This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OG1WIRZeAoBwHgaKIc8Nyu0VZiU.roa File: OG1WIRZeAoBwHgaKIc8Nyu0VZiU.roa (raw, json) Hash identifier: v05Hw+rXNGZH15s/coqal1FOainW1JryQYyLoWaQqhg= Subject key identifier: 38:6D:56:21:16:5E:02:80:70:1E:06:8A:21:CF:0D:CA:ED:15:66:25 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AC24EC7136AEB644ABF6EE7E4886F Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OG1WIRZeAoBwHgaKIc8Nyu0VZiU.roa Signing time: Thu 01 Jan 2026 16:18:46 +0000 ROA not before: Thu 01 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210538 IP address blocks: 82.153.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c2:4e:c7:13:6a:eb:64:4a:bf:6e:e7:e4:88:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=386d5621165e0280701e068a21cf0dcaed156625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b5:8b:98:6b:77:b7:83:ba:2d:4e:69:21:f7: d5:ba:e4:cb:64:38:23:bc:ed:bb:42:51:c7:2d:22: 98:c7:ca:d2:ec:e7:43:79:53:c5:76:3b:19:ed:b1: 86:3d:70:9c:ae:45:96:09:25:66:e3:00:e8:c4:da: c2:db:54:9a:29:72:61:79:b5:38:af:95:40:7e:14: 70:f4:e1:55:92:dd:16:2d:d5:f6:f9:93:fc:ad:87: 69:ee:73:e5:7f:f7:f3:18:7f:e7:d3:62:24:18:4f: f2:c2:f2:54:ff:c9:a5:7f:e4:f5:79:51:97:fe:cd: 78:d5:b6:90:17:a3:d9:6a:fa:ab:18:b6:8b:4e:c3: f9:ce:d7:81:27:de:b9:4a:f2:6e:ae:8b:35:7a:c8: 70:f1:99:7e:24:07:25:de:05:c9:75:07:a4:31:56: 6e:d4:2a:43:3c:1f:41:fe:bd:ab:0a:c7:b6:61:af: db:67:6d:35:a9:f4:7f:fd:f9:9a:a5:0a:1b:db:04: 53:b5:dc:a0:b6:2d:b3:c1:ec:05:02:bc:6d:b9:d5: aa:44:c4:50:f1:82:74:7a:98:93:9e:18:7a:71:c9: 7b:92:2c:4e:9d:45:29:c2:ed:a3:5e:e1:4f:02:39: a1:c4:cd:b3:a1:d6:67:dc:94:42:5b:b1:87:9f:9f: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6D:56:21:16:5E:02:80:70:1E:06:8A:21:CF:0D:CA:ED:15:66:25 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OG1WIRZeAoBwHgaKIc8Nyu0VZiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.241.0/24 Signature Algorithm: sha256WithRSAEncryption 45:bf:ee:60:08:0d:69:16:3f:d6:1a:6c:9a:ff:9e:18:d0:b5: 41:af:b9:88:36:dd:ac:ab:28:63:b5:2c:83:9d:74:7d:6f:09: 46:df:d8:fc:a7:b1:7b:bb:ff:4c:56:9b:01:aa:ff:2b:8a:25: c7:e2:21:49:49:c2:b3:71:16:fe:7e:1b:be:51:4d:e4:05:3d: 50:2f:4f:ea:b1:f8:36:d1:f1:f5:82:1f:9b:ba:d3:c8:24:88: eb:85:98:59:9f:2a:fb:c1:6e:66:23:0f:d4:a6:38:d0:de:b8: 25:c9:3c:21:87:fb:c3:cf:b6:51:f4:b2:ee:bc:20:5f:86:f1: 8a:0d:2d:ad:88:0f:f9:b0:89:db:fe:b9:cb:35:54:8b:7e:f3: 3f:d9:80:f9:78:af:53:6b:d6:5d:e4:91:7c:6b:93:9e:9b:33: 33:5b:5e:3f:2f:c4:ae:f3:a7:e2:4e:3b:c9:f5:f4:4c:1f:7b: 46:40:e4:17:3b:45:4b:ed:2b:3c:41:e4:c1:53:ac:64:cb:3d: 85:dd:49:db:23:cf:c1:e3:61:f0:3b:4f:0b:57:8c:ce:4b:5f: c5:88:35:2d:f4:7c:c2:ca:65:25:a7:48:92:6e:d3:2a:07:e5: f3:bd:61:00:6b:aa:fe:98:0d:68:80:40:42:17:1f:ec:22:e3: 13:36:dc:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WsJOxxNq62RKv27n5IhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODZkNTYyMTE2NWUwMjgwNzAxZTA2OGEyMWNmMGRjYWVkMTU2NjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLWLmGt3t4O6LU5pIffVuuTLZDgj vO27QlHHLSKYx8rS7OdDeVPFdjsZ7bGGPXCcrkWWCSVm4wDoxNrC21SaKXJhebU4 r5VAfhRw9OFVkt0WLdX2+ZP8rYdp7nPlf/fzGH/n02IkGE/ywvJU/8mlf+T1eVGX /s141baQF6PZavqrGLaLTsP5zteBJ965SvJuros1eshw8Zl+JAcl3gXJdQekMVZu 1CpDPB9B/r2rCse2Ya/bZ201qfR//fmapQob2wRTtdygti2zwewFArxtudWqRMRQ 8YJ0epiTnhh6ccl7kixOnUUpwu2jXuFPAjmhxM2zodZn3JRCW7GHn5/e7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDhtViEWXgKAcB4GiiHPDcrtFWYlMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvT0cxV0lSWmVBb0J3SGdhS0ljOE55dTBWWmlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpnxMA0G CSqGSIb3DQEBCwUAA4IBAQBFv+5gCA1pFj/WGmya/54Y0LVBr7mINt2sqyhjtSyD nXR9bwlG39j8p7F7u/9MVpsBqv8riiXH4iFJScKzcRb+fhu+UU3kBT1QL0/qsfg2 0fH1gh+butPIJIjrhZhZnyr7wW5mIw/UpjjQ3rglyTwhh/vDz7ZR9LLuvCBfhvGK DS2tiA/5sInb/rnLNVSLfvM/2YD5eK9Ta9Zd5JF8a5OemzMzW14/L8Su86fiTjvJ 9fRMH3tGQOQXO0VL7Ss8QeTBU6xkyz2F3UnbI8/B42HwO08LV4zOS1/FiDUt9HzC ymUlp0iSbtMqB+XzvWEAa6r+mA1ogEBCFx/sIuMTNtyY -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:06 2026 by rpki-client