This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa File: OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa (raw, json) Hash identifier: ThZPinIztYZdRJgEkaP3N9iyXW8sDTnUnnqJV/mG1Tc= Subject key identifier: 39:23:0E:58:FC:39:FC:D3:72:62:10:B8:00:90:14:58:D0:E3:E7:12 Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688 Certificate serial: 019B7834B43BE190EAAC7E4081091F4774E0 Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa Signing time: Thu 01 Jan 2026 06:17:58 +0000 ROA not before: Thu 01 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44459 IP address blocks: 185.182.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b4:3b:e1:90:ea:ac:7e:40:81:09:1f:47:74:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2893a4b284acb5d8a4164289045492109511688 Validity Not Before: Jan 1 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39230e58fc39fcd3726210b800901458d0e3e712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:34:5e:ff:8f:e7:60:fd:73:af:d4:05:3c: 69:d0:2b:3d:75:d8:a6:3c:17:a7:52:36:43:6b:97: ee:eb:61:f5:79:cb:65:7b:ff:3b:bb:91:fa:3a:87: 6e:db:2f:f7:53:6b:57:c3:72:cc:17:be:17:de:2e: 30:f9:c4:16:3f:a5:82:10:22:90:74:d5:d0:c7:b7: 94:d2:3c:ad:34:24:79:5b:ac:5c:b9:1b:92:b2:10: c5:1f:d8:71:9e:e1:13:32:e3:ed:5b:ea:be:8c:19: 9b:52:24:51:65:81:d7:97:d6:02:9c:01:b6:14:53: 30:05:7e:0d:b9:11:4e:99:60:ae:e1:ff:19:a6:55: a6:1d:4f:9b:f9:d6:d9:1e:64:a5:38:55:52:04:77: c7:b3:20:52:11:6d:26:24:ac:5a:df:c4:61:33:2e: 16:aa:aa:c7:0f:bb:26:6f:3e:12:d1:6b:fe:45:b9: 0e:26:4b:5c:b1:fa:5b:5b:ba:71:84:f3:a2:a8:08: 14:78:63:e7:b3:c7:60:be:52:4f:4c:52:b7:d1:d5: 37:61:37:e1:0a:a7:ed:06:89:f2:4c:5e:c2:64:ea: e7:2d:c9:37:7e:22:f6:60:d2:fb:cf:bf:37:81:3f: 45:7d:c4:97:de:77:e5:83:06:f1:39:06:e9:bd:67: 74:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:23:0E:58:FC:39:FC:D3:72:62:10:B8:00:90:14:58:D0:E3:E7:12 X509v3 Authority Key Identifier: keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.240.0/22 Signature Algorithm: sha256WithRSAEncryption bb:76:8f:cd:a1:e6:b8:41:99:1a:16:68:f4:d9:97:a6:90:0e: ee:5b:9d:2a:d8:ac:20:8a:f0:91:de:1b:32:6a:a0:4b:16:43: 18:65:15:13:5d:0e:91:84:81:d6:a8:f9:9f:af:6e:5a:c5:9c: c5:f4:b6:2d:a0:6b:ba:21:b8:99:a0:8f:79:e7:1f:26:12:ca: 87:81:90:62:4d:f8:58:e3:fc:57:66:54:b9:3a:40:ac:d7:46: 7b:91:de:94:56:de:cc:2e:f6:ca:b8:e5:59:f3:f9:ba:d8:da: ab:ff:ff:b3:db:b9:0a:8d:d1:0d:89:ce:c0:aa:b0:2f:f8:ff: b7:9c:e3:95:a9:bc:f3:9d:26:36:7f:b1:c0:fe:bc:3f:52:bf: 56:ae:f9:bb:78:90:fc:3f:a9:80:d4:57:c6:37:60:8e:d7:2c: 29:43:b6:06:fb:a1:d5:71:25:71:a6:3a:4c:33:9f:8f:b3:78: 97:22:11:77:c7:73:5a:26:2f:db:48:24:eb:d6:1b:3f:4f:ac: 4f:80:9f:a0:d9:e9:38:f6:62:ca:a7:0f:6c:a4:5d:95:b7:44: 10:3d:0e:76:ec:a9:67:bf:ce:b0:08:a3:c0:d4:d8:0d:91:c9: 7b:7b:57:9f:79:c5:26:61:7f:f8:72:c8:b0:76:75:8c:dc:0d: 70:37:71:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLQ74ZDqrH5AgQkfR3TgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyODkzYTRiMjg0YWNiNWQ4YTQxNjQyODkwNDU0OTIxMDk1 MTE2ODgwHhcNMjYwMTAxMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTIzMGU1OGZjMzlmY2QzNzI2MjEwYjgwMDkwMTQ1OGQwZTNlNzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5o0Xv+P52D9c6/UBTxp0Cs9ddim PBenUjZDa5fu62H1ectle/87u5H6Oodu2y/3U2tXw3LMF74X3i4w+cQWP6WCECKQ dNXQx7eU0jytNCR5W6xcuRuSshDFH9hxnuETMuPtW+q+jBmbUiRRZYHXl9YCnAG2 FFMwBX4NuRFOmWCu4f8ZplWmHU+b+dbZHmSlOFVSBHfHsyBSEW0mJKxa38RhMy4W qqrHD7smbz4S0Wv+RbkOJktcsfpbW7pxhPOiqAgUeGPns8dgvlJPTFK30dU3YTfh CqftBonyTF7CZOrnLck3fiL2YNL7z783gT9FfcSX3nflgwbxOQbpvWd0ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDkjDlj8OfzTcmIQuACQFFjQ4+cSMB8GA1UdIwQY MBaAFKKJOksoSstdikFkKJBFSSEJURaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgt YTVkM2NiOTE4MjA2LzEvT1NNT1dQdzVfTk55WWhDNEFKQVVXTkRqNXhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgtYTVkM2NiOTE4MjA2 LzEvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubbwMA0G CSqGSIb3DQEBCwUAA4IBAQC7do/Noea4QZkaFmj02ZemkA7uW50q2KwgivCR3hsy aqBLFkMYZRUTXQ6RhIHWqPmfr25axZzF9LYtoGu6IbiZoI955x8mEsqHgZBiTfhY 4/xXZlS5OkCs10Z7kd6UVt7MLvbKuOVZ8/m62Nqr//+z27kKjdENic7AqrAv+P+3 nOOVqbzznSY2f7HA/rw/Ur9Wrvm7eJD8P6mA1FfGN2CO1ywpQ7YG+6HVcSVxpjpM M5+Ps3iXIhF3x3NaJi/bSCTr1hs/T6xPgJ+g2ek49mLKpw9spF2Vt0QQPQ527Kln v86wCKPA1NgNkcl7e1efecUmYX/4csiwdnWM3A1wN3F7 -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:48 2026 by rpki-client