This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/osmMvq9IuuG_C_HzuqJuNNTQnqQ.roa File: osmMvq9IuuG_C_HzuqJuNNTQnqQ.roa (raw, json) Hash identifier: qGS7iOOn5H88xhfAWsUdTIK7GcPRiyZgmx3E2IC/iQ8= Subject key identifier: A2:C9:8C:BE:AF:48:BA:E1:BF:0B:F1:F3:BA:A2:6E:34:D4:D0:9E:A4 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D51036FBFDF44AE728C3630495778 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/osmMvq9IuuG_C_HzuqJuNNTQnqQ.roa Signing time: Fri 02 Jan 2026 06:20:26 +0000 ROA not before: Fri 02 Jan 2026 06:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200023 IP address blocks: 45.130.196.0/22 maxlen: 24 188.214.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:51:03:6f:bf:df:44:ae:72:8c:36:30:49:57:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2c98cbeaf48bae1bf0bf1f3baa26e34d4d09ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:67:a6:10:d8:5c:e2:e5:26:34:45:36:0b: 14:e4:42:68:6d:37:73:ba:7d:96:a4:74:ce:a5:fb: 1e:4b:fc:cf:8f:cf:d1:d0:59:16:57:52:64:a0:7c: 85:c9:f1:83:fc:f1:d6:74:d2:49:51:a9:68:a1:d9: 46:7a:47:a6:1b:07:d4:00:8e:d2:9a:31:76:6a:a2: f8:2c:22:4e:f0:76:41:3d:bc:14:2e:2d:11:93:7c: ed:86:ae:01:ad:aa:15:1d:e8:92:3e:cc:25:30:d0: 92:39:02:e0:bd:4a:dc:a7:1e:6e:c8:ff:b8:4a:f7: ab:fb:0a:97:ad:e8:ff:07:35:60:6d:17:19:d9:84: 3e:ed:c9:89:00:22:a2:cd:f6:76:38:57:e7:17:d8: 3f:70:71:55:6c:a3:03:96:ea:9e:09:b6:bc:85:07: 10:be:81:30:46:70:d3:c7:ad:dd:3a:de:1c:07:b0: af:a1:a8:2f:f6:25:5d:63:5e:7c:2d:ea:c2:01:6f: 49:ee:a5:03:e5:e8:36:f8:d2:77:c4:ea:8f:21:0c: 64:17:ac:9f:31:41:63:e1:a9:27:dc:bd:3d:92:33: 3d:ef:38:9e:44:cb:24:f8:c1:10:b6:e1:04:57:34: 15:85:85:d4:6d:81:89:6e:69:98:53:df:07:06:d8: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C9:8C:BE:AF:48:BA:E1:BF:0B:F1:F3:BA:A2:6E:34:D4:D0:9E:A4 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/osmMvq9IuuG_C_HzuqJuNNTQnqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.196.0/22 188.214.208.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:9b:0f:32:7a:f7:46:26:ee:b4:78:5a:d5:ee:83:d4:05:5d: 44:67:9c:71:d2:0b:a8:cd:de:a4:f6:6c:19:fc:6d:5f:fe:e3: 7f:33:20:30:0d:ba:f3:95:00:4a:4e:51:b1:37:4b:f2:d6:e5: 48:c3:c6:fe:bf:f0:6d:2d:88:0e:cf:62:d0:68:0b:ef:82:0b: 40:1e:98:65:fa:42:2a:5d:3d:55:7d:05:06:7e:90:6c:fc:99: fd:82:9c:5f:5f:06:19:43:30:64:65:d1:d8:9c:17:8d:ee:b8: 3e:f0:69:e8:67:cd:21:14:aa:ab:fb:d2:4b:74:d2:4a:ec:81: af:6f:28:31:f7:eb:b7:84:16:9a:3c:18:95:3b:dc:ea:97:24: af:91:0b:35:d5:7a:9d:e8:dd:12:b4:92:fd:54:5c:44:25:4f: 99:44:12:5f:17:be:3c:d1:2a:5f:23:cf:60:78:db:70:cd:a5: fd:43:c4:4d:04:07:9e:8e:17:e5:1b:ed:d2:c2:08:90:54:11: fb:83:e5:38:f2:14:92:d0:2b:f7:55:42:3e:3a:63:8a:45:1d: b0:d1:92:43:6b:b4:ca:bf:03:25:5a:48:c3:e9:8e:7e:ea:f6: 2a:cd:3e:52:14:a1:b8:db:65:14:fc:6c:5e:54:88:ec:ec:1e: 8b:be:9d:45 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XVEDb7/fRK5yjDYwSVd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmM5OGNiZWFmNDhiYWUxYmYwYmYxZjNiYWEyNmUzNGQ0ZDA5ZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8ZnphDYXOLlJjRFNgsU5EJobTdz un2WpHTOpfseS/zPj8/R0FkWV1JkoHyFyfGD/PHWdNJJUaloodlGekemGwfUAI7S mjF2aqL4LCJO8HZBPbwULi0Rk3zthq4BraoVHeiSPswlMNCSOQLgvUrcpx5uyP+4 Sver+wqXrej/BzVgbRcZ2YQ+7cmJACKizfZ2OFfnF9g/cHFVbKMDluqeCba8hQcQ voEwRnDTx63dOt4cB7Cvoagv9iVdY158LerCAW9J7qUD5eg2+NJ3xOqPIQxkF6yf MUFj4akn3L09kjM97zieRMsk+MEQtuEEVzQVhYXUbYGJbmmYU98HBtiwxQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKLJjL6vSLrhvwvx87qibjTU0J6kMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvb3NtTXZxOUl1dUdfQ19IenVxSnVOTlRRbnFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYLEAwQB vNbQMA0GCSqGSIb3DQEBCwUAA4IBAQALmw8yevdGJu60eFrV7oPUBV1EZ5xx0guo zd6k9mwZ/G1f/uN/MyAwDbrzlQBKTlGxN0vy1uVIw8b+v/BtLYgOz2LQaAvvggtA Hphl+kIqXT1VfQUGfpBs/Jn9gpxfXwYZQzBkZdHYnBeN7rg+8GnoZ80hFKqr+9JL dNJK7IGvbygx9+u3hBaaPBiVO9zqlySvkQs11Xqd6N0StJL9VFxEJU+ZRBJfF748 0SpfI89geNtwzaX9Q8RNBAeejhflG+3SwgiQVBH7g+U48hSS0Cv3VUI+OmOKRR2w 0ZJDa7TKvwMlWkjD6Y5+6vYqzT5SFKG422UU/GxeVIjs7B6Lvp1F -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:08 2026 by rpki-client