This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/O1GW4ziuKGxF3aTFCKn2xqIz0NE.roa File: O1GW4ziuKGxF3aTFCKn2xqIz0NE.roa (raw, json) Hash identifier: ScOFNBiJmWWMmbvpEIy/O/H23s5tvByR/NPpUmMp9Tg= Subject key identifier: 3B:51:96:E3:38:AE:28:6C:45:DD:A4:C5:08:A9:F6:C6:A2:33:D0:D1 Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019B7AC7EA25BD069D97D8D2A3D9D41496C4 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/O1GW4ziuKGxF3aTFCKn2xqIz0NE.roa Signing time: Thu 01 Jan 2026 18:18:00 +0000 ROA not before: Thu 01 Jan 2026 18:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142019 IP address blocks: 81.19.134.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ea:25:bd:06:9d:97:d8:d2:a3:d9:d4:14:96:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jan 1 18:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b5196e338ae286c45dda4c508a9f6c6a233d0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fc:77:d2:ff:e6:ac:f2:7a:5e:67:2e:e2:34: 4a:4d:97:a8:ef:fa:42:38:59:53:e1:f2:a2:46:66: 90:83:e5:8e:0a:0f:ef:7d:70:e1:9b:bc:36:e3:60: f0:28:4d:7a:33:fc:fc:f8:f7:b9:27:2a:0c:c9:8b: 58:76:9c:1d:0c:09:d2:d2:9b:02:d7:dd:43:68:be: 0d:80:d6:66:88:7c:19:b5:e8:a6:31:9f:86:72:40: d5:c8:eb:11:0c:0c:2e:0d:c9:d0:d7:67:26:9c:04: 06:73:9e:cd:22:47:e4:c1:b5:4a:31:68:9e:ac:85: bc:9c:ce:8a:6d:3b:b9:ae:e2:62:9d:8e:db:7b:9d: 11:99:6a:88:7a:28:09:cc:72:57:38:38:54:92:a0: f1:1e:4c:ac:e6:ac:38:77:cd:40:85:a0:53:89:41: fb:1a:17:fa:dc:dc:36:3f:14:df:f5:9f:e5:56:bd: 47:74:b2:58:7e:b6:ce:15:48:5d:b2:ad:27:51:3e: a0:94:87:ce:5a:dc:a2:61:ad:66:2c:68:a4:bd:75: e1:55:88:b9:a8:4b:7b:9f:8f:4b:7a:eb:c2:63:0a: a4:0a:d0:70:e9:84:15:8e:99:26:83:69:74:72:25: e7:62:cd:db:ba:3b:fa:d7:e9:5c:94:e6:dc:51:c0: b5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:51:96:E3:38:AE:28:6C:45:DD:A4:C5:08:A9:F6:C6:A2:33:D0:D1 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/O1GW4ziuKGxF3aTFCKn2xqIz0NE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.134.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:ff:6a:d1:bc:90:8d:96:8e:57:83:37:58:a8:81:ea:9d:23: 1e:8b:a8:ac:8e:65:0b:0d:fb:39:b5:ad:56:8e:dd:ce:08:32: 45:9a:b8:20:ea:f1:60:dc:e7:59:98:19:99:da:b5:a7:94:55: 07:bc:84:02:09:88:f9:a7:02:fc:c7:b9:b0:88:25:ac:46:b4: 37:c7:87:57:65:52:ea:25:8c:5d:9f:c8:b4:65:2b:71:ab:f3: a8:e0:b2:63:97:67:8c:4c:73:35:47:cb:16:26:7f:c7:7c:c0: 3e:c1:7b:3e:8e:a6:a5:38:fc:b5:bb:79:10:a0:17:87:b1:4a: 64:4b:e5:c1:f5:a1:93:b0:7d:9d:77:43:8b:5a:bc:b8:29:a4: 2d:a9:b5:ae:e9:d3:a2:a5:2d:59:02:95:9c:90:d5:e5:cb:f7: e5:23:64:50:e1:ee:58:16:74:46:74:b3:c5:d1:5b:e1:df:2f: b4:f3:85:3c:c9:93:09:d8:b4:63:b9:0c:c2:b4:9d:7a:50:df: ea:7c:6a:41:41:e3:a1:47:38:94:75:03:a8:c9:fa:d1:42:b5: 29:fa:19:76:72:cd:83:38:46:0f:33:e4:52:cf:d3:a3:9b:2a: 79:ba:8f:85:7e:4e:fd:63:0b:5c:31:ac:6b:ab:5e:dc:29:03: 2a:22:8f:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+olvQadl9jSo9nUFJbEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwMTAxMTgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjUxOTZlMzM4YWUyODZjNDVkZGE0YzUwOGE5ZjZjNmEyMzNkMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvx30v/mrPJ6Xmcu4jRKTZeo7/pC OFlT4fKiRmaQg+WOCg/vfXDhm7w242DwKE16M/z8+Pe5JyoMyYtYdpwdDAnS0psC 191DaL4NgNZmiHwZteimMZ+GckDVyOsRDAwuDcnQ12cmnAQGc57NIkfkwbVKMWie rIW8nM6KbTu5ruJinY7be50RmWqIeigJzHJXODhUkqDxHkys5qw4d81AhaBTiUH7 Ghf63Nw2PxTf9Z/lVr1HdLJYfrbOFUhdsq0nUT6glIfOWtyiYa1mLGikvXXhVYi5 qEt7n49LeuvCYwqkCtBw6YQVjpkmg2l0ciXnYs3bujv61+lclObcUcC1NQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDtRluM4rihsRd2kxQip9saiM9DRMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvTzFHVzR6aXVLR3hGM2FURkNLbjJ4cUl6ME5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUROGMA0G CSqGSIb3DQEBCwUAA4IBAQAM/2rRvJCNlo5XgzdYqIHqnSMei6isjmULDfs5ta1W jt3OCDJFmrgg6vFg3OdZmBmZ2rWnlFUHvIQCCYj5pwL8x7mwiCWsRrQ3x4dXZVLq JYxdn8i0ZStxq/Oo4LJjl2eMTHM1R8sWJn/HfMA+wXs+jqalOPy1u3kQoBeHsUpk S+XB9aGTsH2dd0OLWry4KaQtqbWu6dOipS1ZApWckNXly/flI2RQ4e5YFnRGdLPF 0Vvh3y+084U8yZMJ2LRjuQzCtJ16UN/qfGpBQeOhRziUdQOoyfrRQrUp+hl2cs2D OEYPM+RSz9Ojmyp5uo+Ffk79YwtcMaxrq17cKQMqIo+1 -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:22 2026 by rpki-client