This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/OFU4rYQAL-sOvU42wXKsJPFLqgo.roa File: OFU4rYQAL-sOvU42wXKsJPFLqgo.roa (raw, json) Hash identifier: gfh4xBU+FrULOBmBwbJZ1n1nb4fdCqFs8mhTRC5PTWk= Subject key identifier: 38:55:38:AD:84:00:2F:EB:0E:BD:4E:36:C1:72:AC:24:F1:4B:AA:0A Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019B78A331E8AB32003C5D9931B8D09238F9 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/OFU4rYQAL-sOvU42wXKsJPFLqgo.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210600 IP address blocks: 213.135.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:31:e8:ab:32:00:3c:5d:99:31:b8:d0:92:38:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=385538ad84002feb0ebd4e36c172ac24f14baa0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:75:ec:f1:02:93:81:34:6c:c5:7a:12:59:49: 8a:1b:a5:4e:a0:84:58:6f:57:fb:40:c9:cc:b8:ff: 8e:32:9f:76:0e:4c:1e:67:f4:d0:ca:f4:ec:1c:a1: d3:ac:fc:f1:e3:ae:37:df:6c:d2:b5:37:cc:35:c8: cb:59:7f:1e:82:5d:2b:a7:b8:21:2b:fd:0a:cd:58: 58:af:51:61:63:00:a5:d8:a4:53:bc:97:ae:fa:7c: b1:37:59:02:af:97:a9:5f:16:43:7a:cb:69:b0:e3: 13:98:9b:df:d9:3a:e0:c9:a5:ef:b6:3f:e8:ba:fb: cc:53:07:ea:b4:dc:8a:2f:51:74:9c:d0:97:45:1d: 22:d5:43:19:91:8c:b6:a6:ac:27:d7:d7:c8:da:f7: 2b:ad:14:14:e7:f9:b9:2c:15:90:0c:79:45:c7:3e: 0d:28:2d:ba:92:48:4a:24:a8:01:78:aa:fa:b1:5f: 35:9a:27:b3:04:94:0d:f2:15:64:37:05:8f:26:0f: 39:8c:6e:7e:f2:c8:64:9f:f0:4f:50:4b:76:fe:9b: 47:43:ef:ac:93:8a:05:db:8c:64:42:73:5f:30:f4: 1d:22:8f:1c:05:3e:7b:89:7f:b5:17:a2:3c:08:f3: 8d:ff:06:23:79:03:29:62:8e:37:b5:63:81:84:18: df:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:55:38:AD:84:00:2F:EB:0E:BD:4E:36:C1:72:AC:24:F1:4B:AA:0A X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/OFU4rYQAL-sOvU42wXKsJPFLqgo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.135.74.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:48:d7:46:4e:38:47:71:ad:69:e1:1f:c9:d5:e1:ed:6a:56: 7f:34:1e:36:63:2d:07:0b:67:2c:89:de:56:48:bc:5d:b0:e1: 8c:4e:44:19:c5:1b:3e:35:67:78:66:17:89:87:c2:2d:7d:a4: 1f:c2:8b:28:45:2a:47:27:e2:11:c2:6d:2b:cc:93:2c:36:ee: 8a:a6:f4:de:47:9d:d2:c5:4c:71:51:04:c5:b9:6c:e9:41:b4: 5c:02:66:7e:32:44:dd:89:1f:38:bc:e5:1a:3e:a8:d9:31:d1: 64:91:e5:37:9c:cf:a9:bf:94:57:96:75:86:9d:7f:7e:f5:1a: a3:f9:85:b6:6c:af:61:1e:48:6c:08:7c:ae:8f:21:29:fa:31: 18:21:4e:77:ca:78:04:76:18:f9:64:f7:cc:1b:83:93:47:23: 46:6d:cd:9d:ca:29:81:3e:aa:a2:05:2e:3c:f0:3f:42:eb:27: 01:ce:71:ff:d4:2b:45:44:0c:48:ad:c1:2b:b9:ae:1e:64:1f: 78:0e:e8:4f:5b:f0:96:85:2f:21:f4:a2:c2:ac:6b:de:8f:9d: 17:87:11:4a:b9:d8:bc:89:52:28:18:b3:d2:d4:2f:ca:3c:d9: 30:11:b7:e0:c8:9d:b0:d2:c5:0f:12:ef:6b:b8:4b:65:9f:b5: b3:5f:3f:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozHoqzIAPF2ZMbjQkjj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODU1MzhhZDg0MDAyZmViMGViZDRlMzZjMTcyYWMyNGYxNGJhYTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHXs8QKTgTRsxXoSWUmKG6VOoIRY b1f7QMnMuP+OMp92DkweZ/TQyvTsHKHTrPzx464332zStTfMNcjLWX8egl0rp7gh K/0KzVhYr1FhYwCl2KRTvJeu+nyxN1kCr5epXxZDestpsOMTmJvf2TrgyaXvtj/o uvvMUwfqtNyKL1F0nNCXRR0i1UMZkYy2pqwn19fI2vcrrRQU5/m5LBWQDHlFxz4N KC26kkhKJKgBeKr6sV81miezBJQN8hVkNwWPJg85jG5+8shkn/BPUEt2/ptHQ++s k4oF24xkQnNfMPQdIo8cBT57iX+1F6I8CPON/wYjeQMpYo43tWOBhBjfpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDhVOK2EAC/rDr1ONsFyrCTxS6oKMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvT0ZVNHJZUUFMLXNPdlU0MndYS3NKUEZMcWdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YdKMA0G CSqGSIb3DQEBCwUAA4IBAQAcSNdGTjhHca1p4R/J1eHtalZ/NB42Yy0HC2csid5W SLxdsOGMTkQZxRs+NWd4ZheJh8ItfaQfwosoRSpHJ+IRwm0rzJMsNu6KpvTeR53S xUxxUQTFuWzpQbRcAmZ+MkTdiR84vOUaPqjZMdFkkeU3nM+pv5RXlnWGnX9+9Rqj +YW2bK9hHkhsCHyujyEp+jEYIU53yngEdhj5ZPfMG4OTRyNGbc2dyimBPqqiBS48 8D9C6ycBznH/1CtFRAxIrcErua4eZB94DuhPW/CWhS8h9KLCrGvej50XhxFKudi8 iVIoGLPS1C/KPNkwEbfgyJ2w0sUPEu9ruEtln7WzXz8p -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:44 2026 by rpki-client