This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/O0sj8jaNSyJUdTMszyVTwWQYdYc.roa File: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (raw, json) Hash identifier: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k= Subject key identifier: 3B:4B:23:F2:36:8D:4B:22:54:75:33:2C:CF:25:53:C1:64:18:75:87 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B77C66FCFA12B5F8E0F024D166CA15AEB Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/O0sj8jaNSyJUdTMszyVTwWQYdYc.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211826 IP address blocks: 212.66.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6f:cf:a1:2b:5f:8e:0f:02:4d:16:6c:a1:5a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b4b23f2368d4b225475332ccf2553c164187587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:0f:19:32:05:10:81:93:fa:37:a4:2e:9b: fe:e7:11:de:4c:22:1b:b6:3c:11:46:12:35:be:25: bb:11:4a:f2:05:88:99:61:86:3f:1c:e1:8e:aa:90: 7c:8c:5b:7d:58:93:63:c3:aa:24:88:42:bb:f9:ce: 9d:68:d2:16:f9:3c:9c:7b:5f:84:51:4a:67:a8:0b: 15:90:72:e1:6d:83:5d:b0:ae:0b:a5:73:18:55:0d: 86:c0:8b:58:5e:e9:fb:f9:8a:ad:fe:58:1b:e5:59: fd:23:8e:1e:4d:66:a9:10:e9:0a:d5:3c:47:79:68: 62:15:94:c1:70:46:eb:9f:2f:56:7c:84:db:c1:b3: 0c:e6:44:c6:cb:91:54:ee:b7:47:7e:25:23:97:41: c6:19:9d:1a:f0:de:8c:37:3c:a0:83:82:a4:c4:9f: ff:97:34:6a:20:22:e8:9b:64:96:a1:e8:db:f1:e1: 5f:c8:65:ad:bc:cf:46:45:9b:43:98:be:d2:1d:af: 55:79:1b:77:b2:c2:80:1b:81:f4:ce:de:6a:b0:ad: 9c:63:2e:ff:f3:61:0d:78:f3:75:58:a2:01:87:84: c1:de:71:65:d4:64:cb:bd:09:52:5e:07:1a:26:7e: 05:f7:7a:89:30:ab:06:7e:9b:42:78:5f:3d:ad:ea: 2a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4B:23:F2:36:8D:4B:22:54:75:33:2C:CF:25:53:C1:64:18:75:87 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/O0sj8jaNSyJUdTMszyVTwWQYdYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.66.54.0/24 Signature Algorithm: sha256WithRSAEncryption a8:ab:89:29:24:7c:7f:b0:c8:98:68:3e:11:4b:0f:80:8a:1a: b2:0f:d7:26:6f:0a:43:38:b2:81:c3:a2:57:02:c2:e2:70:be: 2d:30:46:af:f3:49:94:8e:0f:9e:92:7e:d0:14:3b:78:41:82: 27:bf:41:52:18:7f:03:e2:97:44:fd:f0:bc:73:26:b5:83:45: fa:7d:84:c0:cf:b3:73:7c:19:cc:58:1b:f2:44:fe:73:9c:b9: 76:28:21:40:87:9c:32:b0:76:c7:87:40:9c:2f:8c:60:bf:d8: 06:32:6e:01:90:bb:ec:ee:1f:8f:49:09:60:0b:97:17:e6:b3: 8d:66:be:7d:50:c6:45:97:4d:84:69:48:ae:79:df:29:d7:58: 4c:f9:9f:be:75:ec:9a:ee:49:33:7c:b9:e9:70:fb:25:c4:0a: 84:ab:1d:49:d8:40:df:7e:52:4f:34:85:8d:cd:0c:45:b7:68: b1:1c:ee:07:29:e6:43:e4:31:81:ab:74:e2:9d:20:cc:a2:d0: 5c:73:bc:d5:47:5e:15:a8:5e:7a:cd:03:4a:e5:2d:34:96:c1: 9d:19:0e:09:30:a4:94:c1:4f:5d:72:01:87:9f:20:97:a2:bb: 69:0b:d2:35:58:f7:e8:7e:06:40:fb:64:12:d3:9f:d4:cb:f7: 45:21:e0:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xm/PoStfjg8CTRZsoVrrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjRiMjNmMjM2OGQ0YjIyNTQ3NTMzMmNjZjI1NTNjMTY0MTg3NTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO4PGTIFEIGT+jekLpv+5xHeTCIb tjwRRhI1viW7EUryBYiZYYY/HOGOqpB8jFt9WJNjw6okiEK7+c6daNIW+Tyce1+E UUpnqAsVkHLhbYNdsK4LpXMYVQ2GwItYXun7+Yqt/lgb5Vn9I44eTWapEOkK1TxH eWhiFZTBcEbrny9WfITbwbMM5kTGy5FU7rdHfiUjl0HGGZ0a8N6MNzygg4KkxJ// lzRqICLom2SWoejb8eFfyGWtvM9GRZtDmL7SHa9VeRt3ssKAG4H0zt5qsK2cYy7/ 82ENePN1WKIBh4TB3nFl1GTLvQlSXgcaJn4F93qJMKsGfptCeF89reoqWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDtLI/I2jUsiVHUzLM8lU8FkGHWHMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvTzBzajhqYU5TeUpVZFRNc3p5VlR3V1FZZFljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EI2MA0G CSqGSIb3DQEBCwUAA4IBAQCoq4kpJHx/sMiYaD4RSw+AihqyD9cmbwpDOLKBw6JX AsLicL4tMEav80mUjg+ekn7QFDt4QYInv0FSGH8D4pdE/fC8cya1g0X6fYTAz7Nz fBnMWBvyRP5znLl2KCFAh5wysHbHh0CcL4xgv9gGMm4BkLvs7h+PSQlgC5cX5rON Zr59UMZFl02EaUiued8p11hM+Z++deya7kkzfLnpcPslxAqEqx1J2EDfflJPNIWN zQxFt2ixHO4HKeZD5DGBq3TinSDMotBcc7zVR14VqF56zQNK5S00lsGdGQ4JMKSU wU9dcgGHnyCXortpC9I1WPfofgZA+2QS05/Uy/dFIeAm -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:56 2026 by rpki-client