This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/O5GpUR3kqUwHM30F2bDcPcb5bmo.roa File: O5GpUR3kqUwHM30F2bDcPcb5bmo.roa (raw, json) Hash identifier: rpBjt2DMLqseXS01iOhjDQ4RnLWsDmcSm0GPL/qK3I4= Subject key identifier: 3B:91:A9:51:1D:E4:A9:4C:07:33:7D:05:D9:B0:DC:3D:C6:F9:6E:6A Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Certificate serial: 019B791082E3DAE4702E61EAC0DC36A5EA91 Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/O5GpUR3kqUwHM30F2bDcPcb5bmo.roa Signing time: Thu 01 Jan 2026 10:18:03 +0000 ROA not before: Thu 01 Jan 2026 10:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40934 IP address blocks: 83.231.145.0/24 maxlen: 24 83.231.169.0/24 maxlen: 24 83.231.212.0/24 maxlen: 24 212.119.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 14:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:82:e3:da:e4:70:2e:61:ea:c0:dc:36:a5:ea:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Validity Not Before: Jan 1 10:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b91a9511de4a94c07337d05d9b0dc3dc6f96e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0c:67:47:d3:83:e2:69:a6:3a:08:9c:ce:df: f3:90:ca:e5:aa:5b:c8:06:7c:6d:6c:10:bc:1e:a9: a0:a5:52:0f:af:79:ba:d5:c1:34:e9:dc:a6:d0:a7: 66:b6:28:13:1d:1f:09:c1:1d:6a:f0:4a:f4:14:8e: 8c:61:5e:e5:e0:14:90:5c:fe:b5:ff:45:a9:99:e5: 80:71:f8:f0:0f:ce:22:5b:df:ef:4e:b5:7c:ea:77: 93:8a:52:30:a6:83:f5:d8:64:27:a4:c4:a6:d1:98: d2:39:74:72:75:5a:71:b9:c5:62:dc:16:75:9c:27: 6f:2e:a2:2f:ee:09:b1:ca:f4:9c:64:71:ff:25:95: 16:92:d3:cc:f0:34:15:65:68:2e:3e:73:16:49:6d: 62:3b:68:f6:e1:e6:55:59:f7:6d:f3:46:16:4b:f5: 1c:2e:53:fc:9c:e7:5b:2a:3d:8c:c4:68:74:d8:81: 42:4f:4f:ed:16:69:cf:e1:e4:30:8e:9b:f9:38:5f: 97:e3:26:c5:df:8a:f0:e1:ed:57:62:42:75:ec:36: 82:e0:15:fd:27:bd:1b:ff:73:c9:38:4b:c1:24:ad: bc:f3:e2:20:98:fa:53:33:92:2a:31:bf:63:35:1a: 5d:34:ca:dc:0f:63:51:81:2b:a2:fa:4b:95:9d:bd: 5e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:91:A9:51:1D:E4:A9:4C:07:33:7D:05:D9:B0:DC:3D:C6:F9:6E:6A X509v3 Authority Key Identifier: keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/O5GpUR3kqUwHM30F2bDcPcb5bmo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.231.145.0/24 83.231.169.0/24 83.231.212.0/24 212.119.11.0/24 Signature Algorithm: sha256WithRSAEncryption a1:5f:d4:e4:b0:e0:9d:7c:97:e3:62:d7:5b:9e:47:7a:c9:16: f7:54:0e:f8:50:65:37:70:12:bd:52:95:9b:1a:9f:38:cc:1e: 05:4c:22:d0:78:a2:42:63:3f:61:88:3a:49:7d:39:36:87:80: 43:46:32:7b:99:63:bb:52:18:32:87:59:cb:bc:2f:bf:cc:29: a0:e4:21:50:00:65:2a:97:b3:ea:ab:cc:76:94:84:e2:47:bd: 3f:11:cd:23:f9:20:02:69:92:c2:5a:5e:4c:4c:5b:28:9a:71: d2:2e:d5:a0:92:c7:3f:55:9a:ee:b9:13:25:49:06:65:f0:4b: 0f:a8:b5:e3:de:b8:40:4d:f9:e7:a1:32:1e:81:51:97:ed:b4: 72:61:50:60:d8:c9:11:42:5f:8e:f1:1a:92:28:23:0c:c3:9d: 92:7e:53:3d:14:99:ee:bf:32:b0:b1:0c:7b:c2:e8:49:02:97: 1d:47:d0:ca:e4:ef:9a:1f:90:94:92:1c:95:93:78:3c:7d:1d: 23:0d:38:a7:1b:91:1e:ed:94:d7:15:fb:c0:d5:d0:c4:92:5e: 90:04:f1:f8:77:f0:50:d1:55:81:4d:3c:77:1e:ab:dc:d3:9b: 05:10:91:e8:fb:12:08:0c:f0:74:3f:8b:9b:aa:be:c3:ea:50: 8f:c4:26:63 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EILj2uRwLmHqwNw2peqRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4 ZDIyZmQwHhcNMjYwMTAxMTAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjkxYTk1MTFkZTRhOTRjMDczMzdkMDVkOWIwZGMzZGM2Zjk2ZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AxnR9OD4mmmOgiczt/zkMrlqlvI BnxtbBC8HqmgpVIPr3m61cE06dym0KdmtigTHR8JwR1q8Er0FI6MYV7l4BSQXP61 /0WpmeWAcfjwD84iW9/vTrV86neTilIwpoP12GQnpMSm0ZjSOXRydVpxucVi3BZ1 nCdvLqIv7gmxyvScZHH/JZUWktPM8DQVZWguPnMWSW1iO2j24eZVWfdt80YWS/Uc LlP8nOdbKj2MxGh02IFCT0/tFmnP4eQwjpv5OF+X4ybF34rw4e1XYkJ17DaC4BX9 J70b/3PJOEvBJK288+IgmPpTM5IqMb9jNRpdNMrcD2NRgSui+kuVnb1ezwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDuRqVEd5KlMBzN9Bdmw3D3G+W5qMB8GA1UdIwQY MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt NzgwYTI1Y2QwZGQ5LzEvTzVHcFVSM2txVXdITTMwRjJiRGNQY2I1Ym1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5 LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAU+eRAwQA U+epAwQAU+fUAwQA1HcLMA0GCSqGSIb3DQEBCwUAA4IBAQChX9TksOCdfJfjYtdb nkd6yRb3VA74UGU3cBK9UpWbGp84zB4FTCLQeKJCYz9hiDpJfTk2h4BDRjJ7mWO7 Uhgyh1nLvC+/zCmg5CFQAGUql7Pqq8x2lITiR70/Ec0j+SACaZLCWl5MTFsomnHS LtWgksc/VZruuRMlSQZl8EsPqLXj3rhATfnnoTIegVGX7bRyYVBg2MkRQl+O8RqS KCMMw52SflM9FJnuvzKwsQx7wuhJApcdR9DK5O+aH5CUkhyVk3g8fR0jDTinG5Ee 7ZTXFfvA1dDEkl6QBPH4d/BQ0VWBTTx3Hqvc05sFEJHo+xIIDPB0P4ubqr7D6lCP xCZj -----END CERTIFICATE-----Generated at Sun Jan 25 00:59:03 2026 by rpki-client