This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/OVFuKS9SDhNLlPGQWcEgplEJwjg.roa File: OVFuKS9SDhNLlPGQWcEgplEJwjg.roa (raw, json) Hash identifier: FuVEvMnAHrxqNCXvcyPt6SBOpGLUTurnAKau6ieUyFE= Subject key identifier: 39:51:6E:29:2F:52:0E:13:4B:94:F1:90:59:C1:20:A6:51:09:C2:38 Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 019B7DC88551E7BD275CBB31B0906F593F55 Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/OVFuKS9SDhNLlPGQWcEgplEJwjg.roa Signing time: Fri 02 Jan 2026 08:17:31 +0000 ROA not before: Fri 02 Jan 2026 08:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57246 IP address blocks: 91.108.41.0/24 maxlen: 24 95.140.84.0/22 maxlen: 22 95.140.84.0/24 maxlen: 24 95.140.85.0/24 maxlen: 24 95.140.86.0/24 maxlen: 24 95.140.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:85:51:e7:bd:27:5c:bb:31:b0:90:6f:59:3f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: Jan 2 08:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39516e292f520e134b94f19059c120a65109c238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a9:4b:80:03:a9:2d:fd:05:61:ca:db:b2:00: 75:45:da:4b:68:ac:a8:9a:8f:5d:00:69:45:0f:7a: 67:4b:6f:08:16:97:13:c4:64:f5:c4:76:0b:a2:fe: d2:48:70:0b:2b:f1:dd:29:65:2d:76:89:33:7a:82: 6b:e4:7d:e1:31:f4:b1:75:c1:06:9f:39:10:4e:4b: 91:91:6d:06:5e:c2:fa:5f:fe:8b:bf:eb:ad:b4:c0: 24:64:8f:10:2c:83:55:17:cc:ed:2e:fd:a0:42:20: a8:f9:b5:2c:69:ff:54:83:8b:bb:9d:01:42:e9:ec: da:06:18:25:90:0d:99:18:92:5a:e4:c0:88:b6:60: 50:d0:1c:fc:d1:ef:6c:e5:fc:9f:99:21:a3:60:8d: ee:ad:37:4d:4a:34:f4:ba:a4:d8:8b:be:5d:b5:5b: da:15:28:2f:66:a1:38:36:95:c1:29:86:8a:d1:98: 13:7e:e8:a2:1f:7c:e9:9d:f9:58:f5:c5:a6:b3:2f: f1:bc:5b:ec:87:a5:c0:bc:db:54:b5:35:30:7e:ab: 66:02:24:a2:8b:ac:df:6e:61:1d:8a:15:84:5d:41: 16:60:e9:53:6e:f4:37:ef:ac:9c:80:8f:c9:7f:10: 5c:6c:e7:65:91:2d:ea:8a:8e:e2:df:ae:31:a1:e9: e4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:51:6E:29:2F:52:0E:13:4B:94:F1:90:59:C1:20:A6:51:09:C2:38 X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/OVFuKS9SDhNLlPGQWcEgplEJwjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.41.0/24 95.140.84.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:ae:69:b7:2c:00:c5:d1:59:55:a8:c5:42:94:44:f4:ea:cb: 53:bc:3e:cc:97:34:9f:bb:60:07:44:c8:3f:7d:4d:2e:d0:a3: 66:01:24:91:94:22:a0:b6:24:57:68:e9:2b:3d:6f:66:1f:9d: 56:7d:6e:77:f7:d0:af:4e:e5:9f:5b:f7:9f:c6:17:f8:6b:cf: 7f:b4:0f:65:1d:c3:e5:4a:ff:db:2e:ff:b5:19:ad:c8:20:cf: ac:10:e3:14:93:59:88:fb:48:01:31:8e:6f:97:11:a0:b9:7c: 26:25:c9:e9:f1:63:bb:38:8c:d2:ea:3c:00:f1:43:f1:88:a8: 28:71:14:bb:88:13:c1:ff:f5:d9:dc:2e:5c:9f:d4:51:36:0b: 00:37:64:a0:38:09:04:40:35:71:67:e8:d0:1a:36:b0:c5:4d: 63:73:0f:d5:35:e9:fc:3e:2b:f3:35:bc:1c:e7:e0:38:2a:5b: 29:c8:05:7d:d5:39:08:3d:8c:25:b4:d7:b1:cb:9b:b4:14:3d: ce:5b:3d:7f:89:f1:ba:a7:26:60:e4:72:ae:1e:78:3d:93:fa: f1:1e:c6:8b:ca:2a:a9:2d:1b:cd:22:be:42:2d:b3:72:e9:98: ed:48:11:42:f6:34:5e:d0:46:84:b9:2d:38:7b:9a:7a:5c:3c: ba:91:49:86 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yIVR570nXLsxsJBvWT9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjYwMTAyMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTUxNmUyOTJmNTIwZTEzNGI5NGYxOTA1OWMxMjBhNjUxMDljMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56lLgAOpLf0FYcrbsgB1RdpLaKyo mo9dAGlFD3pnS28IFpcTxGT1xHYLov7SSHALK/HdKWUtdokzeoJr5H3hMfSxdcEG nzkQTkuRkW0GXsL6X/6Lv+uttMAkZI8QLINVF8ztLv2gQiCo+bUsaf9Ug4u7nQFC 6ezaBhglkA2ZGJJa5MCItmBQ0Bz80e9s5fyfmSGjYI3urTdNSjT0uqTYi75dtVva FSgvZqE4NpXBKYaK0ZgTfuiiH3zpnflY9cWmsy/xvFvsh6XAvNtUtTUwfqtmAiSi i6zfbmEdihWEXUEWYOlTbvQ376ycgI/JfxBcbOdlkS3qio7i364xoenkgQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDlRbikvUg4TS5TxkFnBIKZRCcI4MB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEvT1ZGdUtTOVNEaE5MbFBHUVdjRWdwbEVKd2pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW2wpAwQC X4xUMA0GCSqGSIb3DQEBCwUAA4IBAQBcrmm3LADF0VlVqMVClET06stTvD7MlzSf u2AHRMg/fU0u0KNmASSRlCKgtiRXaOkrPW9mH51WfW5399CvTuWfW/efxhf4a89/ tA9lHcPlSv/bLv+1Ga3IIM+sEOMUk1mI+0gBMY5vlxGguXwmJcnp8WO7OIzS6jwA 8UPxiKgocRS7iBPB//XZ3C5cn9RRNgsAN2SgOAkEQDVxZ+jQGjawxU1jcw/VNen8 PivzNbwc5+A4KlspyAV91TkIPYwltNexy5u0FD3OWz1/ifG6pyZg5HKuHng9k/rx HsaLyiqpLRvNIr5CLbNy6ZjtSBFC9jRe0EaEuS04e5p6XDy6kUmG -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:16 2026 by rpki-client