This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/owpSV77jbxZ9VhY5GoPY3SzakH4.roa File: owpSV77jbxZ9VhY5GoPY3SzakH4.roa (raw, json) Hash identifier: bIn4GPl6r1y0htBGN921xbLzQeP4Y7NtdCfbY0WeOD8= Subject key identifier: A3:0A:52:57:BE:E3:6F:16:7D:56:16:39:1A:83:D8:DD:2C:DA:90:7E Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8 Certificate serial: 019B79ED52DD15DFBFD0CEF4828F4B7D5ACD Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/owpSV77jbxZ9VhY5GoPY3SzakH4.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57907 IP address blocks: 37.152.48.0/21 maxlen: 21 212.162.156.0/22 maxlen: 22 2a09:d800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:52:dd:15:df:bf:d0:ce:f4:82:8f:4b:7d:5a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a30a5257bee36f167d5616391a83d8dd2cda907e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:e9:21:ff:12:7d:e7:f4:31:97:c3:c0:47: ba:8d:b6:6e:1d:08:16:d3:93:ca:6b:8a:e3:32:4c: fa:1a:0b:c2:77:55:33:63:38:f0:f1:46:0a:bf:e6: ef:51:16:7f:d9:34:31:e5:65:b5:c3:41:7a:76:65: 95:5c:ce:4f:95:0d:33:23:3b:92:35:ad:79:57:17: 3f:97:cd:a4:11:81:40:dc:d2:d9:ab:5e:cb:30:f1: 3e:85:b0:c1:6d:20:a1:e3:97:19:a5:0d:73:d7:ae: 50:8f:24:86:72:d6:dd:17:5c:94:de:ab:b2:5e:90: e5:7f:0e:38:df:98:4c:37:fe:62:24:de:19:f7:03: ce:b3:4f:6c:07:af:ec:8f:9a:74:c1:a9:a0:0c:12: de:ea:d4:1e:f2:39:db:43:df:ea:3b:19:c9:92:47: 3e:34:14:bc:4e:c2:ff:fe:ab:61:c3:93:5e:33:b4: df:14:e8:05:30:37:55:c3:9b:b6:b3:9f:87:0b:c2: 02:cc:e7:c5:62:a1:f3:e5:30:f1:df:d0:eb:b0:fe: ff:fe:03:3e:35:2f:60:21:d8:82:cb:21:87:9a:5a: db:70:8e:1b:83:18:2e:88:72:4d:ee:f5:87:a9:9f: 95:27:9d:c0:55:f7:63:82:a5:c6:f5:29:1e:f8:f4: 95:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0A:52:57:BE:E3:6F:16:7D:56:16:39:1A:83:D8:DD:2C:DA:90:7E X509v3 Authority Key Identifier: keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/owpSV77jbxZ9VhY5GoPY3SzakH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.152.48.0/21 212.162.156.0/22 IPv6: 2a09:d800::/29 Signature Algorithm: sha256WithRSAEncryption 98:29:e2:6c:80:a7:48:f4:b7:55:ad:77:a6:a1:ea:1d:dc:09: 12:15:bb:4e:de:af:d7:58:c2:97:57:4e:c4:7c:c9:c1:2a:f6: a6:f9:0b:e9:d9:3a:91:67:36:d5:15:d7:51:ef:75:c0:e0:21: 21:a4:31:cc:e3:bf:26:2e:4e:a0:b0:8e:12:d6:2c:89:fc:17: 31:09:5e:10:48:a0:33:14:09:29:85:48:8c:01:77:da:77:16: e6:4d:31:60:81:de:29:7f:71:2e:aa:9f:50:1b:a8:2a:43:c2: 2d:b4:ae:9a:18:05:b9:d5:78:ba:64:4a:57:cb:ab:60:e9:59: 99:ee:ed:6d:74:b8:70:51:a7:0f:49:ea:89:9b:b2:ec:4a:74: 95:c8:58:cb:64:b3:eb:c6:5f:4f:da:d2:96:41:42:9f:5d:47: 95:55:e9:a1:d0:bc:d2:5a:bd:d3:9b:10:9d:02:cd:0a:09:99: ac:65:bd:b1:e0:1b:94:ca:bd:91:ab:de:2c:d4:29:82:99:3a: 2f:47:66:a0:8a:88:be:ba:06:23:67:f4:67:c3:b1:25:1e:45: 81:a4:16:71:1e:f3:be:03:93:95:45:f3:64:cb:42:4c:04:b1: f3:48:78:66:dc:65:86:7d:3d:cc:85:01:93:fc:e3:4f:78:23: a4:6a:5a:c1 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57VLdFd+/0M70go9LfVrNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjdhYWM3YzQ5M2JjOGFhN2VjNzA1OWQzZWM3NmJiZmMy ZjIzZDgwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzBhNTI1N2JlZTM2ZjE2N2Q1NjE2MzkxYTgzZDhkZDJjZGE5MDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ALpIf8Sfef0MZfDwEe6jbZuHQgW 05PKa4rjMkz6GgvCd1UzYzjw8UYKv+bvURZ/2TQx5WW1w0F6dmWVXM5PlQ0zIzuS Na15Vxc/l82kEYFA3NLZq17LMPE+hbDBbSCh45cZpQ1z165QjySGctbdF1yU3quy XpDlfw4435hMN/5iJN4Z9wPOs09sB6/sj5p0wamgDBLe6tQe8jnbQ9/qOxnJkkc+ NBS8TsL//qthw5NeM7TfFOgFMDdVw5u2s5+HC8ICzOfFYqHz5TDx39DrsP7//gM+ NS9gIdiCyyGHmlrbcI4bgxguiHJN7vWHqZ+VJ53AVfdjgqXG9Ske+PSVHQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKMKUle+428WfVYWORqD2N0s2pB+MB8GA1UdIwQY MBaAFL23qsfEk7yKp+xwWdPsdrv8LyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDkt Njk3YzBlMmMzZDM1LzEvb3dwU1Y3N2pieFo5VmhZNUdvUFkzU3pha0g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDktNjk3YzBlMmMzZDM1 LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJZgwAwQC 1KKcMA0EAgACMAcDBQMqCdgAMA0GCSqGSIb3DQEBCwUAA4IBAQCYKeJsgKdI9LdV rXemoeod3AkSFbtO3q/XWMKXV07EfMnBKvam+Qvp2TqRZzbVFddR73XA4CEhpDHM 478mLk6gsI4S1iyJ/BcxCV4QSKAzFAkphUiMAXfadxbmTTFggd4pf3Euqp9QG6gq Q8IttK6aGAW51Xi6ZEpXy6tg6VmZ7u1tdLhwUacPSeqJm7LsSnSVyFjLZLPrxl9P 2tKWQUKfXUeVVemh0LzSWr3TmxCdAs0KCZmsZb2x4BuUyr2Rq94s1CmCmTovR2ag ioi+ugYjZ/Rnw7ElHkWBpBZxHvO+A5OVRfNky0JMBLHzSHhm3GWGfT3MhQGT/ONP eCOkalrB -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:24 2026 by rpki-client