This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/OocvppY0i0fXTnyVP3EdCdncH-U.roa File: OocvppY0i0fXTnyVP3EdCdncH-U.roa (raw, json) Hash identifier: vZRMcOuMVAXEaujf0BhUkRuKWkd8W9hZkvqsPIde97A= Subject key identifier: 3A:87:2F:A6:96:34:8B:47:D7:4E:7C:95:3F:71:1D:09:D9:DC:1F:E5 Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072 Certificate serial: 019B7F15F56EB4E67A9093E578E95BBA86AF Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/OocvppY0i0fXTnyVP3EdCdncH-U.roa Signing time: Fri 02 Jan 2026 14:21:44 +0000 ROA not before: Fri 02 Jan 2026 14:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50265 IP address blocks: 91.233.88.0/24 maxlen: 24 193.106.68.0/22 maxlen: 24 2a00:46e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f5:6e:b4:e6:7a:90:93:e5:78:e9:5b:ba:86:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b82433ffe94bf3536fec327543d396158202072 Validity Not Before: Jan 2 14:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a872fa696348b47d74e7c953f711d09d9dc1fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:06:3e:a7:1d:52:a3:5b:03:b9:2c:ad:fb:68: b1:1b:ec:45:3a:5e:4c:1f:59:bd:91:07:ac:bc:2a: 20:eb:b5:bd:f8:19:4b:f9:cd:7b:ec:b8:d0:98:24: 1b:13:81:2a:15:c3:83:61:5f:dd:cb:88:18:ec:ab: e3:1f:db:6a:fd:a7:1d:cc:89:8d:0f:a5:18:66:36: ab:1d:e3:03:4c:bf:91:f8:31:d7:ee:dd:7e:0a:22: 53:54:49:c8:d6:37:b9:48:95:4b:57:48:bc:f9:76: c6:7b:7b:2b:38:b1:38:6c:83:78:de:2c:bf:70:4c: b4:19:cb:5a:34:55:6b:5f:28:b6:c7:c1:42:aa:e7: e5:6e:24:14:94:ec:f6:3e:0f:cd:84:71:9c:f0:db: 49:c7:58:40:2a:fd:43:57:4e:4d:24:d5:a1:3d:8b: 2d:9b:86:bc:4a:1a:c3:66:25:1d:92:81:32:f8:70: dd:64:b9:eb:fb:2f:48:b2:67:5f:eb:c7:ef:74:c4: 11:db:c0:d4:e9:6f:a7:4f:43:55:54:f1:fc:fb:6e: 14:dd:da:4d:7b:cf:ae:2b:8e:50:30:3e:76:04:1a: ad:60:fe:41:ed:1f:bc:a2:8e:16:f7:59:c5:6e:0b: 37:0e:c7:c1:0b:08:1d:c8:85:cc:fe:46:50:2e:f3: 2d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:87:2F:A6:96:34:8B:47:D7:4E:7C:95:3F:71:1D:09:D9:DC:1F:E5 X509v3 Authority Key Identifier: keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/OocvppY0i0fXTnyVP3EdCdncH-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.88.0/24 193.106.68.0/22 IPv6: 2a00:46e0::/32 Signature Algorithm: sha256WithRSAEncryption 52:85:ca:b6:47:ad:f8:40:92:11:d6:cb:56:8a:5a:b6:64:5a: a3:b9:38:40:f9:2f:a8:24:a5:48:04:46:be:53:ac:36:b1:37: f1:fe:67:fc:3c:e4:30:05:fb:59:48:71:fd:51:a4:a1:ed:81: d0:15:63:78:b3:58:bd:b0:5d:04:39:79:8f:b3:1b:97:22:28: 6c:a2:4e:e0:37:3f:66:fe:48:a7:b4:18:6c:15:db:34:6b:13: f6:29:7c:09:56:f9:76:00:37:25:97:72:d8:23:72:06:fd:38: 71:00:52:d6:a9:df:b8:63:a3:13:35:da:3f:b6:aa:57:12:14: 47:98:c1:6d:2b:70:df:3a:a3:39:cb:93:3e:c6:b7:ac:70:c1: de:f2:68:ec:7c:a6:b4:9f:bb:56:42:dc:c1:e9:e1:b8:11:98: 6c:4e:dc:f2:5b:04:a9:19:56:a9:1a:4f:08:2a:e8:30:95:40: 97:18:07:a8:04:40:18:c8:ca:9e:16:37:87:71:7c:d4:aa:0a: 8f:24:d2:c8:ea:96:28:1f:3b:42:7b:cf:ca:97:19:20:11:a9: cf:75:54:70:4d:8b:e0:f3:8d:3b:fd:5b:59:c8:d9:f1:f2:ea: 5c:21:2f:56:70:75:a3:0f:61:7d:4b:a9:d1:00:74:0d:2a:cb: 15:ee:4f:ca -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FfVutOZ6kJPleOlbuoavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy MDIwNzIwHhcNMjYwMTAyMTQyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTg3MmZhNjk2MzQ4YjQ3ZDc0ZTdjOTUzZjcxMWQwOWQ5ZGMxZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wY+px1So1sDuSyt+2ixG+xFOl5M H1m9kQesvCog67W9+BlL+c177LjQmCQbE4EqFcODYV/dy4gY7KvjH9tq/acdzImN D6UYZjarHeMDTL+R+DHX7t1+CiJTVEnI1je5SJVLV0i8+XbGe3srOLE4bIN43iy/ cEy0GctaNFVrXyi2x8FCquflbiQUlOz2Pg/NhHGc8NtJx1hAKv1DV05NJNWhPYst m4a8ShrDZiUdkoEy+HDdZLnr+y9Ismdf68fvdMQR28DU6W+nT0NVVPH8+24U3dpN e8+uK45QMD52BBqtYP5B7R+8oo4W91nFbgs3DsfBCwgdyIXM/kZQLvMtPwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDqHL6aWNItH1058lT9xHQnZ3B/lMB8GA1UdIwQY MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvT29jdnBwWTBpMGZYVG55VlAzRWRDZG5jSC1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW+lYAwQC wWpEMA0EAgACMAcDBQAqAEbgMA0GCSqGSIb3DQEBCwUAA4IBAQBShcq2R634QJIR 1stWilq2ZFqjuThA+S+oJKVIBEa+U6w2sTfx/mf8POQwBftZSHH9UaSh7YHQFWN4 s1i9sF0EOXmPsxuXIihsok7gNz9m/kintBhsFds0axP2KXwJVvl2ADcll3LYI3IG /ThxAFLWqd+4Y6MTNdo/tqpXEhRHmMFtK3DfOqM5y5M+xrescMHe8mjsfKa0n7tW QtzB6eG4EZhsTtzyWwSpGVapGk8IKugwlUCXGAeoBEAYyMqeFjeHcXzUqgqPJNLI 6pYoHztCe8/KlxkgEanPdVRwTYvg8407/VtZyNnx8upcIS9WcHWjD2F9S6nRAHQN KssV7k/K -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:24 2026 by rpki-client