This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/O5osv3DjuzH13zfgVnDH1QiAYBs.roa File: O5osv3DjuzH13zfgVnDH1QiAYBs.roa (raw, json) Hash identifier: g4/oo0ufVfbT9VkbjHiy8bTeHsZgO5XCr3NOXd63NBY= Subject key identifier: 3B:9A:2C:BF:70:E3:BB:31:F5:DF:37:E0:56:70:C7:D5:08:80:60:1B Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019B7D5BEDCA71ED0C6660488F3CF0703F50 Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/O5osv3DjuzH13zfgVnDH1QiAYBs.roa Signing time: Fri 02 Jan 2026 06:18:55 +0000 ROA not before: Fri 02 Jan 2026 06:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210993 IP address blocks: 95.181.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ed:ca:71:ed:0c:66:60:48:8f:3c:f0:70:3f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Jan 2 06:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b9a2cbf70e3bb31f5df37e05670c7d50880601b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:25:53:47:94:87:84:cf:09:2a:97:ab:eb:31: 74:74:04:9c:a0:6c:c8:03:36:ee:bb:f0:06:0e:c9: b5:4f:dd:09:65:f6:c4:4d:4d:d0:64:fc:15:59:29: 49:1d:3a:be:c9:13:70:88:c3:b3:ea:10:4f:b5:1c: 9d:0c:66:b0:db:ab:bf:23:5d:11:1f:fc:76:93:a0: c3:7e:da:fd:6b:db:2a:2f:a0:22:10:a5:90:b7:41: 51:57:b8:f7:64:05:11:d8:d8:a5:b5:39:69:0c:a8: a6:73:b6:64:94:0b:78:2a:76:32:86:1b:8e:33:3e: 28:fa:b5:b1:05:63:da:13:fc:d0:22:5c:bb:9d:4c: 72:8b:7d:f4:93:99:47:0f:a5:79:c6:52:ea:29:89: 81:98:09:63:dc:a9:5c:98:f7:b7:46:2a:8a:98:d9: 6c:64:eb:d6:9c:8a:35:26:04:b1:e4:9e:ce:0c:f2: d4:c8:48:69:ec:6c:22:9a:12:01:5f:4d:6a:1c:d7: 8e:1e:fc:25:55:ae:f3:8d:0d:d4:fd:30:9f:21:c0: 8f:13:dc:90:f0:30:30:01:3b:c4:9a:19:e1:db:9e: 7a:52:c5:9a:cd:b5:f7:02:4b:e1:a4:70:2f:97:0f: 06:37:b6:da:f2:14:b9:95:f3:5f:27:41:1c:a6:7e: f4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9A:2C:BF:70:E3:BB:31:F5:DF:37:E0:56:70:C7:D5:08:80:60:1B X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/O5osv3DjuzH13zfgVnDH1QiAYBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.181.158.0/24 Signature Algorithm: sha256WithRSAEncryption 18:0c:33:5d:2c:f6:00:f9:94:4c:b1:80:1b:ab:80:e5:22:b2: a8:ed:98:bb:ab:46:b7:f3:7b:6a:d8:e8:0f:1a:f4:db:b7:16: 41:f4:ca:56:f8:b2:27:22:54:3d:69:df:14:77:93:f4:17:a8: d0:4f:2a:e0:8c:3e:4b:38:1e:58:3f:8e:11:1f:4b:81:f8:50: 72:16:bf:a6:f7:00:f5:2c:a6:d2:5d:35:63:d8:b4:cf:6c:9e: ed:de:3c:b0:9c:69:b2:76:cb:a8:23:3b:ad:a4:e2:e7:bb:b7: 27:61:d2:46:3f:0b:d0:f0:e1:4c:20:23:cd:45:b1:d7:4f:a0: 5c:aa:c1:94:04:68:ef:56:91:5f:f9:7e:fa:19:d2:d3:ea:9e: eb:55:77:00:94:4b:13:52:53:af:17:40:59:fe:a2:40:17:88: 4e:53:c0:8c:3e:50:96:3f:78:19:2b:c4:79:ea:c9:5f:1c:b9: 76:46:7d:eb:e9:6d:5d:be:c8:70:f5:a3:ae:6d:f1:78:b6:40: 8e:1c:69:f9:ba:e3:ab:70:51:b2:1a:81:c0:d3:27:e2:bb:55: c0:86:a9:ee:43:8a:2c:ab:27:18:99:be:a6:55:83:71:ed:9f: 32:98:66:11:7d:0c:34:83:f4:f4:cb:6e:bf:da:f0:52:2f:6c: 4e:b8:09:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W+3Kce0MZmBIjzzwcD9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjYwMTAyMDYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjlhMmNiZjcwZTNiYjMxZjVkZjM3ZTA1NjcwYzdkNTA4ODA2MDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iVTR5SHhM8JKper6zF0dAScoGzI Azbuu/AGDsm1T90JZfbETU3QZPwVWSlJHTq+yRNwiMOz6hBPtRydDGaw26u/I10R H/x2k6DDftr9a9sqL6AiEKWQt0FRV7j3ZAUR2NiltTlpDKimc7ZklAt4KnYyhhuO Mz4o+rWxBWPaE/zQIly7nUxyi330k5lHD6V5xlLqKYmBmAlj3KlcmPe3RiqKmNls ZOvWnIo1JgSx5J7ODPLUyEhp7GwimhIBX01qHNeOHvwlVa7zjQ3U/TCfIcCPE9yQ 8DAwATvEmhnh2556UsWazbX3AkvhpHAvlw8GN7ba8hS5lfNfJ0Ecpn70IQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDuaLL9w47sx9d834FZwx9UIgGAbMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvTzVvc3YzRGp1ekgxM3pmZ1ZuREgxUWlBWUJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX7WeMA0G CSqGSIb3DQEBCwUAA4IBAQAYDDNdLPYA+ZRMsYAbq4DlIrKo7Zi7q0a383tq2OgP GvTbtxZB9MpW+LInIlQ9ad8Ud5P0F6jQTyrgjD5LOB5YP44RH0uB+FByFr+m9wD1 LKbSXTVj2LTPbJ7t3jywnGmydsuoIzutpOLnu7cnYdJGPwvQ8OFMICPNRbHXT6Bc qsGUBGjvVpFf+X76GdLT6p7rVXcAlEsTUlOvF0BZ/qJAF4hOU8CMPlCWP3gZK8R5 6slfHLl2Rn3r6W1dvshw9aOubfF4tkCOHGn5uuOrcFGyGoHA0yfiu1XAhqnuQ4os qycYmb6mVYNx7Z8ymGYRfQw0g/T0y26/2vBSL2xOuAna -----END CERTIFICATE-----Generated at Mon Jan 26 02:32:37 2026 by rpki-client