This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/o-BkPwL00PdU1t8ffwirkb7_R1g.roa File: o-BkPwL00PdU1t8ffwirkb7_R1g.roa (raw, json) Hash identifier: suuI+jXuOojIG5lnf6toPBtgOXStJ8/ZoJx7xnWXW/s= Subject key identifier: A3:E0:64:3F:02:F4:D0:F7:54:D6:DF:1F:7F:08:AB:91:BE:FF:47:58 Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd Certificate serial: 019B77589A7D52EFDF38532F7724D856D3DA Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/o-BkPwL00PdU1t8ffwirkb7_R1g.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57551 IP address blocks: 82.112.174.0/24 maxlen: 24 82.112.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9a:7d:52:ef:df:38:53:2f:77:24:d8:56:d3:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3e0643f02f4d0f754d6df1f7f08ab91beff4758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:31:9c:ae:65:0e:cd:88:98:89:a6:86:0a:a9: a9:de:60:ef:0f:a1:34:f3:db:47:35:5c:ae:51:91: 5e:94:34:1e:55:f8:54:47:97:0e:e6:2c:a7:be:c8: 1b:9e:62:af:54:f6:77:75:7e:9e:33:33:cd:b3:05: 01:12:b3:00:04:2c:7e:fc:58:28:87:44:e1:59:be: 2c:8f:18:21:b0:c4:9a:87:b2:7f:68:ac:57:f9:e5: 91:f4:2c:5f:3b:86:69:db:d1:cb:ac:fe:b4:48:82: 69:18:6e:96:99:3e:bc:34:62:63:02:cc:8f:86:e1: 0f:9f:bd:16:6e:37:b0:3a:d8:a4:d6:6c:d4:d5:ee: e0:68:cd:50:cd:fe:6c:39:05:8a:06:8c:9a:ba:32: 3b:9c:57:8e:c1:11:a0:b2:da:29:fd:f4:42:5e:1e: 78:f2:15:de:74:fa:d2:04:e0:52:66:42:46:f6:2c: 4d:89:86:15:16:97:f5:fb:bb:19:eb:e6:9e:b2:9a: 10:87:4f:5c:fd:9c:dd:e1:9a:49:8f:4f:d6:44:67: 76:5e:cb:2a:f3:51:0f:95:0f:40:c3:b7:de:c0:4c: 98:bc:fe:94:0c:04:42:ab:1c:7a:37:08:e8:49:ec: ad:97:dd:04:33:1e:d0:3e:0e:17:85:84:9e:56:9f: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E0:64:3F:02:F4:D0:F7:54:D6:DF:1F:7F:08:AB:91:BE:FF:47:58 X509v3 Authority Key Identifier: keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/o-BkPwL00PdU1t8ffwirkb7_R1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.112.174.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:03:1d:79:b5:7b:82:66:02:1c:b0:fa:6d:45:e1:fe:9b:90: 08:d0:91:c8:80:fa:4d:ec:d6:df:d3:15:88:99:b6:e6:f0:f0: b7:f2:d4:41:4d:fa:76:c1:89:ea:91:8c:0e:85:7b:99:48:ab: e8:da:ed:d6:1e:1d:96:5d:71:ab:02:f8:cb:2b:fa:97:98:e2: c9:b8:44:eb:91:10:45:01:01:01:e5:74:05:96:07:1c:d7:0a: 89:dd:71:7a:6b:c9:be:bc:f7:3a:46:6b:01:bc:42:ce:83:25: 86:31:78:21:75:9c:34:c9:5e:2d:7c:dd:87:06:ba:8d:ee:83: 10:4f:0d:f0:38:e7:54:55:14:c5:fb:2c:3f:ba:1d:d5:08:7b: d7:64:0d:8a:7c:b7:57:2a:c8:be:47:2e:ca:fd:7f:2a:cb:42: e1:ca:17:f3:12:81:47:af:19:ce:77:32:27:1e:bb:2c:86:ab: 32:92:6f:c6:1c:91:6f:c3:2a:9d:6a:1f:ea:a5:1d:b6:8c:c6: 18:6d:de:88:f4:87:4b:55:e0:17:c8:40:e3:9d:ba:29:b0:10: 89:12:08:d2:2b:d0:fa:9e:e2:c9:cb:0a:8c:09:f1:30:d1:a6: 7b:c0:da:3d:30:95:1b:3a:fa:78:66:07:83:81:81:78:9c:07: ef:1f:8c:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJp9Uu/fOFMvdyTYVtPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzgxYmM5NjlkZTZhZGMzZDFkZGMwZWI4OWJkZWVhY2U5 ODA1Y2QwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2UwNjQzZjAyZjRkMGY3NTRkNmRmMWY3ZjA4YWI5MWJlZmY0NzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzGcrmUOzYiYiaaGCqmp3mDvD6E0 89tHNVyuUZFelDQeVfhUR5cO5iynvsgbnmKvVPZ3dX6eMzPNswUBErMABCx+/Fgo h0ThWb4sjxghsMSah7J/aKxX+eWR9CxfO4Zp29HLrP60SIJpGG6WmT68NGJjAsyP huEPn70WbjewOtik1mzU1e7gaM1Qzf5sOQWKBoyaujI7nFeOwRGgstop/fRCXh54 8hXedPrSBOBSZkJG9ixNiYYVFpf1+7sZ6+aespoQh09c/Zzd4ZpJj0/WRGd2Xssq 81EPlQ9Aw7fewEyYvP6UDARCqxx6NwjoSeytl90EMx7QPg4XhYSeVp9YzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKPgZD8C9ND3VNbfH38Iq5G+/0dYMB8GA1UdIwQY MBaAFJE4G8lp3mrcPR3cDrib3urOmAXNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMt MjU2ZGE5NWQxMzQ1LzEvby1Ca1B3TDAwUGRVMXQ4ZmZ3aXJrYjdfUjFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMtMjU2ZGE5NWQxMzQ1 LzEva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUnCuMA0G CSqGSIb3DQEBCwUAA4IBAQA8Ax15tXuCZgIcsPptReH+m5AI0JHIgPpN7Nbf0xWI mbbm8PC38tRBTfp2wYnqkYwOhXuZSKvo2u3WHh2WXXGrAvjLK/qXmOLJuETrkRBF AQEB5XQFlgcc1wqJ3XF6a8m+vPc6RmsBvELOgyWGMXghdZw0yV4tfN2HBrqN7oMQ Tw3wOOdUVRTF+yw/uh3VCHvXZA2KfLdXKsi+Ry7K/X8qy0LhyhfzEoFHrxnOdzIn Hrsshqsykm/GHJFvwyqdah/qpR22jMYYbd6I9IdLVeAXyEDjnbopsBCJEgjSK9D6 nuLJywqMCfEw0aZ7wNo9MJUbOvp4ZgeDgYF4nAfvH4wy -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:26 2026 by rpki-client