This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/owHwLyctP8Oxzql0_PgsjnKWR1Q.roa File: owHwLyctP8Oxzql0_PgsjnKWR1Q.roa (raw, json) Hash identifier: okd6ixQMASQtM3vodku2s12MniqN1mXlVsNaWbdKM5Q= Subject key identifier: A3:01:F0:2F:27:2D:3F:C3:B1:CE:A9:74:FC:F8:2C:8E:72:96:47:54 Certificate issuer: /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5 Certificate serial: 019B7E381534BBB0E907AA2D3E5FF16F7EFB Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/owHwLyctP8Oxzql0_PgsjnKWR1Q.roa Signing time: Fri 02 Jan 2026 10:19:23 +0000 ROA not before: Fri 02 Jan 2026 10:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35691 IP address blocks: 147.78.4.0/24 maxlen: 24 147.78.5.0/24 maxlen: 24 2a09:19c0::/48 maxlen: 48 2a09:19c0:1::/48 maxlen: 48 2a09:19c0:140::/42 maxlen: 42 2a09:19c0:180::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:15:34:bb:b0:e9:07:aa:2d:3e:5f:f1:6f:7e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5 Validity Not Before: Jan 2 10:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a301f02f272d3fc3b1cea974fcf82c8e72964754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b9:99:4f:56:7a:8a:6c:ae:96:e7:36:58:eb: 6a:8d:75:bd:38:02:f8:43:79:63:c6:d9:c8:05:5d: 36:dd:a9:8d:1c:31:ce:71:df:43:1a:29:45:9f:82: c7:34:87:d6:43:e1:2b:45:0a:15:88:f1:a1:b2:76: 3c:d2:9f:f7:80:fd:89:79:b5:59:14:e6:5d:f8:77: 65:68:87:3b:12:2d:b1:3d:d3:a9:e6:f8:a6:bc:04: eb:1e:ec:0e:c6:05:7b:2f:40:72:6c:09:bf:44:7c: 94:17:3b:81:de:a1:48:1a:3f:9d:a4:ac:37:e4:9a: 82:28:52:84:9a:2f:fe:e4:13:50:9f:2d:4d:e3:7b: af:e9:8c:c2:2b:50:90:6f:65:c8:05:5f:eb:43:41: 22:b7:79:43:6e:53:34:ae:b2:00:af:c9:6a:ef:3b: 29:f8:96:fb:5d:85:c5:33:f4:c6:96:35:8b:93:ec: f7:22:22:c4:ba:64:93:2c:f7:c0:b7:3d:97:ba:63: 6f:77:24:79:80:1c:cf:67:4d:1b:3e:6b:51:1b:6f: 76:9a:4a:0b:01:ec:91:12:e3:7e:10:14:9f:85:19: f0:fe:29:7f:4d:a1:f0:19:b8:00:6a:0e:e8:3d:f8: d7:53:71:b0:32:7c:01:ec:e0:03:0f:7c:f4:9e:76: a6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:01:F0:2F:27:2D:3F:C3:B1:CE:A9:74:FC:F8:2C:8E:72:96:47:54 X509v3 Authority Key Identifier: keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/owHwLyctP8Oxzql0_PgsjnKWR1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.4.0/23 IPv6: 2a09:19c0::/47 2a09:19c0:140::-2a09:19c0:1bf:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 07:ad:77:a4:59:74:da:70:c2:12:1a:87:72:23:05:f4:a5:02: 32:d4:2e:7f:c0:0e:3d:d3:fb:a9:15:da:e7:56:4d:e4:46:b1: 25:48:9a:4d:7b:54:1d:bb:34:61:2a:e4:4e:a1:12:2f:98:2a: 16:6a:44:0c:9b:71:9d:d1:35:10:75:15:94:85:16:67:8c:cf: 12:4b:51:d1:6b:c6:12:d0:8c:b3:b7:bb:e1:d2:c7:55:ea:53: 90:8c:f1:33:65:05:1d:87:ad:41:1b:ad:de:0b:23:ad:23:61: 07:06:6b:4e:26:6a:84:d0:6a:5c:92:d9:f4:75:ee:66:fd:be: 04:bf:75:b3:39:73:03:75:61:ab:27:2c:0b:9b:a3:3d:cb:23: 62:69:65:2d:dd:60:29:5a:e6:ae:e5:16:94:6a:51:52:1b:ee: 23:d8:85:97:a0:15:93:7f:7c:1d:4e:23:25:5c:93:9e:7d:a3: b7:b2:29:15:b8:e9:3e:dc:5e:c4:ce:da:47:36:da:c1:70:ed: 7a:0b:d4:67:5c:1f:90:01:18:1a:90:f6:98:fb:25:d6:53:aa: ae:ea:40:70:0c:9f:13:7f:84:0b:51:69:11:2c:39:18:7e:be: 4b:a9:24:8d:77:3f:68:2c:8b:b5:d7:7f:0e:73:aa:11:43:51: 3f:fa:eb:ed -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt+OBU0u7DpB6otPl/xb377MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDU4MmNhNzA0NzE3ZWIwYzk0YmU0ZDg5NDEzZjRiYzJk OGI4ZTUwHhcNMjYwMTAyMTAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzAxZjAyZjI3MmQzZmMzYjFjZWE5NzRmY2Y4MmM4ZTcyOTY0NzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7mZT1Z6imyuluc2WOtqjXW9OAL4 Q3ljxtnIBV023amNHDHOcd9DGilFn4LHNIfWQ+ErRQoViPGhsnY80p/3gP2JebVZ FOZd+HdlaIc7Ei2xPdOp5vimvATrHuwOxgV7L0BybAm/RHyUFzuB3qFIGj+dpKw3 5JqCKFKEmi/+5BNQny1N43uv6YzCK1CQb2XIBV/rQ0Eit3lDblM0rrIAr8lq7zsp +Jb7XYXFM/TGljWLk+z3IiLEumSTLPfAtz2XumNvdyR5gBzPZ00bPmtRG292mkoL AeyREuN+EBSfhRnw/il/TaHwGbgAag7oPfjXU3GwMnwB7OADD3z0nnamiwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFKMB8C8nLT/Dsc6pdPz4LI5ylkdUMB8GA1UdIwQY MBaAFIRFgspwRxfrDJS+TYlBP0vC2LjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAt ZjIzZjY2ZjhkMjQyLzEvb3dId0x5Y3RQOE94enFsMF9QZ3NqbktXUjFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAtZjIzZjY2ZjhkMjQy LzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAMBAIAATAGAwQBk04EMCME AgACMB0DBwEqCRnAAAAwEgMHBioJGcABQAMHBioJGcABgDANBgkqhkiG9w0BAQsF AAOCAQEAB613pFl02nDCEhqHciMF9KUCMtQuf8AOPdP7qRXa51ZN5EaxJUiaTXtU Hbs0YSrkTqESL5gqFmpEDJtxndE1EHUVlIUWZ4zPEktR0WvGEtCMs7e74dLHVepT kIzxM2UFHYetQRut3gsjrSNhBwZrTiZqhNBqXJLZ9HXuZv2+BL91szlzA3Vhqycs C5ujPcsjYmllLd1gKVrmruUWlGpRUhvuI9iFl6AVk398HU4jJVyTnn2jt7IpFbjp PtxexM7aRzbawXDtegvUZ1wfkAEYGpD2mPsl1lOqrupAcAyfE3+EC1FpESw5GH6+ S6kkjXc/aCyLtdd/DnOqEUNRP/rr7Q== -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:46 2026 by rpki-client