This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/oB9vecBEFrYggxsxtq3fiITzJ2Y.roa File: oB9vecBEFrYggxsxtq3fiITzJ2Y.roa (raw, json) Hash identifier: dq4CVE4zFGUyDpHFmLkSZ9sIR2d8JjqnFKVgnpPDCIg= Subject key identifier: A0:1F:6F:79:C0:44:16:B6:20:83:1B:31:B6:AD:DF:88:84:F3:27:66 Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1 Certificate serial: 019B7D5BD18585E09755F0BA3DF3333AD0C2 Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/oB9vecBEFrYggxsxtq3fiITzJ2Y.roa Signing time: Fri 02 Jan 2026 06:18:47 +0000 ROA not before: Fri 02 Jan 2026 06:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62167 IP address blocks: 37.202.25.0/24 maxlen: 24 2a00:be40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:d1:85:85:e0:97:55:f0:ba:3d:f3:33:3a:d0:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1 Validity Not Before: Jan 2 06:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a01f6f79c04416b620831b31b6addf8884f32766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:64:b1:9a:5c:f6:75:63:dc:d0:2c:a6:20:e1: e9:d2:cc:cb:f2:8d:94:f2:cd:cf:41:c8:e3:ad:43: d6:15:3a:8c:45:f8:eb:d6:d3:b5:1f:ff:9c:8e:38: 33:14:dd:d0:4d:95:d2:50:e4:b9:4f:de:98:f4:26: a1:51:77:c8:fb:e0:5d:f5:24:db:6b:57:8e:1d:12: 2c:e0:ee:4f:ff:ae:a2:3f:5f:d9:8c:86:29:38:c2: 26:92:9b:f0:56:4f:1c:b8:07:f6:8a:d0:c8:11:9c: bb:60:91:7c:da:cc:c1:1f:d0:49:f5:93:fa:e7:81: fd:46:d7:54:9b:80:2e:9e:45:bc:2f:1d:5f:4f:cb: 4c:50:d9:83:fd:5e:f5:ed:fe:2a:85:b7:f2:ba:cb: e7:9a:c7:f6:20:e1:82:27:fe:24:38:1f:0f:24:35: 7f:cc:3c:1a:33:85:77:3d:c9:a5:0e:5d:9a:45:75: ad:1f:14:30:1c:2f:c6:5e:f7:d7:b9:d2:ba:64:5e: e0:42:b2:ec:44:a0:7d:f3:2f:ce:ae:5c:a3:b0:f7: a6:c5:25:77:95:3a:d1:17:b0:f9:75:91:87:01:a5: 74:44:64:bf:e7:e7:3c:d0:7b:bb:13:db:5a:fc:2e: 39:5a:9a:c7:02:00:7f:30:bf:4b:d7:66:61:ae:05: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1F:6F:79:C0:44:16:B6:20:83:1B:31:B6:AD:DF:88:84:F3:27:66 X509v3 Authority Key Identifier: keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/oB9vecBEFrYggxsxtq3fiITzJ2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.25.0/24 IPv6: 2a00:be40:2::/48 Signature Algorithm: sha256WithRSAEncryption 8a:80:b8:0e:20:9e:e6:04:0f:e9:5d:ad:4c:36:52:4a:61:9d: a8:c9:d8:a0:ab:ce:31:9e:af:11:54:16:85:3b:1e:0d:b4:c2: d4:4d:87:63:a6:cc:f6:b9:b9:ed:13:d6:29:11:d6:2a:59:dc: a2:24:c7:53:bb:b4:6e:cb:9b:15:a2:9a:0c:20:6f:b9:3b:fe: 64:1f:2a:00:dd:4b:4f:de:4f:74:c0:f8:38:fb:24:1e:80:97: 88:fc:ae:32:0f:79:51:e1:35:8a:25:a9:7d:45:7c:83:61:1f: d0:b7:e0:7f:85:ca:28:09:60:3f:8c:e1:81:c3:51:43:c2:9c: 18:8c:b3:22:c6:60:b6:94:38:b4:9f:ce:8b:25:3a:1d:55:a3: 2d:23:0e:8e:f0:55:23:9f:a5:b3:6f:51:7d:c4:5e:a2:7d:31: 9b:5a:0d:8b:bb:c0:1f:67:4b:4c:24:13:be:ce:62:e3:6e:19: 3b:a5:9b:c5:06:e0:e7:32:c9:4f:0a:29:01:fe:91:49:26:49: 40:61:2e:02:8e:22:7f:61:a7:0d:df:25:1f:c6:b6:52:f8:01: fb:17:90:58:6a:90:f7:48:db:70:24:0d:22:b2:62:10:6a:d8: 1e:88:9d:70:58:37:30:02:0b:dd:f8:9a:e5:70:b1:0b:a0:c6: 97:92:1f:da -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9W9GFheCXVfC6PfMzOtDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMWQ1YjlkODhiNTc5ZDBkZGY3YzIxY2IzZDM4N2Q2MWVh NTE2YzEwHhcNMjYwMTAyMDYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDFmNmY3OWMwNDQxNmI2MjA4MzFiMzFiNmFkZGY4ODg0ZjMyNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGSxmlz2dWPc0CymIOHp0szL8o2U 8s3PQcjjrUPWFTqMRfjr1tO1H/+cjjgzFN3QTZXSUOS5T96Y9CahUXfI++Bd9STb a1eOHRIs4O5P/66iP1/ZjIYpOMImkpvwVk8cuAf2itDIEZy7YJF82szBH9BJ9ZP6 54H9RtdUm4AunkW8Lx1fT8tMUNmD/V717f4qhbfyusvnmsf2IOGCJ/4kOB8PJDV/ zDwaM4V3PcmlDl2aRXWtHxQwHC/GXvfXudK6ZF7gQrLsRKB98y/OrlyjsPemxSV3 lTrRF7D5dZGHAaV0RGS/5+c80Hu7E9ta/C45WprHAgB/ML9L12ZhrgVCBQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKAfb3nARBa2IIMbMbat34iE8ydmMB8GA1UdIwQY MBaAFA8dW52ItXnQ3ffCHLPTh9YepRbBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHgxYm5ZaTFlZERkOThJY3M5T0gxaDZsRnNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85MDk5NzUtNGU4Ni00NDc4LWI4MWUt NzJkZjZmZWRkNzQ4LzEvb0I5dmVjQkVGcllnZ3hzeHRxM2ZpSVR6SjJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC85MDk5NzUtNGU4Ni00NDc4LWI4MWUtNzJkZjZmZWRkNzQ4 LzEvRHgxYm5ZaTFlZERkOThJY3M5T0gxaDZsRnNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAJcoZMA8E AgACMAkDBwAqAL5AAAIwDQYJKoZIhvcNAQELBQADggEBAIqAuA4gnuYED+ldrUw2 UkphnajJ2KCrzjGerxFUFoU7Hg20wtRNh2OmzPa5ue0T1ikR1ipZ3KIkx1O7tG7L mxWimgwgb7k7/mQfKgDdS0/eT3TA+Dj7JB6Al4j8rjIPeVHhNYolqX1FfINhH9C3 4H+FyigJYD+M4YHDUUPCnBiMsyLGYLaUOLSfzoslOh1Voy0jDo7wVSOfpbNvUX3E XqJ9MZtaDYu7wB9nS0wkE77OYuNuGTulm8UG4OcyyU8KKQH+kUkmSUBhLgKOIn9h pw3fJR/GtlL4AfsXkFhqkPdI23AkDSKyYhBq2B6InXBYNzACC934muVwsQugxpeS H9o= -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:35 2026 by rpki-client