This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa File: Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa (raw, json) Hash identifier: fQeMDFsyE9NlA+JYKajgKZ3XxSRtkUJy780HUIKIiOE= Subject key identifier: 3B:3D:89:4D:31:44:51:3A:00:E2:B7:00:45:57:C1:29:F6:7E:6C:D3 Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9 Certificate serial: 019B7F15F6070590F9735585721B1A86558F Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa Signing time: Fri 02 Jan 2026 14:21:44 +0000 ROA not before: Fri 02 Jan 2026 14:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8866 IP address blocks: 195.182.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f6:07:05:90:f9:73:55:85:72:1b:1a:86:55:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9 Validity Not Before: Jan 2 14:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b3d894d3144513a00e2b7004557c129f67e6cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:f6:bb:24:eb:50:23:ac:a4:8f:6b:77:4d: 37:53:75:4f:60:c4:f8:f2:fa:00:e9:8e:61:c3:95: 40:f4:6b:81:dc:10:c8:d6:73:52:d2:ef:ed:a2:6b: 81:73:9e:ad:b3:5a:3d:99:a4:6c:8a:97:47:df:42: 3e:a7:2f:55:05:0a:49:6b:a8:89:30:28:93:90:6e: 2f:ab:7c:d0:31:66:15:f3:5d:ef:ee:7e:8e:0c:82: 00:30:a7:4d:2d:a5:72:30:24:ad:a6:30:e9:50:a3: df:92:a6:8e:94:7a:a5:8c:2b:aa:4d:57:fc:0c:84: b8:7d:af:bc:48:62:b9:0c:57:26:1a:c7:0d:be:1a: 22:a7:46:7b:50:b2:60:72:59:7e:4c:eb:9f:6d:64: ff:31:a9:80:d9:2d:e1:1b:89:b4:22:88:ba:e4:bb: 7b:7a:1f:a7:c4:d5:b1:98:46:bb:a3:db:80:b6:aa: f4:19:4e:45:f1:0b:54:3f:6f:5b:aa:e0:5e:b1:3f: 71:5d:69:fb:45:1c:99:3b:a3:62:dc:f6:23:8c:f0: a6:0e:5d:ef:b3:62:c7:48:6e:93:4e:23:76:da:31: d6:d0:bb:10:73:82:73:1a:5c:70:84:cb:71:0d:46: b6:2a:a3:e8:05:96:b7:d4:9d:e3:7d:44:4c:6b:52: cd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3D:89:4D:31:44:51:3A:00:E2:B7:00:45:57:C1:29:F6:7E:6C:D3 X509v3 Authority Key Identifier: keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/Oz2JTTFEUToA4rcARVfBKfZ-bNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.41.0/24 Signature Algorithm: sha256WithRSAEncryption c6:c6:e1:8a:a0:af:ef:c2:d0:d2:61:df:2f:e4:b9:ea:a4:10: 5c:56:88:cc:4e:50:f8:ee:37:3d:46:e2:e5:ee:19:1a:c9:30: eb:b4:bf:c8:12:af:ec:0d:4a:03:f4:4d:6b:34:9e:d1:fd:32: 97:2f:ad:a8:cf:54:ea:f4:8c:3e:df:df:02:85:74:57:19:8a: e2:41:0c:03:c5:29:60:d6:33:04:e3:30:70:17:5c:89:31:37: 71:8c:8e:d6:df:21:1f:56:d4:12:3f:b8:04:5d:6f:38:8c:05: 9c:e1:5b:c9:6d:79:23:31:47:36:59:b2:a1:0c:31:f2:c4:c5: 29:9e:64:53:9d:3d:b5:81:d7:d6:99:48:11:c3:3f:c8:bf:89: 7d:23:eb:46:a5:d9:d5:51:6f:a8:09:31:d3:b5:4e:b8:d9:12: fd:61:56:89:d2:d2:f1:d6:87:68:7e:50:b2:37:1b:b6:a9:7b: a9:4b:bf:02:81:b1:04:c6:a5:70:e8:57:de:3f:64:60:51:6a: ed:4d:22:13:ab:53:a4:7d:1b:97:ff:17:91:e7:8c:2c:41:b2: 8c:75:a8:d1:5d:94:3e:16:42:30:67:ad:a5:97:3e:72:44:0e: f0:3e:de:db:5a:ce:81:61:d4:5c:6a:d5:63:73:63:12:d0:1d: 19:3b:96:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FfYHBZD5c1WFchsahlWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzlmOGI4ZmViYWI2ZDIwOWEyNDk4MWUzOTlmZDYwNDMy ZTFjYzkwHhcNMjYwMTAyMTQyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjNkODk0ZDMxNDQ1MTNhMDBlMmI3MDA0NTU3YzEyOWY2N2U2Y2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRL2uyTrUCOspI9rd003U3VPYMT4 8voA6Y5hw5VA9GuB3BDI1nNS0u/tomuBc56ts1o9maRsipdH30I+py9VBQpJa6iJ MCiTkG4vq3zQMWYV813v7n6ODIIAMKdNLaVyMCStpjDpUKPfkqaOlHqljCuqTVf8 DIS4fa+8SGK5DFcmGscNvhoip0Z7ULJgcll+TOufbWT/MamA2S3hG4m0Ioi65Lt7 eh+nxNWxmEa7o9uAtqr0GU5F8QtUP29bquBesT9xXWn7RRyZO6Ni3PYjjPCmDl3v s2LHSG6TTiN22jHW0LsQc4JzGlxwhMtxDUa2KqPoBZa31J3jfURMa1LNhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDs9iU0xRFE6AOK3AEVXwSn2fmzTMB8GA1UdIwQY MBaAFEw5+Lj+urbSCaJJgeOZ/WBDLhzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYt OTMyMGZlMTNlNWZlLzEvT3oySlRURkVVVG9BNHJjQVJWZkJLZlotYk5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYtOTMyMGZlMTNlNWZl LzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7YpMA0G CSqGSIb3DQEBCwUAA4IBAQDGxuGKoK/vwtDSYd8v5LnqpBBcVojMTlD47jc9RuLl 7hkayTDrtL/IEq/sDUoD9E1rNJ7R/TKXL62oz1Tq9Iw+398ChXRXGYriQQwDxSlg 1jME4zBwF1yJMTdxjI7W3yEfVtQSP7gEXW84jAWc4VvJbXkjMUc2WbKhDDHyxMUp nmRTnT21gdfWmUgRwz/Iv4l9I+tGpdnVUW+oCTHTtU642RL9YVaJ0tLx1odoflCy Nxu2qXupS78CgbEExqVw6FfeP2RgUWrtTSITq1OkfRuX/xeR54wsQbKMdajRXZQ+ FkIwZ62llz5yRA7wPt7bWs6BYdRcatVjc2MS0B0ZO5bj -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:44 2026 by rpki-client