:87:00:04:c8:30:61:46:1d:24:55:cb:7e:92:56: 75:b9:b5:c0:df:d7:fd:63:09:e5:f4:74:c8:8e:6e: 3c:5d:52:dc:62:f3:c2:fd:6d:37:bf:3f:23:d7:67: 18:1f:a5:84:70:7a:7f:88:21:c3:ec:00:59:d4:7f: d6:f4:7d:aa:4d:6d:a1:3c:b7:76:8b:ce:fd:d6:f6: cd:6b:78:92:11:40:be:80:d7:3c:66:e2:b5:be:bc: 4b:19:a3:8f:4d:68:34:d7:9f:50:70:6d:f6:73:c1: 85:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D3:EB:87:46:C7:CA:00:0C:95:C5:63:02:38:46:91:17:CA:39:E3 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/O9Prh0bHygAMlcVjAjhGkRfKOeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.197.224.0/19 161.8.128.0/19 Signature Algorithm: sha256WithRSAEncryption a1:c0:d4:ac:4f:21:ac:68:40:bc:8c:4d:29:48:86:19:f6:b1: e8:98:de:84:25:37:9b:9f:8e:f3:49:15:59:9e:b9:8f:c2:54: 4a:fc:e0:df:d5:dc:e0:77:5b:45:c2:60:e7:6f:7e:a2:40:9d: 45:2e:28:b5:06:5e:89:a2:4f:c7:49:28:f2:ec:7a:52:59:44: 41:f2:55:9f:46:cc:89:ab:3c:95:c4:8d:d5:ab:d3:fb:a7:b5: 39:6e:0e:34:6c:8d:09:3f:f8:5d:1a:32:4e:db:12:48:e2:57: b9:f6:64:ca:b9:cd:54:5f:30:e4:97:80:23:67:4c:40:74:7e: 89:49:d8:8b:ef:80:10:85:11:43:ca:1b:e9:7a:79:43:97:a0: 6e:d4:b2:e6:91:82:93:bf:d6:1d:f5:05:12:f8:5c:a7:7d:fa: 71:6c:70:82:ca:e4:78:1d:57:65:d7:a6:8a:e2:16:43:cc:03: 3a:7d:60:60:ef:45:f5:9f:bd:41:aa:9a:49:1c:c6:9c:fa:04: d4:c8:8b:e2:07:0d:5f:c0:6c:cd:dd:05:9c:e0:2a:56:f4:0f: b1:17:45:d5:0b:2c:c6:b1:12:a9:cf:c0:dd:bd:4e:8f:d4:9e: ed:d9:ec:13:cb:ee:d7:02:e7:ef:76:31:1c:f4:1b:00:0a:a1: d6:2f:5e:c1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o1N7Chdfsvtbfc3Kn/ewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjYwMTAxMjIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmQzZWI4NzQ2YzdjYTAwMGM5NWM1NjMwMjM4NDY5MTE3Y2EzOWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNuvmJZ6YC2wuPRnJ8GqHQVYu9jK XDmLkVCC/JlFq+A70IZ9x/WBXkRSQKQ/jm/Y0pPNy5KUUQXcMBe5WI/bkbdVlBBG He+zc/pH7rAtKkHw1vEFarHjA0agkjyWDN119Gfu0cGAvGH3+nGWqSW80qZt1ABC 31UdwYz59H5zf3h8a1dySCwsrIO+7DfbqFMVbDp+T1cChwAEyDBhRh0kVct+klZ1 ubXA39f9Ywnl9HTIjm48XVLcYvPC/W03vz8j12cYH6WEcHp/iCHD7ABZ1H/W9H2q TW2hPLd2i8791vbNa3iSEUC+gNc8ZuK1vrxLGaOPTWg0159QcG32c8GFtQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDvT64dGx8oADJXFYwI4RpEXyjnjMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvTzlQcmgwYkh5Z0FNbGNWakFqaEdrUmZLT2VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFn8XgAwQF oQiAMA0GCSqGSIb3DQEBCwUAA4IBAQChwNSsTyGsaEC8jE0pSIYZ9rHomN6EJTeb n47zSRVZnrmPwlRK/ODf1dzgd1tFwmDnb36iQJ1FLii1Bl6Jok/HSSjy7HpSWURB 8lWfRsyJqzyVxI3Vq9P7p7U5bg40bI0JP/hdGjJO2xJI4le59mTKuc1UXzDkl4Aj Z0xAdH6JSdiL74AQhRFDyhvpenlDl6Bu1LLmkYKTv9Yd9QUS+FynffpxbHCCyuR4 HVdl16aK4hZDzAM6fWBg70X1n71BqppJHMac+gTUyIviBw1fwGzN3QWc4CpW9A+x F0XVCyzGsRKpz8DdvU6P1J7t2ewTy+7XAufvdjEc9BsACqHWL17B -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:42 2026 by rpki-client