This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/O5Y6aKsbTjyE7fzWNoTHBGqXt5k.roa File: O5Y6aKsbTjyE7fzWNoTHBGqXt5k.roa (raw, json) Hash identifier: XRvwIe7COMVIWYYL91+eE+WOFrn/qEI/LUehtLWPsd0= Subject key identifier: 3B:96:3A:68:AB:1B:4E:3C:84:ED:FC:D6:36:84:C7:04:6A:97:B7:99 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775951E7C8CCFEBFE938422E4207C094 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/O5Y6aKsbTjyE7fzWNoTHBGqXt5k.roa Signing time: Thu 01 Jan 2026 02:18:20 +0000 ROA not before: Thu 01 Jan 2026 02:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48808 IP address blocks: 93.114.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:51:e7:c8:cc:fe:bf:e9:38:42:2e:42:07:c0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b963a68ab1b4e3c84edfcd63684c7046a97b799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c4:a9:06:a5:dc:3e:07:d9:1a:a7:05:a7:6b: 63:0a:61:b4:bd:d4:23:f9:62:0d:80:85:5b:d9:cb: 45:55:a4:3d:63:e5:ed:64:e9:99:49:d9:09:4e:bf: 7d:87:67:75:d1:2c:ff:c2:b2:3a:0a:6b:72:d4:e2: 58:9a:e3:b6:94:5e:41:4c:de:f2:89:07:2d:1c:79: e8:a8:58:19:f7:f7:0f:0a:8e:19:8c:1a:ea:3c:8d: 34:76:74:bb:5a:b5:32:80:48:d4:1d:3b:79:a6:b7: 32:a0:c3:84:bf:4b:ea:74:cf:ac:41:57:5b:ac:30: d5:fe:97:ad:c8:b0:db:41:f6:db:97:f2:a8:bb:6f: f1:ea:fb:ff:af:a3:cc:08:43:aa:2a:dd:17:a7:34: d5:72:62:7a:b9:01:34:ca:39:67:43:ae:af:95:24: 7e:ac:7a:1e:76:4f:4c:68:c1:de:a6:4b:db:d7:5e: fa:63:2f:59:13:b8:be:b9:64:e9:87:1b:9e:0e:8f: fa:23:e3:ce:cf:f5:c6:ec:02:f8:e0:93:0a:2e:7a: 8b:61:a3:4b:20:82:19:86:52:0e:7f:1b:d1:5e:8a: 59:4b:eb:59:45:b4:be:80:62:ac:fd:39:c2:49:d1: 1d:77:7d:d6:d8:d0:9f:9f:0e:ec:6f:27:66:e1:f2: ae:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:96:3A:68:AB:1B:4E:3C:84:ED:FC:D6:36:84:C7:04:6A:97:B7:99 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/O5Y6aKsbTjyE7fzWNoTHBGqXt5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.114.186.0/24 Signature Algorithm: sha256WithRSAEncryption c2:97:1d:0d:02:61:4c:93:ac:13:9e:94:cd:c2:e0:55:56:24: a3:00:b7:66:f2:f3:35:39:9b:30:a9:64:c7:f9:11:c4:9b:87: 6c:2c:a5:9d:4f:02:7e:d0:e3:3d:19:9f:18:7b:3d:af:7b:3b: 4a:f9:5e:a7:47:1b:7a:ce:f7:d9:6e:de:86:e2:86:75:8f:94: 4d:be:15:15:87:d2:c1:b3:fb:42:55:49:5b:8b:98:06:6d:9e: ac:45:f7:6c:b2:7a:94:d4:1e:3b:b0:56:81:23:7a:e6:c7:1f: 66:73:c5:b2:24:a1:19:f4:d4:ac:56:b6:e4:4f:c1:a1:2b:a1: ae:94:4d:95:73:20:0e:0b:4f:c1:0c:81:b4:cc:48:c9:8f:de: 6e:9e:db:8a:67:ff:a5:d4:ec:1e:2f:2b:cd:f9:6e:b4:c8:42: 62:a9:00:88:8b:42:78:1b:7a:95:f8:a8:05:1b:83:68:b0:e0: 8c:0a:04:85:0f:f0:a3:64:b1:55:f4:69:ed:6f:c5:78:fd:6e: fd:6e:e4:a5:04:91:96:87:56:35:6f:d7:19:ef:92:a0:d3:a8: 7a:28:1a:2c:3f:fe:4c:a4:4d:89:93:c0:2a:cf:19:b7:09:31: 50:3e:05:bb:6b:4e:27:c1:14:32:87:e8:f7:65:45:7d:8b:df: d8:86:c1:4e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WVHnyMz+v+k4Qi5CB8CUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjk2M2E2OGFiMWI0ZTNjODRlZGZjZDYzNjg0YzcwNDZhOTdiNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcSpBqXcPgfZGqcFp2tjCmG0vdQj +WINgIVb2ctFVaQ9Y+XtZOmZSdkJTr99h2d10Sz/wrI6Cmty1OJYmuO2lF5BTN7y iQctHHnoqFgZ9/cPCo4ZjBrqPI00dnS7WrUygEjUHTt5prcyoMOEv0vqdM+sQVdb rDDV/petyLDbQfbbl/Kou2/x6vv/r6PMCEOqKt0XpzTVcmJ6uQE0yjlnQ66vlSR+ rHoedk9MaMHepkvb1176Yy9ZE7i+uWTphxueDo/6I+POz/XG7AL44JMKLnqLYaNL IIIZhlIOfxvRXopZS+tZRbS+gGKs/TnCSdEdd33W2NCfnw7sbydm4fKuzwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFDuWOmirG048hO381jaExwRql7eZMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL081WTZhS3NiVGp5RTdmeldOb1RIQkdxWHQ1ay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABdcrow DQYJKoZIhvcNAQELBQADggEBAMKXHQ0CYUyTrBOelM3C4FVWJKMAt2by8zU5mzCp ZMf5EcSbh2wspZ1PAn7Q4z0Znxh7Pa97O0r5XqdHG3rO99lu3obihnWPlE2+FRWH 0sGz+0JVSVuLmAZtnqxF92yyepTUHjuwVoEjeubHH2ZzxbIkoRn01KxWtuRPwaEr oa6UTZVzIA4LT8EMgbTMSMmP3m6e24pn/6XU7B4vK835brTIQmKpAIiLQngbepX4 qAUbg2iw4IwKBIUP8KNksVX0ae1vxXj9bv1u5KUEkZaHVjVv1xnvkqDTqHooGiw/ /kykTYmTwCrPGbcJMVA+BbtrTifBFDKH6PdlRX2L39iGwU4= -----END CERTIFICATE-----Generated at Sun Jan 25 13:04:39 2026 by rpki-client