This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/OYfRjeO3PLyVIOuq1wvt3D3nhx8.roa File: OYfRjeO3PLyVIOuq1wvt3D3nhx8.roa (raw, json) Hash identifier: 3chLq1kpFvZ9V4pj/+ggbAGhkKwBKwsrEzEF68LNv7U= Subject key identifier: 39:87:D1:8D:E3:B7:3C:BC:95:20:EB:AA:D7:0B:ED:DC:3D:E7:87:1F Certificate issuer: /CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b Certificate serial: 019B7E38E1E4922C095AF69E6600D7FD92F5 Authority key identifier: 64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/OYfRjeO3PLyVIOuq1wvt3D3nhx8.roa Signing time: Fri 02 Jan 2026 10:20:15 +0000 ROA not before: Fri 02 Jan 2026 10:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205000 IP address blocks: 5.182.104.0/23 maxlen: 23 194.30.171.0/24 maxlen: 24 2a0f:dc80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e1:e4:92:2c:09:5a:f6:9e:66:00:d7:fd:92:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b Validity Not Before: Jan 2 10:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3987d18de3b73cbc9520ebaad70beddc3de7871f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:c1:dc:1e:e9:86:77:95:bb:36:7f:6b:7e: 5e:6f:f7:45:68:97:fd:bf:44:28:41:b8:91:c2:83: 3c:53:7c:7d:96:88:60:29:98:87:0a:5b:fc:b2:26: 2a:c8:09:69:95:74:d4:f4:74:aa:d0:54:89:8c:0a: 49:c3:5a:0b:8f:66:7b:68:03:ad:8f:6b:95:76:c8: 80:4d:b4:b7:e5:21:53:d8:65:5c:1b:46:c5:6f:21: 5c:ac:2d:7e:95:d3:cc:95:70:4f:c8:f8:37:e0:28: 12:c7:af:8a:e7:8c:32:6b:1e:2e:8f:8a:55:25:a5: cd:f2:ca:dd:91:b6:59:bb:28:92:b0:29:ed:9e:a6: 3b:4c:85:48:f4:39:23:cb:83:fa:b5:f4:ec:38:34: fb:b8:53:a0:2b:ce:cc:da:2f:46:67:b7:4c:b0:44: 20:8d:92:32:9d:ce:0b:9f:1d:81:32:0e:e8:25:36: 1e:b5:a7:be:45:be:ec:ae:7b:46:3a:64:f0:28:13: 4f:7f:28:b1:b5:60:fb:d1:3c:39:39:88:56:04:91: e7:fd:ec:ad:b5:f8:36:23:26:3d:5a:2d:b1:09:99: 33:f1:15:25:ae:8c:a7:b6:9f:69:9c:c1:b6:28:7d: 81:74:b1:d2:41:e5:78:21:53:21:f8:ce:bd:68:e2: c9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:87:D1:8D:E3:B7:3C:BC:95:20:EB:AA:D7:0B:ED:DC:3D:E7:87:1F X509v3 Authority Key Identifier: keyid:64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/OYfRjeO3PLyVIOuq1wvt3D3nhx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.104.0/23 194.30.171.0/24 IPv6: 2a0f:dc80::/29 Signature Algorithm: sha256WithRSAEncryption 3e:4b:f7:22:d7:ab:80:b1:76:8b:3c:ca:28:85:87:e2:57:6c: 23:a5:52:a0:f1:d1:4b:f8:55:e7:d7:f6:58:f2:f9:13:b1:1a: 02:50:c3:d4:a6:ef:b3:53:99:84:2a:37:27:d3:86:98:43:94: 73:02:34:1a:34:67:30:30:3f:0c:8a:44:5e:b6:9d:91:f3:70: c1:e0:5f:45:eb:4c:4a:40:ba:8e:9e:af:dd:53:ef:bd:ea:88: f6:bd:52:26:a5:8c:b4:32:64:4f:8c:2e:2d:a5:eb:6e:d4:d3: 71:c1:e1:36:bc:b9:84:4f:31:98:51:39:3d:71:fc:4e:d4:5d: 36:64:a3:3d:06:08:f7:8c:8a:48:3e:13:f1:5d:fc:fb:99:bc: a6:80:d6:82:c6:93:86:50:3a:68:5a:a0:a4:12:d2:a2:99:7c: 54:e5:26:b1:c9:95:24:95:f8:8f:78:c3:61:f6:4b:3e:b0:3f: ab:10:d8:65:33:ce:3b:62:b8:83:d1:e5:76:60:9e:d1:03:da: 13:0d:8b:33:b1:bc:56:ae:7c:b7:97:53:55:83:7c:b1:2f:f4: 5d:82:e7:b4:77:b7:f5:65:f4:ef:59:19:a6:d8:a2:7f:b6:1c: 62:fe:36:ad:02:0e:37:93:b7:40:d3:d9:5c:e4:5b:72:e0:cc: a0:1c:6b:9f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+OOHkkiwJWvaeZgDX/ZL1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Njg1YTZkNzNmZjVhMjdlMWJjMWY5NjE3ZGZiNTUwOGJh ZDI5M2IwHhcNMjYwMTAyMTAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTg3ZDE4ZGUzYjczY2JjOTUyMGViYWFkNzBiZWRkYzNkZTc4NzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjnB3B7phneVuzZ/a35eb/dFaJf9 v0QoQbiRwoM8U3x9lohgKZiHClv8siYqyAlplXTU9HSq0FSJjApJw1oLj2Z7aAOt j2uVdsiATbS35SFT2GVcG0bFbyFcrC1+ldPMlXBPyPg34CgSx6+K54wyax4uj4pV JaXN8srdkbZZuyiSsCntnqY7TIVI9Dkjy4P6tfTsODT7uFOgK87M2i9GZ7dMsEQg jZIync4Lnx2BMg7oJTYetae+Rb7srntGOmTwKBNPfyixtWD70Tw5OYhWBJHn/eyt tfg2IyY9Wi2xCZkz8RUlroyntp9pnMG2KH2BdLHSQeV4IVMh+M69aOLJpQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDmH0Y3jtzy8lSDrqtcL7dw954cfMB8GA1UdIwQY MBaAFGRoWm1z/1on4bwflhfftVCLrSk7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkdoYWJYUF9XaWZodkItV0Y5LTFVSXV0S1RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYjNmMWMtYmJlZi00ZDM1LTgxNDYt YzQ4YjI1Zjc4NDZmLzEvT1lmUmplTzNQTHlWSU91cTF3dnQzRDNuaHg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wYjNmMWMtYmJlZi00ZDM1LTgxNDYtYzQ4YjI1Zjc4NDZm LzEvWkdoYWJYUF9XaWZodkItV0Y5LTFVSXV0S1RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBBbZoAwQA wh6rMA0EAgACMAcDBQMqD9yAMA0GCSqGSIb3DQEBCwUAA4IBAQA+S/ci16uAsXaL PMoohYfiV2wjpVKg8dFL+FXn1/ZY8vkTsRoCUMPUpu+zU5mEKjcn04aYQ5RzAjQa NGcwMD8MikRetp2R83DB4F9F60xKQLqOnq/dU++96oj2vVImpYy0MmRPjC4tpetu 1NNxweE2vLmETzGYUTk9cfxO1F02ZKM9Bgj3jIpIPhPxXfz7mbymgNaCxpOGUDpo WqCkEtKimXxU5SaxyZUklfiPeMNh9ks+sD+rENhlM847YriD0eV2YJ7RA9oTDYsz sbxWrny3l1NVg3yxL/Rdgue0d7f1ZfTvWRmm2KJ/thxi/jatAg43k7dA09lc5Fty 4MygHGuf -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:16 2026 by rpki-client