This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pOOS_4FEedj6wcsgm-7x91vow6k.roa File: pOOS_4FEedj6wcsgm-7x91vow6k.roa (raw, json) Hash identifier: XvbQlisABoNd254Z4/+pJKqDj2Y+qSWqgu/aAjFm/O8= Subject key identifier: A4:E3:92:FF:81:44:79:D8:FA:C1:CB:20:9B:EE:F1:F7:5B:E8:C3:A9 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019BBB993C14714531D85B8930D18EF4DD09 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pOOS_4FEedj6wcsgm-7x91vow6k.roa Signing time: Wed 14 Jan 2026 08:22:20 +0000 ROA not before: Wed 14 Jan 2026 08:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 89.213.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:99:3c:14:71:45:31:d8:5b:89:30:d1:8e:f4:dd:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 14 08:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4e392ff814479d8fac1cb209beef1f75be8c3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:34:0e:dc:8b:32:ed:df:ed:84:a2:00:44:29: bf:e2:cf:bd:69:8b:1f:b3:c6:ea:a1:62:01:50:53: 92:5a:ab:57:1a:9a:76:7d:37:15:29:e4:e8:61:70: a7:55:f7:fe:b3:5a:72:86:60:a1:2e:da:a9:22:32: 38:b1:0e:40:f8:7b:ad:e3:4a:9b:45:f3:bc:5b:6f: d8:c0:16:f3:0f:f6:b1:ca:99:29:13:f6:f1:d4:04: ed:50:54:60:1d:e1:6c:f6:59:76:33:21:64:e2:d9: 4d:71:ca:3b:61:6e:87:d0:1f:b8:d9:33:f6:bd:f6: ab:9f:e1:c7:92:11:8b:d1:6b:34:5e:8c:e0:67:19: b2:c6:b7:f5:71:a3:4a:1a:60:28:82:6c:48:20:4a: 3e:4f:2d:f6:1c:39:35:2c:19:35:c8:8e:e1:15:73: 94:27:4c:9b:59:03:bb:84:97:b8:0a:89:e5:88:c5: 2a:20:22:a1:ae:19:81:f6:b5:49:08:98:bc:d8:b1: b2:c2:23:11:e3:ad:82:46:13:76:af:90:fc:8d:ea: 6e:02:c8:8c:a6:e2:31:8a:dd:e8:b4:c9:5f:b4:79: 56:67:ae:70:9a:ed:e1:21:02:86:15:e1:c1:28:e2: cf:b1:a7:52:02:a1:1c:61:c0:ec:b2:d6:a6:79:57: 62:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E3:92:FF:81:44:79:D8:FA:C1:CB:20:9B:EE:F1:F7:5B:E8:C3:A9 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pOOS_4FEedj6wcsgm-7x91vow6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.213.123.0/24 Signature Algorithm: sha256WithRSAEncryption a3:02:71:71:7f:80:c6:7c:6e:b9:14:a4:5f:4c:4b:f8:35:76: 7a:65:6f:f4:dd:7f:b6:76:60:51:80:de:37:2f:ad:8c:4d:0b: 71:63:a8:d6:31:5b:61:c2:6a:0d:5f:b0:cf:19:f9:82:3f:4b: cd:46:93:ac:19:59:27:88:38:df:93:7f:aa:ee:09:37:a5:9e: 28:22:d3:f5:f9:af:04:09:0d:65:ae:43:7d:29:0d:9c:27:c6: f0:f5:ad:9d:ae:f5:b5:e9:12:a5:73:34:82:9c:5d:6e:e7:90: d4:76:88:54:24:35:77:f1:91:73:11:43:11:ec:53:d3:af:e7: 3b:4c:6d:23:b7:2e:59:d2:5c:e3:55:ac:78:65:55:a7:79:2a: 70:57:67:e0:b9:63:b3:98:28:38:11:28:90:ec:a4:e8:24:b7: 38:dc:99:ed:0e:3a:5b:2f:9f:46:09:22:ba:eb:62:d8:83:3f: 5f:9b:9d:35:c6:b8:5a:97:9f:d0:36:22:3a:ef:91:d0:73:fe: a9:c9:48:c5:d6:f4:ff:0a:ba:72:ca:45:ac:3a:8e:b2:47:60: cd:8e:74:61:e7:07:94:69:53:a2:00:d5:af:93:5c:ad:35:c3: 8c:5f:ad:d1:d8:90:40:14:57:6e:b9:4d:9f:65:cf:d4:5f:22: 0b:2f:44:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu7mTwUcUUx2FuJMNGO9N0JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTE0MDgyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGUzOTJmZjgxNDQ3OWQ4ZmFjMWNiMjA5YmVlZjFmNzViZThjM2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszQO3Isy7d/thKIARCm/4s+9aYsf s8bqoWIBUFOSWqtXGpp2fTcVKeToYXCnVff+s1pyhmChLtqpIjI4sQ5A+Hut40qb RfO8W2/YwBbzD/axypkpE/bx1ATtUFRgHeFs9ll2MyFk4tlNcco7YW6H0B+42TP2 vfarn+HHkhGL0Ws0XozgZxmyxrf1caNKGmAogmxIIEo+Ty32HDk1LBk1yI7hFXOU J0ybWQO7hJe4ConliMUqICKhrhmB9rVJCJi82LGywiMR462CRhN2r5D8jepuAsiM puIxit3otMlftHlWZ65wmu3hIQKGFeHBKOLPsadSAqEcYcDsstameVdiAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKTjkv+BRHnY+sHLIJvu8fdb6MOpMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvcE9PU180RkVlZGo2d2NzZ20tN3g5MXZvdzZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdV7MA0G CSqGSIb3DQEBCwUAA4IBAQCjAnFxf4DGfG65FKRfTEv4NXZ6ZW/03X+2dmBRgN43 L62MTQtxY6jWMVthwmoNX7DPGfmCP0vNRpOsGVkniDjfk3+q7gk3pZ4oItP1+a8E CQ1lrkN9KQ2cJ8bw9a2drvW16RKlczSCnF1u55DUdohUJDV38ZFzEUMR7FPTr+c7 TG0jty5Z0lzjVax4ZVWneSpwV2fguWOzmCg4ESiQ7KToJLc43JntDjpbL59GCSK6 62LYgz9fm501xrhal5/QNiI675HQc/6pyUjF1vT/CrpyykWsOo6yR2DNjnRh5weU aVOiANWvk1ytNcOMX63R2JBAFFduuU2fZc/UXyILL0Sz -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:48 2026 by rpki-client