This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/O4mhqRGKIoCKcIMKacGidJQTeig.roa File: O4mhqRGKIoCKcIMKacGidJQTeig.roa (raw, json) Hash identifier: o44fh95pYU44LJ84noRE8s+3KorVfsnK8XoKEFDXt+c= Subject key identifier: 3B:89:A1:A9:11:8A:22:80:8A:70:83:0A:69:C1:A2:74:94:13:7A:28 Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4 Certificate serial: 019B7F80937BF3501C1D2A0F6F65EA192A41 Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/O4mhqRGKIoCKcIMKacGidJQTeig.roa Signing time: Fri 02 Jan 2026 16:18:11 +0000 ROA not before: Fri 02 Jan 2026 16:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9085 IP address blocks: 193.42.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:93:7b:f3:50:1c:1d:2a:0f:6f:65:ea:19:2a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4 Validity Not Before: Jan 2 16:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b89a1a9118a22808a70830a69c1a27494137a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1d:db:45:76:19:04:a1:c2:a7:d5:4a:96:76: 29:c4:ce:76:49:b9:f9:70:a6:68:5f:61:d5:ae:1d: 7c:6c:07:31:e8:11:df:08:d1:d6:85:4d:d3:75:d5: 74:c5:46:a3:b0:4c:c4:5d:e6:84:55:56:db:d7:a6: 0b:e5:da:39:45:37:e8:83:96:28:96:88:a6:0d:04: df:10:9f:3b:80:18:07:1f:54:b5:50:b8:99:c8:06: af:03:68:ba:0c:7d:4a:49:55:32:1f:1d:28:6f:19: 07:cb:f1:84:eb:30:7b:c3:b5:14:4d:7c:e3:28:25: 14:f1:92:a3:75:7f:7c:be:e2:b0:84:12:e8:d7:10: e3:92:de:3b:f2:2a:f1:11:0d:1c:9c:cc:62:aa:d2: d0:69:04:a9:a9:e1:54:a5:f5:37:19:14:e1:d6:43: f5:8d:00:2c:d1:a6:4a:f0:4a:b8:4a:b8:b1:83:33: 05:5b:d5:b1:01:92:ca:39:ff:21:a4:dc:1b:7a:d8: c9:ba:48:ec:a5:48:59:73:1c:4d:a4:f9:2f:c3:40: 3f:97:42:8f:9b:f1:fc:64:18:4a:5a:40:b8:ee:d7: 74:b8:1e:cd:28:32:ad:a3:3f:9f:0a:61:db:5f:c6: 9a:58:34:3b:84:52:b0:ea:cf:f3:cd:3c:90:7f:c0: 06:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:89:A1:A9:11:8A:22:80:8A:70:83:0A:69:C1:A2:74:94:13:7A:28 X509v3 Authority Key Identifier: keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/O4mhqRGKIoCKcIMKacGidJQTeig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.211.0/24 Signature Algorithm: sha256WithRSAEncryption 79:cd:61:d3:06:c1:9c:90:32:ac:4e:59:56:91:b9:a9:e5:92: e1:27:6a:78:7e:23:62:a5:04:4e:03:75:ec:e8:5a:d2:2c:2d: c1:8b:2f:89:0c:7f:16:59:50:9d:e2:01:1d:aa:06:f0:50:21: a1:3c:19:06:93:bd:ed:16:6c:53:90:e5:60:fd:a1:4a:3e:9f: 66:4a:e1:14:a5:bf:7a:f1:06:e5:92:8c:8c:57:58:b8:05:4b: 94:d9:45:c9:fe:b6:04:29:b5:19:14:2b:4f:f8:29:f7:da:b4: c6:71:2b:71:bd:89:a3:61:08:88:bc:3a:0a:c1:ef:55:ac:bb: 0d:4f:02:74:13:9c:59:e9:33:d4:a0:21:cf:1c:39:0e:00:b0: e3:e9:a2:57:fc:23:a9:62:33:47:85:68:2e:2a:fc:54:ae:5a: 80:b2:09:51:97:18:4e:a8:4a:e3:a2:b0:16:03:10:7e:d2:72: 6a:6e:0f:1f:41:f3:a0:96:37:b8:05:9e:fa:a8:e7:37:6a:26: 35:95:5d:ae:5d:9d:c8:5c:19:f4:08:73:c0:ae:2f:a4:92:3e: 8c:21:5d:2d:b6:fc:57:50:00:78:0f:3e:e9:50:70:89:45:fa: 1b:87:f5:0c:a9:f5:df:c3:85:e8:f9:41:ba:56:2c:5e:62:f5: 69:24:e8:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gJN781AcHSoPb2XqGSpBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZWFkNWRlYjUzNTAwZjI1NDhhZTE4MTJjMDg3ZTMyYTQ3 ZmM4YjQwHhcNMjYwMTAyMTYxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjg5YTFhOTExOGEyMjgwOGE3MDgzMGE2OWMxYTI3NDk0MTM3YTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8x3bRXYZBKHCp9VKlnYpxM52Sbn5 cKZoX2HVrh18bAcx6BHfCNHWhU3TddV0xUajsEzEXeaEVVbb16YL5do5RTfog5Yo loimDQTfEJ87gBgHH1S1ULiZyAavA2i6DH1KSVUyHx0obxkHy/GE6zB7w7UUTXzj KCUU8ZKjdX98vuKwhBLo1xDjkt478irxEQ0cnMxiqtLQaQSpqeFUpfU3GRTh1kP1 jQAs0aZK8Eq4SrixgzMFW9WxAZLKOf8hpNwbetjJukjspUhZcxxNpPkvw0A/l0KP m/H8ZBhKWkC47td0uB7NKDKtoz+fCmHbX8aaWDQ7hFKw6s/zzTyQf8AGaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDuJoakRiiKAinCDCmnBonSUE3ooMB8GA1UdIwQY MBaAFDjq1d61NQDyVIrhgSwIfjKkf8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zNTE2YTEtZmQ5ZC00ZTI5LWFkZDMt ZDQ0NmYxZjgzYWU5LzEvTzRtaHFSR0tJb0NLY0lNS2FjR2lkSlFUZWlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8zNTE2YTEtZmQ5ZC00ZTI5LWFkZDMtZDQ0NmYxZjgzYWU5 LzEvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSrTMA0G CSqGSIb3DQEBCwUAA4IBAQB5zWHTBsGckDKsTllWkbmp5ZLhJ2p4fiNipQROA3Xs 6FrSLC3Biy+JDH8WWVCd4gEdqgbwUCGhPBkGk73tFmxTkOVg/aFKPp9mSuEUpb96 8QblkoyMV1i4BUuU2UXJ/rYEKbUZFCtP+Cn32rTGcStxvYmjYQiIvDoKwe9VrLsN TwJ0E5xZ6TPUoCHPHDkOALDj6aJX/COpYjNHhWguKvxUrlqAsglRlxhOqErjorAW AxB+0nJqbg8fQfOglje4BZ76qOc3aiY1lV2uXZ3IXBn0CHPAri+kkj6MIV0ttvxX UAB4Dz7pUHCJRfobh/UMqfXfw4Xo+UG6VixeYvVpJOgm -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:52 2026 by rpki-client