This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/OsHD-8Mh29wev3uW0LyQcxnz7vY.roa File: OsHD-8Mh29wev3uW0LyQcxnz7vY.roa (raw, json) Hash identifier: 5qHNuzCFg0VWcxLcG9huWE23v4lgV78sUuV4jVInwd8= Subject key identifier: 3A:C1:C3:FB:C3:21:DB:DC:1E:BF:7B:96:D0:BC:90:73:19:F3:EE:F6 Certificate issuer: /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8 Certificate serial: 019B7FF214C18D7FB7134281D20587ADF459 Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/OsHD-8Mh29wev3uW0LyQcxnz7vY.roa Signing time: Fri 02 Jan 2026 18:22:09 +0000 ROA not before: Fri 02 Jan 2026 18:22:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25697 IP address blocks: 62.164.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:14:c1:8d:7f:b7:13:42:81:d2:05:87:ad:f4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8 Validity Not Before: Jan 2 18:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ac1c3fbc321dbdc1ebf7b96d0bc907319f3eef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:38:28:22:cc:e1:b2:88:35:15:81:80:94:81: af:34:ba:75:88:fe:51:5b:ca:b5:60:82:ed:95:81: 63:e7:2a:27:22:8d:97:df:ac:01:a8:c0:24:8b:76: e3:db:ab:bb:3a:d7:9f:64:30:36:ed:3f:f6:91:92: ec:0f:f8:1d:34:99:a4:54:aa:8b:d1:76:aa:2c:5e: d8:92:c2:0e:ad:73:7b:f8:70:2d:3b:bd:e2:e0:b6: 30:e2:1c:fe:30:97:83:46:5a:48:cd:a3:15:f1:d9: ae:d1:6f:51:f0:79:73:44:63:01:a8:a0:f3:5c:c1: cd:86:5f:e7:2d:77:43:9c:c0:f0:09:6a:fc:d4:79: eb:c6:10:9c:49:dd:00:ac:01:3c:39:02:11:cd:8a: 47:b9:d3:b3:6f:07:0a:a2:b5:79:64:91:ff:a9:92: a6:d9:82:b5:e2:8e:20:c4:d6:8f:14:93:a1:f2:99: e0:ef:61:91:27:e3:a8:d7:d5:5a:89:16:60:19:04: 73:1d:57:37:f4:2b:73:8f:ac:da:19:dd:35:ac:3b: 20:06:56:33:9d:c7:99:6b:75:52:7c:da:52:bb:b8: 86:3c:00:94:95:45:f6:14:f6:7b:68:5f:b9:6a:c4: a8:24:d8:3d:b4:bc:e3:c6:93:8b:86:1e:2e:e3:77: 30:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C1:C3:FB:C3:21:DB:DC:1E:BF:7B:96:D0:BC:90:73:19:F3:EE:F6 X509v3 Authority Key Identifier: keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/OsHD-8Mh29wev3uW0LyQcxnz7vY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.153.0/24 Signature Algorithm: sha256WithRSAEncryption 93:83:fc:31:f0:4c:14:4d:42:e8:d5:2f:03:6f:1e:c8:e3:fc: 9d:ef:1e:40:d8:19:d2:04:fe:67:20:d9:fe:74:fe:33:a8:e8: 29:d3:46:65:4a:b5:0b:b5:2d:30:22:b1:ac:c3:8a:6f:72:db: db:f8:76:46:df:05:f2:7c:78:cc:9f:ea:2a:74:48:d4:21:b8: 44:c4:72:27:4c:e0:6d:31:21:d6:77:c1:a8:bb:4b:8d:20:52: 89:f3:dd:7a:9b:9d:d2:53:ef:08:d2:1d:ab:34:50:85:cb:4f: 98:ee:cf:0a:19:d5:37:9e:a7:a9:a8:8b:0c:db:15:14:b5:1a: 62:70:d6:5f:32:bd:84:eb:5c:b6:84:16:61:a7:60:f4:59:db: b6:1a:70:a2:7f:ef:6f:f4:7c:eb:fc:48:fd:73:3c:d1:3e:fc: aa:5a:c2:0b:d0:ef:0d:42:50:b1:33:ed:f7:16:b3:c7:22:47: 74:91:63:25:7f:32:b6:27:d0:a7:ba:1b:2d:6a:d8:ee:a9:58: 7f:31:37:30:21:7f:21:21:d8:e4:0a:b4:ba:33:9e:4f:94:45: 1d:82:d1:f5:e3:88:52:a0:c1:1b:85:d5:b1:c4:ea:03:70:3c: ba:b0:7f:29:48:f1:1b:d5:b9:a5:bb:24:c4:7c:5e:09:62:bf: cf:20:26:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8hTBjX+3E0KB0gWHrfRZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljY2UxNjAwZjUwNzM1OTYwZjg2ZDYyMWNkNGY1ZjU5Zjg3 OWEwZTgwHhcNMjYwMTAyMTgyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWMxYzNmYmMzMjFkYmRjMWViZjdiOTZkMGJjOTA3MzE5ZjNlZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzgoIszhsog1FYGAlIGvNLp1iP5R W8q1YILtlYFj5yonIo2X36wBqMAki3bj26u7OtefZDA27T/2kZLsD/gdNJmkVKqL 0XaqLF7YksIOrXN7+HAtO73i4LYw4hz+MJeDRlpIzaMV8dmu0W9R8HlzRGMBqKDz XMHNhl/nLXdDnMDwCWr81HnrxhCcSd0ArAE8OQIRzYpHudOzbwcKorV5ZJH/qZKm 2YK14o4gxNaPFJOh8png72GRJ+Oo19VaiRZgGQRzHVc39Ctzj6zaGd01rDsgBlYz nceZa3VSfNpSu7iGPACUlUX2FPZ7aF+5asSoJNg9tLzjxpOLhh4u43cwEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDrBw/vDIdvcHr97ltC8kHMZ8+72MB8GA1UdIwQY MBaAFJzOFgD1BzWWD4bWIc1PX1n4eaDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My80ZjE3ZmEtZDVlOC00MzlkLTg3YTIt ZGYzMmEyNWM1ZjJmLzEvT3NIRC04TWgyOXdldjN1VzBMeVFjeG56N3ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My80ZjE3ZmEtZDVlOC00MzlkLTg3YTItZGYzMmEyNWM1ZjJm LzEvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPqSZMA0G CSqGSIb3DQEBCwUAA4IBAQCTg/wx8EwUTULo1S8Dbx7I4/yd7x5A2BnSBP5nINn+ dP4zqOgp00ZlSrULtS0wIrGsw4pvctvb+HZG3wXyfHjMn+oqdEjUIbhExHInTOBt MSHWd8Gou0uNIFKJ8916m53SU+8I0h2rNFCFy0+Y7s8KGdU3nqepqIsM2xUUtRpi cNZfMr2E61y2hBZhp2D0Wdu2GnCif+9v9Hzr/Ej9czzRPvyqWsIL0O8NQlCxM+33 FrPHIkd0kWMlfzK2J9CnuhstatjuqVh/MTcwIX8hIdjkCrS6M55PlEUdgtH144hS oMEbhdWxxOoDcDy6sH8pSPEb1bmluyTEfF4JYr/PICbw -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:15 2026 by rpki-client