This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/OZvCmcOPlL6qwVyLAhhDJ_Db1ZY.roa File: OZvCmcOPlL6qwVyLAhhDJ_Db1ZY.roa (raw, json) Hash identifier: JuywCKLI+PPdkKSGBeKBQF3KYZjcO8aSfG1zgtriXEI= Subject key identifier: 39:9B:C2:99:C3:8F:94:BE:AA:C1:5C:8B:02:18:43:27:F0:DB:D5:96 Certificate issuer: /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f Certificate serial: 019B7E379469069B0D0E23A13EEF070EBDC1 Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/OZvCmcOPlL6qwVyLAhhDJ_Db1ZY.roa Signing time: Fri 02 Jan 2026 10:18:50 +0000 ROA not before: Fri 02 Jan 2026 10:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 193.141.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:94:69:06:9b:0d:0e:23:a1:3e:ef:07:0e:bd:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f Validity Not Before: Jan 2 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=399bc299c38f94beaac15c8b02184327f0dbd596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:61:de:96:ba:32:38:d6:10:a0:84:5a:08:a8: 05:09:9e:ed:1d:10:b6:34:8b:b3:59:84:57:2b:e7: b3:41:e8:03:80:30:f2:6e:72:63:55:c9:de:c5:8e: ae:84:53:fb:63:31:4e:fd:f0:a4:dd:a6:e3:30:dc: a9:06:2f:da:73:6b:4b:3c:29:61:25:a0:79:99:46: 96:c1:d1:05:df:42:1a:5d:eb:a2:14:f0:b9:7c:89: e8:5a:26:1a:55:09:54:b2:8c:64:80:f7:14:b9:ba: 95:d1:ec:9b:e0:ab:9d:0e:b8:16:a5:49:c3:30:f6: 58:61:33:d7:8d:de:66:c5:23:44:70:43:73:64:a5: 33:08:cf:09:c9:8d:e2:af:77:48:4b:b1:4e:07:f2: 6c:b7:7d:5f:8c:c7:4c:7a:73:5a:07:19:55:f8:94: 02:7a:04:90:1c:34:5c:f5:72:2b:3e:63:45:1b:ee: e5:4f:11:8b:d2:95:37:e2:27:16:a4:e4:09:9a:fc: 5f:33:bb:da:b0:46:c9:57:a0:5c:53:8d:81:b9:d8: 3b:85:35:1c:bf:4e:45:87:a7:00:1a:3c:dd:04:3b: d4:7d:f1:28:c2:66:9b:29:22:15:fa:70:66:96:80: 17:2d:d4:fc:6a:2b:fc:e0:f1:a7:7b:22:6f:72:84: 28:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9B:C2:99:C3:8F:94:BE:AA:C1:5C:8B:02:18:43:27:F0:DB:D5:96 X509v3 Authority Key Identifier: keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/OZvCmcOPlL6qwVyLAhhDJ_Db1ZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.141.139.0/24 Signature Algorithm: sha256WithRSAEncryption 47:45:c8:5f:59:8b:14:6b:a4:26:90:b5:70:ea:7f:b8:92:2f: 50:bf:3e:da:63:49:06:31:f4:e4:8f:fb:2f:66:85:d7:ba:62: 96:20:7d:1f:27:9b:c7:06:f0:09:37:95:4f:50:ca:11:e5:46: a6:46:0d:0d:c2:a6:b9:e4:ec:66:71:67:77:8f:ce:e1:f1:83: 39:fb:49:5b:12:f4:4d:37:05:e3:09:53:c2:78:7f:75:c7:a0: 35:e8:d6:8a:70:c7:44:2a:84:3e:66:06:82:3f:6f:d3:dd:6b: 4b:9b:67:54:60:8a:ce:45:d3:33:44:36:05:0c:a8:a5:4e:c7: 4a:9a:db:71:6d:a6:e7:1b:d2:36:94:79:60:f8:9f:8f:b9:a2: ff:a2:10:b7:ee:91:bd:ee:8d:6e:d1:d4:2e:ee:6e:39:89:0c: a1:cc:fd:b1:09:87:2b:ed:6b:d6:57:f5:36:3f:b1:87:a7:1d: 34:b1:05:50:78:d7:54:6d:33:fa:03:d1:0f:6c:18:d4:96:3b: 15:b9:df:3c:a3:04:52:9a:5f:8b:4c:59:3f:2c:b5:fb:2f:62: 97:39:77:ee:e1:eb:b4:8c:23:e1:64:ec:57:82:77:98:fd:6d: b6:7a:10:b8:4f:ff:a5:09:e8:7f:ad:8e:fa:1a:43:ca:e5:b1: 13:ed:0f:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N5RpBpsNDiOhPu8HDr3BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNmQ5Y2NiMDI3MTU4NDliM2ExZWNiY2QzNGI2ODg3ZjY0 OTk0MGYwHhcNMjYwMTAyMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTliYzI5OWMzOGY5NGJlYWFjMTVjOGIwMjE4NDMyN2YwZGJkNTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWHelroyONYQoIRaCKgFCZ7tHRC2 NIuzWYRXK+ezQegDgDDybnJjVcnexY6uhFP7YzFO/fCk3abjMNypBi/ac2tLPClh JaB5mUaWwdEF30IaXeuiFPC5fInoWiYaVQlUsoxkgPcUubqV0eyb4KudDrgWpUnD MPZYYTPXjd5mxSNEcENzZKUzCM8JyY3ir3dIS7FOB/Jst31fjMdMenNaBxlV+JQC egSQHDRc9XIrPmNFG+7lTxGL0pU34icWpOQJmvxfM7vasEbJV6BcU42Budg7hTUc v05Fh6cAGjzdBDvUffEowmabKSIV+nBmloAXLdT8aiv84PGneyJvcoQohwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDmbwpnDj5S+qsFciwIYQyfw29WWMB8GA1UdIwQY MBaAFB1tnMsCcVhJs6HsvNNLaIf2SZQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wZWY2ZGUtYjNmMS00NDMwLThiNDkt MTE0ZmZjMjBmOWFhLzEvT1p2Q21jT1BsTDZxd1Z5TEFoaERKX0RiMVpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8wZWY2ZGUtYjNmMS00NDMwLThiNDktMTE0ZmZjMjBmOWFh LzEvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY2LMA0G CSqGSIb3DQEBCwUAA4IBAQBHRchfWYsUa6QmkLVw6n+4ki9Qvz7aY0kGMfTkj/sv ZoXXumKWIH0fJ5vHBvAJN5VPUMoR5UamRg0Nwqa55OxmcWd3j87h8YM5+0lbEvRN NwXjCVPCeH91x6A16NaKcMdEKoQ+ZgaCP2/T3WtLm2dUYIrORdMzRDYFDKilTsdK mttxbabnG9I2lHlg+J+PuaL/ohC37pG97o1u0dQu7m45iQyhzP2xCYcr7WvWV/U2 P7GHpx00sQVQeNdUbTP6A9EPbBjUljsVud88owRSml+LTFk/LLX7L2KXOXfu4eu0 jCPhZOxXgneY/W22ehC4T/+lCeh/rY76GkPK5bET7Q+c -----END CERTIFICATE-----Generated at Wed Jan 21 12:20:16 2026 by rpki-client