This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/OWOkZZmgGCYknyTPhxnobWYLpHI.roa File: OWOkZZmgGCYknyTPhxnobWYLpHI.roa (raw, json) Hash identifier: bTzqDctbFjp9GWzcDrimAEL7omNgimbSYfc0EwnYgpc= Subject key identifier: 39:63:A4:65:99:A0:18:26:24:9F:24:CF:87:19:E8:6D:66:0B:A4:72 Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa Certificate serial: 019B7EA697726DBE3DD6C8F1A81296E48361 Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/OWOkZZmgGCYknyTPhxnobWYLpHI.roa Signing time: Fri 02 Jan 2026 12:20:05 +0000 ROA not before: Fri 02 Jan 2026 12:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61336 IP address blocks: 91.247.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Feb 2026 03:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:97:72:6d:be:3d:d6:c8:f1:a8:12:96:e4:83:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa Validity Not Before: Jan 2 12:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3963a46599a01826249f24cf8719e86d660ba472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:84:2c:f5:56:6a:1f:c3:bc:3c:22:e1:03: e8:3c:91:90:12:2f:40:2a:93:3d:1a:5b:b7:56:70: 39:54:5a:60:29:e0:c5:90:4c:fe:b1:eb:b5:c3:41: a7:46:31:dd:85:88:1f:a0:8a:ea:fb:b2:cb:c0:12: fa:7f:9f:a4:2a:84:2b:e0:5e:23:47:a2:d8:d7:7d: 62:f0:45:57:82:d6:35:d2:1e:f8:64:ee:d4:4f:fe: c8:ba:f2:69:24:b6:c8:18:38:08:35:43:b6:7c:a7: 0f:5e:d2:08:30:5e:ba:93:bc:24:be:40:66:67:71: 04:0f:6b:3e:fc:cd:91:dc:39:d6:07:b6:d1:92:08: 09:24:95:fc:aa:45:27:00:ed:8b:41:9c:5c:61:13: 25:1f:37:fe:93:56:32:2e:e0:7a:02:a3:72:68:b4: 20:55:9e:1c:ed:26:69:42:93:df:94:1f:e7:ee:7a: 11:8a:07:39:af:c4:89:d5:35:ca:b8:f6:0e:a0:6e: 68:a5:ef:92:de:61:00:4a:67:21:dd:9e:74:fe:92: 4b:eb:84:e7:3e:2e:9b:28:9e:4d:66:fe:d5:77:11: d6:8d:a6:82:ad:25:9d:d7:85:27:06:d6:fd:a0:32: 05:25:24:2f:97:7e:f5:2c:e1:d5:ca:91:f0:13:cb: 0c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:63:A4:65:99:A0:18:26:24:9F:24:CF:87:19:E8:6D:66:0B:A4:72 X509v3 Authority Key Identifier: keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/OWOkZZmgGCYknyTPhxnobWYLpHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.247.38.0/24 Signature Algorithm: sha256WithRSAEncryption 62:7f:21:cb:9d:fd:6e:52:16:40:cc:51:fa:31:2e:29:52:58: 7a:5d:04:a9:9c:af:c6:a5:1a:32:92:26:dd:62:d2:24:fe:d7: b0:5d:ff:24:b2:78:1a:39:9b:03:54:73:3c:70:9b:e7:96:c9: d0:d4:7c:cb:64:0e:97:c7:9f:8e:b5:cb:26:69:d6:6f:f9:d3: 4a:f4:cb:f1:2f:08:5e:81:95:55:64:fb:e1:9a:24:98:02:ec: 14:7f:49:c4:b6:95:fb:b9:4b:44:5d:d2:5c:3c:aa:4a:94:ea: 01:c8:b0:c1:d1:d6:72:ad:6a:92:89:0d:a5:26:fc:ee:ed:74: 5b:60:d0:bc:ca:97:39:62:e8:6c:87:a9:7b:2e:76:7c:89:fe: b1:4c:4c:75:68:e0:2b:85:13:79:25:cf:e7:e9:eb:64:99:be: 63:23:cc:c1:b2:a2:b4:78:10:6c:75:b0:7b:c6:6d:2b:69:83: 68:fe:de:8f:57:ad:15:54:86:fe:3c:e6:1e:34:16:05:cb:92: bc:fc:28:e7:ce:0c:7c:86:99:bd:52:a1:15:9d:53:56:40:4e: ea:16:34:ea:b1:1c:7d:50:b8:02:6c:bc:d1:7a:23:1c:24:e9: ea:5c:96:ff:79:7d:ce:0c:0c:26:69:7d:cb:c0:c3:df:e5:79: 6d:12:a6:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppdybb491sjxqBKW5INhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYTE0MjUyMjU0MTBjOTMyMTFkMDg3NThmY2RhZjBmN2Fh MWNjYWEwHhcNMjYwMTAyMTIyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTYzYTQ2NTk5YTAxODI2MjQ5ZjI0Y2Y4NzE5ZTg2ZDY2MGJhNDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokWELPVWah/DvDwi4QPoPJGQEi9A KpM9Glu3VnA5VFpgKeDFkEz+seu1w0GnRjHdhYgfoIrq+7LLwBL6f5+kKoQr4F4j R6LY131i8EVXgtY10h74ZO7UT/7IuvJpJLbIGDgINUO2fKcPXtIIMF66k7wkvkBm Z3EED2s+/M2R3DnWB7bRkggJJJX8qkUnAO2LQZxcYRMlHzf+k1YyLuB6AqNyaLQg VZ4c7SZpQpPflB/n7noRigc5r8SJ1TXKuPYOoG5ope+S3mEASmch3Z50/pJL64Tn Pi6bKJ5NZv7VdxHWjaaCrSWd14UnBtb9oDIFJSQvl371LOHVypHwE8sMlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDljpGWZoBgmJJ8kz4cZ6G1mC6RyMB8GA1UdIwQY MBaAFJ6hQlIlQQyTIR0IdY/Nrw96ocyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMt ZGMwOTY2NjY5NjA5LzEvT1dPa1pabWdHQ1lrbnlUUGh4bm9iV1lMcEhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMtZGMwOTY2NjY5NjA5 LzEvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/cmMA0G CSqGSIb3DQEBCwUAA4IBAQBifyHLnf1uUhZAzFH6MS4pUlh6XQSpnK/GpRoykibd YtIk/tewXf8ksngaOZsDVHM8cJvnlsnQ1HzLZA6Xx5+OtcsmadZv+dNK9MvxLwhe gZVVZPvhmiSYAuwUf0nEtpX7uUtEXdJcPKpKlOoByLDB0dZyrWqSiQ2lJvzu7XRb YNC8ypc5Yuhsh6l7LnZ8if6xTEx1aOArhRN5Jc/n6etkmb5jI8zBsqK0eBBsdbB7 xm0raYNo/t6PV60VVIb+POYeNBYFy5K8/Cjnzgx8hpm9UqEVnVNWQE7qFjTqsRx9 ULgCbLzReiMcJOnqXJb/eX3ODAwmaX3LwMPf5XltEqb/ -----END CERTIFICATE-----Generated at Sun Feb 8 08:10:19 2026 by rpki-client