This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/OBXirIBylsu5hF24eFc4dWHtfUA.roa File: OBXirIBylsu5hF24eFc4dWHtfUA.roa (raw, json) Hash identifier: V67fHNvga440B5p2S4z73zdpX5hKFuY2GyqyJaC4HdU= Subject key identifier: 38:15:E2:AC:80:72:96:CB:B9:84:5D:B8:78:57:38:75:61:ED:7D:40 Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f Certificate serial: 019B797F34B0153D2EBB45738DFA68296F27 Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/OBXirIBylsu5hF24eFc4dWHtfUA.roa Signing time: Thu 01 Jan 2026 12:18:58 +0000 ROA not before: Thu 01 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43701 IP address blocks: 193.23.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:34:b0:15:3d:2e:bb:45:73:8d:fa:68:29:6f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3815e2ac807296cbb9845db87857387561ed7d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fa:64:52:c6:aa:a8:f6:26:58:f2:32:51:07: 6c:48:e2:97:38:22:d1:80:d3:08:8d:4e:6b:4c:4d: ce:3d:1d:13:0b:20:91:be:bb:e7:8b:ad:25:b7:15: b4:f4:77:4b:36:47:47:ab:d0:80:b4:54:af:23:81: 12:95:c1:f0:5d:be:b7:c4:18:2b:be:fc:1a:1a:aa: bd:bd:f1:77:89:af:6f:04:86:de:44:a2:26:81:7b: 76:7d:ca:95:cf:f7:98:af:fd:f5:b4:54:aa:7b:23: 5e:e5:6f:7d:fe:2f:66:7a:71:d8:aa:a5:d3:af:07: 99:c0:12:9b:5b:37:b3:ab:ee:29:05:7c:a3:f9:96: 14:1d:f6:dd:42:49:b4:45:51:b5:33:df:6c:84:7b: 84:0b:33:35:d4:1e:d5:87:cf:6c:70:2b:25:2d:46: b5:d8:4f:ac:b5:6e:ff:29:2d:52:67:02:08:59:27: 56:77:20:5e:81:c7:08:4e:1d:53:92:38:8e:ed:b8: dc:58:1f:55:14:7d:fb:9a:29:c4:50:40:cf:54:59: 57:51:01:76:1d:2b:87:d3:1d:12:2e:24:65:e9:c0: 74:e9:22:3e:5a:5d:9e:9e:23:e4:ab:7c:c5:90:81: 61:53:1f:f3:e6:66:f5:f3:d1:ea:6f:16:3e:c7:bd: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:15:E2:AC:80:72:96:CB:B9:84:5D:B8:78:57:38:75:61:ED:7D:40 X509v3 Authority Key Identifier: keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/OBXirIBylsu5hF24eFc4dWHtfUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.230.0/24 Signature Algorithm: sha256WithRSAEncryption a8:1d:cd:81:f8:6d:73:11:2e:1d:f4:99:12:a2:63:67:89:2a: 81:dc:1c:fb:87:04:18:23:d4:57:19:86:1a:20:a0:85:f7:1a: f6:b0:42:0c:c2:e1:78:db:b1:8f:e8:aa:08:61:38:59:21:1a: 60:e0:f8:79:d7:89:04:8a:ff:cf:34:09:a0:52:22:ba:60:34: 17:77:54:b1:13:66:bf:5d:ec:be:61:81:fc:60:bd:af:f1:b3: 11:60:c9:fc:ae:99:fb:d4:1b:cf:1b:97:4e:9d:3e:82:c4:79: 45:86:77:77:ff:ed:60:e4:ad:47:a2:c5:81:70:7e:bb:18:86: c1:78:53:64:e1:b7:69:77:11:27:9f:e2:10:04:91:b0:6b:4e: 84:1c:8a:71:86:95:d7:19:e5:3e:36:95:72:ce:e9:8e:bc:7d: 31:fb:6e:6f:da:5d:3c:d9:1d:ca:ab:3c:00:f0:ab:33:4c:00: 4f:3d:80:df:02:06:9c:84:a6:15:d5:b2:f4:31:e6:6d:63:e5: 77:81:af:fe:47:27:4f:b2:97:4c:87:f6:6b:93:25:4e:28:92: 55:ee:78:2e:b0:94:0e:74:ad:83:bb:85:d9:d6:5c:80:28:2b: cc:b0:34:3c:dc:ff:b2:25:dc:16:4f:22:e2:96:b9:96:4f:f9: 36:40:3d:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzSwFT0uu0VzjfpoKW8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTc2YTg2YWUzYTM1MzJlMTA5YzVjZGY3MjlhZDQ3OGMx YzY5N2YwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODE1ZTJhYzgwNzI5NmNiYjk4NDVkYjg3ODU3Mzg3NTYxZWQ3ZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfpkUsaqqPYmWPIyUQdsSOKXOCLR gNMIjU5rTE3OPR0TCyCRvrvni60ltxW09HdLNkdHq9CAtFSvI4ESlcHwXb63xBgr vvwaGqq9vfF3ia9vBIbeRKImgXt2fcqVz/eYr/31tFSqeyNe5W99/i9menHYqqXT rweZwBKbWzezq+4pBXyj+ZYUHfbdQkm0RVG1M99shHuECzM11B7Vh89scCslLUa1 2E+stW7/KS1SZwIIWSdWdyBegccITh1TkjiO7bjcWB9VFH37minEUEDPVFlXUQF2 HSuH0x0SLiRl6cB06SI+Wl2eniPkq3zFkIFhUx/z5mb189HqbxY+x712PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDgV4qyAcpbLuYRduHhXOHVh7X1AMB8GA1UdIwQY MBaAFI1XaoauOjUy4QnFzfcprUeMHGl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUt NjRlNzI5ZWYzMDJkLzEvT0JYaXJJQnlsc3U1aEYyNGVGYzRkV0h0ZlVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUtNjRlNzI5ZWYzMDJk LzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRfmMA0G CSqGSIb3DQEBCwUAA4IBAQCoHc2B+G1zES4d9JkSomNniSqB3Bz7hwQYI9RXGYYa IKCF9xr2sEIMwuF427GP6KoIYThZIRpg4Ph514kEiv/PNAmgUiK6YDQXd1SxE2a/ Xey+YYH8YL2v8bMRYMn8rpn71BvPG5dOnT6CxHlFhnd3/+1g5K1HosWBcH67GIbB eFNk4bdpdxEnn+IQBJGwa06EHIpxhpXXGeU+NpVyzumOvH0x+25v2l082R3KqzwA 8KszTABPPYDfAgachKYV1bL0MeZtY+V3ga/+RydPspdMh/ZrkyVOKJJV7ngusJQO dK2Du4XZ1lyAKCvMsDQ83P+yJdwWTyLilrmWT/k2QD2h -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:11 2026 by rpki-client