This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/O95FYcJt2MJqQBJC_AIOSexxhY0.roa File: O95FYcJt2MJqQBJC_AIOSexxhY0.roa (raw, json) Hash identifier: 0fj+Bm1xvWakTGbe1RmNsauUNwiHSCe1QzuuMJQvQKI= Subject key identifier: 3B:DE:45:61:C2:6D:D8:C2:6A:40:12:42:FC:02:0E:49:EC:71:85:8D Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019B7EA698E4E29362A8AC76B7F68EEAAFF6 Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/O95FYcJt2MJqQBJC_AIOSexxhY0.roa Signing time: Fri 02 Jan 2026 12:20:05 +0000 ROA not before: Fri 02 Jan 2026 12:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 147293 IP address blocks: 46.20.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:98:e4:e2:93:62:a8:ac:76:b7:f6:8e:ea:af:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jan 2 12:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bde4561c26dd8c26a401242fc020e49ec71858d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:12:5d:07:91:17:35:a1:07:21:c3:0e:80:ca: ac:98:71:1b:1c:14:f3:34:59:56:10:11:8c:43:5e: 82:cb:95:c2:fc:c4:f8:be:07:44:d5:34:f1:01:92: 50:36:e1:0e:66:8f:3f:86:3c:b9:ea:95:b7:10:2e: 9b:c0:71:fe:8d:f4:ff:fe:d0:87:ed:b0:db:71:47: db:88:c5:d3:5a:23:65:39:db:05:f4:1c:8f:42:49: 29:d5:0a:07:a0:4e:3a:ee:b1:1e:01:e3:0c:19:de: 1d:35:13:40:bf:bd:6d:0c:96:d3:42:ff:6c:98:f2: e8:76:96:78:52:54:06:4c:97:6c:3a:00:b2:be:11: a1:ed:7f:76:d6:81:27:e5:fe:b1:34:65:b1:39:24: c0:b4:bc:e9:56:20:cb:10:5b:3b:b0:35:8b:2b:83: 38:e2:d6:5c:0b:f5:bf:91:6d:96:95:2c:a4:1d:46: 70:7e:97:8a:2d:7d:92:c6:73:f2:0b:19:d0:11:d1: a4:68:e6:7a:f1:de:d9:d0:9e:d3:9a:da:50:f7:9b: 64:01:11:3c:ea:07:16:fd:33:33:8d:39:48:79:5f: cf:33:a2:36:b3:de:ff:4d:23:94:53:45:6e:5c:f9: 76:26:b3:66:03:2c:0c:30:10:5a:61:06:fb:7f:05: 4c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DE:45:61:C2:6D:D8:C2:6A:40:12:42:FC:02:0E:49:EC:71:85:8D X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/O95FYcJt2MJqQBJC_AIOSexxhY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.20.109.0/24 Signature Algorithm: sha256WithRSAEncryption 59:f4:1a:91:7c:dc:87:3e:5b:54:94:fe:a0:a7:fa:66:f2:fd: 81:dd:2e:5d:f2:22:3e:79:8c:48:22:fc:26:9c:67:58:a3:c0: c7:01:7e:69:da:19:3f:71:0d:f5:b8:eb:04:ec:37:86:5a:7c: 95:34:2f:b8:a4:2b:4e:0d:7b:72:cc:19:c5:be:28:07:ae:24: 90:f7:ee:fa:49:31:bd:2c:5b:78:06:2b:a2:b6:72:a2:62:5e: c1:10:9d:f2:40:78:b8:b3:9b:2d:dc:00:8e:19:63:eb:7d:d9: e5:b1:5c:26:dc:95:0e:19:6f:a8:fb:d8:54:09:99:e0:bb:a5: c4:a0:8a:5f:38:78:79:43:46:5b:58:1c:72:f0:97:6b:35:48: 64:7b:cb:4e:d9:41:b8:b8:bb:45:67:0c:a2:44:ec:47:2d:4f: 22:99:58:a0:66:e2:56:05:14:e8:6d:ce:37:5a:5c:04:52:5a: a7:a2:3f:b9:ff:51:85:6b:b2:aa:b9:1e:18:6a:68:d1:fd:a2: 99:d8:11:9c:34:ae:95:90:ec:bb:f6:3d:f3:b1:6f:f8:56:4d: 1c:ba:d3:d8:cc:cb:5c:8b:2b:f8:a9:63:da:45:7b:28:cd:af: 0a:eb:18:9c:2d:f1:20:5d:32:7c:5c:80:2a:cf:9e:f4:45:ad: a5:f8:1f:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppjk4pNiqKx2t/aO6q/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwMTAyMTIyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmRlNDU2MWMyNmRkOGMyNmE0MDEyNDJmYzAyMGU0OWVjNzE4NThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhJdB5EXNaEHIcMOgMqsmHEbHBTz NFlWEBGMQ16Cy5XC/MT4vgdE1TTxAZJQNuEOZo8/hjy56pW3EC6bwHH+jfT//tCH 7bDbcUfbiMXTWiNlOdsF9ByPQkkp1QoHoE467rEeAeMMGd4dNRNAv71tDJbTQv9s mPLodpZ4UlQGTJdsOgCyvhGh7X921oEn5f6xNGWxOSTAtLzpViDLEFs7sDWLK4M4 4tZcC/W/kW2WlSykHUZwfpeKLX2SxnPyCxnQEdGkaOZ68d7Z0J7TmtpQ95tkARE8 6gcW/TMzjTlIeV/PM6I2s97/TSOUU0VuXPl2JrNmAywMMBBaYQb7fwVM9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDveRWHCbdjCakASQvwCDknscYWNMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvTzk1RlljSnQyTUpxUUJKQ19BSU9TZXh4aFkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhRtMA0G CSqGSIb3DQEBCwUAA4IBAQBZ9BqRfNyHPltUlP6gp/pm8v2B3S5d8iI+eYxIIvwm nGdYo8DHAX5p2hk/cQ31uOsE7DeGWnyVNC+4pCtODXtyzBnFvigHriSQ9+76STG9 LFt4BiuitnKiYl7BEJ3yQHi4s5st3ACOGWPrfdnlsVwm3JUOGW+o+9hUCZngu6XE oIpfOHh5Q0ZbWBxy8JdrNUhke8tO2UG4uLtFZwyiROxHLU8imVigZuJWBRTobc43 WlwEUlqnoj+5/1GFa7KquR4YamjR/aKZ2BGcNK6VkOy79j3zsW/4Vk0cutPYzMtc iyv4qWPaRXsoza8K6xicLfEgXTJ8XIAqz570Ra2l+B+P -----END CERTIFICATE-----Generated at Wed Jan 21 14:12:22 2026 by rpki-client