This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa File: O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa (raw, json) Hash identifier: HTqDYC1nRE3LkJmUy9M4M3I587kOWgHXriuwbMluE8E= Subject key identifier: 3B:B1:6B:A9:A1:B9:56:C4:39:28:53:8A:99:C7:CE:11:CE:4F:E7:B8 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED98798B16668E56EBDA43E2CE8032 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa Signing time: Fri 02 Jan 2026 04:18:24 +0000 ROA not before: Fri 02 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56596 IP address blocks: 147.234.6.0/23 maxlen: 23 147.234.6.0/24 maxlen: 24 147.234.7.0/24 maxlen: 24 147.234.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:98:79:8b:16:66:8e:56:eb:da:43:e2:ce:80:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bb16ba9a1b956c43928538a99c7ce11ce4fe7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:62:40:e9:93:cd:78:e7:19:84:11:1d:59:fe: d3:7a:d9:3f:ce:dd:e2:1c:92:ea:b4:ff:82:54:86: 4a:ae:39:08:10:e9:02:8b:cd:66:12:b2:c1:d4:9a: c0:73:64:b7:09:08:43:b8:28:73:75:ec:9b:b4:bf: 92:f2:c7:99:65:d3:6b:d5:8f:43:12:a6:1f:3d:0a: 4c:1c:c7:f5:a2:60:74:94:b8:18:11:c1:cb:6f:db: 91:17:4e:3e:c1:b9:8f:f2:5e:b8:86:2d:6c:e5:3c: c5:58:75:65:b6:81:2d:ba:81:07:74:4a:05:9a:a4: 14:59:77:92:03:09:93:be:ef:a8:8c:ea:dc:64:18: 8f:83:3d:36:70:5e:f1:3b:66:ee:e8:a5:3d:45:b0: 0d:c3:61:4c:47:fe:6e:ab:82:39:95:fe:dc:1f:ff: 51:c0:6c:32:36:29:51:cd:9b:ae:f6:5b:41:90:cf: 6c:b8:be:da:0c:26:b7:7b:75:58:d0:3d:0f:28:0f: bd:f1:8b:0b:75:8f:d1:0e:91:23:dd:a1:5c:1a:59: ff:bb:e9:a1:bd:bc:3e:90:4e:6e:83:4d:4a:a1:86: 43:48:b8:af:b9:be:9e:72:56:bf:6f:af:b5:39:bb: 42:9d:32:04:1d:bb:3b:0d:58:a1:09:c3:59:ac:b3: 80:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B1:6B:A9:A1:B9:56:C4:39:28:53:8A:99:C7:CE:11:CE:4F:E7:B8 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.6.0/23 147.234.16.0/24 Signature Algorithm: sha256WithRSAEncryption c8:7a:1c:06:cf:46:81:e7:1d:e7:45:b1:eb:40:e1:b7:d2:d3: af:1f:20:73:92:a7:cb:9e:dd:72:c4:c0:14:cd:22:15:bc:3b: 1b:95:9d:79:67:94:d7:c3:ec:f0:cd:8d:41:1a:3d:06:d4:eb: 25:15:e2:64:bb:78:3c:ec:15:78:84:ff:89:6a:e3:6d:1d:9e: 51:74:cf:c7:a3:37:62:79:f4:c1:4a:6a:94:03:20:50:5e:f9: 8b:0b:08:1b:d9:29:35:bb:64:3d:5a:87:94:cd:fd:86:6a:d2: 5e:a7:c6:a0:80:09:86:0d:8b:fc:ca:57:9b:7a:fd:4c:86:97: bf:ba:87:76:3d:f7:e3:d0:85:b7:dc:ee:67:d3:6d:8e:b4:4c: ae:99:49:d5:49:6c:f4:f5:79:69:51:2f:0e:8a:8f:95:e2:64: 8b:38:4f:71:2c:8c:90:9e:6b:45:ed:d4:e7:8d:c6:32:f8:d8: ee:e8:a4:4c:08:9c:2c:9a:60:84:38:60:8e:6c:34:6d:18:8f: 7b:6c:55:29:15:8e:06:68:ce:7a:2f:3a:9f:8a:a5:fb:42:e2: 4d:7c:2e:8e:5e:5e:7e:a8:28:a1:d0:c7:91:43:15:d8:c2:9d: 36:d8:d3:97:6a:b3:26:14:30:da:5d:0d:a9:b2:0b:d4:52:82: 98:2e:34:d1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87Zh5ixZmjlbr2kPizoAyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmIxNmJhOWExYjk1NmM0MzkyODUzOGE5OWM3Y2UxMWNlNGZlN2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WJA6ZPNeOcZhBEdWf7Tetk/zt3i HJLqtP+CVIZKrjkIEOkCi81mErLB1JrAc2S3CQhDuChzdeybtL+S8seZZdNr1Y9D EqYfPQpMHMf1omB0lLgYEcHLb9uRF04+wbmP8l64hi1s5TzFWHVltoEtuoEHdEoF mqQUWXeSAwmTvu+ojOrcZBiPgz02cF7xO2bu6KU9RbANw2FMR/5uq4I5lf7cH/9R wGwyNilRzZuu9ltBkM9suL7aDCa3e3VY0D0PKA+98YsLdY/RDpEj3aFcGln/u+mh vbw+kE5ug01KoYZDSLivub6ecla/b6+1ObtCnTIEHbs7DVihCcNZrLOAPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDuxa6mhuVbEOShTipnHzhHOT+e4MB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvTzdGcnFhRzVWc1E1S0ZPS21jZk9FYzVQNTdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBk+oGAwQA k+oQMA0GCSqGSIb3DQEBCwUAA4IBAQDIehwGz0aB5x3nRbHrQOG30tOvHyBzkqfL nt1yxMAUzSIVvDsblZ15Z5TXw+zwzY1BGj0G1OslFeJku3g87BV4hP+JauNtHZ5R dM/HozdiefTBSmqUAyBQXvmLCwgb2Sk1u2Q9WoeUzf2GatJep8aggAmGDYv8yleb ev1Mhpe/uod2Pffj0IW33O5n022OtEyumUnVSWz09XlpUS8Oio+V4mSLOE9xLIyQ nmtF7dTnjcYy+Nju6KRMCJwsmmCEOGCObDRtGI97bFUpFY4GaM56LzqfiqX7QuJN fC6OXl5+qCih0MeRQxXYwp022NOXarMmFDDaXQ2psgvUUoKYLjTR -----END CERTIFICATE-----Generated at Mon Jan 26 23:44:49 2026 by rpki-client