This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/O5ifYXq3nFzzB8ilaS5pskV31BA.roa File: O5ifYXq3nFzzB8ilaS5pskV31BA.roa (raw, json) Hash identifier: draqfXGZwxyGVkEpoc96L4YtQVVlKf2bMFdaNq5PvrA= Subject key identifier: 3B:98:9F:61:7A:B7:9C:5C:F3:07:C8:A5:69:2E:69:B2:45:77:D4:10 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ACD0CCDEB8EE74BC8AB903265445C Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/O5ifYXq3nFzzB8ilaS5pskV31BA.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212783 IP address blocks: 81.168.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cd:0c:cd:eb:8e:e7:4b:c8:ab:90:32:65:44:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b989f617ab79c5cf307c8a5692e69b24577d410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:7b:c4:80:5d:94:2f:0d:04:a2:cd:03:60: 8a:bb:19:39:6c:e5:aa:3c:6c:c3:6d:4e:a4:5f:89: 2f:f4:64:88:4a:2e:a4:ac:d6:3e:b1:20:ce:5d:80: 2d:82:88:b9:cc:23:76:33:43:65:91:71:a4:cb:ea: 44:50:be:be:57:b9:f0:4d:39:d0:dd:a5:a6:80:1a: 90:40:13:8d:58:a7:8b:77:91:fa:e1:13:2d:e5:13: 18:f7:36:a6:0d:26:67:7f:4b:da:44:6f:f5:b0:74: d9:85:d0:1b:5f:a8:e2:7f:d5:18:bc:d1:ac:68:d3: 77:42:5c:81:a2:7e:c8:39:58:55:41:0d:1e:97:69: 24:6b:3a:4d:6a:fd:dd:7c:5d:f8:37:82:7a:2c:66: 19:70:b6:fc:61:75:9b:f4:27:af:4c:7a:db:c6:95: 17:75:d5:0b:8c:1b:17:cb:40:69:fb:25:ba:0e:b7: 36:e0:1f:30:b2:88:01:74:c8:f2:e3:11:a9:ab:38: 05:e6:d3:3b:27:3e:61:bc:17:d5:f3:c0:7d:49:ba: 5c:83:2e:3d:6d:e9:eb:a5:c0:a2:79:9f:0e:9c:39: ee:60:c2:f5:f5:ec:04:18:2a:62:e7:72:87:74:e5: 89:a0:2e:b1:d0:f9:da:f2:ba:11:15:e1:75:ea:c3: 26:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:98:9F:61:7A:B7:9C:5C:F3:07:C8:A5:69:2E:69:B2:45:77:D4:10 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/O5ifYXq3nFzzB8ilaS5pskV31BA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.168.35.0/24 Signature Algorithm: sha256WithRSAEncryption 23:03:42:1b:30:6b:79:39:ca:b1:f4:9c:d0:a1:1c:a2:ae:08: b1:d2:17:51:de:20:01:cc:05:23:eb:3c:ad:a4:28:d8:b9:03: cc:23:b3:0c:ea:94:38:92:ed:91:a7:b5:bf:bb:3f:ff:48:17: fe:c6:67:5f:cf:62:33:42:18:ab:72:39:59:4d:b4:0a:7a:28: 07:b5:c1:c7:69:70:74:93:7a:04:a4:27:c0:51:7e:f3:50:77: 81:82:ba:32:2c:b0:27:5c:73:8e:75:18:85:89:ab:5e:af:8b: 70:fa:1a:89:2e:83:78:6a:5d:62:c1:74:57:b1:02:5a:b4:8e: 0c:4c:e4:0f:65:5d:68:2e:21:bc:67:22:93:e8:ec:cd:ce:38: 17:87:9f:4c:e4:c9:49:e1:b4:2a:19:b4:d1:4c:f2:ea:9a:9e: 92:4d:4b:d3:61:0b:96:ba:d0:2d:5a:31:f5:1c:b5:b6:e2:b9: 15:55:e7:1b:06:c0:06:0f:b3:b7:0c:f7:23:47:ee:22:59:b9: b3:51:7c:2f:09:f5:73:53:be:69:09:55:43:ce:3d:28:df:7e: dc:5e:19:f8:1d:53:ae:ba:73:29:33:4f:ea:c6:9e:40:f3:48: 99:14:2a:20:7d:c3:46:c5:d0:a8:26:0b:1c:dd:59:71:aa:fa: d3:fd:1d:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Ws0MzeuO50vIq5AyZURcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjk4OWY2MTdhYjc5YzVjZjMwN2M4YTU2OTJlNjliMjQ1NzdkNDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunN7xIBdlC8NBKLNA2CKuxk5bOWq PGzDbU6kX4kv9GSISi6krNY+sSDOXYAtgoi5zCN2M0NlkXGky+pEUL6+V7nwTTnQ 3aWmgBqQQBONWKeLd5H64RMt5RMY9zamDSZnf0vaRG/1sHTZhdAbX6jif9UYvNGs aNN3QlyBon7IOVhVQQ0el2kkazpNav3dfF34N4J6LGYZcLb8YXWb9CevTHrbxpUX ddULjBsXy0Bp+yW6Drc24B8wsogBdMjy4xGpqzgF5tM7Jz5hvBfV88B9Sbpcgy49 benrpcCieZ8OnDnuYML19ewEGCpi53KHdOWJoC6x0Pna8roRFeF16sMmKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDuYn2F6t5xc8wfIpWkuabJFd9QQMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvTzVpZllYcTNuRnp6QjhpbGFTNXBza1YzMUJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUagjMA0G CSqGSIb3DQEBCwUAA4IBAQAjA0IbMGt5Ocqx9JzQoRyirgix0hdR3iABzAUj6zyt pCjYuQPMI7MM6pQ4ku2Rp7W/uz//SBf+xmdfz2IzQhircjlZTbQKeigHtcHHaXB0 k3oEpCfAUX7zUHeBgroyLLAnXHOOdRiFiater4tw+hqJLoN4al1iwXRXsQJatI4M TOQPZV1oLiG8ZyKT6OzNzjgXh59M5MlJ4bQqGbTRTPLqmp6STUvTYQuWutAtWjH1 HLW24rkVVecbBsAGD7O3DPcjR+4iWbmzUXwvCfVzU75pCVVDzj0o337cXhn4HVOu unMpM0/qxp5A80iZFCogfcNGxdCoJgsc3VlxqvrT/R3t -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:49 2026 by rpki-client