This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/O0z1dWysTLckLSWa-xjk4iWOyJo.roa File: O0z1dWysTLckLSWa-xjk4iWOyJo.roa (raw, json) Hash identifier: xfK3oB04u+nOy6dQDoBykL7MzhjzL+9xzN4TDIDbuCg= Subject key identifier: 3B:4C:F5:75:6C:AC:4C:B7:24:2D:25:9A:FB:18:E4:E2:25:8E:C8:9A Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039 Certificate serial: 019B7EA630E1875439469AC3573FF8344678 Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/O0z1dWysTLckLSWa-xjk4iWOyJo.roa Signing time: Fri 02 Jan 2026 12:19:39 +0000 ROA not before: Fri 02 Jan 2026 12:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1759 IP address blocks: 91.195.246.0/23 maxlen: 24 193.143.8.0/21 maxlen: 24 193.143.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:30:e1:87:54:39:46:9a:c3:57:3f:f8:34:46:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039 Validity Not Before: Jan 2 12:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b4cf5756cac4cb7242d259afb18e4e2258ec89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8d:25:9c:f2:04:3f:9a:c4:8a:6f:12:b3:b3: be:35:2a:19:0c:3c:bf:f1:e2:7e:c6:a2:8b:8e:a4: ba:31:a0:13:a5:36:87:b8:65:2a:34:c7:62:e5:dd: 0b:5a:47:a8:f5:ba:aa:79:2e:9e:d0:ea:d4:22:ad: 94:1e:80:24:2e:30:95:88:10:28:90:38:42:63:26: 74:e3:c6:77:cd:e0:3b:9b:57:1a:1e:a7:0f:c8:a3: dd:a8:8f:2b:22:e0:e1:30:46:3e:ac:7d:3e:bb:60: 28:83:0b:27:ed:4a:de:53:46:22:07:8c:42:91:42: 00:cd:b0:5e:bd:0d:1d:ff:50:4a:45:b4:36:ff:bc: fc:73:23:ae:60:9b:49:9f:ec:6d:92:7c:ae:32:db: 6d:18:ac:b8:08:70:01:66:c7:48:80:76:71:a6:66: 6a:98:54:ce:5d:5f:70:5a:86:31:53:22:6f:be:b9: a6:99:93:ed:7e:12:18:bc:6d:21:b7:bf:5c:7b:2d: bf:4b:e4:73:a3:de:f9:50:35:1c:d8:cb:6b:1e:fc: 99:e7:5e:83:86:e1:31:90:5f:74:dd:87:9c:93:13: 76:e0:8c:ba:11:9c:78:3f:38:6e:cd:f3:f2:d2:e6: 6e:72:f4:69:16:57:ef:c2:22:a9:98:8b:aa:f6:65: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4C:F5:75:6C:AC:4C:B7:24:2D:25:9A:FB:18:E4:E2:25:8E:C8:9A X509v3 Authority Key Identifier: keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/O0z1dWysTLckLSWa-xjk4iWOyJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.246.0/23 193.143.8.0/21 193.143.240.0/21 Signature Algorithm: sha256WithRSAEncryption 77:0f:c2:70:c4:b6:cb:a2:da:93:35:fc:e2:ac:a5:5a:ac:8f: 78:c8:87:96:73:d5:7b:a5:cf:4b:04:fc:22:5d:24:72:05:11: a1:71:10:2e:1a:b0:fb:1e:14:5a:1a:32:d5:a8:91:85:00:bb: 2a:4d:cf:8a:26:c7:d4:6c:29:86:24:70:6f:4e:44:d0:ee:a1: b1:1a:d3:d0:e2:d9:cc:f1:aa:7d:7c:68:99:d0:bf:c8:c0:7d: 1e:35:47:05:73:64:11:e6:c4:1b:5a:59:ee:18:52:64:9d:1e: 41:ac:f1:ca:1e:dd:58:16:70:05:44:1d:9e:61:fd:75:4e:6a: c6:70:95:02:fe:49:5f:03:dd:54:87:82:b9:2e:16:b1:73:29: fa:e4:20:40:a9:de:ab:09:a9:8f:1f:a7:98:ae:ce:a7:93:6b: 5c:fc:2a:60:88:7d:82:1a:9a:cf:74:0a:ad:2f:11:85:d3:6e: 4a:b0:2d:7b:3e:47:06:35:28:08:79:48:d9:5a:63:3f:d0:d5: 0e:fa:0f:5f:cd:06:c8:22:66:55:94:7e:33:47:03:3d:c0:e0: ce:30:63:33:12:79:56:43:e6:94:27:c9:86:22:df:d9:15:03: 20:0a:43:1f:c9:5b:13:34:b4:bb:01:c7:04:f7:42:16:10:30: 37:cc:cf:1b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pjDhh1Q5RprDVz/4NEZ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYTA2YTQ1M2ZjZDVmMjZmYWY0ODIyYzRiNDU5MDk4ZGNh ZmYwMzkwHhcNMjYwMTAyMTIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjRjZjU3NTZjYWM0Y2I3MjQyZDI1OWFmYjE4ZTRlMjI1OGVjODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp40lnPIEP5rEim8Ss7O+NSoZDDy/ 8eJ+xqKLjqS6MaATpTaHuGUqNMdi5d0LWkeo9bqqeS6e0OrUIq2UHoAkLjCViBAo kDhCYyZ048Z3zeA7m1caHqcPyKPdqI8rIuDhMEY+rH0+u2Aogwsn7UreU0YiB4xC kUIAzbBevQ0d/1BKRbQ2/7z8cyOuYJtJn+xtknyuMtttGKy4CHABZsdIgHZxpmZq mFTOXV9wWoYxUyJvvrmmmZPtfhIYvG0ht79cey2/S+Rzo975UDUc2MtrHvyZ516D huExkF903YeckxN24Iy6EZx4PzhuzfPy0uZucvRpFlfvwiKpmIuq9mV3CQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDtM9XVsrEy3JC0lmvsY5OIljsiaMB8GA1UdIwQY MBaAFFCgakU/zV8m+vSCLEtFkJjcr/A5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDkt ZWY1ZDUwMTFjYTc3LzEvTzB6MWRXeXNUTGNrTFNXYS14ams0aVdPeUpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDktZWY1ZDUwMTFjYTc3 LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW8P2AwQD wY8IAwQDwY/wMA0GCSqGSIb3DQEBCwUAA4IBAQB3D8JwxLbLotqTNfzirKVarI94 yIeWc9V7pc9LBPwiXSRyBRGhcRAuGrD7HhRaGjLVqJGFALsqTc+KJsfUbCmGJHBv TkTQ7qGxGtPQ4tnM8ap9fGiZ0L/IwH0eNUcFc2QR5sQbWlnuGFJknR5BrPHKHt1Y FnAFRB2eYf11TmrGcJUC/klfA91Uh4K5Lhaxcyn65CBAqd6rCamPH6eYrs6nk2tc /CpgiH2CGprPdAqtLxGF025KsC17PkcGNSgIeUjZWmM/0NUO+g9fzQbIImZVlH4z RwM9wODOMGMzEnlWQ+aUJ8mGIt/ZFQMgCkMfyVsTNLS7AccE90IWEDA3zM8b -----END CERTIFICATE-----Generated at Mon Jan 26 14:17:29 2026 by rpki-client