This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/O8Wp_UuOgYlD7pHoX9t_r6ipoog.roa File: O8Wp_UuOgYlD7pHoX9t_r6ipoog.roa (raw, json) Hash identifier: oNEYtRBM5pX8GcQ55k5zOeKFvE3NaBRZX+68Mb8wJsY= Subject key identifier: 3B:C5:A9:FD:4B:8E:81:89:43:EE:91:E8:5F:DB:7F:AF:A8:A9:A2:88 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B90816A1E0A936E4FF0C512ABFE932879 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/O8Wp_UuOgYlD7pHoX9t_r6ipoog.roa Signing time: Mon 05 Jan 2026 23:32:38 +0000 ROA not before: Mon 05 Jan 2026 23:32:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213787 IP address blocks: 46.8.201.0/24 maxlen: 24 46.8.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:90:81:6a:1e:0a:93:6e:4f:f0:c5:12:ab:fe:93:28:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 5 23:32:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bc5a9fd4b8e818943ee91e85fdb7fafa8a9a288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b6:17:38:13:ad:03:25:12:b1:7e:5d:c5:de: c2:5d:d9:9b:70:c2:5c:a2:1f:12:8d:ff:d1:bf:02: 24:6b:a3:dd:5f:33:26:c5:0e:f3:4c:94:94:df:39: ff:ec:1b:19:ca:32:a6:9d:9b:aa:0d:9a:0e:cc:de: 6e:09:0e:6b:39:eb:8d:88:59:74:5d:c2:5d:72:f3: ab:f3:cc:f2:a2:6b:12:ff:e5:07:27:79:04:0a:18: 80:ed:6b:bf:14:f9:13:53:0c:6d:37:3b:b0:07:dd: 9b:4f:f1:b6:f2:a9:d6:13:16:5a:1b:33:6a:3c:2c: 51:5d:09:54:1c:10:4d:d2:7c:d4:a3:e6:62:e9:3f: 3a:f1:66:e0:72:53:27:ff:45:9d:43:2e:35:8f:ee: 98:23:db:44:d5:99:db:59:be:d5:08:c2:e2:33:bd: fd:e3:d8:6d:70:59:8c:6b:75:aa:e5:b0:2d:1e:70: f3:1d:b4:59:12:ed:3d:cc:ca:69:88:08:87:b4:0c: 9b:f7:92:5e:07:46:6b:15:0e:6e:bf:20:e2:93:cd: b3:9f:ad:ee:94:8f:f2:9d:6a:b8:a1:52:66:36:50: b8:fa:84:c8:04:8a:ff:25:e6:80:7b:36:99:d0:b6: cf:20:23:c4:ac:1a:45:02:3f:f6:db:19:3e:5e:2f: 32:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C5:A9:FD:4B:8E:81:89:43:EE:91:E8:5F:DB:7F:AF:A8:A9:A2:88 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/O8Wp_UuOgYlD7pHoX9t_r6ipoog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.201.0-46.8.202.255 Signature Algorithm: sha256WithRSAEncryption 12:2d:1e:cd:65:bd:8d:2d:e9:f5:d0:85:fe:9e:89:e3:e5:71: 45:b1:87:62:ea:63:25:bb:c2:2e:67:f8:4e:10:8f:a4:d1:84: be:da:97:af:62:67:b8:9f:6e:97:3d:bc:00:01:61:23:c1:27: e6:3f:75:d3:d6:98:d1:8e:17:fc:b4:ca:71:08:e7:48:f0:ba: 52:9b:8c:c2:c4:fa:1a:4e:64:5c:bd:22:93:f9:0b:fa:ef:15: b2:8f:d1:4f:77:85:06:94:1a:36:a9:48:64:4b:2b:a9:57:50: bc:22:81:d2:d2:48:bf:3b:b8:80:73:20:5e:8a:18:bd:89:45: 3f:8a:be:ca:07:f5:1e:a3:68:ba:a1:ec:ee:79:c8:45:df:3c: cc:09:b8:39:69:48:96:77:d1:aa:70:be:b5:44:10:b0:73:b0: e0:b2:d6:8c:36:69:85:6f:57:f2:b8:ef:1d:fb:84:5a:0a:9d: ad:5f:e3:03:88:d0:9d:e9:21:fa:7d:cf:4e:6c:6f:db:3a:6e: 0b:b0:3a:c4:bf:8a:e2:88:b1:dd:50:5b:8b:cf:19:c5:44:75: 8a:a7:e9:18:59:91:a6:77:87:84:d9:9a:fa:11:c3:fa:30:45: b8:e8:32:3e:1a:1f:0f:b2:b0:18:63:f3:af:13:bc:4f:9c:35: 7b:d5:52:7f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZuQgWoeCpNuT/DFEqv+kyh5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTA1MjMzMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmM1YTlmZDRiOGU4MTg5NDNlZTkxZTg1ZmRiN2ZhZmE4YTlhMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbYXOBOtAyUSsX5dxd7CXdmbcMJc oh8Sjf/RvwIka6PdXzMmxQ7zTJSU3zn/7BsZyjKmnZuqDZoOzN5uCQ5rOeuNiFl0 XcJdcvOr88zyomsS/+UHJ3kEChiA7Wu/FPkTUwxtNzuwB92bT/G28qnWExZaGzNq PCxRXQlUHBBN0nzUo+Zi6T868WbgclMn/0WdQy41j+6YI9tE1ZnbWb7VCMLiM739 49htcFmMa3Wq5bAtHnDzHbRZEu09zMppiAiHtAyb95JeB0ZrFQ5uvyDik82zn63u lI/ynWq4oVJmNlC4+oTIBIr/JeaAezaZ0LbPICPErBpFAj/22xk+Xi8yHQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDvFqf1LjoGJQ+6R6F/bf6+oqaKIMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvTzhXcF9VdU9nWWxEN3BIb1g5dF9yNmlwb29nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAuCMkD BAAuCMowDQYJKoZIhvcNAQELBQADggEBABItHs1lvY0t6fXQhf6eiePlcUWxh2Lq YyW7wi5n+E4Qj6TRhL7al69iZ7ifbpc9vAABYSPBJ+Y/ddPWmNGOF/y0ynEI50jw ulKbjMLE+hpOZFy9IpP5C/rvFbKP0U93hQaUGjapSGRLK6lXULwigdLSSL87uIBz IF6KGL2JRT+KvsoH9R6jaLqh7O55yEXfPMwJuDlpSJZ30apwvrVEELBzsOCy1ow2 aYVvV/K47x37hFoKna1f4wOI0J3pIfp9z05sb9s6bguwOsS/iuKIsd1QW4vPGcVE dYqn6RhZkaZ3h4TZmvoRw/owRbjoMj4aHw+ysBhj868TvE+cNXvVUn8= -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:16 2026 by rpki-client