This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/ow55IcypodraGq5qBa3kayj01Ts.roa File: ow55IcypodraGq5qBa3kayj01Ts.roa (raw, json) Hash identifier: QBzRFkOgbS8ToubyKAp8uRDnvfFLz0Wij1mejxjFju0= Subject key identifier: A3:0E:79:21:CC:A9:A1:DA:DA:1A:AE:6A:05:AD:E4:6B:28:F4:D5:3B Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f Certificate serial: 019B797ED9F16798434AD3282780A5A9E553 Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/ow55IcypodraGq5qBa3kayj01Ts.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50359 IP address blocks: 82.146.15.0/24 maxlen: 24 176.113.92.0/23 maxlen: 23 212.72.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d9:f1:67:98:43:4a:d3:28:27:80:a5:a9:e5:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a30e7921cca9a1dada1aae6a05ade46b28f4d53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:4d:e1:0c:f3:1e:d2:08:16:e9:6e:1a:44: cf:0c:95:0e:b3:cf:39:76:b2:ff:f0:08:93:4e:cb: 99:cb:a8:6f:77:93:d4:fa:57:2f:bd:b3:83:34:70: 41:23:4e:b9:a0:e3:ef:fe:74:45:c3:ff:d0:5e:dd: 24:8b:85:22:1c:3f:be:91:83:5f:bc:88:9a:ca:19: b0:bb:ed:72:84:b7:76:1e:9e:be:be:52:08:1a:c6: 19:ab:57:42:86:4b:af:b0:f6:7b:67:99:17:4d:c6: df:e1:66:98:5e:99:1e:7f:9a:9e:48:9f:ae:f9:c5: 9e:59:98:9a:26:f4:f4:72:22:1b:b0:92:53:a7:4c: 46:b4:1f:5c:54:ae:05:66:f8:73:3b:fa:ac:7c:dc: 92:0c:b5:a8:53:da:3e:12:08:74:ac:a2:44:61:b2: 93:92:2a:c5:49:4c:03:36:f8:81:b5:b3:3c:04:f4: 50:bc:66:48:ca:a3:86:85:4f:7d:ad:f4:95:b1:c8: 48:3a:a8:9a:e2:7a:2f:be:de:0c:2b:14:c0:b4:11: 4f:4d:50:0d:ad:52:bb:1e:c8:0b:20:84:9f:56:b7: a3:ca:c5:b7:fd:f2:f5:d9:30:c4:83:05:31:49:39: 10:14:a8:ee:c6:79:36:03:e4:65:14:02:fa:81:40: 30:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0E:79:21:CC:A9:A1:DA:DA:1A:AE:6A:05:AD:E4:6B:28:F4:D5:3B X509v3 Authority Key Identifier: keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/ow55IcypodraGq5qBa3kayj01Ts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.146.15.0/24 176.113.92.0/23 212.72.206.0/24 Signature Algorithm: sha256WithRSAEncryption 32:82:11:3c:7f:e2:58:bc:cf:e8:7d:e4:fc:0c:b7:ba:2c:70: 5c:50:7a:01:2a:e6:7c:43:99:0c:9f:eb:6d:10:bb:6f:b5:d4: 27:35:82:20:f7:3d:65:0f:f3:26:1a:a5:fe:12:99:c7:a0:06: 48:67:c1:49:9c:ee:74:87:39:fd:71:c2:48:08:20:5e:58:84: 88:b1:cd:34:66:49:aa:47:6b:b8:5e:e7:5a:ee:87:a0:5e:3a: b6:49:40:3d:21:17:69:29:ed:c2:1a:1b:ee:63:67:99:18:bd: 8a:d3:45:d9:39:b8:77:7d:74:38:18:12:60:df:0a:a1:09:e6: cf:ff:fb:24:d2:62:25:0a:b3:5a:97:95:81:29:b9:17:c6:a6: 53:41:ff:13:c8:12:6c:ae:44:48:a4:a5:9e:0c:53:a3:9e:7c: 2d:cb:77:16:92:ef:16:99:df:f4:8e:8d:20:99:dd:da:88:80: 4e:31:e8:67:12:46:3c:98:36:f3:b7:44:77:bb:e9:7f:aa:f0: bc:22:f9:54:33:94:6a:89:4f:6d:8e:4f:7a:a7:b3:df:31:10: 13:48:63:a9:48:7a:b8:ff:9e:86:c8:5e:e2:11:6e:aa:c5:54: 0c:b9:0d:1d:32:72:b3:73:a3:ec:50:37:fb:c9:53:58:8f:ac: 53:1d:fd:75 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ftnxZ5hDStMoJ4ClqeVTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNzhiMmQzZjYyNzAwZmU2N2U1OTNiNWEzM2QxY2Y5MTc4 OTI1MmYwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzBlNzkyMWNjYTlhMWRhZGExYWFlNmEwNWFkZTQ2YjI4ZjRkNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujtN4QzzHtIIFuluGkTPDJUOs885 drL/8AiTTsuZy6hvd5PU+lcvvbODNHBBI065oOPv/nRFw//QXt0ki4UiHD++kYNf vIiayhmwu+1yhLd2Hp6+vlIIGsYZq1dChkuvsPZ7Z5kXTcbf4WaYXpkef5qeSJ+u +cWeWZiaJvT0ciIbsJJTp0xGtB9cVK4FZvhzO/qsfNySDLWoU9o+Egh0rKJEYbKT kirFSUwDNviBtbM8BPRQvGZIyqOGhU99rfSVschIOqia4novvt4MKxTAtBFPTVAN rVK7HsgLIISfVrejysW3/fL12TDEgwUxSTkQFKjuxnk2A+RlFAL6gUAwxwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKMOeSHMqaHa2hquagWt5Gso9NU7MB8GA1UdIwQY MBaAFAt4stP2JwD+Z+WTtaM9HPkXiSUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEt NjA3OGVmZDA3ODVlLzEvb3c1NUljeXBvZHJhR3E1cUJhM2theWowMVRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEtNjA3OGVmZDA3ODVl LzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUpIPAwQB sHFcAwQA1EjOMA0GCSqGSIb3DQEBCwUAA4IBAQAyghE8f+JYvM/ofeT8DLe6LHBc UHoBKuZ8Q5kMn+ttELtvtdQnNYIg9z1lD/MmGqX+EpnHoAZIZ8FJnO50hzn9ccJI CCBeWISIsc00ZkmqR2u4Xuda7oegXjq2SUA9IRdpKe3CGhvuY2eZGL2K00XZObh3 fXQ4GBJg3wqhCebP//sk0mIlCrNal5WBKbkXxqZTQf8TyBJsrkRIpKWeDFOjnnwt y3cWku8Wmd/0jo0gmd3aiIBOMehnEkY8mDbzt0R3u+l/qvC8IvlUM5RqiU9tjk96 p7PfMRATSGOpSHq4/56GyF7iEW6qxVQMuQ0dMnKzc6PsUDf7yVNYj6xTHf11 -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:57 2026 by rpki-client