This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/o2BsiGmifOXsbzzselyesyO7SIE.roa File: o2BsiGmifOXsbzzselyesyO7SIE.roa (raw, json) Hash identifier: iLy0PC6zZs7wpX+RqnK0/QjsSwHsSWbMfjlQkWuiJ5w= Subject key identifier: A3:60:6C:88:69:A2:7C:E5:EC:6F:3C:EC:7A:5C:9E:B3:23:BB:48:81 Certificate issuer: /CN=1517d4f58af84f50ce42f13293ede4aff12d173f Certificate serial: 019B7E38C7DA80444B4FCFC55114B56C9067 Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/o2BsiGmifOXsbzzselyesyO7SIE.roa Signing time: Fri 02 Jan 2026 10:20:08 +0000 ROA not before: Fri 02 Jan 2026 10:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210595 IP address blocks: 37.8.160.0/19 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c7:da:80:44:4b:4f:cf:c5:51:14:b5:6c:90:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f Validity Not Before: Jan 2 10:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3606c8869a27ce5ec6f3cec7a5c9eb323bb4881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:19:fb:66:e2:76:6d:0d:f2:ed:c3:a2:b2:ad: b3:78:b7:87:be:c4:cd:8c:86:32:ef:ed:17:46:ac: 19:6b:a3:f2:37:b7:8b:de:a1:b8:12:10:74:e5:1c: dc:e5:ba:31:41:5a:5b:eb:2a:83:a0:bd:6d:d2:d0: 68:c9:3c:c5:b6:4f:81:b9:3e:b0:7d:d4:be:9e:54: b8:34:69:2d:5e:00:f9:36:45:d5:f8:c5:6d:19:ab: 26:a2:29:b3:1e:0b:9f:09:a2:45:42:1a:51:74:0c: b6:5c:bf:b3:f8:4e:a8:fc:7a:75:a6:0c:a2:a3:a0: ca:22:2b:1b:61:86:86:cc:71:68:41:3e:f8:d2:7b: d8:3f:28:2b:d1:d9:d4:79:ef:15:82:72:5e:40:fc: da:94:52:a9:43:86:58:6d:91:df:f2:4d:ca:0f:5f: d1:2f:f8:b2:05:63:a6:99:66:e9:00:47:a4:16:ec: 0b:eb:fd:05:79:37:5f:6b:fe:93:21:73:b6:25:19: d6:f3:e5:23:99:34:5c:67:c1:d2:8a:85:16:c3:7f: a1:a3:7f:9d:c4:ae:34:5d:0c:35:46:ee:6c:ab:c2: 4c:6d:c4:f2:3d:c7:17:7d:de:79:29:7d:e3:78:eb: 87:75:f9:1e:5e:4b:9e:1d:4b:7c:0e:00:f1:df:bd: 0f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:60:6C:88:69:A2:7C:E5:EC:6F:3C:EC:7A:5C:9E:B3:23:BB:48:81 X509v3 Authority Key Identifier: keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/o2BsiGmifOXsbzzselyesyO7SIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.8.160.0/19 Signature Algorithm: sha256WithRSAEncryption 17:a3:40:69:54:29:cd:f6:0a:ae:99:cd:b0:ce:8f:9f:16:19: 57:bc:9c:08:72:ea:10:2c:3e:e5:17:5b:67:a2:e0:15:33:a3: b5:96:e0:f6:db:49:f7:41:1b:a2:7f:a0:1d:90:c4:39:8a:a0: 0f:64:f7:25:46:de:4d:77:c7:53:a9:24:69:84:56:e8:d0:ca: 2c:3d:a9:6d:fe:a4:0f:9f:8e:74:d2:d3:87:d7:af:cf:f1:1d: 4c:d0:fc:51:c1:f5:d9:c8:49:e3:6c:26:0e:7b:8a:61:06:44: 72:9d:de:2f:49:ad:c1:ce:dc:23:27:c0:25:61:1e:32:55:c7: da:26:d6:34:87:30:1d:12:b6:d4:1e:c3:60:c3:f2:85:7f:be: e6:14:99:3d:af:d5:dd:c6:f0:ce:42:b3:e7:bf:5e:d0:ff:7b: bd:d6:f1:0a:33:ed:43:02:fd:65:97:80:67:2f:d1:a8:f1:9e: 79:4a:ba:bb:0a:d3:e9:09:3a:f2:cb:f9:c9:b0:9b:79:e9:78: de:f8:3a:11:17:b4:83:c3:61:10:61:97:a7:10:88:fe:f0:03: b5:c8:53:db:8a:78:78:d3:bb:11:1d:17:a2:4d:01:fa:7e:dc: 94:63:46:b4:ba:3d:b1:a9:c8:ea:ad:28:4f:fc:e3:f4:8f:1b: 4c:b3:f1:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OMfagERLT8/FURS1bJBnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MTdkNGY1OGFmODRmNTBjZTQyZjEzMjkzZWRlNGFmZjEy ZDE3M2YwHhcNMjYwMTAyMTAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzYwNmM4ODY5YTI3Y2U1ZWM2ZjNjZWM3YTVjOWViMzIzYmI0ODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hn7ZuJ2bQ3y7cOisq2zeLeHvsTN jIYy7+0XRqwZa6PyN7eL3qG4EhB05Rzc5boxQVpb6yqDoL1t0tBoyTzFtk+BuT6w fdS+nlS4NGktXgD5NkXV+MVtGasmoimzHgufCaJFQhpRdAy2XL+z+E6o/Hp1pgyi o6DKIisbYYaGzHFoQT740nvYPygr0dnUee8VgnJeQPzalFKpQ4ZYbZHf8k3KD1/R L/iyBWOmmWbpAEekFuwL6/0FeTdfa/6TIXO2JRnW8+UjmTRcZ8HSioUWw3+ho3+d xK40XQw1Ru5sq8JMbcTyPccXfd55KX3jeOuHdfkeXkueHUt8DgDx370PiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKNgbIhponzl7G887HpcnrMju0iBMB8GA1UdIwQY MBaAFBUX1PWK+E9QzkLxMpPt5K/xLRc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jNGY4MGMtN2I2OS00ZmVjLWFhNTQt ZTVmOThkZGFmYzk4LzEvbzJCc2lHbWlmT1hzYnp6c2VseWVzeU83U0lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9jNGY4MGMtN2I2OS00ZmVjLWFhNTQtZTVmOThkZGFmYzk4 LzEvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFJQigMA0G CSqGSIb3DQEBCwUAA4IBAQAXo0BpVCnN9gqumc2wzo+fFhlXvJwIcuoQLD7lF1tn ouAVM6O1luD220n3QRuif6AdkMQ5iqAPZPclRt5Nd8dTqSRphFbo0MosPalt/qQP n4500tOH16/P8R1M0PxRwfXZyEnjbCYOe4phBkRynd4vSa3BztwjJ8AlYR4yVcfa JtY0hzAdErbUHsNgw/KFf77mFJk9r9XdxvDOQrPnv17Q/3u91vEKM+1DAv1ll4Bn L9Go8Z55Srq7CtPpCTryy/nJsJt56Xje+DoRF7SDw2EQYZenEIj+8AO1yFPbinh4 07sRHReiTQH6ftyUY0a0uj2xqcjqrShP/OP0jxtMs/Ft -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:13 2026 by rpki-client