This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/OSKY092K7Rd69JqqbL4WMk5Xd4U.roa File: OSKY092K7Rd69JqqbL4WMk5Xd4U.roa (raw, json) Hash identifier: NVRC2Db3R3ftV/bNbwEakNLpneFf6ZR1jTLt2dsBXng= Subject key identifier: 39:22:98:D3:DD:8A:ED:17:7A:F4:9A:AA:6C:BE:16:32:4E:57:77:85 Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Certificate serial: 019B8E410FBBA8D244BB8FF1AB7B7FF78339 Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/OSKY092K7Rd69JqqbL4WMk5Xd4U.roa Signing time: Mon 05 Jan 2026 13:03:07 +0000 ROA not before: Mon 05 Jan 2026 13:03:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57461 IP address blocks: 91.232.72.0/22 maxlen: 22 91.232.72.0/24 maxlen: 24 91.232.74.0/24 maxlen: 24 91.232.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:41:0f:bb:a8:d2:44:bb:8f:f1:ab:7b:7f:f7:83:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Validity Not Before: Jan 5 13:03:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=392298d3dd8aed177af49aaa6cbe16324e577785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bc:28:2e:ab:51:4f:84:c0:42:45:da:cd:14: 54:4b:0c:df:a7:39:94:f4:24:7c:26:11:b3:f7:37: 8d:b5:4d:de:39:86:68:db:92:38:9d:e3:63:49:86: da:8d:8a:90:7e:80:16:77:40:35:22:22:e5:3e:6c: 81:68:97:74:3c:29:b6:88:45:30:f1:68:37:06:53: 88:b3:a5:81:72:4a:96:26:e5:8a:ec:97:18:6a:90: 9f:1d:3d:4b:5c:b0:e2:dc:96:46:43:2d:83:ac:ac: 5f:ff:78:e9:e1:22:14:18:f3:90:51:09:d6:78:b6: 42:4e:ad:80:1e:49:b1:c4:48:ba:ff:8b:49:04:f4: 08:ab:ba:d3:6b:3f:a4:36:a9:20:45:a1:42:eb:4e: 6d:15:b4:b5:e8:08:a8:fd:f4:5f:69:93:55:bc:0a: b9:e4:57:2e:4d:2f:30:47:9c:29:8d:9c:41:4d:21: ef:43:77:a5:d8:11:16:56:33:07:c1:af:91:2c:16: 2b:bc:da:44:2c:9a:30:4a:f8:da:43:3b:78:aa:60: 46:68:12:a0:8c:62:14:09:f1:a9:9c:e9:e8:1a:2e: d3:9f:56:a0:cf:39:2d:11:88:9a:1f:a1:4d:c4:54: e7:9d:84:ce:a5:48:30:77:01:ff:76:db:30:5b:32: c4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:22:98:D3:DD:8A:ED:17:7A:F4:9A:AA:6C:BE:16:32:4E:57:77:85 X509v3 Authority Key Identifier: keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/OSKY092K7Rd69JqqbL4WMk5Xd4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.72.0/22 Signature Algorithm: sha256WithRSAEncryption 66:7d:a2:93:18:02:2e:75:97:33:f9:af:07:e0:44:e7:d2:9b: 8a:51:89:06:44:0a:bb:76:35:8f:bf:73:28:30:1e:98:35:f7: 89:13:b3:6c:ed:9b:97:73:1b:8b:e4:5b:5d:aa:25:42:48:c5: fc:e3:b4:77:11:f9:e0:ae:cd:09:5e:07:97:e3:d7:3d:10:ce: a1:bb:b6:70:8d:a0:27:a7:bf:a8:b3:00:a1:44:98:60:3d:38: eb:f0:98:e8:7b:f3:73:a3:b3:c3:af:e8:d4:ed:6b:cb:66:77: b6:ae:40:05:7d:98:76:eb:92:69:5c:54:10:ff:01:d6:f0:1a: 1d:06:f0:b6:42:95:39:13:72:a8:be:b6:fe:e5:ac:e7:d8:2a: 72:f8:d4:f0:11:04:a6:ee:d4:39:31:29:11:15:a5:4c:86:90: 58:36:ad:95:26:8a:8f:7a:9d:0c:af:b8:74:5b:72:2b:92:73: 61:2d:4a:91:dc:36:b8:2c:f4:aa:d9:87:43:8e:83:11:19:02: 5a:06:fb:2b:5b:80:6d:8d:bb:98:a2:d9:e0:62:0d:11:81:7e: 69:e3:68:3f:58:cf:cc:14:47:bb:b8:a8:7d:af:50:4a:15:ff: f2:8f:8d:36:ca:d2:80:df:e1:d9:a5:c5:79:3b:70:04:93:c6: b1:b2:95:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuOQQ+7qNJEu4/xq3t/94M5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOWI1NmQ4ZDk2ZWJjYjVmY2Y4N2RlMmVjMmI1MmMxOTRj Y2Y5ZjkwHhcNMjYwMTA1MTMwMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTIyOThkM2RkOGFlZDE3N2FmNDlhYWE2Y2JlMTYzMjRlNTc3Nzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rwoLqtRT4TAQkXazRRUSwzfpzmU 9CR8JhGz9zeNtU3eOYZo25I4neNjSYbajYqQfoAWd0A1IiLlPmyBaJd0PCm2iEUw 8Wg3BlOIs6WBckqWJuWK7JcYapCfHT1LXLDi3JZGQy2DrKxf/3jp4SIUGPOQUQnW eLZCTq2AHkmxxEi6/4tJBPQIq7rTaz+kNqkgRaFC605tFbS16Aio/fRfaZNVvAq5 5FcuTS8wR5wpjZxBTSHvQ3el2BEWVjMHwa+RLBYrvNpELJowSvjaQzt4qmBGaBKg jGIUCfGpnOnoGi7Tn1agzzktEYiaH6FNxFTnnYTOpUgwdwH/dtswWzLEMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDkimNPdiu0XevSaqmy+FjJOV3eFMB8GA1UdIwQY MBaAFLubVtjZbry1/Ph94uwrUsGUzPn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmIt NGY0ZmU4MDNiMDE1LzEvT1NLWTA5Mks3UmQ2OUpxcWJMNFdNazVYZDRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmItNGY0ZmU4MDNiMDE1 LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+hIMA0G CSqGSIb3DQEBCwUAA4IBAQBmfaKTGAIudZcz+a8H4ETn0puKUYkGRAq7djWPv3Mo MB6YNfeJE7Ns7ZuXcxuL5FtdqiVCSMX847R3Efngrs0JXgeX49c9EM6hu7ZwjaAn p7+oswChRJhgPTjr8Jjoe/Nzo7PDr+jU7WvLZne2rkAFfZh265JpXFQQ/wHW8Bod BvC2QpU5E3Kovrb+5azn2Cpy+NTwEQSm7tQ5MSkRFaVMhpBYNq2VJoqPep0Mr7h0 W3IrknNhLUqR3Da4LPSq2YdDjoMRGQJaBvsrW4BtjbuYotngYg0RgX5p42g/WM/M FEe7uKh9r1BKFf/yj402ytKA3+HZpcV5O3AEk8axspVN -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:53 2026 by rpki-client