This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/O-VVNpApTWKQJsrSxk1_B2bT3LY.roa File: O-VVNpApTWKQJsrSxk1_B2bT3LY.roa (raw, json) Hash identifier: u44IzZkJvCTOaXiNLyTWEuWm6D+g4vxNE0F9l4xiV10= Subject key identifier: 3B:E5:55:36:90:29:4D:62:90:26:CA:D2:C6:4D:7F:07:66:D3:DC:B6 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB2CF997F34085393FF71C7733C203 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/O-VVNpApTWKQJsrSxk1_B2bT3LY.roa Signing time: Fri 02 Jan 2026 08:20:25 +0000 ROA not before: Fri 02 Jan 2026 08:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39351 IP address blocks: 151.241.163.0/24 maxlen: 24 151.241.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2c:f9:97:f3:40:85:39:3f:f7:1c:77:33:c2:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3be5553690294d629026cad2c64d7f0766d3dcb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f9:c5:6e:8a:34:9c:68:c8:04:46:af:3e:26: 0e:7d:46:2e:d2:ad:24:17:58:12:e9:ab:a9:9f:5d: 44:41:44:04:35:91:e5:ae:3e:d9:d5:87:f1:bd:11: a0:37:a9:b0:7a:0d:eb:97:13:60:13:24:ce:ee:8e: e7:c4:e9:c1:68:47:05:db:52:eb:00:47:1b:76:6d: 9e:c9:56:86:c7:11:c3:a2:38:96:39:b9:58:b8:13: 5c:b9:2a:44:3c:05:7b:9c:db:f2:88:d9:20:cc:d4: 57:f1:f9:8f:80:54:5e:1a:9f:69:47:80:a0:d7:f9: e3:92:48:7e:e1:be:3e:78:ea:4e:63:39:c1:5f:db: d3:06:a8:6d:43:0e:3c:27:6a:95:30:f6:2f:53:13: c1:ed:20:db:ff:08:e3:37:79:53:cf:5c:31:c2:ab: 8e:c0:54:ea:0a:fd:2c:0b:83:c6:a9:bd:1d:1f:bc: 41:6d:e4:0c:6f:af:ad:41:e2:3c:89:e1:53:b3:0f: f4:10:0a:6f:81:ff:e4:71:65:80:5a:a6:a9:d0:a2: 0b:5e:aa:93:e7:86:eb:80:b0:f7:55:07:cb:bc:52: 22:28:ba:ba:fd:44:78:82:d9:61:82:1f:d7:dd:e9: 96:42:e5:c8:33:23:9b:1a:fd:d2:67:19:a0:6b:e1: 29:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E5:55:36:90:29:4D:62:90:26:CA:D2:C6:4D:7F:07:66:D3:DC:B6 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/O-VVNpApTWKQJsrSxk1_B2bT3LY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.163.0/24 151.241.171.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:a4:e4:a8:9c:7d:dc:d7:ee:08:ef:1c:13:fe:71:b5:76:2a: 30:03:8b:fc:df:0a:87:26:70:3d:de:46:c0:ab:b7:5b:a8:e7: 08:8b:63:25:8c:c8:1b:f0:66:67:18:3f:dd:57:f2:34:38:aa: 8e:68:64:e8:c4:73:dd:38:cd:e4:d6:ef:cc:d8:97:04:7a:05: 04:ce:a7:f7:15:cd:00:1d:01:ad:38:42:7b:3b:fe:fb:f9:ac: 2a:e5:93:f8:b3:1b:4a:9d:f3:8e:7b:99:a4:28:f1:5f:19:63: 71:de:7c:e0:c0:c4:ef:7d:70:e8:d2:22:fe:e8:52:6f:59:15: c1:40:4d:35:e0:b5:79:13:78:8c:34:4b:59:b6:d5:f0:39:59: 08:1a:e1:cd:47:65:a6:2d:99:e4:e3:15:32:94:1e:b6:9e:2d: 99:f5:75:97:99:17:9a:40:17:dd:59:b7:7e:11:f3:13:df:b5: cd:aa:21:a2:1b:1a:43:2f:73:74:64:05:68:fc:3a:fe:d5:2e: 93:72:2e:f1:96:36:0f:21:e4:16:f6:8f:c7:e7:c6:15:35:11: 8a:fc:a2:1d:71:48:03:1d:7e:60:2e:4b:9d:d3:8f:7b:c6:77: 8a:c7:6b:e1:3f:69:73:92:de:2f:6d:e8:71:54:fc:2d:2a:42: bc:08:05:c1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yyz5l/NAhTk/9xx3M8IDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmU1NTUzNjkwMjk0ZDYyOTAyNmNhZDJjNjRkN2YwNzY2ZDNkY2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fnFboo0nGjIBEavPiYOfUYu0q0k F1gS6aupn11EQUQENZHlrj7Z1YfxvRGgN6mweg3rlxNgEyTO7o7nxOnBaEcF21Lr AEcbdm2eyVaGxxHDojiWOblYuBNcuSpEPAV7nNvyiNkgzNRX8fmPgFReGp9pR4Cg 1/njkkh+4b4+eOpOYznBX9vTBqhtQw48J2qVMPYvUxPB7SDb/wjjN3lTz1wxwquO wFTqCv0sC4PGqb0dH7xBbeQMb6+tQeI8ieFTsw/0EApvgf/kcWWAWqap0KILXqqT 54brgLD3VQfLvFIiKLq6/UR4gtlhgh/X3emWQuXIMyObGv3SZxmga+EpFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDvlVTaQKU1ikCbK0sZNfwdm09y2MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvTy1WVk5wQXBUV0tRSnNyU3hrMV9CMmJUM0xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/GjAwQA l/GrMA0GCSqGSIb3DQEBCwUAA4IBAQAPpOSonH3c1+4I7xwT/nG1diowA4v83wqH JnA93kbAq7dbqOcIi2MljMgb8GZnGD/dV/I0OKqOaGToxHPdOM3k1u/M2JcEegUE zqf3Fc0AHQGtOEJ7O/77+awq5ZP4sxtKnfOOe5mkKPFfGWNx3nzgwMTvfXDo0iL+ 6FJvWRXBQE014LV5E3iMNEtZttXwOVkIGuHNR2WmLZnk4xUylB62ni2Z9XWXmRea QBfdWbd+EfMT37XNqiGiGxpDL3N0ZAVo/Dr+1S6Tci7xljYPIeQW9o/H58YVNRGK /KIdcUgDHX5gLkud0497xneKx2vhP2lzkt4vbehxVPwtKkK8CAXB -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:41 2026 by rpki-client