This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/ObNZb8WcPYnp4vym-GNDnVBbhRc.roa File: ObNZb8WcPYnp4vym-GNDnVBbhRc.roa (raw, json) Hash identifier: cB7fQ1+Il9kNcY3mzLGz4gNtT9PoEWbZCafUMp1Ym5Y= Subject key identifier: 39:B3:59:6F:C5:9C:3D:89:E9:E2:FC:A6:F8:63:43:9D:50:5B:85:17 Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8 Certificate serial: 019B7DCA1B327D47E7C6887B0D25580C741C Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/ObNZb8WcPYnp4vym-GNDnVBbhRc.roa Signing time: Fri 02 Jan 2026 08:19:15 +0000 ROA not before: Fri 02 Jan 2026 08:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35671 IP address blocks: 212.180.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:1b:32:7d:47:e7:c6:88:7b:0d:25:58:0c:74:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8 Validity Not Before: Jan 2 08:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39b3596fc59c3d89e9e2fca6f863439d505b8517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2e:29:dd:eb:83:49:ff:17:4d:23:2d:1b:6b: 75:66:94:de:bf:a4:ca:b3:a9:19:04:8f:b7:ae:75: bf:90:83:8d:08:d5:62:46:2f:87:85:fb:5a:bd:2d: 80:c4:3e:5b:d8:5a:7e:03:c6:31:0e:e7:34:38:93: 9a:25:3d:0b:ec:0f:ff:82:5d:c3:ae:f0:96:82:1a: 4a:67:63:03:c7:54:70:c6:a4:29:a0:2f:cb:ce:bb: ba:f2:b7:58:05:7c:ba:18:b8:87:99:5d:1b:e9:bc: 5e:94:04:81:26:f6:74:cd:21:c2:28:fd:74:0f:3f: a0:91:ca:2c:c3:bb:f2:c9:f0:21:a1:46:f2:7e:80: fd:07:a8:7e:13:9a:b6:60:9f:72:6c:c4:46:ff:25: 91:83:47:a8:ba:87:2f:55:da:50:49:79:8e:ce:70: 45:21:40:55:ba:36:ad:01:55:41:aa:43:80:38:35: 0c:0c:f9:37:14:55:8d:81:47:47:47:68:dc:d1:da: d6:7f:8b:a6:18:99:ad:0d:f6:b2:f8:f7:f3:0b:e1: 9c:56:83:e8:24:ab:61:06:83:01:f6:e4:93:13:9a: 27:2c:bb:a7:09:a9:55:d7:da:78:12:27:a2:6d:f5: 1d:eb:5f:e9:07:1f:3f:0b:77:fd:d1:49:d9:93:e5: ed:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B3:59:6F:C5:9C:3D:89:E9:E2:FC:A6:F8:63:43:9D:50:5B:85:17 X509v3 Authority Key Identifier: keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/ObNZb8WcPYnp4vym-GNDnVBbhRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.180.184.0/24 Signature Algorithm: sha256WithRSAEncryption 01:a6:16:ea:fa:24:1d:f5:16:49:f0:bc:83:b5:12:73:bb:f2: 41:42:f4:b7:b9:d3:ee:10:57:99:f1:36:ae:7d:78:9d:3f:b0: 34:a9:0d:c9:7c:1e:6d:ff:ac:67:8c:a9:2b:1a:09:7d:58:6e: c9:b3:10:b2:ee:0e:b7:37:b5:ad:6b:ca:a0:d1:0c:42:cd:ad: 3d:c7:f5:26:83:1d:37:48:9a:4a:4a:26:db:9d:2b:39:40:58: 75:3d:f4:b5:1d:18:4e:b7:c2:64:97:5c:33:00:df:68:03:bb: 67:95:87:c6:05:60:1a:f8:3d:9a:09:90:29:7b:7c:a9:7d:7e: b8:52:86:52:cc:31:64:9c:41:e2:09:2f:88:f5:73:a4:e6:5c: 9f:e0:d3:b6:b9:15:aa:1b:5f:7c:ef:92:c2:9e:ac:5f:93:b8: 8b:02:ed:c7:43:84:2b:b7:bd:73:a7:b1:a4:46:e0:66:45:fc: 9e:fa:42:ca:c8:1e:73:6b:d0:1e:ae:a8:bb:10:ac:6b:53:76: 16:8e:c2:8b:7d:b4:8d:34:ae:1d:65:9e:a9:5c:90:3f:f0:d2: e5:d9:f6:27:50:5f:55:63:ef:8e:83:88:b8:de:c6:c5:71:04: dd:8f:c9:0e:8c:22:4a:1a:3f:88:96:ba:01:af:44:17:fa:1a: 03:d7:75:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yhsyfUfnxoh7DSVYDHQcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZjI3OTUzYWQ0NjkwYzA2OGZiNDBmOWYzNTYwMDMzNzli YjYzZjgwHhcNMjYwMTAyMDgxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWIzNTk2ZmM1OWMzZDg5ZTllMmZjYTZmODYzNDM5ZDUwNWI4NTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy4p3euDSf8XTSMtG2t1ZpTev6TK s6kZBI+3rnW/kIONCNViRi+HhftavS2AxD5b2Fp+A8YxDuc0OJOaJT0L7A//gl3D rvCWghpKZ2MDx1RwxqQpoC/Lzru68rdYBXy6GLiHmV0b6bxelASBJvZ0zSHCKP10 Dz+gkcosw7vyyfAhoUbyfoD9B6h+E5q2YJ9ybMRG/yWRg0eouocvVdpQSXmOznBF IUBVujatAVVBqkOAODUMDPk3FFWNgUdHR2jc0drWf4umGJmtDfay+PfzC+GcVoPo JKthBoMB9uSTE5onLLunCalV19p4EieibfUd61/pBx8/C3f90UnZk+XtsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDmzWW/FnD2J6eL8pvhjQ51QW4UXMB8GA1UdIwQY MBaAFLLyeVOtRpDAaPtA+fNWADN5u2P4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wODk3M2YtZmI2YS00MWU1LTg3MjAt ZmI0Y2YxMzdjMWU5LzEvT2JOWmI4V2NQWW5wNHZ5bS1HTkRuVkJiaFJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wODk3M2YtZmI2YS00MWU1LTg3MjAtZmI0Y2YxMzdjMWU5 LzEvc3ZKNVU2MUdrTUJvLTBENTgxWUFNM203WV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1LS4MA0G CSqGSIb3DQEBCwUAA4IBAQABphbq+iQd9RZJ8LyDtRJzu/JBQvS3udPuEFeZ8Tau fXidP7A0qQ3JfB5t/6xnjKkrGgl9WG7JsxCy7g63N7Wta8qg0QxCza09x/Umgx03 SJpKSibbnSs5QFh1PfS1HRhOt8Jkl1wzAN9oA7tnlYfGBWAa+D2aCZApe3ypfX64 UoZSzDFknEHiCS+I9XOk5lyf4NO2uRWqG19875LCnqxfk7iLAu3HQ4Qrt71zp7Gk RuBmRfye+kLKyB5za9Aerqi7EKxrU3YWjsKLfbSNNK4dZZ6pXJA/8NLl2fYnUF9V Y++Og4i43sbFcQTdj8kOjCJKGj+IlroBr0QX+hoD13UO -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:49 2026 by rpki-client