This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OwThGODJImZhpEQ6VocAEXk08Wk.roa File: OwThGODJImZhpEQ6VocAEXk08Wk.roa (raw, json) Hash identifier: 9GWZM8UI6vesEnw5NwOVO4E8dLD1yeWhQTR6JXudaTE= Subject key identifier: 3B:04:E1:18:E0:C9:22:66:61:A4:44:3A:56:87:00:11:79:34:F1:69 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84ED0DE59E08CC30A4F410A41B1C08 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OwThGODJImZhpEQ6VocAEXk08Wk.roa Signing time: Fri 02 Jan 2026 16:22:56 +0000 ROA not before: Fri 02 Jan 2026 16:22:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209196 IP address blocks: 92.52.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ed:0d:e5:9e:08:cc:30:a4:f4:10:a4:1b:1c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b04e118e0c9226661a4443a568700117934f169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:6f:40:fd:5b:ff:a1:05:8b:85:e7:7a:ba: bf:af:37:8b:3c:19:00:cf:aa:95:8f:48:ca:48:3c: 8c:79:d2:6e:64:ff:13:fd:7f:1d:b2:89:52:74:37: 54:21:28:04:00:88:f2:51:58:c8:5a:e2:26:38:a9: 94:55:1c:ed:c0:8d:36:bf:0f:56:2b:0b:9b:d4:04: d7:f3:b6:6c:bf:d7:84:8e:38:14:f7:70:27:80:28: bc:6e:29:52:61:53:49:c3:ef:9e:a4:8a:ab:15:da: bf:fd:05:b9:ff:d9:a4:f7:f2:1b:08:f7:c0:0b:f7: 19:64:56:ae:b5:5b:16:89:12:fd:eb:08:cc:79:49: ec:e1:24:fd:48:a6:d7:df:98:ba:7f:a9:a6:c8:6a: 45:8c:ac:28:15:5d:3d:3b:90:2d:28:50:52:4f:07: 7f:c1:58:02:8f:6d:e7:91:66:4b:5e:aa:f3:0d:c7: 01:bf:82:e0:01:d3:2e:5e:a2:d3:fd:9d:e3:fd:ae: 81:b7:b5:88:cf:2a:8b:b7:6e:36:bc:28:7c:af:21: 9c:ec:f0:e6:6b:e3:41:74:19:46:5f:7a:42:7f:66: f4:24:ac:4a:c6:74:73:dd:b4:c6:e3:b7:9e:6a:39: be:df:59:8c:60:75:af:3a:b9:42:41:42:9a:33:84: 5c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:04:E1:18:E0:C9:22:66:61:A4:44:3A:56:87:00:11:79:34:F1:69 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/OwThGODJImZhpEQ6VocAEXk08Wk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.52.215.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:74:6a:2a:b0:47:c3:04:a6:54:e9:37:b4:34:83:3d:9b:72: ad:e6:e5:06:8a:41:7e:c0:43:c4:59:0f:52:29:f5:fe:3d:ae: 22:b1:e3:8e:f1:7c:3a:0d:f2:a8:0f:a1:72:44:09:e2:7b:ff: 97:26:8b:d7:34:ab:04:a8:90:10:63:55:31:e7:46:86:51:b0: 9a:61:e6:f1:b4:c0:c9:92:82:62:88:ce:d7:9c:42:0b:89:dc: 84:f7:f0:2e:89:14:61:3c:84:bc:b3:df:7a:f6:c3:d8:8e:ed: 24:4e:7e:7c:64:db:97:73:df:e2:ea:29:86:25:98:bd:1f:40: 85:48:b1:ba:31:bc:7c:78:40:45:57:c7:33:dd:7f:a4:f2:20: b1:9c:a8:6a:1c:ed:00:39:a5:f0:b4:0e:cb:49:9e:ee:38:8d: c8:dd:2e:90:51:3f:ab:9d:9c:e4:bc:93:30:64:11:da:ac:49: 7c:9d:1f:06:f8:d7:da:8b:ba:a0:f0:83:42:9a:93:64:46:d8: ec:df:68:d2:5c:eb:ee:59:d3:ea:f5:4b:47:0d:88:15:70:3d: 62:bc:dd:9e:2f:6b:b5:b5:eb:b8:de:35:95:5e:91:30:f0:89: f9:b9:0c:32:42:e6:82:30:b3:66:40:f8:e8:a4:c3:e8:c0:43: 03:be:e5:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hO0N5Z4IzDCk9BCkGxwIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjA0ZTExOGUwYzkyMjY2NjFhNDQ0M2E1Njg3MDAxMTc5MzRmMTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsctvQP1b/6EFi4Xnerq/rzeLPBkA z6qVj0jKSDyMedJuZP8T/X8dsolSdDdUISgEAIjyUVjIWuImOKmUVRztwI02vw9W Kwub1ATX87Zsv9eEjjgU93AngCi8bilSYVNJw++epIqrFdq//QW5/9mk9/IbCPfA C/cZZFautVsWiRL96wjMeUns4ST9SKbX35i6f6mmyGpFjKwoFV09O5AtKFBSTwd/ wVgCj23nkWZLXqrzDccBv4LgAdMuXqLT/Z3j/a6Bt7WIzyqLt242vCh8ryGc7PDm a+NBdBlGX3pCf2b0JKxKxnRz3bTG47eeajm+31mMYHWvOrlCQUKaM4Rc0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDsE4RjgySJmYaREOlaHABF5NPFpMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvT3dUaEdPREpJbVpocEVRNlZvY0FFWGswOFdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDTXMA0G CSqGSIb3DQEBCwUAA4IBAQAvdGoqsEfDBKZU6Te0NIM9m3Kt5uUGikF+wEPEWQ9S KfX+Pa4iseOO8Xw6DfKoD6FyRAnie/+XJovXNKsEqJAQY1Ux50aGUbCaYebxtMDJ koJiiM7XnEILidyE9/AuiRRhPIS8s9969sPYju0kTn58ZNuXc9/i6imGJZi9H0CF SLG6Mbx8eEBFV8cz3X+k8iCxnKhqHO0AOaXwtA7LSZ7uOI3I3S6QUT+rnZzkvJMw ZBHarEl8nR8G+Nfai7qg8INCmpNkRtjs32jSXOvuWdPq9UtHDYgVcD1ivN2eL2u1 teu43jWVXpEw8In5uQwyQuaCMLNmQPjopMPowEMDvuW3 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:54 2026 by rpki-client