This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/ONqPurqrHVMfwrJOahm-hLa_T5g.roa File: ONqPurqrHVMfwrJOahm-hLa_T5g.roa (raw, json) Hash identifier: ZlEZvfK7OYrNuzavDM8lorWGQ5ktu+dv/s2X755rVok= Subject key identifier: 38:DA:8F:BA:BA:AB:1D:53:1F:C2:B2:4E:6A:19:BE:84:B6:BF:4F:98 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019B7AC93695DC9FAB61AC86A74A7ADA4D5F Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/ONqPurqrHVMfwrJOahm-hLa_T5g.roa Signing time: Thu 01 Jan 2026 18:19:25 +0000 ROA not before: Thu 01 Jan 2026 18:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215524 IP address blocks: 212.24.239.0/24 maxlen: 24 212.24.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:36:95:dc:9f:ab:61:ac:86:a7:4a:7a:da:4d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Jan 1 18:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38da8fbabaab1d531fc2b24e6a19be84b6bf4f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:ee:97:09:a5:8a:0c:4d:e8:5a:c2:2c:35: 1a:b8:97:ef:11:08:49:50:74:29:e6:c4:13:4b:fb: ae:d7:c3:ce:ae:2d:f1:3b:e7:52:ef:f2:c5:ac:4b: 32:09:42:fc:1e:ab:b2:b3:03:13:77:47:14:8b:bc: 4c:a2:40:75:a4:88:a7:56:a3:14:e6:06:99:c4:28: fb:1a:82:eb:52:1a:e5:cc:d9:35:17:35:22:93:19: 00:13:8e:38:60:74:f8:46:e6:91:55:c3:ad:e8:b6: 99:65:ef:2e:c5:f8:00:d3:da:92:a0:53:4a:62:fa: fa:76:a7:6d:23:b2:66:f0:8a:00:70:9c:07:4e:50: 1a:28:e2:68:f6:9b:43:66:95:54:61:73:60:d4:0b: ef:7e:1e:c8:86:ce:5e:e9:4b:58:38:64:95:e9:55: af:9f:cc:1e:ba:18:e5:06:b9:f3:6c:39:ff:ef:00: 96:72:a8:0d:79:5d:30:09:f8:34:bd:ad:9e:f3:f7: 05:05:10:c4:8e:ea:9a:d7:7b:77:61:77:60:0c:38: 64:a5:b0:da:71:74:bd:1f:78:d2:5d:92:35:91:01: bb:6a:58:f6:b0:5f:0b:45:a3:ec:da:95:0d:03:42: e8:a9:39:55:e4:33:97:08:c5:58:c1:d4:fe:8a:96: 36:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DA:8F:BA:BA:AB:1D:53:1F:C2:B2:4E:6A:19:BE:84:B6:BF:4F:98 X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/ONqPurqrHVMfwrJOahm-hLa_T5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.24.239.0-212.24.240.255 Signature Algorithm: sha256WithRSAEncryption 2b:42:91:74:e9:4a:d5:8c:9c:c8:5b:0d:b2:a6:84:b0:15:69: c5:07:06:b9:ba:ba:b2:c8:a6:ba:e3:9f:87:e8:61:d9:0d:17: 6d:68:03:17:44:99:f4:87:4f:1b:66:36:ce:a7:82:b7:69:b3: 2e:be:44:51:a8:49:fd:ed:8b:6f:4b:e9:0f:19:e4:f0:a6:c7: d8:83:38:89:c7:9f:ac:2a:80:ab:bf:87:3b:84:11:55:9f:46: be:b5:96:d9:59:5e:df:b5:49:ea:2d:25:b1:a2:5a:de:86:68: 1a:d5:09:35:33:b6:bf:22:7e:ce:ed:2b:dd:de:87:71:47:a1: 46:fc:4d:8c:fc:80:e1:9d:16:3c:aa:a1:a5:3d:8f:ff:db:a4: 30:02:8c:96:b7:59:ea:44:80:a6:9b:ca:bd:3c:df:17:1d:8b: fd:0e:b7:fa:8b:05:8a:b9:18:e4:df:f0:2d:23:f2:fd:5a:d4: a2:80:97:67:52:cc:41:7a:38:d2:7d:cc:5c:e5:66:df:ff:4b: dd:ce:97:38:de:93:fb:75:9a:79:48:2d:f2:66:0e:a1:d1:4c: 86:0d:62:2d:6a:7e:7a:7f:9c:20:b6:f7:a8:3f:84:c5:36:16: e0:39:81:5e:37:95:88:3a:b0:45:14:cb:fe:72:38:ba:3f:09: 25:4f:64:80 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6yTaV3J+rYayGp0p62k1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwMTAxMTgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGRhOGZiYWJhYWIxZDUzMWZjMmIyNGU2YTE5YmU4NGI2YmY0Zjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu//ulwmligxN6FrCLDUauJfvEQhJ UHQp5sQTS/uu18POri3xO+dS7/LFrEsyCUL8HquyswMTd0cUi7xMokB1pIinVqMU 5gaZxCj7GoLrUhrlzNk1FzUikxkAE444YHT4RuaRVcOt6LaZZe8uxfgA09qSoFNK Yvr6dqdtI7Jm8IoAcJwHTlAaKOJo9ptDZpVUYXNg1Avvfh7Ihs5e6UtYOGSV6VWv n8weuhjlBrnzbDn/7wCWcqgNeV0wCfg0va2e8/cFBRDEjuqa13t3YXdgDDhkpbDa cXS9H3jSXZI1kQG7alj2sF8LRaPs2pUNA0LoqTlV5DOXCMVYwdT+ipY2RQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDjaj7q6qx1TH8KyTmoZvoS2v0+YMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvT05xUHVycXJIVk1md3JKT2FobS1oTGFfVDVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADUGO8D BADUGPAwDQYJKoZIhvcNAQELBQADggEBACtCkXTpStWMnMhbDbKmhLAVacUHBrm6 urLIprrjn4foYdkNF21oAxdEmfSHTxtmNs6ngrdpsy6+RFGoSf3ti29L6Q8Z5PCm x9iDOInHn6wqgKu/hzuEEVWfRr61ltlZXt+1SeotJbGiWt6GaBrVCTUztr8ifs7t K93eh3FHoUb8TYz8gOGdFjyqoaU9j//bpDACjJa3WepEgKabyr083xcdi/0Ot/qL BYq5GOTf8C0j8v1a1KKAl2dSzEF6ONJ9zFzlZt//S93Olzjek/t1mnlILfJmDqHR TIYNYi1qfnp/nCC296g/hMU2FuA5gV43lYg6sEUUy/5yOLo/CSVPZIA= -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:33 2026 by rpki-client