This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/OCuIuLoTyx6UI4cRdqXTZdZqrRE.roa File: OCuIuLoTyx6UI4cRdqXTZdZqrRE.roa (raw, json) Hash identifier: NtYeBn7vObBSrZet17ESmCNvYRE2bEdCvdV04YI1os0= Subject key identifier: 38:2B:88:B8:BA:13:CB:1E:94:23:87:11:76:A5:D3:65:D6:6A:AD:11 Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c Certificate serial: 019B7910F3F08629F5731370F98A011A1B01 Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/OCuIuLoTyx6UI4cRdqXTZdZqrRE.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61248 IP address blocks: 46.143.212.0/22 maxlen: 22 46.143.248.0/22 maxlen: 22 185.84.220.0/23 maxlen: 23 185.84.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f3:f0:86:29:f5:73:13:70:f9:8a:01:1a:1b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=382b88b8ba13cb1e9423871176a5d365d66aad11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:76:e4:6c:29:d0:bb:c3:8e:d6:70:7e:dc: 57:67:7b:5e:d5:49:e6:90:d9:28:de:61:15:3a:ba: 4d:76:50:91:b9:9c:3b:d7:a5:32:50:60:6b:88:c1: c6:d0:a8:46:9e:0e:8b:de:55:14:06:0d:7f:f4:68: 8d:d6:8d:f4:c0:41:1e:1f:fd:e2:61:ad:7b:46:b0: 18:c9:88:56:ca:49:10:18:b1:81:46:9d:08:b3:4f: 64:79:25:35:72:4a:5e:fd:84:4e:ef:a3:a6:5c:9a: ac:24:66:06:6f:a7:b4:db:dd:98:aa:6e:c7:d4:69: 27:9a:88:e3:2f:5a:cc:8b:86:cb:18:56:41:47:68: 84:09:98:28:f5:95:69:6f:e3:c3:03:b0:0e:b6:34: 30:4a:b5:d4:12:70:be:c9:56:2a:31:ef:7b:e7:53: af:33:e6:dd:42:9d:35:48:43:10:e8:41:b3:27:7f: ea:3a:9f:5c:d7:7d:89:76:4a:99:e6:0c:5c:d9:20: af:c5:d4:f9:8d:28:4a:b0:3c:77:df:b4:94:56:2f: 03:0e:e3:e9:6d:d1:cd:89:1c:ed:7d:23:c0:0a:0c: 4b:50:3c:5b:9d:37:e9:a5:01:b3:e6:ec:0a:cc:ac: 6c:8b:51:5a:b6:7b:d0:8d:a0:f1:65:9b:3e:6f:24: 38:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2B:88:B8:BA:13:CB:1E:94:23:87:11:76:A5:D3:65:D6:6A:AD:11 X509v3 Authority Key Identifier: keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/OCuIuLoTyx6UI4cRdqXTZdZqrRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.143.212.0/22 46.143.248.0/22 185.84.220.0/22 Signature Algorithm: sha256WithRSAEncryption af:46:8b:ef:e9:1c:56:29:7d:c4:74:bb:0a:f1:88:08:fb:16: 58:d9:c9:92:cd:01:c8:44:df:05:ab:56:1e:2e:39:16:e9:ff: 6b:dc:93:82:92:1a:8a:53:ac:34:d3:89:2a:8e:a7:85:b0:ec: 7c:df:2c:d2:8b:16:6a:10:e6:e8:e2:8e:1b:00:8a:04:ce:59: 1e:e0:34:b9:0b:8b:64:2b:a3:d6:73:f5:01:30:37:7b:f5:83: 40:3e:66:b1:4e:2c:f1:76:3b:1c:61:2c:84:e2:2b:47:89:38: f5:ef:d9:bb:20:5d:f6:a9:7a:48:59:cb:c6:28:63:a3:a7:31: 45:71:15:de:b6:f9:8f:ef:c3:77:96:d7:b8:b7:1d:e9:c5:5b: fc:8c:c0:a2:5d:0a:3a:fc:11:a8:95:02:b1:c9:29:58:99:64: 81:cb:96:22:84:64:37:12:9d:84:f2:54:1f:01:99:24:79:5c: b8:f6:54:70:80:ce:63:be:4b:80:8c:fd:db:45:99:7a:03:58: 4e:63:0e:47:f4:7f:17:ee:21:02:19:bf:86:05:83:54:7d:64: c8:5b:54:13:66:0c:8a:1d:c7:a2:ae:37:7a:2e:9f:b1:63:ea: 1b:1f:a7:81:3f:f2:88:4d:d4:27:3c:08:7b:72:a2:57:d1:52: 2d:e0:8d:62 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EPPwhin1cxNw+YoBGhsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0 MTUwOGMwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODJiODhiOGJhMTNjYjFlOTQyMzg3MTE3NmE1ZDM2NWQ2NmFhZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj125Gwp0LvDjtZwftxXZ3te1Unm kNko3mEVOrpNdlCRuZw716UyUGBriMHG0KhGng6L3lUUBg1/9GiN1o30wEEeH/3i Ya17RrAYyYhWykkQGLGBRp0Is09keSU1ckpe/YRO76OmXJqsJGYGb6e0292Yqm7H 1GknmojjL1rMi4bLGFZBR2iECZgo9ZVpb+PDA7AOtjQwSrXUEnC+yVYqMe9751Ov M+bdQp01SEMQ6EGzJ3/qOp9c132JdkqZ5gxc2SCvxdT5jShKsDx337SUVi8DDuPp bdHNiRztfSPACgxLUDxbnTfppQGz5uwKzKxsi1FatnvQjaDxZZs+byQ4JQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDgriLi6E8selCOHEXal02XWaq0RMB8GA1UdIwQY MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt MjlmMWJlYjJmMjgyLzEvT0N1SXVMb1R5eDZVSTRjUmRxWFRaZFpxclJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLo/UAwQC Lo/4AwQCuVTcMA0GCSqGSIb3DQEBCwUAA4IBAQCvRovv6RxWKX3EdLsK8YgI+xZY 2cmSzQHIRN8Fq1YeLjkW6f9r3JOCkhqKU6w004kqjqeFsOx83yzSixZqEObo4o4b AIoEzlke4DS5C4tkK6PWc/UBMDd79YNAPmaxTizxdjscYSyE4itHiTj179m7IF32 qXpIWcvGKGOjpzFFcRXetvmP78N3lte4tx3pxVv8jMCiXQo6/BGolQKxySlYmWSB y5YihGQ3Ep2E8lQfAZkkeVy49lRwgM5jvkuAjP3bRZl6A1hOYw5H9H8X7iECGb+G BYNUfWTIW1QTZgyKHceirjd6Lp+xY+obH6eBP/KITdQnPAh7cqJX0VIt4I1i -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:39 2026 by rpki-client