This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/oL9_-G_BE3Ib7OwngyyeN305t6g.roa File: oL9_-G_BE3Ib7OwngyyeN305t6g.roa (raw, json) Hash identifier: bC+XZTw3+M3qUxRZBZ3OzKSTrnOKvMY+D1VuNWxrnR8= Subject key identifier: A0:BF:7F:F8:6F:C1:13:72:1B:EC:EC:27:83:2C:9E:37:7D:39:B7:A8 Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca Certificate serial: 019B7A5AF97A29494531DA3F2922C1074017 Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/oL9_-G_BE3Ib7OwngyyeN305t6g.roa Signing time: Thu 01 Jan 2026 16:19:00 +0000 ROA not before: Thu 01 Jan 2026 16:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31027 IP address blocks: 91.240.185.0/24 maxlen: 24 91.240.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f9:7a:29:49:45:31:da:3f:29:22:c1:07:40:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca Validity Not Before: Jan 1 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0bf7ff86fc113721becec27832c9e377d39b7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:17:37:9f:d0:47:ae:04:38:4d:c1:e2:b8: d8:fb:a1:1d:79:c2:0d:a4:c9:9e:de:58:f6:13:a8: 75:34:17:e3:26:14:33:cd:d9:5d:9d:b9:b6:29:22: 15:fd:c8:9c:08:0c:9b:fc:a0:a2:74:d3:8a:59:95: e6:50:53:a8:bb:63:14:d4:0f:46:ef:5c:e4:1b:c4: 6b:ac:bd:4b:da:99:37:a4:04:ed:81:e0:a5:c9:06: e5:4f:82:2d:8c:3e:07:18:2b:be:72:74:25:43:59: 09:ee:11:47:c3:c9:fc:01:c8:ac:f9:09:ab:dc:28: 9e:d9:05:cd:79:c9:0f:61:60:9d:66:23:20:7a:00: 15:1f:b3:d1:7e:1f:43:9a:b5:b3:9f:ba:4c:23:96: f1:9e:d0:cb:d9:80:8b:a0:86:b3:7e:c9:a4:5f:01: 65:64:dd:21:e1:79:e3:aa:e7:68:77:5c:53:02:9f: fc:bb:e9:e7:7c:b7:c3:24:e5:d3:3a:38:a0:81:b5: 4c:c9:7c:93:21:e6:5a:04:3f:7b:f7:08:40:57:68: 0d:97:54:0a:bb:ec:23:da:e5:51:35:ab:dd:a0:22: c4:97:5d:ea:6d:26:74:c2:23:20:44:6c:2d:95:37: f8:2d:d2:11:46:ba:51:93:b0:97:05:5a:9c:f7:57: 25:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BF:7F:F8:6F:C1:13:72:1B:EC:EC:27:83:2C:9E:37:7D:39:B7:A8 X509v3 Authority Key Identifier: keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/oL9_-G_BE3Ib7OwngyyeN305t6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.185.0-91.240.187.255 Signature Algorithm: sha256WithRSAEncryption 85:98:cc:14:57:58:5c:1e:ba:3d:8e:4a:5d:53:6e:94:02:69: 91:ae:60:1e:db:45:8f:da:87:88:79:94:e0:62:91:21:27:63: 51:6a:c1:0f:3c:dd:49:f1:6e:88:80:2b:58:13:97:a8:64:12: 48:d9:e7:67:81:e3:fc:8e:83:44:fb:2a:5d:0e:50:9c:2e:71: c2:34:eb:e0:c5:c4:80:5e:33:22:5f:ab:73:6e:d9:98:7b:ad: f3:b7:d2:65:11:31:b1:c2:88:30:c6:f7:4f:d5:b8:eb:aa:99: 89:aa:65:b2:53:dd:a2:0c:83:bc:28:13:03:d3:2f:70:f3:9b: 47:66:df:98:14:6a:00:fc:c6:12:65:b1:37:db:26:5b:5b:13: 11:0b:12:34:b3:72:e7:08:44:86:44:fe:49:ce:d4:e5:de:2f: 57:1d:4e:72:39:93:82:0a:c0:ff:28:5e:07:ca:35:b4:8c:7e: f4:39:95:d8:3c:12:0e:0c:c1:31:27:53:6b:9a:96:5e:7c:77: 71:09:4a:b3:a5:2f:79:05:e5:47:14:3d:80:46:4f:be:8f:c9: a8:f1:be:e2:96:73:f9:6f:82:57:06:93:ca:d8:24:2b:a7:73: 20:f9:95:fa:31:be:d6:d4:aa:46:78:97:b2:4e:a4:21:bd:45: 25:15:00:cf -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6Wvl6KUlFMdo/KSLBB0AXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGNiYTRiNDMzMDRiNTFjNGJkZGZiZDQzMzE3ODJhZDkx MTAyY2EwHhcNMjYwMTAxMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGJmN2ZmODZmYzExMzcyMWJlY2VjMjc4MzJjOWUzNzdkMzliN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIUXN5/QR64EOE3B4rjY+6EdecIN pMme3lj2E6h1NBfjJhQzzdldnbm2KSIV/cicCAyb/KCidNOKWZXmUFOou2MU1A9G 71zkG8RrrL1L2pk3pATtgeClyQblT4ItjD4HGCu+cnQlQ1kJ7hFHw8n8Acis+Qmr 3Cie2QXNeckPYWCdZiMgegAVH7PRfh9DmrWzn7pMI5bxntDL2YCLoIazfsmkXwFl ZN0h4Xnjqudod1xTAp/8u+nnfLfDJOXTOjiggbVMyXyTIeZaBD979whAV2gNl1QK u+wj2uVRNavdoCLEl13qbSZ0wiMgRGwtlTf4LdIRRrpRk7CXBVqc91cl/QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKC/f/hvwRNyG+zsJ4Msnjd9ObeoMB8GA1UdIwQY MBaAFJMMuktDMEtRxL3fvUMxeCrZEQLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWIt ZWVkYjE2OThjMjFhLzEvb0w5Xy1HX0JFM0liN093bmd5eWVOMzA1dDZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWItZWVkYjE2OThjMjFh LzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABb8LkD BAJb8LgwDQYJKoZIhvcNAQELBQADggEBAIWYzBRXWFweuj2OSl1TbpQCaZGuYB7b RY/ah4h5lOBikSEnY1FqwQ883UnxboiAK1gTl6hkEkjZ52eB4/yOg0T7Kl0OUJwu ccI06+DFxIBeMyJfq3Nu2Zh7rfO30mURMbHCiDDG90/VuOuqmYmqZbJT3aIMg7wo EwPTL3Dzm0dm35gUagD8xhJlsTfbJltbExELEjSzcucIRIZE/knO1OXeL1cdTnI5 k4IKwP8oXgfKNbSMfvQ5ldg8Eg4MwTEnU2uall58d3EJSrOlL3kF5UcUPYBGT76P yajxvuKWc/lvglcGk8rYJCuncyD5lfoxvtbUqkZ4l7JOpCG9RSUVAM8= -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:22 2026 by rpki-client