This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/OdQGWsy9c8XDU0zu8drNC-OWHho.roa File: OdQGWsy9c8XDU0zu8drNC-OWHho.roa (raw, json) Hash identifier: pmkI9zAJgVjFylMbU79wV4Stohix0h2ULqEM+WHo6NU= Subject key identifier: 39:D4:06:5A:CC:BD:73:C5:C3:53:4C:EE:F1:DA:CD:0B:E3:96:1E:1A Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Certificate serial: 019B7E37925F62668CC9D3ADB829BF9D5383 Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/OdQGWsy9c8XDU0zu8drNC-OWHho.roa Signing time: Fri 02 Jan 2026 10:18:49 +0000 ROA not before: Fri 02 Jan 2026 10:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 91.239.62.0/24 maxlen: 24 185.138.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:92:5f:62:66:8c:c9:d3:ad:b8:29:bf:9d:53:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Validity Not Before: Jan 2 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39d4065accbd73c5c3534ceef1dacd0be3961e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b4:51:57:4d:43:65:a4:3a:03:12:87:41:fc: 32:05:e4:f5:73:7c:8a:a8:08:ff:1d:bc:d8:9d:13: 19:23:3b:a1:19:1c:42:10:a4:41:e5:91:e1:72:21: ca:23:10:65:2c:37:1d:81:6e:8d:4e:c3:22:37:c8: b5:91:f9:c4:a3:04:db:06:00:25:cd:a8:06:16:84: 05:20:ae:f0:64:b2:4b:d7:e9:2a:ff:dc:06:3b:69: b0:26:81:ce:cb:16:c5:3f:7e:2a:15:2e:96:77:f3: 26:5c:05:3a:d7:62:bf:6d:26:13:c8:fc:4b:35:9a: 78:00:af:ea:83:17:04:26:50:96:32:98:09:b0:82: fd:c5:7b:ce:e3:e7:df:fd:13:0d:f7:bf:29:9a:17: 25:f4:e1:d8:33:9d:48:f4:a4:fc:0d:96:30:ee:2b: 73:c5:bd:52:78:2a:b8:cc:5e:81:3b:ea:6a:3a:32: 26:e2:3d:0a:a6:10:24:0e:f0:37:1a:d8:54:6b:21: 8b:29:f8:14:72:c7:24:47:38:3b:34:9f:10:02:a9: 8c:cb:d4:2b:a8:99:a5:13:47:5f:64:73:8d:22:d9: 97:95:b1:1d:15:51:6e:bc:6f:24:5c:41:5d:c6:31: 17:52:7a:7d:4d:ce:fa:a6:f8:5d:f2:d0:4e:65:5a: fe:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D4:06:5A:CC:BD:73:C5:C3:53:4C:EE:F1:DA:CD:0B:E3:96:1E:1A X509v3 Authority Key Identifier: keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/OdQGWsy9c8XDU0zu8drNC-OWHho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.62.0/24 185.138.233.0/24 Signature Algorithm: sha256WithRSAEncryption 51:da:56:23:e7:ca:0b:88:5a:53:15:b1:bf:fc:b7:30:4d:85: 3f:26:a2:0b:24:fd:86:15:08:5c:1e:fe:d2:e0:1c:51:6b:03: 42:8e:3d:e6:50:43:ff:7b:28:69:60:b2:9e:05:8b:49:bd:88: be:e0:b3:ae:14:b2:97:30:e8:b1:9a:32:96:83:f6:1f:99:02: 02:f4:87:37:55:a0:21:7b:87:fc:62:d2:6b:b0:38:40:6d:c2: dc:1a:6f:a8:f8:82:6f:83:e9:30:b9:82:92:03:d3:13:6c:35: c2:21:98:5e:1c:cc:33:db:5c:0a:e7:1d:ac:18:42:8d:cf:2e: b2:89:d2:29:17:7a:b1:f6:2f:f4:a6:3c:03:11:c8:5d:e8:f5: 04:03:21:9e:be:4d:f6:e0:32:53:b0:31:00:ec:39:36:eb:ae: 05:fe:95:33:63:fb:a6:55:88:2c:96:8b:f0:55:36:66:ee:65: b2:3c:a9:23:e4:ec:93:c0:cd:d6:e6:68:e2:61:b5:b5:be:1b: 81:de:b4:02:ef:2b:63:95:95:26:2f:ae:94:38:7f:ac:10:3f: 42:98:d7:4b:ba:f2:bf:ec:cf:28:31:d0:6e:07:62:e0:6b:9c: 62:8d:28:e6:48:8a:f6:07:19:fc:32:68:1f:0d:34:81:da:85: 21:b7:a1:f7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N5JfYmaMydOtuCm/nVODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj ZDBiMWYwHhcNMjYwMTAyMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWQ0MDY1YWNjYmQ3M2M1YzM1MzRjZWVmMWRhY2QwYmUzOTYxZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrRRV01DZaQ6AxKHQfwyBeT1c3yK qAj/HbzYnRMZIzuhGRxCEKRB5ZHhciHKIxBlLDcdgW6NTsMiN8i1kfnEowTbBgAl zagGFoQFIK7wZLJL1+kq/9wGO2mwJoHOyxbFP34qFS6Wd/MmXAU612K/bSYTyPxL NZp4AK/qgxcEJlCWMpgJsIL9xXvO4+ff/RMN978pmhcl9OHYM51I9KT8DZYw7itz xb1SeCq4zF6BO+pqOjIm4j0KphAkDvA3GthUayGLKfgUcsckRzg7NJ8QAqmMy9Qr qJmlE0dfZHONItmXlbEdFVFuvG8kXEFdxjEXUnp9Tc76pvhd8tBOZVr+aQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDnUBlrMvXPFw1NM7vHazQvjlh4aMB8GA1UdIwQY MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt NzI2MDU3YTFmMmE0LzEvT2RRR1dzeTljOFhEVTB6dThkck5DLU9XSGhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0 LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+8+AwQA uYrpMA0GCSqGSIb3DQEBCwUAA4IBAQBR2lYj58oLiFpTFbG//LcwTYU/JqILJP2G FQhcHv7S4BxRawNCjj3mUEP/eyhpYLKeBYtJvYi+4LOuFLKXMOixmjKWg/YfmQIC 9Ic3VaAhe4f8YtJrsDhAbcLcGm+o+IJvg+kwuYKSA9MTbDXCIZheHMwz21wK5x2s GEKNzy6yidIpF3qx9i/0pjwDEchd6PUEAyGevk324DJTsDEA7Dk2664F/pUzY/um VYgslovwVTZm7mWyPKkj5OyTwM3W5mjiYbW1vhuB3rQC7ytjlZUmL66UOH+sED9C mNdLuvK/7M8oMdBuB2Lga5xijSjmSIr2Bxn8MmgfDTSB2oUht6H3 -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:14 2026 by rpki-client