This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/OsKxIHthzEctvDzDbtRunkmBvV4.roa File: OsKxIHthzEctvDzDbtRunkmBvV4.roa (raw, json) Hash identifier: 7MLZYz7Oi+nYSIhw+8DaTF24x9VW91Jyq+xagsIqEWE= Subject key identifier: 3A:C2:B1:20:7B:61:CC:47:2D:BC:3C:C3:6E:D4:6E:9E:49:81:BD:5E Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC7A35DD30BEFC714B14638F032F8C5 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/OsKxIHthzEctvDzDbtRunkmBvV4.roa Signing time: Thu 01 Jan 2026 18:17:42 +0000 ROA not before: Thu 01 Jan 2026 18:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213681 IP address blocks: 213.217.2.0/24 maxlen: 24 213.217.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a3:5d:d3:0b:ef:c7:14:b1:46:38:f0:32:f8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ac2b1207b61cc472dbc3cc36ed46e9e4981bd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e0:0f:01:fe:1e:92:15:fe:5b:d8:a1:9b:60: 00:b2:50:d2:aa:cb:8e:99:81:4f:06:e6:c6:66:ec: 89:72:18:04:f5:ac:95:cb:27:e4:a9:b4:ff:d5:14: a4:d4:c0:28:a6:3f:bb:f1:2c:0d:5b:cc:0b:95:e0: 98:4a:7d:3b:0b:50:94:92:e6:f7:35:05:af:38:54: 82:14:23:82:2c:20:e5:e3:f0:a3:b8:e5:4f:15:54: 0d:23:c9:79:69:be:c2:b9:9c:1d:75:7f:6c:2a:2b: 77:7b:3e:b7:56:92:eb:12:dc:67:54:aa:49:49:cb: 7a:ad:11:f8:93:18:8d:f0:08:ea:5a:af:a4:cd:ad: 76:6c:1a:4c:90:12:5d:22:cc:12:56:5f:2e:aa:1a: 77:df:83:54:ad:96:6b:14:e6:f2:bd:b4:28:cd:bc: 85:0f:2b:58:3b:a0:cd:dd:bd:d8:a0:03:c0:bb:73: 00:28:22:d1:24:29:f8:5a:a6:66:de:01:e8:21:3f: 90:ed:18:03:ca:4a:1d:2c:54:2e:0d:d3:58:3b:15: ba:a5:31:43:23:0c:ec:5a:7b:35:85:36:2d:05:f3: 3e:f0:83:4f:2d:30:55:ca:90:ca:7f:2e:ff:59:e6: b9:09:c8:02:7f:cf:c9:f5:db:fb:14:f4:6f:03:7d: ae:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C2:B1:20:7B:61:CC:47:2D:BC:3C:C3:6E:D4:6E:9E:49:81:BD:5E X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/OsKxIHthzEctvDzDbtRunkmBvV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.217.2.0/23 Signature Algorithm: sha256WithRSAEncryption 24:f2:8f:9d:88:cc:6f:55:e3:ce:4f:0a:e8:3d:94:71:c0:e9: 02:a7:ad:a4:90:01:eb:0f:e3:4c:c6:06:9b:be:78:88:47:21: 6f:8a:c6:32:a9:1e:5f:c7:88:d3:cf:82:94:45:9c:b9:c6:cb: ff:fb:df:93:f8:d4:ca:57:f5:f8:5e:1e:21:10:4b:54:c1:bf: 26:f4:b4:39:86:61:14:cf:e5:45:cd:cb:8a:6f:ae:03:7b:69: 41:c9:d2:7f:f6:0e:d9:ae:9a:d3:a6:e0:e7:66:17:20:ce:ee: 8f:93:98:ba:dd:6e:f3:df:30:17:05:84:6a:16:83:11:34:c1: 74:ae:5a:90:04:01:a7:8c:b5:1b:5c:ed:aa:44:39:ff:a2:d7: bd:6a:bf:4f:a3:80:62:00:75:2a:8c:49:29:94:a0:1d:79:5b: d7:5e:31:06:6f:e7:b7:1f:8e:ba:c0:99:c4:94:16:f0:49:09: f2:96:d5:c4:01:49:21:f8:98:5c:83:f1:46:8c:ea:6f:05:af: 9b:33:a1:fc:eb:fc:4f:6d:82:1e:63:3d:3f:96:64:fa:05:98: 2d:4b:f9:23:4a:b9:34:8d:e4:81:db:e9:cd:04:ff:5b:06:ac: 25:af:23:08:4a:59:47:6c:d0:6b:4b:c7:a4:a9:90:bc:66:bc: 68:b6:31:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6Nd0wvvxxSxRjjwMvjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWMyYjEyMDdiNjFjYzQ3MmRiYzNjYzM2ZWQ0NmU5ZTQ5ODFiZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OAPAf4ekhX+W9ihm2AAslDSqsuO mYFPBubGZuyJchgE9ayVyyfkqbT/1RSk1MAopj+78SwNW8wLleCYSn07C1CUkub3 NQWvOFSCFCOCLCDl4/CjuOVPFVQNI8l5ab7CuZwddX9sKit3ez63VpLrEtxnVKpJ Sct6rRH4kxiN8AjqWq+kza12bBpMkBJdIswSVl8uqhp334NUrZZrFObyvbQozbyF DytYO6DN3b3YoAPAu3MAKCLRJCn4WqZm3gHoIT+Q7RgDykodLFQuDdNYOxW6pTFD IwzsWns1hTYtBfM+8INPLTBVypDKfy7/Wea5CcgCf8/J9dv7FPRvA32uzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDrCsSB7YcxHLbw8w27Ubp5Jgb1eMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvT3NLeElIdGh6RWN0dkR6RGJ0UnVua21CdlY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1dkCMA0G CSqGSIb3DQEBCwUAA4IBAQAk8o+diMxvVePOTwroPZRxwOkCp62kkAHrD+NMxgab vniIRyFvisYyqR5fx4jTz4KURZy5xsv/+9+T+NTKV/X4Xh4hEEtUwb8m9LQ5hmEU z+VFzcuKb64De2lBydJ/9g7ZrprTpuDnZhcgzu6Pk5i63W7z3zAXBYRqFoMRNMF0 rlqQBAGnjLUbXO2qRDn/ote9ar9Po4BiAHUqjEkplKAdeVvXXjEGb+e3H466wJnE lBbwSQnyltXEAUkh+Jhcg/FGjOpvBa+bM6H86/xPbYIeYz0/lmT6BZgtS/kjSrk0 jeSB2+nNBP9bBqwlryMISllHbNBrS8ekqZC8ZrxotjGo -----END CERTIFICATE-----Generated at Mon Jan 19 20:36:29 2026 by rpki-client