This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/OXVIBBTeqsttBNokK4SYMzRtSj4.roa File: OXVIBBTeqsttBNokK4SYMzRtSj4.roa (raw, json) Hash identifier: bhCGaIkiV0L5HHJ685cAH2+/sJ0rNqt1ZzatpycSJHI= Subject key identifier: 39:75:48:04:14:DE:AA:CB:6D:04:DA:24:2B:84:98:33:34:6D:4A:3E Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F847795CE66429BDB984F7AAF77CC98 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/OXVIBBTeqsttBNokK4SYMzRtSj4.roa Signing time: Fri 02 Jan 2026 16:22:26 +0000 ROA not before: Fri 02 Jan 2026 16:22:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211634 IP address blocks: 85.153.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:77:95:ce:66:42:9b:db:98:4f:7a:af:77:cc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3975480414deaacb6d04da242b849833346d4a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:64:c3:12:ff:af:79:83:22:64:42:45:9a: 11:b9:51:55:55:83:61:b3:4e:41:24:c1:4b:5b:e4: 62:67:da:9f:bb:8d:b0:37:e7:5a:51:4a:de:84:6c: 08:57:ac:54:16:d3:de:69:21:5f:1b:dc:36:2a:68: f8:a0:65:7d:97:03:c2:15:1f:d3:f6:b3:05:cb:20: ec:6b:4e:e7:83:21:26:fc:5a:24:c4:ea:38:71:a6: de:e2:87:14:61:2f:c8:23:ea:bf:60:38:91:ab:59: 95:63:ae:eb:ba:5b:cd:de:d4:b7:85:ac:be:bb:ca: 5d:39:ed:f8:2c:8e:1c:9d:19:1c:c6:6b:2e:dc:56: eb:c5:67:14:19:8e:90:80:e6:a0:9c:ad:06:f5:a5: 82:b1:ae:f7:e7:d3:7b:8d:4a:9f:f2:00:9d:f9:3d: bb:87:af:3e:a1:a9:22:30:eb:b1:4b:06:c9:61:b8: b8:c9:91:fa:26:fd:2a:43:8b:be:24:79:9c:4f:1b: b0:bd:ed:91:f1:54:16:8a:ca:c4:73:82:0e:51:00: 0c:84:a2:ab:71:18:ac:8a:5f:12:95:a2:bb:7f:59: 06:36:f3:f9:4a:53:c9:79:70:ee:b0:00:78:e5:7f: c9:8f:c3:56:75:b7:4c:fa:7f:18:37:9b:ec:16:b3: ae:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:75:48:04:14:DE:AA:CB:6D:04:DA:24:2B:84:98:33:34:6D:4A:3E X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/OXVIBBTeqsttBNokK4SYMzRtSj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.153.159.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:6d:09:00:60:aa:73:7e:70:12:3e:40:48:c0:97:b9:92:17: 16:04:ba:c4:40:70:4e:dc:c3:22:cb:90:5d:0e:f4:81:0f:19: 9e:34:de:72:84:17:b1:9f:d6:29:e1:63:67:4e:95:1d:b4:93: 07:7f:ad:31:9f:c3:64:db:26:ff:80:f4:4d:d6:8d:74:cd:42: 12:8c:36:23:b8:c4:68:96:d6:b2:5c:ea:fb:e7:63:fb:74:be: bf:15:ae:61:56:ce:62:f5:c6:0b:c3:1d:d7:f3:ee:0e:6d:eb: 52:95:bc:b9:25:b3:15:f9:8f:68:35:ee:5c:33:10:e6:0d:89: 7b:93:26:34:0e:3d:3f:59:62:82:e7:23:2d:b8:d1:1f:f7:f8: 3b:11:3e:cb:74:5c:a9:2e:77:28:64:61:49:c1:e6:b8:2b:12: 96:4c:1a:07:e8:9b:56:b5:0e:9a:bc:4e:2d:0a:ff:a6:78:ae: 9a:c5:8f:63:33:31:b1:00:f2:b7:34:b7:a0:c2:93:34:29:47: 1f:a1:c0:8e:84:45:ce:78:5c:c6:e9:27:59:f4:3a:ce:f5:f7: f1:71:bc:c4:24:2d:0e:ef:fb:27:c4:cb:20:a0:a7:10:42:be: d4:85:8b:0a:d8:00:a0:43:bb:d4:8b:05:50:fe:08:9e:5b:d5: e9:9d:d4:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHeVzmZCm9uYT3qvd8yYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTc1NDgwNDE0ZGVhYWNiNmQwNGRhMjQyYjg0OTgzMzM0NmQ0YTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKZkwxL/r3mDImRCRZoRuVFVVYNh s05BJMFLW+RiZ9qfu42wN+daUUrehGwIV6xUFtPeaSFfG9w2Kmj4oGV9lwPCFR/T 9rMFyyDsa07ngyEm/FokxOo4cabe4ocUYS/II+q/YDiRq1mVY67rulvN3tS3hay+ u8pdOe34LI4cnRkcxmsu3FbrxWcUGY6QgOagnK0G9aWCsa7359N7jUqf8gCd+T27 h68+oakiMOuxSwbJYbi4yZH6Jv0qQ4u+JHmcTxuwve2R8VQWisrEc4IOUQAMhKKr cRisil8SlaK7f1kGNvP5SlPJeXDusAB45X/Jj8NWdbdM+n8YN5vsFrOuXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDl1SAQU3qrLbQTaJCuEmDM0bUo+MB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvT1hWSUJCVGVxc3R0Qk5va0s0U1lNelJ0U2o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVZmfMA0G CSqGSIb3DQEBCwUAA4IBAQBfbQkAYKpzfnASPkBIwJe5khcWBLrEQHBO3MMiy5Bd DvSBDxmeNN5yhBexn9Yp4WNnTpUdtJMHf60xn8Nk2yb/gPRN1o10zUISjDYjuMRo ltayXOr752P7dL6/Fa5hVs5i9cYLwx3X8+4ObetSlby5JbMV+Y9oNe5cMxDmDYl7 kyY0Dj0/WWKC5yMtuNEf9/g7ET7LdFypLncoZGFJwea4KxKWTBoH6JtWtQ6avE4t Cv+meK6axY9jMzGxAPK3NLegwpM0KUcfocCOhEXOeFzG6SdZ9DrO9ffxcbzEJC0O 7/snxMsgoKcQQr7UhYsK2ACgQ7vUiwVQ/gieW9XpndTT -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:51 2026 by rpki-client