This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa File: Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa (raw, json) Hash identifier: V1xfi16Y3WhXqWRGet3YcxqXtnKz/3AWs7HoDzA48YM= Subject key identifier: 39:FF:C5:D2:76:71:E2:E5:0C:B3:2B:BF:30:59:6F:F6:FA:98:33:A0 Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06 Certificate serial: 019B79ECDF2414BC5921769542689F8E2BA5 Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa Signing time: Thu 01 Jan 2026 14:18:45 +0000 ROA not before: Thu 01 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 87.198.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:df:24:14:bc:59:21:76:95:42:68:9f:8e:2b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06 Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39ffc5d27671e2e50cb32bbf30596ff6fa9833a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d7:b9:da:d4:da:f2:20:15:05:22:9b:38:0f: 2f:e5:7e:c0:60:d9:7c:2f:0d:a4:05:e5:63:2e:87: 76:7d:8b:0d:ac:b4:c4:e7:19:80:e2:f7:3a:5d:0a: e0:35:ac:40:6d:2b:30:42:3a:ed:06:f9:a3:55:80: d3:e8:03:33:b7:75:0d:09:6c:62:64:58:18:43:77: 82:06:8a:87:c9:b0:a3:c0:b8:58:63:37:71:4e:65: aa:df:5b:78:f7:c5:75:db:f5:17:44:93:97:b7:29: 54:5d:44:36:da:d7:a4:e4:96:c4:8e:b0:1d:a6:06: ad:40:86:98:2a:77:45:40:6d:61:41:8c:04:49:4b: f3:a2:8f:34:41:c1:2f:b7:f3:9a:6e:ce:c6:22:d0: 21:66:1b:87:69:51:36:59:f8:e6:bd:09:63:b0:a6: 65:73:54:60:1a:4d:31:34:ce:78:a7:17:25:3b:ee: e4:ef:b7:02:3d:e1:47:8b:b8:9a:49:2b:99:3d:9f: ed:ae:5e:b8:8b:3a:d3:05:b9:f3:06:05:0e:4c:03: c5:8f:a5:75:82:ab:a7:97:2e:f9:72:83:16:a5:6a: fd:f1:71:54:58:aa:29:dd:ab:20:24:b0:f5:13:5b: ee:b7:0e:ce:6d:bd:47:eb:c4:95:fd:ec:cc:56:6a: 83:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FF:C5:D2:76:71:E2:E5:0C:B3:2B:BF:30:59:6F:F6:FA:98:33:A0 X509v3 Authority Key Identifier: keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.198.212.0/24 Signature Algorithm: sha256WithRSAEncryption 69:2e:7f:14:1c:53:60:9f:d6:64:fd:bb:ae:2b:b9:aa:8a:c5: 20:2b:3d:1a:6f:3c:47:0d:40:30:be:18:c8:bf:7a:92:9d:3d: 67:80:37:df:8b:7d:ef:bc:77:93:24:2f:5b:98:f3:89:ff:6a: 83:91:70:da:03:f2:3c:f9:d1:24:c9:fd:0f:e6:cc:3d:ec:ae: 6f:24:b7:a9:8b:86:b0:d4:17:18:ba:18:c3:5a:62:af:60:ec: 96:9b:59:66:65:a8:3d:5f:e3:78:16:f4:27:b2:ea:f0:cf:01: 2d:78:42:8a:59:9d:dd:70:36:ed:52:2a:76:d5:39:e4:9c:89: ed:4f:99:0e:eb:ab:d7:b7:50:8d:ef:fa:05:34:7b:6b:ea:8b: 3e:b9:1f:d9:44:a0:7b:9f:77:33:3c:f0:c2:0d:41:a1:18:32: cd:b7:7b:db:11:a0:73:3f:d3:33:ea:fd:ac:77:fb:68:cd:42: cb:fd:d6:7a:fb:38:39:f2:56:7f:bb:44:b8:36:84:76:0f:98: a4:d6:aa:34:b2:26:a5:57:33:d6:f9:37:db:24:e2:b6:01:36: b3:99:bd:d0:9d:f2:32:c8:f5:84:c5:0e:66:14:76:83:82:af: 44:4c:99:b3:de:a6:bc:30:e6:0b:0d:3a:7d:e4:ca:8b:3c:94: ae:7d:6b:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57N8kFLxZIXaVQmifjiulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOGJiNjJhNDdiMWEyYWVkYjcwZjMyZjU4Yzk3OWJhMGM3 NzdmMDYwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWZmYzVkMjc2NzFlMmU1MGNiMzJiYmYzMDU5NmZmNmZhOTgzM2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9e52tTa8iAVBSKbOA8v5X7AYNl8 Lw2kBeVjLod2fYsNrLTE5xmA4vc6XQrgNaxAbSswQjrtBvmjVYDT6AMzt3UNCWxi ZFgYQ3eCBoqHybCjwLhYYzdxTmWq31t498V12/UXRJOXtylUXUQ22tek5JbEjrAd pgatQIaYKndFQG1hQYwESUvzoo80QcEvt/Oabs7GItAhZhuHaVE2WfjmvQljsKZl c1RgGk0xNM54pxclO+7k77cCPeFHi7iaSSuZPZ/trl64izrTBbnzBgUOTAPFj6V1 gqunly75coMWpWr98XFUWKop3asgJLD1E1vutw7Obb1H68SV/ezMVmqDjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDn/xdJ2ceLlDLMrvzBZb/b6mDOgMB8GA1UdIwQY MBaAFLOLtipHsaKu23DzL1jJeboMd38GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgt MDYwNWMwODlmYzM4LzEvT2ZfRjBuWng0dVVNc3l1X01GbHY5dnFZTTZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgtMDYwNWMwODlmYzM4 LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV8bUMA0G CSqGSIb3DQEBCwUAA4IBAQBpLn8UHFNgn9Zk/buuK7mqisUgKz0abzxHDUAwvhjI v3qSnT1ngDffi33vvHeTJC9bmPOJ/2qDkXDaA/I8+dEkyf0P5sw97K5vJLepi4aw 1BcYuhjDWmKvYOyWm1lmZag9X+N4FvQnsurwzwEteEKKWZ3dcDbtUip21TnknInt T5kO66vXt1CN7/oFNHtr6os+uR/ZRKB7n3czPPDCDUGhGDLNt3vbEaBzP9Mz6v2s d/tozULL/dZ6+zg58lZ/u0S4NoR2D5ik1qo0sialVzPW+TfbJOK2ATazmb3QnfIy yPWExQ5mFHaDgq9ETJmz3qa8MOYLDTp95MqLPJSufWv7 -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:25 2026 by rpki-client