This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/OOjjbiEjw5WVY_zDG3MNRgHawWc.roa File: OOjjbiEjw5WVY_zDG3MNRgHawWc.roa (raw, json) Hash identifier: 6hSHQjeZPUQqSFTuBckD24PIf8hoBIsHEYoWzKPaWp4= Subject key identifier: 38:E8:E3:6E:21:23:C3:95:95:63:FC:C3:1B:73:0D:46:01:DA:C1:67 Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f Certificate serial: 019B77595D152DB5F35FBBD1DC2F18636907 Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/OOjjbiEjw5WVY_zDG3MNRgHawWc.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204692 IP address blocks: 185.243.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5d:15:2d:b5:f3:5f:bb:d1:dc:2f:18:63:69:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38e8e36e2123c3959563fcc31b730d4601dac167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:93:29:29:2a:ca:f8:6d:fd:5a:a2:ab:99: 85:7a:01:f8:9e:04:39:9b:da:c8:32:88:2d:8b:ed: 65:ae:90:07:0a:e5:fb:48:57:34:36:b7:fe:ae:a2: d4:42:c6:6f:8e:07:38:e6:52:a9:78:f3:f9:f5:3d: e7:13:04:2b:82:a1:e1:b0:83:c3:5a:3d:01:ec:a6: b5:e6:2e:bb:30:f2:98:37:73:22:d7:f2:31:7a:7b: d4:69:86:33:64:05:45:74:42:74:92:61:b1:29:0d: 69:2b:f8:59:e2:2d:89:92:d8:87:64:ee:1a:7c:b5: 39:13:92:15:f9:19:5c:8c:d0:4d:f9:fa:5a:99:e7: 78:27:ab:cc:f9:55:86:7d:d9:1b:e3:09:1d:d0:39: 6e:f3:dd:2c:4a:48:b3:c9:35:34:ea:6e:c9:66:09: 8b:ad:1f:26:14:5d:77:05:f4:ac:07:53:3d:91:b0: 20:3e:45:6f:89:ca:aa:8f:72:3c:ff:ce:a9:8a:39: 84:16:23:3d:cf:67:d3:d3:d7:5c:d2:ad:a8:3d:be: 17:fd:df:d1:5f:27:c4:87:c7:df:56:81:87:19:24: 0c:9f:54:ef:ac:e0:74:43:0d:e2:ca:c1:0b:2a:56: 60:a6:14:f6:ef:cb:cc:23:09:9b:c3:20:19:8b:5e: 6d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E8:E3:6E:21:23:C3:95:95:63:FC:C3:1B:73:0D:46:01:DA:C1:67 X509v3 Authority Key Identifier: keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/OOjjbiEjw5WVY_zDG3MNRgHawWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.31.0/24 Signature Algorithm: sha256WithRSAEncryption 55:2c:40:ae:fd:ea:89:52:4a:2c:4d:c2:30:14:97:45:41:9a: b6:e0:e0:a0:e1:33:8c:a9:26:5a:4b:14:9c:24:9b:2a:61:61: 78:56:e7:41:82:07:1b:4d:8f:2d:e9:e1:b1:08:74:f6:54:d5: 4f:a7:fc:0f:d9:6a:c8:ad:1e:3d:12:a4:69:18:20:d1:b3:54: 05:b2:4f:db:69:d9:60:a4:f7:6b:63:24:f0:67:25:c8:4e:a0: 5f:ed:5c:cf:85:94:32:23:3b:6b:5d:bc:67:e2:14:c7:6b:da: 9a:2b:60:4e:de:56:02:1e:a8:8a:fa:ca:1d:37:5f:e7:c4:11: 72:d1:f5:11:15:f3:e3:c5:b4:78:18:2b:dc:5f:e5:9c:ba:39: 60:31:4a:f9:a5:c3:84:b0:2f:3f:da:1a:40:71:e5:f8:f2:70: 7a:64:b7:8c:76:62:dd:d6:7b:fb:4a:82:ca:57:42:f9:16:89: 2c:dd:14:23:4b:50:1b:24:f3:03:cd:47:9c:fe:96:dd:5b:62: d4:69:fa:b2:e2:8e:9e:cf:de:65:e5:81:84:4e:c0:24:c7:46: 3f:f1:2a:24:a1:ee:f5:20:fb:f2:20:d4:1b:9c:56:52:73:7e: de:e7:f4:92:de:17:36:aa:46:ac:b1:aa:a6:f3:af:d7:13:f6: 5d:47:a5:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WV0VLbXzX7vR3C8YY2kHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4 MWEyOWYwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGU4ZTM2ZTIxMjNjMzk1OTU2M2ZjYzMxYjczMGQ0NjAxZGFjMTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuuTKSkqyvht/Vqiq5mFegH4ngQ5 m9rIMogti+1lrpAHCuX7SFc0Nrf+rqLUQsZvjgc45lKpePP59T3nEwQrgqHhsIPD Wj0B7Ka15i67MPKYN3Mi1/IxenvUaYYzZAVFdEJ0kmGxKQ1pK/hZ4i2JktiHZO4a fLU5E5IV+RlcjNBN+fpamed4J6vM+VWGfdkb4wkd0Dlu890sSkizyTU06m7JZgmL rR8mFF13BfSsB1M9kbAgPkVvicqqj3I8/86pijmEFiM9z2fT09dc0q2oPb4X/d/R XyfEh8ffVoGHGSQMn1TvrOB0Qw3iysELKlZgphT278vMIwmbwyAZi15tHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDjo424hI8OVlWP8wxtzDUYB2sFnMB8GA1UdIwQY MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt Mzc1NzUzOWMyYWM5LzEvT09qamJpRWp3NVdWWV96REczTU5SZ0hhd1djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5 LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufMfMA0G CSqGSIb3DQEBCwUAA4IBAQBVLECu/eqJUkosTcIwFJdFQZq24OCg4TOMqSZaSxSc JJsqYWF4VudBggcbTY8t6eGxCHT2VNVPp/wP2WrIrR49EqRpGCDRs1QFsk/badlg pPdrYyTwZyXITqBf7VzPhZQyIztrXbxn4hTHa9qaK2BO3lYCHqiK+sodN1/nxBFy 0fURFfPjxbR4GCvcX+WcujlgMUr5pcOEsC8/2hpAceX48nB6ZLeMdmLd1nv7SoLK V0L5Foks3RQjS1AbJPMDzUec/pbdW2LUafqy4o6ez95l5YGETsAkx0Y/8Sokoe71 IPvyINQbnFZSc37e5/SS3hc2qkassaqm86/XE/ZdR6U/ -----END CERTIFICATE-----Generated at Mon Jan 26 09:43:24 2026 by rpki-client