This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/OUOP2IJYsVbNI_PTNHQ12RVMoDI.roa File: OUOP2IJYsVbNI_PTNHQ12RVMoDI.roa (raw, json) Hash identifier: BnGONzncD2wwl5KKt6nDn2hcjBqGU1Umy1qq2TndNLU= Subject key identifier: 39:43:8F:D8:82:58:B1:56:CD:23:F3:D3:34:74:35:D9:15:4C:A0:32 Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Certificate serial: 019B7EA6B09714D5F69245563595B34E129C Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/OUOP2IJYsVbNI_PTNHQ12RVMoDI.roa Signing time: Fri 02 Jan 2026 12:20:11 +0000 ROA not before: Fri 02 Jan 2026 12:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6660 IP address blocks: 46.190.145.0/24 maxlen: 24 139.47.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b0:97:14:d5:f6:92:45:56:35:95:b3:4e:12:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Validity Not Before: Jan 2 12:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39438fd88258b156cd23f3d3347435d9154ca032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:d2:fd:83:5d:4f:0e:f3:25:96:43:f0:b8: 90:42:3a:cd:26:7e:f5:dc:e5:fa:5c:db:41:23:20: 63:8f:e9:82:2c:ff:2e:e4:43:93:31:68:fe:da:fb: 49:9c:89:c4:62:74:e3:21:e6:8e:6b:bb:eb:df:13: a5:e1:c9:20:87:3c:23:25:6b:75:b7:02:23:2b:5d: 67:e9:9b:1b:e9:07:13:b6:b7:01:f7:b4:30:3b:51: 78:b5:a8:8c:b2:22:7f:25:2b:01:86:75:74:2f:f1: 04:07:37:d2:c4:4b:6c:ee:04:ce:b1:ce:11:11:bd: 8a:ff:ef:9a:85:46:73:87:8e:21:f8:55:f0:dc:75: 0b:43:0c:69:d0:fd:85:25:00:c4:9e:ea:fe:06:33: 52:ad:e8:1f:e7:b3:5a:f5:fe:fc:d4:b5:c9:fc:f5: 4f:bf:e3:5c:d5:be:3a:a2:c9:5f:75:bf:36:8e:28: 2d:a5:1c:1f:ab:15:b6:52:b0:8e:dd:ef:8a:96:f1: 18:76:05:48:c5:e7:2a:00:05:59:f0:3e:e6:bb:f7: 2c:4f:da:34:d2:72:f7:44:13:d1:4a:99:ee:23:4d: ba:eb:8c:87:41:47:b2:32:c4:f4:9b:d5:ca:ae:72: aa:61:e9:a6:67:1c:d2:aa:e0:b5:05:fa:8e:07:28: 70:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:43:8F:D8:82:58:B1:56:CD:23:F3:D3:34:74:35:D9:15:4C:A0:32 X509v3 Authority Key Identifier: keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/OUOP2IJYsVbNI_PTNHQ12RVMoDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.190.145.0/24 139.47.192.0/18 Signature Algorithm: sha256WithRSAEncryption 17:bf:86:55:ea:b8:0e:fd:87:f6:e1:2f:42:30:f5:99:ac:98: 1a:02:4c:00:9c:87:78:98:1c:1d:1a:6d:f1:21:90:e0:2b:0c: f1:31:b3:4a:3e:67:3e:35:ed:e2:aa:15:ef:41:a5:96:ee:12: 0c:a3:ad:9a:b2:a0:8d:77:74:5a:17:89:e1:35:f9:2e:e3:28: c1:d7:89:79:cf:85:28:4b:e9:70:9f:4f:be:77:83:8c:9d:74: 43:74:ee:fd:9a:63:85:b5:00:3f:3b:2b:2f:e8:1c:df:fd:7c: b9:60:fb:e8:8e:cf:46:6c:fe:fa:4b:cb:6b:aa:95:dd:99:f0: 64:1e:53:b1:57:61:7b:24:44:d9:fb:b6:5d:32:35:5f:f2:ea: 93:84:40:93:7c:db:35:8b:fc:98:52:e4:ed:f3:b1:07:97:b7: a7:a6:96:62:33:88:57:c5:ac:a7:37:41:5b:cb:5f:9c:14:3a: 2b:86:e0:0f:ab:ec:51:fa:ab:3f:2d:8c:ee:23:8a:e6:c2:b7: 0b:8d:b6:6b:59:96:3b:8b:d7:2b:c9:a0:c4:08:6a:fe:35:1f: 00:a3:21:32:47:2d:3c:a2:5a:35:21:9f:75:eb:a6:3d:67:5f: fe:43:6f:51:a6:74:4a:01:dd:19:35:70:e3:de:c5:ce:70:09: 1a:ea:10:14 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+prCXFNX2kkVWNZWzThKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3 NTE1ZDIwHhcNMjYwMTAyMTIyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTQzOGZkODgyNThiMTU2Y2QyM2YzZDMzNDc0MzVkOTE1NGNhMDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk/S/YNdTw7zJZZD8LiQQjrNJn71 3OX6XNtBIyBjj+mCLP8u5EOTMWj+2vtJnInEYnTjIeaOa7vr3xOl4ckghzwjJWt1 twIjK11n6Zsb6QcTtrcB97QwO1F4taiMsiJ/JSsBhnV0L/EEBzfSxEts7gTOsc4R Eb2K/++ahUZzh44h+FXw3HULQwxp0P2FJQDEnur+BjNSregf57Na9f781LXJ/PVP v+Nc1b46oslfdb82jigtpRwfqxW2UrCO3e+KlvEYdgVIxecqAAVZ8D7mu/csT9o0 0nL3RBPRSpnuI02664yHQUeyMsT0m9XKrnKqYemmZxzSquC1BfqOByhw7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDlDj9iCWLFWzSPz0zR0NdkVTKAyMB8GA1UdIwQY MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvT1VPUDJJSllzVmJOSV9QVE5IUTEyUlZNb0RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALr6RAwQG iy/AMA0GCSqGSIb3DQEBCwUAA4IBAQAXv4ZV6rgO/Yf24S9CMPWZrJgaAkwAnId4 mBwdGm3xIZDgKwzxMbNKPmc+Ne3iqhXvQaWW7hIMo62asqCNd3RaF4nhNfku4yjB 14l5z4UoS+lwn0++d4OMnXRDdO79mmOFtQA/Oysv6Bzf/Xy5YPvojs9GbP76S8tr qpXdmfBkHlOxV2F7JETZ+7ZdMjVf8uqThECTfNs1i/yYUuTt87EHl7enppZiM4hX xaynN0Fby1+cFDorhuAPq+xR+qs/LYzuI4rmwrcLjbZrWZY7i9cryaDECGr+NR8A oyEyRy08olo1IZ9166Y9Z1/+Q29RpnRKAd0ZNXDj3sXOcAka6hAU -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:26 2026 by rpki-client