This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/OZwTEhhz89DG-d3VUUmj7RDclB0.roa File: OZwTEhhz89DG-d3VUUmj7RDclB0.roa (raw, json) Hash identifier: VGKfh4SeFwSQNLUtXLKPpcLTHLslj6UGjADg7S741KI= Subject key identifier: 39:9C:13:12:18:73:F3:D0:C6:F9:DD:D5:51:49:A3:ED:10:DC:94:1D Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0 Certificate serial: 019B797F1C4939E267A55BF3032D4384B45E Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/OZwTEhhz89DG-d3VUUmj7RDclB0.roa Signing time: Thu 01 Jan 2026 12:18:52 +0000 ROA not before: Thu 01 Jan 2026 12:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207589 IP address blocks: 89.40.210.0/24 maxlen: 24 91.205.43.0/24 maxlen: 24 185.109.254.0/24 maxlen: 24 2a06:c900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1c:49:39:e2:67:a5:5b:f3:03:2d:43:84:b4:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0 Validity Not Before: Jan 1 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=399c13121873f3d0c6f9ddd55149a3ed10dc941d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a4:89:38:d8:8a:d9:b7:7f:e3:78:5b:ba:23: 43:aa:aa:61:e6:1b:49:af:8e:dc:5e:b1:51:a0:24: aa:44:8c:29:fb:db:8c:25:10:b5:e8:9a:ac:79:53: a7:73:e2:de:72:be:aa:b2:f8:e7:e8:dd:bd:f0:1d: 5d:75:d9:24:a5:6f:c7:0c:f1:3b:eb:21:84:c7:bc: f8:24:a2:61:0c:30:69:c9:d2:a4:0d:be:33:f6:96: 64:0c:35:ad:18:04:c8:7c:d0:d0:81:a7:fb:bf:5c: b5:52:1f:05:4f:4c:e9:9e:6f:34:1c:31:58:69:c0: b4:e3:51:f9:00:a8:3d:13:f5:39:06:bd:df:38:d3: ca:d0:cf:82:34:e1:c1:0f:5a:47:c2:af:e3:40:0e: 2c:c9:9d:ec:a0:83:05:c5:5c:ac:86:6a:d6:f2:2e: 4b:7f:2a:ae:d1:bf:a4:c5:82:98:14:27:4f:42:fd: 26:b4:d9:d9:31:64:e2:21:a9:8c:af:b9:dc:82:cd: 67:c1:38:22:4d:a4:10:94:f5:56:7f:df:ed:64:7a: e4:f7:bc:09:3b:c7:d2:d9:af:0c:d8:3e:d0:8c:27: 55:17:d1:2d:0c:c6:84:e7:20:c8:77:3d:90:46:48: 62:ed:eb:66:3e:90:f2:62:f1:7c:67:78:73:9c:25: 05:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9C:13:12:18:73:F3:D0:C6:F9:DD:D5:51:49:A3:ED:10:DC:94:1D X509v3 Authority Key Identifier: keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/OZwTEhhz89DG-d3VUUmj7RDclB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.40.210.0/24 91.205.43.0/24 185.109.254.0/24 IPv6: 2a06:c900::/29 Signature Algorithm: sha256WithRSAEncryption 97:7f:d2:a9:6c:cb:a3:b8:5a:85:02:31:b8:75:7a:ee:84:6b: ab:59:33:ef:46:50:6b:16:bb:fc:b0:0b:58:53:b3:ba:fe:36: 01:6f:37:fa:33:7f:4d:b2:fd:c9:66:f1:1e:bc:09:ab:e8:53: ce:d5:d3:f4:92:a6:54:e0:71:12:57:3b:27:4f:7a:35:4b:cf: 63:da:6c:42:0c:6c:fa:0e:93:b3:8d:45:bf:4d:90:af:b6:42: dd:82:6a:7b:9a:80:5e:56:23:e5:f7:70:3a:60:b3:2c:d2:a1: 63:28:69:6f:40:25:93:c6:96:ad:20:d4:4b:d3:91:a3:47:66: 69:b3:bd:f6:a1:4a:71:39:a7:0e:51:2e:9e:ab:ad:56:12:0f: 22:7a:14:88:9e:79:8c:55:d1:c2:6f:e0:08:40:cb:09:5d:a7: bc:33:fa:dc:3e:6e:bf:d8:42:ce:9c:6c:8f:60:05:78:77:cd: aa:21:07:da:00:34:69:26:bd:98:9f:b6:4f:28:2d:4a:63:39: c6:61:42:a7:7a:73:af:9a:e1:09:cb:a1:e1:86:c8:b0:50:98: f7:e6:65:a5:3c:c8:5c:b9:38:d5:be:76:18:02:6c:91:5f:64: 0f:4e:a4:d3:8d:b9:e4:f8:41:78:13:d5:97:9d:e2:d5:34:9a: ee:ec:81:2c -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fxxJOeJnpVvzAy1DhLReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYTc1OWIwNmU2ZmVkMDNiMDkzMDc0OTE1M2ZjMTZhMTJh NTAxZTAwHhcNMjYwMTAxMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTljMTMxMjE4NzNmM2QwYzZmOWRkZDU1MTQ5YTNlZDEwZGM5NDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaSJONiK2bd/43hbuiNDqqph5htJ r47cXrFRoCSqRIwp+9uMJRC16JqseVOnc+Lecr6qsvjn6N298B1dddkkpW/HDPE7 6yGEx7z4JKJhDDBpydKkDb4z9pZkDDWtGATIfNDQgaf7v1y1Uh8FT0zpnm80HDFY acC041H5AKg9E/U5Br3fONPK0M+CNOHBD1pHwq/jQA4syZ3soIMFxVyshmrW8i5L fyqu0b+kxYKYFCdPQv0mtNnZMWTiIamMr7ncgs1nwTgiTaQQlPVWf9/tZHrk97wJ O8fS2a8M2D7QjCdVF9EtDMaE5yDIdz2QRkhi7etmPpDyYvF8Z3hznCUF3wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFDmcExIYc/PQxvnd1VFJo+0Q3JQdMB8GA1UdIwQY MBaAFGOnWbBub+0DsJMHSRU/wWoSpQHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xMzE1MGMtODVkYS00NThkLWJjNmMt OWUyNDk2OGU2NjY0LzEvT1p3VEVoaHo4OURHLWQzVlVVbWo3UkRjbEIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8xMzE1MGMtODVkYS00NThkLWJjNmMtOWUyNDk2OGU2NjY0 LzEvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAWSjSAwQA W80rAwQAuW3+MA0EAgACMAcDBQMqBskAMA0GCSqGSIb3DQEBCwUAA4IBAQCXf9Kp bMujuFqFAjG4dXruhGurWTPvRlBrFrv8sAtYU7O6/jYBbzf6M39Nsv3JZvEevAmr 6FPO1dP0kqZU4HESVzsnT3o1S89j2mxCDGz6DpOzjUW/TZCvtkLdgmp7moBeViPl 93A6YLMs0qFjKGlvQCWTxpatINRL05GjR2Zps732oUpxOacOUS6eq61WEg8iehSI nnmMVdHCb+AIQMsJXae8M/rcPm6/2ELOnGyPYAV4d82qIQfaADRpJr2Yn7ZPKC1K YznGYUKnenOvmuEJy6HhhsiwUJj35mWlPMhcuTjVvnYYAmyRX2QPTqTTjbnk+EF4 E9WXneLVNJru7IEs -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:06 2026 by rpki-client