This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/OgtLPNJMhUcc3a3Q9gVgb_uUcTU.roa File: OgtLPNJMhUcc3a3Q9gVgb_uUcTU.roa (raw, json) Hash identifier: W+gl2jZGWcmgxMC+cnSTgyo7gRfrRZB5RZkp77uUONU= Subject key identifier: 3A:0B:4B:3C:D2:4C:85:47:1C:DD:AD:D0:F6:05:60:6F:FB:94:71:35 Certificate issuer: /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65 Certificate serial: 019B7D5C946EDFA271EDAA33717073925F49 Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/OgtLPNJMhUcc3a3Q9gVgb_uUcTU.roa Signing time: Fri 02 Jan 2026 06:19:37 +0000 ROA not before: Fri 02 Jan 2026 06:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25353 IP address blocks: 193.162.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:94:6e:df:a2:71:ed:aa:33:71:70:73:92:5f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65 Validity Not Before: Jan 2 06:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a0b4b3cd24c85471cddadd0f605606ffb947135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:29:61:4b:cf:1e:a4:04:78:a1:14:2a:95:50: 8d:9e:75:f7:b8:8a:15:99:77:c8:de:27:a4:d9:f4: 45:99:18:4d:78:9d:91:62:4c:79:f9:a4:b9:6c:60: de:f4:d0:e1:94:1a:32:6e:c7:8e:00:0d:cd:a8:f4: 6f:35:d9:d1:68:49:24:ee:85:8e:72:4f:cb:39:a6: bf:8c:24:60:7f:96:51:2a:ec:b6:f8:67:de:6c:46: 9e:e1:11:08:c6:e2:7d:37:37:66:3e:8b:3a:de:69: 2a:fb:e5:8e:5a:df:4a:8b:3d:4f:52:ae:a5:32:f4: 9a:8f:43:4b:f5:b8:95:a5:c1:9d:5d:a1:6d:35:c0: e2:03:93:62:0b:1f:fd:d8:d5:c1:52:a6:e1:cd:f2: 4b:63:e2:4e:10:7f:0c:fe:b2:59:0e:b5:99:04:f4: e9:84:83:a8:f5:6f:2a:be:99:04:11:f4:99:eb:64: ad:a5:c7:af:29:47:ee:77:00:8d:a8:95:9d:ba:78: 56:3f:d8:90:b0:1a:15:ca:77:25:97:62:13:0e:9d: 64:6a:aa:70:6e:9e:cd:c5:56:71:c0:2a:70:7a:07: 51:9b:f6:13:d7:a1:0e:da:83:b0:75:e1:01:a3:67: 63:2e:c8:d1:8e:84:e4:5a:83:18:82:89:1d:1a:77: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0B:4B:3C:D2:4C:85:47:1C:DD:AD:D0:F6:05:60:6F:FB:94:71:35 X509v3 Authority Key Identifier: keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/OgtLPNJMhUcc3a3Q9gVgb_uUcTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.162.79.0/24 Signature Algorithm: sha256WithRSAEncryption a3:e6:cd:d4:47:73:3a:6a:09:5d:d3:b3:05:e7:eb:15:61:99: 6f:9b:f4:96:d6:3d:79:9c:fc:0d:fd:d2:13:54:bf:1e:c8:f2: ed:e9:5f:8b:36:83:90:68:95:10:be:39:85:be:64:57:3d:26: f0:9a:7d:e7:76:d6:43:2b:ee:be:7a:23:12:38:38:0b:ed:ac: 3e:2b:e7:73:e0:a3:a3:31:40:91:12:61:a5:97:c7:56:3a:34: a9:7c:b8:73:f6:7a:1a:fb:f6:2d:e9:11:b3:f6:0e:c1:92:f1: 16:ce:c5:6b:76:21:08:27:ed:ae:04:3a:fc:36:d4:37:0f:f3: 34:20:76:4c:c8:9b:d0:64:fd:45:87:a6:17:d3:24:86:26:2e: d0:f5:2f:a2:6e:3a:ca:3a:1b:46:69:01:53:de:a6:be:13:8d: d8:1d:64:03:4c:5a:54:f0:ab:65:4d:a1:b2:cb:02:03:62:9a: d5:70:3e:7c:89:1d:e4:a3:45:ba:0e:89:dc:49:88:56:ed:66: 3c:79:b4:5b:d8:59:35:a0:45:ef:39:a4:9b:4f:80:cf:15:f8: 4f:57:ed:51:d0:93:d7:b5:ae:6a:28:cd:92:4a:00:5f:43:2a: 89:e0:8c:71:d1:40:59:d8:1e:48:ae:40:f7:72:80:f6:39:f1: ca:35:5a:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJRu36Jx7aozcXBzkl9JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYTNjOGNjNjNkMGU3ZTA2OWNhNTIzZjM0ZWZiMzk1M2Vl MjFiNjUwHhcNMjYwMTAyMDYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTBiNGIzY2QyNGM4NTQ3MWNkZGFkZDBmNjA1NjA2ZmZiOTQ3MTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApylhS88epAR4oRQqlVCNnnX3uIoV mXfI3iek2fRFmRhNeJ2RYkx5+aS5bGDe9NDhlBoybseOAA3NqPRvNdnRaEkk7oWO ck/LOaa/jCRgf5ZRKuy2+GfebEae4REIxuJ9NzdmPos63mkq++WOWt9Kiz1PUq6l MvSaj0NL9biVpcGdXaFtNcDiA5NiCx/92NXBUqbhzfJLY+JOEH8M/rJZDrWZBPTp hIOo9W8qvpkEEfSZ62StpcevKUfudwCNqJWdunhWP9iQsBoVyncll2ITDp1kaqpw bp7NxVZxwCpwegdRm/YT16EO2oOwdeEBo2djLsjRjoTkWoMYgokdGnfB8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDoLSzzSTIVHHN2t0PYFYG/7lHE1MB8GA1UdIwQY MBaAFNKjyMxj0OfgacpSPzTvs5U+4htlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHFQSXpHUFE1LUJweWxJX05PLXpsVDdpRzJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kMGExZmUtMGI2NS00ZDUwLWFlMmYt MTI4OTg2OTdhODYyLzEvT2d0TFBOSk1oVWNjM2EzUTlnVmdiX3VVY1RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9kMGExZmUtMGI2NS00ZDUwLWFlMmYtMTI4OTg2OTdhODYy LzEvMHFQSXpHUFE1LUJweWxJX05PLXpsVDdpRzJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaJPMA0G CSqGSIb3DQEBCwUAA4IBAQCj5s3UR3M6agld07MF5+sVYZlvm/SW1j15nPwN/dIT VL8eyPLt6V+LNoOQaJUQvjmFvmRXPSbwmn3ndtZDK+6+eiMSODgL7aw+K+dz4KOj MUCREmGll8dWOjSpfLhz9noa+/Yt6RGz9g7BkvEWzsVrdiEIJ+2uBDr8NtQ3D/M0 IHZMyJvQZP1Fh6YX0ySGJi7Q9S+ibjrKOhtGaQFT3qa+E43YHWQDTFpU8KtlTaGy ywIDYprVcD58iR3ko0W6DoncSYhW7WY8ebRb2Fk1oEXvOaSbT4DPFfhPV+1R0JPX ta5qKM2SSgBfQyqJ4Ixx0UBZ2B5IrkD3coD2OfHKNVrl -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:21 2026 by rpki-client