This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/O5VMYBwUzg_lCUz1vF8gUa1_N14.roa File: O5VMYBwUzg_lCUz1vF8gUa1_N14.roa (raw, json) Hash identifier: OkMLH/MAmpXrPNL5QapYPDyvVrkEb9L9I2BouyFyOPg= Subject key identifier: 3B:95:4C:60:1C:14:CE:0F:E5:09:4C:F5:BC:5F:20:51:AD:7F:37:5E Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c Certificate serial: 019B76EB8BD468736ACDE951C25B8DF99EC1 Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/O5VMYBwUzg_lCUz1vF8gUa1_N14.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51765 IP address blocks: 103.101.88.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8b:d4:68:73:6a:cd:e9:51:c2:5b:8d:f9:9e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b954c601c14ce0fe5094cf5bc5f2051ad7f375e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b0:b4:43:cd:3a:a3:45:88:0b:e7:be:29:71: 7a:03:30:e0:c8:0c:73:09:83:02:70:b1:74:d7:19: 44:40:88:0e:df:44:12:63:f0:cd:ea:9c:4f:23:25: c7:7a:d8:31:17:a4:f7:26:aa:09:7d:3e:42:6e:16: 0f:ed:db:ca:98:68:9d:ea:8c:42:a8:e9:a7:ea:01: d4:c2:f9:5b:53:2a:a6:0b:74:4f:36:24:6f:00:f6: bd:01:e8:88:73:02:31:73:94:28:72:5f:36:d2:53: d3:75:25:84:a4:38:f9:42:d7:45:0a:13:09:2b:4b: 2c:f3:63:be:14:b9:c9:5e:27:06:8e:27:fb:f8:d6: 77:99:a9:c0:6d:3c:6d:d1:8d:fa:a3:75:62:97:ef: bc:b2:86:d2:e8:90:77:70:62:48:74:59:97:86:41: f2:65:c3:f1:bf:9e:be:92:2d:5c:bb:c5:75:a3:32: d5:15:f2:b1:4b:4d:14:bf:05:10:c2:19:e9:48:ff: 5c:aa:b5:7b:92:9f:bd:f5:73:50:34:5a:a6:0d:5f: 3a:32:77:4c:ff:36:c5:79:8b:a1:84:80:9a:bf:cf: 80:fe:dd:04:22:bf:07:0f:72:60:67:50:9e:61:e7: 4f:a6:f2:80:ac:5d:2b:e3:6a:6e:b1:68:f0:6a:b0: 8a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:95:4C:60:1C:14:CE:0F:E5:09:4C:F5:BC:5F:20:51:AD:7F:37:5E X509v3 Authority Key Identifier: keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/O5VMYBwUzg_lCUz1vF8gUa1_N14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.88.0/22 Signature Algorithm: sha256WithRSAEncryption 96:95:d8:2d:14:3b:7d:e5:58:02:87:af:a0:60:86:9c:f3:1b: f4:ba:94:0d:14:2d:fa:41:9c:1d:79:f7:61:e9:33:19:97:d3: 61:42:f6:49:e7:cc:74:d2:67:8f:62:4a:f7:0a:44:2c:fb:8f: 7b:ae:c8:4f:85:7e:d8:3e:24:d9:3c:42:37:30:09:26:ed:c7: 53:76:3f:8d:ff:08:dd:76:4a:7c:37:a8:ab:bb:7e:bf:01:7f: aa:84:9c:98:eb:35:86:f2:8b:38:7c:49:ab:ca:20:15:f7:f2: dc:3c:39:95:d5:3e:87:39:92:22:45:30:89:1e:29:54:b5:fc: 8a:a1:5d:c7:0a:1c:d2:32:a2:57:e6:61:3a:aa:12:fa:79:9d: 69:5b:3d:6b:b8:75:2b:01:20:2d:78:e4:d2:5f:d8:d0:06:6c: 18:7a:ea:4d:a3:e2:0e:8e:91:88:af:36:c5:dd:28:66:65:e2: a7:45:4f:18:06:1e:e8:73:7e:01:ee:72:2f:8f:73:3d:40:0b: cd:11:95:99:c6:1a:75:7f:75:2c:81:10:be:24:1e:56:7c:29: 92:d3:33:36:a3:e9:68:6c:05:3c:e0:5e:5d:ee:a4:b7:25:e0: d9:a3:86:92:ef:87:27:45:3d:31:9e:63:56:15:3e:26:45:46: 49:d5:28:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264vUaHNqzelRwluN+Z7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDNhMmNhZjI5ODAxOWZiZDY2ODYyMTUxNmM4YzZlMWQx MGU4M2MwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjk1NGM2MDFjMTRjZTBmZTUwOTRjZjViYzVmMjA1MWFkN2YzNzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7C0Q806o0WIC+e+KXF6AzDgyAxz CYMCcLF01xlEQIgO30QSY/DN6pxPIyXHetgxF6T3JqoJfT5CbhYP7dvKmGid6oxC qOmn6gHUwvlbUyqmC3RPNiRvAPa9AeiIcwIxc5Qocl820lPTdSWEpDj5QtdFChMJ K0ss82O+FLnJXicGjif7+NZ3manAbTxt0Y36o3Vil++8sobS6JB3cGJIdFmXhkHy ZcPxv56+ki1cu8V1ozLVFfKxS00UvwUQwhnpSP9cqrV7kp+99XNQNFqmDV86MndM /zbFeYuhhICav8+A/t0EIr8HD3JgZ1CeYedPpvKArF0r42pusWjwarCKtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDuVTGAcFM4P5QlM9bxfIFGtfzdeMB8GA1UdIwQY MBaAFGwDosrymAGfvWaGIVFsjG4dEOg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDkt ZmMzN2ZiMGNkNDNiLzEvTzVWTVlCd1V6Z19sQ1V6MXZGOGdVYTFfTjE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDktZmMzN2ZiMGNkNDNi LzEvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2VYMA0G CSqGSIb3DQEBCwUAA4IBAQCWldgtFDt95VgCh6+gYIac8xv0upQNFC36QZwdefdh 6TMZl9NhQvZJ58x00mePYkr3CkQs+497rshPhX7YPiTZPEI3MAkm7cdTdj+N/wjd dkp8N6iru36/AX+qhJyY6zWG8os4fEmryiAV9/LcPDmV1T6HOZIiRTCJHilUtfyK oV3HChzSMqJX5mE6qhL6eZ1pWz1ruHUrASAteOTSX9jQBmwYeupNo+IOjpGIrzbF 3ShmZeKnRU8YBh7oc34B7nIvj3M9QAvNEZWZxhp1f3UsgRC+JB5WfCmS0zM2o+lo bAU84F5d7qS3JeDZo4aS74cnRT0xnmNWFT4mRUZJ1SjA -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:25 2026 by rpki-client