This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/ocMdVynF_p0Tq2OwiTH-YQD2ORA.roa File: ocMdVynF_p0Tq2OwiTH-YQD2ORA.roa (raw, json) Hash identifier: T9hZOtlKL+lVEzPwoFtr/gTJ5gMSoiMOJ0rZtmiDZzY= Subject key identifier: A1:C3:1D:57:29:C5:FE:9D:13:AB:63:B0:89:31:FE:61:00:F6:39:10 Certificate issuer: /CN=91bd5883c82aed25fef1b18d70d0215b07f727d8 Certificate serial: 019B7FF18360402C414C8C2C34B47D65CAB3 Authority key identifier: 91:BD:58:83:C8:2A:ED:25:FE:F1:B1:8D:70:D0:21:5B:07:F7:27:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/ocMdVynF_p0Tq2OwiTH-YQD2ORA.roa Signing time: Fri 02 Jan 2026 18:21:32 +0000 ROA not before: Fri 02 Jan 2026 18:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134844 IP address blocks: 103.214.206.0/24 maxlen: 24 2001:67c:2d4::/48 maxlen: 48 2a0c:2c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.mft rsync://rpki.ripe.net/repository/DEFAULT/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:83:60:40:2c:41:4c:8c:2c:34:b4:7d:65:ca:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91bd5883c82aed25fef1b18d70d0215b07f727d8 Validity Not Before: Jan 2 18:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1c31d5729c5fe9d13ab63b08931fe6100f63910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:ed:17:17:e9:82:f5:d0:8f:f5:c8:08:ae: c6:39:7f:79:c7:c8:21:da:ae:31:7c:ee:d7:64:6a: 4f:01:02:b1:28:cb:c9:01:99:ec:4e:2e:46:b9:f9: dc:2d:5f:52:9c:06:f8:23:b0:26:e3:60:f3:cf:15: 07:d5:85:70:7d:4e:0d:14:8a:f9:ef:85:a4:de:88: 8e:0d:bb:05:e3:30:62:68:23:d1:bc:b9:b9:7c:1d: f2:69:f8:85:33:8c:38:af:40:67:75:c8:00:f6:c1: 08:60:83:ac:64:9b:e8:2a:76:bd:4a:34:09:ac:47: e1:21:72:f0:ed:48:08:c9:39:64:78:99:b9:31:2b: cd:f4:74:3e:6b:01:40:2e:6a:35:11:98:3f:34:6a: 3b:a3:37:9d:83:38:8d:f4:54:95:cb:66:89:18:72: 3e:e0:61:f5:fb:71:ea:aa:67:b7:a3:02:6a:07:7f: b7:06:09:4c:79:19:ea:6a:7c:1e:52:a1:fa:42:31: a5:57:a0:04:93:ae:64:c1:87:fd:63:85:16:17:ae: 01:3f:8d:23:bf:9a:8a:40:d6:a9:d6:f5:6e:5a:12: 68:aa:eb:fa:86:11:98:68:b6:24:af:c6:5b:ab:24: 5d:5a:32:ec:29:5e:59:5c:d7:b1:fa:11:ba:8e:a2: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C3:1D:57:29:C5:FE:9D:13:AB:63:B0:89:31:FE:61:00:F6:39:10 X509v3 Authority Key Identifier: keyid:91:BD:58:83:C8:2A:ED:25:FE:F1:B1:8D:70:D0:21:5B:07:F7:27:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/ocMdVynF_p0Tq2OwiTH-YQD2ORA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.214.206.0/24 IPv6: 2001:67c:2d4::/48 2a0c:2c40::/48 Signature Algorithm: sha256WithRSAEncryption 3a:5e:82:6d:db:61:f4:01:71:af:8c:f6:31:73:6b:a1:bf:38: e7:9e:c0:d9:72:4d:90:89:fe:7e:91:c4:ab:f4:bb:c7:6b:26: a3:be:21:27:84:99:88:72:d0:4d:fb:c4:57:66:41:33:5c:4b: 1a:16:f7:92:50:24:a2:a0:ff:9a:8e:93:a9:55:62:bb:86:3a: 0f:c0:23:f9:e5:40:59:48:c3:b1:ba:a5:f9:ec:e4:47:32:1a: 30:4c:7e:75:33:c0:c6:e7:ff:00:72:0e:35:c3:e3:9a:f1:a1: 53:4d:3b:20:40:97:2b:62:e4:9c:05:fd:91:ee:27:64:48:ae: 3e:01:30:66:1b:50:8b:f0:d9:a1:46:c1:5e:43:66:96:00:92: 93:b5:19:86:89:af:38:8a:18:80:90:a0:9d:f8:06:8c:1a:0e: 40:4d:7c:7c:70:88:0c:bf:d4:17:02:51:d2:52:99:08:f0:52: d5:9c:c9:e8:18:e3:02:58:2b:07:60:bb:7b:69:fa:46:7f:23: 11:33:bf:0a:e7:d9:79:76:72:d4:7f:d3:a0:30:1c:7e:dc:78: 0e:48:0a:9b:5d:fd:d1:dc:f4:f9:eb:34:76:e3:08:14:21:93: f5:9f:4d:e3:e1:89:e6:ca:c9:8e:cb:4a:e5:a0:2a:a1:aa:f1: b9:5f:48:cb -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/8YNgQCxBTIwsNLR9ZcqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYmQ1ODgzYzgyYWVkMjVmZWYxYjE4ZDcwZDAyMTViMDdm NzI3ZDgwHhcNMjYwMTAyMTgyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWMzMWQ1NzI5YzVmZTlkMTNhYjYzYjA4OTMxZmU2MTAwZjYzOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxTtFxfpgvXQj/XICK7GOX95x8gh 2q4xfO7XZGpPAQKxKMvJAZnsTi5GufncLV9SnAb4I7Am42DzzxUH1YVwfU4NFIr5 74Wk3oiODbsF4zBiaCPRvLm5fB3yafiFM4w4r0BndcgA9sEIYIOsZJvoKna9SjQJ rEfhIXLw7UgIyTlkeJm5MSvN9HQ+awFALmo1EZg/NGo7ozedgziN9FSVy2aJGHI+ 4GH1+3Hqqme3owJqB3+3BglMeRnqanweUqH6QjGlV6AEk65kwYf9Y4UWF64BP40j v5qKQNap1vVuWhJoquv6hhGYaLYkr8ZbqyRdWjLsKV5ZXNex+hG6jqIBgQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFKHDHVcpxf6dE6tjsIkx/mEA9jkQMB8GA1UdIwQY MBaAFJG9WIPIKu0l/vGxjXDQIVsH9yfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2IxWWc4Z3E3U1gtOGJHTmNOQWhXd2YzSjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZDU2YTMtNDQxNy00OTQwLWJhYTIt OWU5NjJjZDlkZDgyLzEvb2NNZFZ5bkZfcDBUcTJPd2lUSC1ZUUQyT1JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZDU2YTMtNDQxNy00OTQwLWJhYTItOWU5NjJjZDlkZDgy LzEva2IxWWc4Z3E3U1gtOGJHTmNOQWhXd2YzSjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAZ9bOMBgE AgACMBIDBwAgAQZ8AtQDBwAqDCxAAAAwDQYJKoZIhvcNAQELBQADggEBADpegm3b YfQBca+M9jFza6G/OOeewNlyTZCJ/n6RxKv0u8drJqO+ISeEmYhy0E37xFdmQTNc SxoW95JQJKKg/5qOk6lVYruGOg/AI/nlQFlIw7G6pfns5EcyGjBMfnUzwMbn/wBy DjXD45rxoVNNOyBAlyti5JwF/ZHuJ2RIrj4BMGYbUIvw2aFGwV5DZpYAkpO1GYaJ rziKGICQoJ34BowaDkBNfHxwiAy/1BcCUdJSmQjwUtWcyegY4wJYKwdgu3tp+kZ/ IxEzvwrn2Xl2ctR/06AwHH7ceA5ICptd/dHc9PnrNHbjCBQhk/WfTePhiebKyY7L SuWgKqGq8blfSMs= -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:01 2026 by rpki-client