This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/OYUvrMjisGOZeeeVLdi5349SKuA.roa File: OYUvrMjisGOZeeeVLdi5349SKuA.roa (raw, json) Hash identifier: WTttIK9s/5VoMfBCOXA08j2cvyU8jNHmXe0woLR55L4= Subject key identifier: 39:85:2F:AC:C8:E2:B0:63:99:79:E7:95:2D:D8:B9:DF:8F:52:2A:E0 Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c Certificate serial: 019B7D5BC0B984E6AB81B421404D57AD7CBE Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/OYUvrMjisGOZeeeVLdi5349SKuA.roa Signing time: Fri 02 Jan 2026 06:18:43 +0000 ROA not before: Fri 02 Jan 2026 06:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200000 IP address blocks: 91.206.200.0/23 maxlen: 23 91.222.136.0/22 maxlen: 22 194.247.12.0/23 maxlen: 23 2001:67c:2070::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:c0:b9:84:e6:ab:81:b4:21:40:4d:57:ad:7c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c Validity Not Before: Jan 2 06:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39852facc8e2b0639979e7952dd8b9df8f522ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f7:44:1b:69:f6:ac:1b:b4:4e:7a:77:d3:43: e8:8e:9f:57:d3:73:e2:b2:d3:8d:22:c3:46:e6:2c: a6:71:c2:bb:3a:0f:1d:45:8d:0d:9e:a5:07:7e:b0: c9:29:21:7c:48:96:d4:ed:36:e5:81:ae:ff:a9:14: 4d:28:74:1a:fd:77:e5:d4:1f:a8:96:15:c0:77:d8: 4c:e6:7b:a0:68:c6:ce:c0:c4:12:b9:be:de:d0:67: 7c:bc:4d:42:4b:d9:37:8c:01:53:c5:72:35:6e:f0: c5:e9:c8:f5:eb:44:30:6f:d7:98:0f:32:c5:7c:12: 49:b9:aa:e7:81:00:39:33:da:b2:e9:20:84:e4:fb: 6e:7f:59:a8:f6:0d:ca:ce:ae:00:7f:7a:42:26:4b: 1c:23:81:f6:e4:c3:4d:06:b2:0a:65:52:36:d0:37: 7f:16:bc:a6:4a:83:ca:39:b2:0d:a4:f5:47:06:a9: 85:75:e5:57:1c:eb:30:66:e7:5f:24:03:30:79:23: 90:ff:8c:93:58:d7:5c:f0:9f:6c:92:68:fb:65:7c: 16:10:9b:ea:85:9e:89:97:c6:38:63:e4:7f:f5:d3: 92:9a:d5:59:22:0a:a1:01:aa:2f:39:ae:f9:55:54: b5:25:36:b1:63:64:cc:5f:68:6d:83:14:1d:8e:9b: b4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:85:2F:AC:C8:E2:B0:63:99:79:E7:95:2D:D8:B9:DF:8F:52:2A:E0 X509v3 Authority Key Identifier: keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/OYUvrMjisGOZeeeVLdi5349SKuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.200.0/23 91.222.136.0/22 194.247.12.0/23 IPv6: 2001:67c:2070::/48 Signature Algorithm: sha256WithRSAEncryption 0d:16:e9:34:4d:fe:35:45:a4:52:c6:2a:a9:18:29:18:36:70: 0d:5d:51:e3:54:b8:f8:69:2d:41:c9:68:d8:74:48:29:bd:63: 04:55:ed:ca:f8:db:60:ea:00:ef:66:33:d5:54:c0:ab:d3:03: 19:e7:b8:5e:2f:37:4f:7d:5b:71:d3:7f:59:d2:11:03:03:c1: 07:9d:d2:4b:57:62:07:4d:b2:bc:05:a0:95:77:da:dd:fd:04: bd:41:d7:07:b2:d3:25:83:e5:46:01:aa:0f:8a:f4:fb:2d:1e: a2:25:e6:3a:11:0a:4c:4c:ca:e2:2d:8f:fb:93:65:c3:4e:22: ca:82:9e:a9:06:43:bf:46:34:06:cf:39:ce:cc:f8:48:31:16: a2:84:44:e8:ba:5e:26:36:cc:a2:32:0f:ad:60:16:7a:40:2e: a4:16:0c:d1:d9:5e:b2:eb:9c:38:a2:bb:a9:ba:16:ae:ef:66: 67:64:90:0e:49:f7:1f:64:ff:31:b2:42:47:5b:ae:5f:9f:64: 5c:fd:15:86:59:62:9d:9e:34:c4:2b:28:39:08:6b:69:6c:9f: 8b:56:50:b3:ed:b3:53:c5:fa:e1:a4:da:57:12:df:1f:29:c6: 42:24:c9:c7:15:74:3f:ff:83:fd:b5:8e:44:e4:57:bb:01:33: 3a:36:8b:e7 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt9W8C5hOargbQhQE1XrXy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODRlNDczYWE1NjRlYjUxYTdlN2ViOGIxOGYxNGFjMGNi YzJjOWMwHhcNMjYwMTAyMDYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTg1MmZhY2M4ZTJiMDYzOTk3OWU3OTUyZGQ4YjlkZjhmNTIyYWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/dEG2n2rBu0Tnp300Pojp9X03Pi stONIsNG5iymccK7Og8dRY0NnqUHfrDJKSF8SJbU7Tblga7/qRRNKHQa/Xfl1B+o lhXAd9hM5nugaMbOwMQSub7e0Gd8vE1CS9k3jAFTxXI1bvDF6cj160Qwb9eYDzLF fBJJuarngQA5M9qy6SCE5Ptuf1mo9g3Kzq4Af3pCJkscI4H25MNNBrIKZVI20Dd/ FrymSoPKObINpPVHBqmFdeVXHOswZudfJAMweSOQ/4yTWNdc8J9skmj7ZXwWEJvq hZ6Jl8Y4Y+R/9dOSmtVZIgqhAaovOa75VVS1JTaxY2TMX2htgxQdjpu0mwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFDmFL6zI4rBjmXnnlS3Yud+PUirgMB8GA1UdIwQY MBaAFAqE5HOqVk61Gn5+uLGPFKwMvCycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgt NTQ2MjhkZmNiYTRjLzEvT1lVdnJNamlzR09aZWVlVkxkaTUzNDlTS3VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgtNTQ2MjhkZmNiYTRj LzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQBW87IAwQC W96IAwQBwvcMMA8EAgACMAkDBwAgAQZ8IHAwDQYJKoZIhvcNAQELBQADggEBAA0W 6TRN/jVFpFLGKqkYKRg2cA1dUeNUuPhpLUHJaNh0SCm9YwRV7cr422DqAO9mM9VU wKvTAxnnuF4vN099W3HTf1nSEQMDwQed0ktXYgdNsrwFoJV32t39BL1B1wey0yWD 5UYBqg+K9PstHqIl5joRCkxMyuItj/uTZcNOIsqCnqkGQ79GNAbPOc7M+EgxFqKE ROi6XiY2zKIyD61gFnpALqQWDNHZXrLrnDiiu6m6Fq7vZmdkkA5J9x9k/zGyQkdb rl+fZFz9FYZZYp2eNMQrKDkIa2lsn4tWULPts1PF+uGk2lcS3x8pxkIkyccVdD// g/21jkTkV7sBMzo2i+c= -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:44 2026 by rpki-client