This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/O-CoG-YF7L6hwLeg3uly4Kp8B_8.roa File: O-CoG-YF7L6hwLeg3uly4Kp8B_8.roa (raw, json) Hash identifier: 5oJU3WpHWPREk+VpJtji8wlNog6GMZ8hQeRSHT6lLd0= Subject key identifier: 3B:E0:A8:1B:E6:05:EC:BE:A1:C0:B7:A0:DE:E9:72:E0:AA:7C:07:FF Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 019B7C804F8D51F2A00F6529C9E654DE13D8 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/O-CoG-YF7L6hwLeg3uly4Kp8B_8.roa Signing time: Fri 02 Jan 2026 02:19:02 +0000 ROA not before: Fri 02 Jan 2026 02:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207492 IP address blocks: 45.140.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4f:8d:51:f2:a0:0f:65:29:c9:e6:54:de:13:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Jan 2 02:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3be0a81be605ecbea1c0b7a0dee972e0aa7c07ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a5:40:35:83:d3:5a:39:1f:b6:96:1b:1c:e2: 72:85:36:bc:54:30:fd:5f:e4:e8:96:96:81:11:87: 2d:89:fe:92:e7:49:5d:49:57:a9:fd:a4:c2:26:fc: 51:e6:5f:5d:88:09:39:02:d6:6b:b2:a4:91:35:8c: f2:73:23:a7:ce:74:50:8b:bf:07:50:b3:0d:5e:b7: 5f:c9:d1:ec:52:4d:ef:82:61:7c:ce:3b:29:ad:13: 17:ca:7a:df:c6:43:52:2f:02:01:92:0c:7e:c8:48: e6:e4:cb:84:b3:49:86:25:f6:0a:c9:5c:f4:9d:8f: 42:d5:1e:ca:7d:e7:e4:a1:47:0a:be:d5:a7:7c:12: e9:12:2d:bf:f0:3c:f9:f9:07:6e:35:54:31:0d:f5: b2:c5:66:74:1e:0b:9d:57:5b:c2:ab:09:ef:48:12: d9:b7:c7:44:97:7c:f2:76:c0:8f:54:95:df:1b:ad: 4c:39:b7:b9:e6:18:55:a8:88:2d:d3:73:6c:65:9a: 0e:42:82:31:8d:06:19:e4:81:0a:28:ef:c6:dc:80: ac:88:ca:b3:f5:95:52:5b:45:2c:50:ba:ce:88:a2: 5b:19:90:f0:bf:b9:b7:0d:67:5b:11:b0:ca:38:21: e3:5c:cc:55:25:cd:d4:09:3d:8c:b5:60:dc:ca:a1: 70:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E0:A8:1B:E6:05:EC:BE:A1:C0:B7:A0:DE:E9:72:E0:AA:7C:07:FF X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/O-CoG-YF7L6hwLeg3uly4Kp8B_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.40.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:35:7a:62:06:bc:a5:4b:eb:dd:65:cc:5f:da:46:23:31:82: 0c:be:20:42:ab:b1:b7:c3:39:18:14:c5:f4:7f:74:34:d5:a9: 7d:96:d0:6f:d6:08:23:c1:8c:d3:c6:8e:53:fa:a2:74:0e:e7: c2:9a:b8:24:5d:3b:38:5f:45:81:0c:3f:b6:16:21:93:4b:ec: 0e:f8:63:3a:86:5e:6e:22:45:da:72:6c:db:b2:d8:07:cc:0a: c6:ca:bd:4c:fa:ae:c8:c4:df:14:5c:41:14:a7:06:f7:3e:ed: b9:f9:7f:cf:ff:95:43:26:71:5d:d1:c6:a3:2b:ce:07:43:17: d7:58:62:0a:6c:4d:9a:89:8b:a1:0a:c0:e4:04:2c:3b:56:28: e4:71:c0:0a:7f:8a:fd:73:0e:23:1a:a4:26:73:f8:6c:fe:c7: 1c:5c:86:bc:a3:f2:c4:93:63:11:3c:a3:79:21:39:45:80:3e: c5:93:f3:7d:2c:c6:51:77:27:79:f8:c1:df:8f:0f:5a:3d:58: f7:61:24:72:4b:2f:10:6c:78:96:68:03:2a:42:d1:7b:58:d3: 1a:5d:86:fc:26:e9:b1:74:a8:5d:4d:ba:8a:41:31:22:f5:21: a8:30:00:61:b2:35:74:18:c4:51:86:6a:c9:39:fc:96:5a:ba: 13:d9:57:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gE+NUfKgD2UpyeZU3hPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjYwMTAyMDIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmUwYTgxYmU2MDVlY2JlYTFjMGI3YTBkZWU5NzJlMGFhN2MwN2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaVANYPTWjkftpYbHOJyhTa8VDD9 X+TolpaBEYctif6S50ldSVep/aTCJvxR5l9diAk5AtZrsqSRNYzycyOnznRQi78H ULMNXrdfydHsUk3vgmF8zjsprRMXynrfxkNSLwIBkgx+yEjm5MuEs0mGJfYKyVz0 nY9C1R7KfefkoUcKvtWnfBLpEi2/8Dz5+QduNVQxDfWyxWZ0HgudV1vCqwnvSBLZ t8dEl3zydsCPVJXfG61MObe55hhVqIgt03NsZZoOQoIxjQYZ5IEKKO/G3ICsiMqz 9ZVSW0UsULrOiKJbGZDwv7m3DWdbEbDKOCHjXMxVJc3UCT2MtWDcyqFw/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDvgqBvmBey+ocC3oN7pcuCqfAf/MB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvTy1Db0ctWUY3TDZod0xlZzN1bHk0S3A4Ql84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYwoMA0G CSqGSIb3DQEBCwUAA4IBAQBsNXpiBrylS+vdZcxf2kYjMYIMviBCq7G3wzkYFMX0 f3Q01al9ltBv1ggjwYzTxo5T+qJ0DufCmrgkXTs4X0WBDD+2FiGTS+wO+GM6hl5u IkXacmzbstgHzArGyr1M+q7IxN8UXEEUpwb3Pu25+X/P/5VDJnFd0cajK84HQxfX WGIKbE2aiYuhCsDkBCw7VijkccAKf4r9cw4jGqQmc/hs/sccXIa8o/LEk2MRPKN5 ITlFgD7Fk/N9LMZRdyd5+MHfjw9aPVj3YSRySy8QbHiWaAMqQtF7WNMaXYb8Jumx dKhdTbqKQTEi9SGoMABhsjV0GMRRhmrJOfyWWroT2VeB -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:57 2026 by rpki-client