This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/olOPnaLLnIT6RL2jFeXy_mY0R1U.roa File: olOPnaLLnIT6RL2jFeXy_mY0R1U.roa (raw, json) Hash identifier: WWXON9JXIV3ioE2DMW0bmhdUFZ19nV5gUDCVfyMR3to= Subject key identifier: A2:53:8F:9D:A2:CB:9C:84:FA:44:BD:A3:15:E5:F2:FE:66:34:47:55 Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138 Certificate serial: 019B77590C3DF583B593428AD6469137C18F Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/olOPnaLLnIT6RL2jFeXy_mY0R1U.roa Signing time: Thu 01 Jan 2026 02:18:03 +0000 ROA not before: Thu 01 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209919 IP address blocks: 31.40.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0c:3d:f5:83:b5:93:42:8a:d6:46:91:37:c1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138 Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2538f9da2cb9c84fa44bda315e5f2fe66344755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:28:05:89:2a:74:d0:f5:30:f2:08:1f:bd: 30:25:0d:b2:30:ab:3f:97:22:bb:13:2b:a5:11:4c: e0:78:55:5c:b6:b8:05:6a:36:a3:db:b4:8b:fc:8e: 83:e7:48:17:9d:ad:17:55:e1:b7:65:42:b1:16:79: 52:32:f7:36:61:73:d5:d9:0f:8c:56:8b:9d:c6:66: 34:2b:aa:65:42:bf:ef:b1:bb:c1:55:a1:11:29:d9: b7:b7:5b:64:42:65:9b:cf:8e:73:50:45:da:9e:bd: 66:94:2b:e2:5e:62:1b:5d:c7:82:51:38:5b:b3:ce: 5c:b8:b7:40:72:2c:6c:b0:a6:95:48:b8:aa:83:40: 16:28:64:0b:0f:cf:49:ba:5c:87:92:04:04:f4:fa: c4:82:47:dd:96:6d:75:c0:1d:da:14:f3:54:03:fd: c8:a3:58:09:43:f5:98:10:5c:05:16:9a:91:82:90: 6a:1a:05:55:49:20:b8:7a:c0:73:6c:ec:45:f8:b0: 05:5e:25:b9:9b:38:9c:4a:34:ce:a8:19:29:91:f9: ea:41:f3:1e:0d:d0:e4:98:75:5c:50:1e:a7:8b:7f: 5d:de:85:e9:cf:cf:89:2b:ff:0e:bc:8d:fe:68:47: 61:5e:00:57:a2:3c:d5:75:f3:1c:23:54:26:19:a7: 26:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:53:8F:9D:A2:CB:9C:84:FA:44:BD:A3:15:E5:F2:FE:66:34:47:55 X509v3 Authority Key Identifier: keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/olOPnaLLnIT6RL2jFeXy_mY0R1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.244.0/22 Signature Algorithm: sha256WithRSAEncryption b3:88:b2:b7:6f:33:bc:c2:af:5e:68:d1:85:bc:6a:2b:55:fd: 38:ae:7e:91:fc:e4:8c:ed:f2:24:ca:cc:d9:39:65:46:96:5b: 3c:c5:09:64:f8:18:55:78:21:dd:16:47:3b:6d:03:77:ff:f5: 2b:f4:7a:42:84:63:30:89:fb:70:da:f6:7e:fc:88:5d:4e:97: 7b:a5:be:f5:42:c9:bf:d8:4e:45:2d:31:71:01:d4:52:d9:b3: 22:96:a6:e9:30:ba:f8:7c:a4:66:9d:5f:48:1d:1f:19:09:73: 79:d2:02:0c:17:b5:c0:2d:32:1a:99:ce:f8:11:e3:64:bc:8e: e9:b0:bd:e0:be:a4:56:9b:f8:69:2f:40:4d:f7:b4:34:84:5d: 80:14:5d:0f:28:5e:70:d1:25:21:a4:af:b5:b7:10:34:2f:f3: 79:19:5a:46:19:57:58:86:a9:14:f5:f9:33:1d:28:07:4b:8a: f5:14:c2:70:36:99:b4:bb:cd:e1:87:af:e7:b3:aa:73:c2:0b: 29:1e:f3:84:9a:ff:a7:1b:08:90:57:85:4a:58:1e:8c:b5:1b: 61:c3:4b:3d:e4:48:49:5a:95:fb:fa:b4:97:fc:6e:93:ab:b9: cf:bf:b5:bc:4f:42:ba:c5:fa:07:ea:04:ef:bc:0f:f1:28:2c: a6:f3:d0:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQw99YO1k0KK1kaRN8GPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMTAyN2FjZTE3ZjAwNjdmNjk3YzY1MzYxNDg4MTkyZWFm NjQxMzgwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjUzOGY5ZGEyY2I5Yzg0ZmE0NGJkYTMxNWU1ZjJmZTY2MzQ0NzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsigoBYkqdND1MPIIH70wJQ2yMKs/ lyK7EyulEUzgeFVctrgFajaj27SL/I6D50gXna0XVeG3ZUKxFnlSMvc2YXPV2Q+M VoudxmY0K6plQr/vsbvBVaERKdm3t1tkQmWbz45zUEXanr1mlCviXmIbXceCUThb s85cuLdAcixssKaVSLiqg0AWKGQLD89JulyHkgQE9PrEgkfdlm11wB3aFPNUA/3I o1gJQ/WYEFwFFpqRgpBqGgVVSSC4esBzbOxF+LAFXiW5mzicSjTOqBkpkfnqQfMe DdDkmHVcUB6ni39d3oXpz8+JK/8OvI3+aEdhXgBXojzVdfMcI1QmGacmuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKJTj52iy5yE+kS9oxXl8v5mNEdVMB8GA1UdIwQY MBaAFAsQJ6zhfwBn9pfGU2FIgZLq9kE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hBbnJPRl9BR2YybDhaVFlVaUJrdXIyUVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iMzExZDQtZTM1OC00NzIxLWFiOGQt NmU2YTVmMTcyYmUzLzEvb2xPUG5hTExuSVQ2UkwyakZlWHlfbVkwUjFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9iMzExZDQtZTM1OC00NzIxLWFiOGQtNmU2YTVmMTcyYmUz LzEvQ3hBbnJPRl9BR2YybDhaVFlVaUJrdXIyUVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHyj0MA0G CSqGSIb3DQEBCwUAA4IBAQCziLK3bzO8wq9eaNGFvGorVf04rn6R/OSM7fIkyszZ OWVGlls8xQlk+BhVeCHdFkc7bQN3//Ur9HpChGMwiftw2vZ+/IhdTpd7pb71Qsm/ 2E5FLTFxAdRS2bMilqbpMLr4fKRmnV9IHR8ZCXN50gIMF7XALTIamc74EeNkvI7p sL3gvqRWm/hpL0BN97Q0hF2AFF0PKF5w0SUhpK+1txA0L/N5GVpGGVdYhqkU9fkz HSgHS4r1FMJwNpm0u83hh6/ns6pzwgspHvOEmv+nGwiQV4VKWB6MtRthw0s95EhJ WpX7+rSX/G6Tq7nPv7W8T0K6xfoH6gTvvA/xKCym89BT -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:16 2026 by rpki-client