This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/Oc9HRrXCcjMhVI-oJuxtYW0MPF8.roa File: Oc9HRrXCcjMhVI-oJuxtYW0MPF8.roa (raw, json) Hash identifier: lFaS4PWNt6dClxtVqJKrrjUbZ/RkYzsaigOX31gfWdI= Subject key identifier: 39:CF:47:46:B5:C2:72:33:21:54:8F:A8:26:EC:6D:61:6D:0C:3C:5F Certificate issuer: /CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef Certificate serial: 019B76EAAED720E3200A60125C5F73D1EC4C Authority key identifier: E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/Oc9HRrXCcjMhVI-oJuxtYW0MPF8.roa Signing time: Thu 01 Jan 2026 00:17:30 +0000 ROA not before: Thu 01 Jan 2026 00:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205664 IP address blocks: 151.156.248.0/22 maxlen: 24 151.156.249.0/24 maxlen: 24 151.156.252.0/22 maxlen: 24 151.156.253.0/24 maxlen: 24 151.156.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ae:d7:20:e3:20:0a:60:12:5c:5f:73:d1:ec:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef Validity Not Before: Jan 1 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39cf4746b5c2723321548fa826ec6d616d0c3c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:05:48:3c:09:47:e9:05:64:15:34:26:3c:2e: 11:33:3d:0e:f6:8e:3f:12:b7:8c:41:44:c0:8b:62: e0:dd:98:1b:71:54:32:62:c6:4f:d9:d4:17:9c:e7: ca:70:7a:e4:d6:e8:92:b5:50:22:da:a5:40:b8:d1: c3:57:1f:79:43:e2:28:d8:1c:b5:0c:01:9e:0f:4d: fd:56:13:86:01:52:70:21:55:ab:1d:cb:fa:97:9c: 5b:c5:55:82:00:1a:bb:ff:57:0d:0e:ef:2a:5a:0e: 33:51:bc:db:f5:d9:12:c9:1c:53:a2:8a:6a:ab:01: 24:f4:96:68:bc:d7:72:ae:e5:81:7c:d2:c1:ba:e1: d6:5d:39:07:b6:1b:6e:fd:ce:22:66:a8:34:42:1f: 14:0f:28:7f:01:bd:27:15:3f:dd:dc:1f:70:ff:22: 13:12:74:77:ac:fc:58:4f:e9:03:ba:a7:70:24:f9: a1:57:22:b6:94:8f:25:41:ab:ac:05:31:3e:85:a1: 88:bb:62:ad:8b:c7:1d:37:60:03:77:0f:f6:c9:44: 82:2e:ff:17:ae:15:cb:00:2d:ad:71:3e:3b:4f:30: c9:9e:d6:de:04:57:89:e6:b9:ec:c7:41:3b:a3:c5: bc:ef:25:fb:b0:60:8c:07:87:08:da:56:0f:9a:71: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CF:47:46:B5:C2:72:33:21:54:8F:A8:26:EC:6D:61:6D:0C:3C:5F X509v3 Authority Key Identifier: keyid:E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/Oc9HRrXCcjMhVI-oJuxtYW0MPF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.156.248.0/21 Signature Algorithm: sha256WithRSAEncryption ac:62:22:d5:61:fe:8f:ac:fc:b4:d8:f9:26:01:bc:d1:ac:b8: 71:1c:45:04:c6:41:90:d1:dd:df:f4:9d:40:ec:f3:14:63:f7: a7:70:e9:e8:18:c4:c9:e3:57:51:83:c0:9d:05:70:89:b3:3f: 56:93:f0:ee:04:e1:5e:8f:a9:78:5f:ea:72:a6:cb:69:d6:d4: 4c:e6:f3:85:4d:88:5d:60:b0:5e:90:4a:da:d4:0d:01:93:0a: cb:f3:0c:c7:38:4e:8f:a2:8f:d0:bf:3f:01:3d:08:a1:0e:84: 8a:df:7e:27:aa:8d:54:7f:dd:97:04:d5:fb:03:3b:72:64:22: 49:6b:23:8c:04:e5:1f:3a:30:e2:3e:4d:1b:b3:ee:60:26:a3: 0d:e7:a3:14:f4:93:d1:b7:6f:57:04:68:62:43:b8:37:e1:11: 35:c7:b9:d9:4d:a3:5e:59:c6:69:64:54:6f:0a:36:4f:22:65: 3a:40:bb:76:1e:de:82:74:a5:d5:00:40:65:0e:e4:94:fc:74: 0d:7a:53:29:bf:2d:80:f9:21:4f:a1:10:1c:5a:9a:43:dd:f1: d3:50:55:a6:75:63:3c:4d:3f:53:27:3e:23:d7:05:b3:2e:14: eb:09:c5:95:33:03:a3:88:13:76:51:3c:84:6a:84:ab:4b:d0: 18:82:31:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26q7XIOMgCmASXF9z0exMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0N2UzYzlhOTUxZjFiMTU4MTEzYWI3YzNkZjE5ZGZjMzM2 ZDllZWYwHhcNMjYwMTAxMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWNmNDc0NmI1YzI3MjMzMjE1NDhmYTgyNmVjNmQ2MTZkMGMzYzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAVIPAlH6QVkFTQmPC4RMz0O9o4/ EreMQUTAi2Lg3ZgbcVQyYsZP2dQXnOfKcHrk1uiStVAi2qVAuNHDVx95Q+Io2By1 DAGeD039VhOGAVJwIVWrHcv6l5xbxVWCABq7/1cNDu8qWg4zUbzb9dkSyRxToopq qwEk9JZovNdyruWBfNLBuuHWXTkHthtu/c4iZqg0Qh8UDyh/Ab0nFT/d3B9w/yIT EnR3rPxYT+kDuqdwJPmhVyK2lI8lQausBTE+haGIu2Kti8cdN2ADdw/2yUSCLv8X rhXLAC2tcT47TzDJntbeBFeJ5rnsx0E7o8W87yX7sGCMB4cI2lYPmnHuBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDnPR0a1wnIzIVSPqCbsbWFtDDxfMB8GA1UdIwQY MBaAFOR+PJqVHxsVgROrfD3xnfwzbZ7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUg0OG1wVWZHeFdCRTZ0OFBmR2RfRE50bnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MGFlZDEtNmY3NC00M2E5LTk3NmYt N2VkNWUzMWFlNDRmLzEvT2M5SFJyWENjak1oVkktb0p1eHRZVzBNUEY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MGFlZDEtNmY3NC00M2E5LTk3NmYtN2VkNWUzMWFlNDRm LzEvNUg0OG1wVWZHeFdCRTZ0OFBmR2RfRE50bnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl5z4MA0G CSqGSIb3DQEBCwUAA4IBAQCsYiLVYf6PrPy02PkmAbzRrLhxHEUExkGQ0d3f9J1A 7PMUY/encOnoGMTJ41dRg8CdBXCJsz9Wk/DuBOFej6l4X+pypstp1tRM5vOFTYhd YLBekEra1A0BkwrL8wzHOE6Poo/Qvz8BPQihDoSK334nqo1Uf92XBNX7AztyZCJJ ayOMBOUfOjDiPk0bs+5gJqMN56MU9JPRt29XBGhiQ7g34RE1x7nZTaNeWcZpZFRv CjZPImU6QLt2Ht6CdKXVAEBlDuSU/HQNelMpvy2A+SFPoRAcWppD3fHTUFWmdWM8 TT9TJz4j1wWzLhTrCcWVMwOjiBN2UTyEaoSrS9AYgjG+ -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:19 2026 by rpki-client