This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa File: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (raw, json) Hash identifier: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s= Subject key identifier: 38:B0:89:F4:C6:AB:9E:66:B1:0E:5C:AA:15:B2:05:19:80:72:E8:03 Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8 Certificate serial: 019B76EB14E679EDF350CD4E231ACD494F08 Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa Signing time: Thu 01 Jan 2026 00:17:56 +0000 ROA not before: Thu 01 Jan 2026 00:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 217.64.208.0/24 maxlen: 24 217.64.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:14:e6:79:ed:f3:50:cd:4e:23:1a:cd:49:4f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8 Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38b089f4c6ab9e66b10e5caa15b205198072e803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:67:48:78:38:4f:b9:dd:27:9e:d7:76:0c: 06:79:2e:3d:a4:64:d4:8d:49:be:91:a5:86:81:7e: 12:20:bb:fc:96:d2:8a:72:32:39:98:4d:28:d8:be: 0a:9a:b0:50:e1:91:0e:d7:28:45:3d:45:26:2d:0b: 51:b4:80:61:66:14:b6:c9:6d:55:02:79:b3:0f:7f: 87:15:f6:d9:24:69:d4:52:27:0a:fd:fb:d4:55:4e: f1:30:3c:10:cd:81:cd:76:1c:c9:ff:53:13:c9:42: be:ae:e6:d6:73:43:91:af:67:3f:98:4f:a3:9c:3c: 9e:5b:18:05:8e:68:72:8b:12:4f:35:0c:47:3c:40: e4:d2:01:4d:a1:88:b2:fd:06:1d:be:9d:7d:99:44: e5:8f:5a:6f:82:05:e0:bd:e7:52:87:a7:9e:77:07: 62:cf:31:91:a6:d8:bb:ca:a1:28:bc:90:85:f6:15: 6f:5a:f8:ad:6c:a2:b3:2a:b4:b7:5c:e9:c3:18:c5: 6f:cb:07:69:d9:ed:0a:9a:8c:7c:d0:14:94:ae:fa: a8:f0:b2:8e:90:39:90:30:cc:de:8f:b8:9a:ee:2c: b5:bf:01:72:f2:ee:42:b9:8b:81:be:11:13:1c:0a: e2:49:ba:58:8a:2a:44:c9:81:ff:9f:5e:11:b2:f1: 9a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B0:89:F4:C6:AB:9E:66:B1:0E:5C:AA:15:B2:05:19:80:72:E8:03 X509v3 Authority Key Identifier: keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.64.208.0/23 Signature Algorithm: sha256WithRSAEncryption 03:ee:02:16:cc:35:4c:ba:e2:25:58:92:cb:fa:d8:d4:78:24: 89:6b:a5:1e:a9:94:10:ac:62:de:37:9f:42:91:d1:39:63:8c: f0:a1:26:b9:d3:ff:e1:4d:85:fa:93:16:e5:16:00:29:b1:05: 89:09:76:3f:31:f6:b1:b4:2a:4e:1a:3d:c9:93:fc:a5:2a:5e: 53:6c:33:e1:6a:9b:79:e1:a4:a7:4d:03:47:99:45:47:ea:6b: 39:95:64:f9:c2:f4:06:cf:ed:b1:ac:29:56:39:d7:f8:b0:f3: f2:1b:9a:8e:ec:b7:c1:a1:ab:19:5f:ec:b7:54:46:98:75:02: 78:40:5c:df:7d:48:bb:b3:19:14:3f:7a:20:05:21:c2:9c:81: 16:9b:89:fb:1e:0e:1e:81:b3:b3:88:3e:0a:f2:a6:06:be:5b: 8b:09:1b:e6:5d:80:2f:38:c8:43:8f:38:2e:fa:54:bb:63:6e: cf:c2:32:69:a8:3c:8a:43:38:f3:63:c3:34:21:1c:31:c1:18: 0d:3b:e7:57:92:c9:75:7c:a8:2b:a7:ed:ce:fc:ed:24:1c:5b: 66:01:db:5c:14:5f:3b:84:f4:4f:9b:ec:49:56:b1:52:70:65: b2:f7:17:6f:fb:0e:18:f2:a9:8c:9f:f1:40:ab:29:51:97:03: a7:76:55:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xTmee3zUM1OIxrNSU8IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMDdjNmI1NmVmMWYyMzliMDI4ZWY0MjM3NWEyYTE3NjVi YzA4YjgwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGIwODlmNGM2YWI5ZTY2YjEwZTVjYWExNWIyMDUxOTgwNzJlODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOZnSHg4T7ndJ57XdgwGeS49pGTU jUm+kaWGgX4SILv8ltKKcjI5mE0o2L4KmrBQ4ZEO1yhFPUUmLQtRtIBhZhS2yW1V AnmzD3+HFfbZJGnUUicK/fvUVU7xMDwQzYHNdhzJ/1MTyUK+rubWc0ORr2c/mE+j nDyeWxgFjmhyixJPNQxHPEDk0gFNoYiy/QYdvp19mUTlj1pvggXgvedSh6eedwdi zzGRpti7yqEovJCF9hVvWvitbKKzKrS3XOnDGMVvywdp2e0Kmox80BSUrvqo8LKO kDmQMMzej7ia7iy1vwFy8u5CuYuBvhETHAriSbpYiipEyYH/n14RsvGa6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDiwifTGq55msQ5cqhWyBRmAcugDMB8GA1UdIwQY MBaAFPwHxrVu8fI5sCjvQjdaKhdlvAi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQt Yzg3MDBhMTQ3NjFiLzEvT0xDSjlNYXJubWF4RGx5cUZiSUZHWUJ5NkFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQtYzg3MDBhMTQ3NjFi LzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2UDQMA0G CSqGSIb3DQEBCwUAA4IBAQAD7gIWzDVMuuIlWJLL+tjUeCSJa6UeqZQQrGLeN59C kdE5Y4zwoSa50//hTYX6kxblFgApsQWJCXY/MfaxtCpOGj3Jk/ylKl5TbDPhapt5 4aSnTQNHmUVH6ms5lWT5wvQGz+2xrClWOdf4sPPyG5qO7LfBoasZX+y3VEaYdQJ4 QFzffUi7sxkUP3ogBSHCnIEWm4n7Hg4egbOziD4K8qYGvluLCRvmXYAvOMhDjzgu +lS7Y27PwjJpqDyKQzjzY8M0IRwxwRgNO+dXksl1fKgrp+3O/O0kHFtmAdtcFF87 hPRPm+xJVrFScGWy9xdv+w4Y8qmMn/FAqylRlwOndlVB -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:06 2026 by rpki-client