This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa File: o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa (raw, json) Hash identifier: 7bwGC4W14PVYfYqbu9cx4x9X5c24UYWk/Q4pZluMhT0= Subject key identifier: A3:40:77:03:EB:8E:58:C2:74:43:7A:C8:EB:66:62:65:6D:5A:3C:BE Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8 Certificate serial: 019B7C119B35C749330C47FCC7125F165C16 Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa Signing time: Fri 02 Jan 2026 00:18:07 +0000 ROA not before: Fri 02 Jan 2026 00:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35470 IP address blocks: 87.239.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:9b:35:c7:49:33:0c:47:fc:c7:12:5f:16:5c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8 Validity Not Before: Jan 2 00:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3407703eb8e58c274437ac8eb6662656d5a3cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:58:c4:5a:c4:16:58:d6:7e:d3:39:5d:2a:43: c7:4e:03:aa:dc:fb:fb:76:eb:50:b9:1b:f9:c5:fb: 71:d9:63:99:1c:8e:00:ba:73:c4:1f:df:41:04:de: 80:94:e4:57:5e:9b:ca:21:06:ca:c3:8a:45:83:ea: f9:dd:21:77:f7:9e:26:01:eb:2a:99:1e:4b:1d:60: 2a:a1:68:a6:79:1e:b6:9b:12:a7:ab:34:96:46:9e: ad:8f:6e:4a:38:f7:1e:b3:46:6d:74:ba:7c:78:e9: 83:6f:6d:06:7a:c4:65:2d:81:e9:b0:ad:cf:21:a3: 06:6c:d6:39:67:eb:f7:6f:79:47:92:9b:4b:fe:c8: 46:5b:dd:6f:25:ef:fa:5a:82:89:db:d5:83:1c:f0: 1d:a5:86:b1:e3:17:ef:b6:93:a6:10:cb:04:86:30: 5f:9b:2e:08:63:c4:61:4c:77:6e:7b:81:be:05:2b: 4b:c2:f0:fe:40:92:c6:d8:36:61:8f:e0:26:11:79: e7:6a:73:39:69:87:0f:45:04:b3:7f:92:d6:7a:c5: 2d:16:78:0c:ca:7d:45:a6:47:78:03:81:2b:cd:90: d6:3d:86:8b:b6:0c:94:1b:c9:07:6a:4e:b0:f6:39: 32:d6:0e:a0:2f:cd:56:7a:46:c2:56:00:78:37:38: 7f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:40:77:03:EB:8E:58:C2:74:43:7A:C8:EB:66:62:65:6D:5A:3C:BE X509v3 Authority Key Identifier: keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.239.11.0/24 Signature Algorithm: sha256WithRSAEncryption 60:63:d2:31:3b:c6:72:09:c6:c4:ac:82:40:22:f3:9f:f0:39: 1c:22:2b:f2:aa:32:b9:f0:b4:82:40:d5:9a:22:e6:60:03:4e: f1:7d:dd:b7:43:0a:31:af:df:70:20:0c:1b:d8:db:bb:43:5e: 3e:e8:ad:d6:c7:26:6f:26:71:ad:bd:c1:62:d6:dd:f4:5f:cf: 37:c4:fa:8f:f9:b5:dc:70:00:ed:aa:d9:2f:b1:77:2e:04:1b: 99:33:81:1e:59:82:68:70:dc:53:fd:20:38:27:ad:0d:1f:d7: 22:c6:60:56:73:35:67:4d:be:8c:d7:01:b0:e3:2c:5c:8d:99: 50:42:64:a8:15:21:49:1f:ed:d4:d4:8e:90:65:2d:0d:20:5c: a1:38:7d:ca:6e:ad:69:f6:16:ba:4f:5e:a5:d0:61:1b:0e:87: 66:f0:dd:63:60:bb:c5:88:45:9a:99:ba:e1:ee:e6:61:12:e4: 00:f2:ad:22:41:a6:b4:40:cb:5e:88:10:4a:d1:eb:3a:dc:87: 8c:6d:d0:f4:3e:8b:11:1a:2e:81:a9:ce:22:54:7e:78:6c:82: fc:01:29:53:24:38:2f:fe:9f:22:07:c2:c7:0f:0d:cb:9f:d8: c9:1a:c8:39:a7:7e:5d:ed:1f:d2:91:66:b1:fb:45:9b:36:34: 91:91:75:be -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8EZs1x0kzDEf8xxJfFlwWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMWIyNDc4ZGZlMGYzM2EyNzhiMTNmNDJkZDMxOTYwMWQ2 Mzc4YTgwHhcNMjYwMTAyMDAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzQwNzcwM2ViOGU1OGMyNzQ0MzdhYzhlYjY2NjI2NTZkNWEzY2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VjEWsQWWNZ+0zldKkPHTgOq3Pv7 dutQuRv5xftx2WOZHI4AunPEH99BBN6AlORXXpvKIQbKw4pFg+r53SF3954mAesq mR5LHWAqoWimeR62mxKnqzSWRp6tj25KOPces0ZtdLp8eOmDb20GesRlLYHpsK3P IaMGbNY5Z+v3b3lHkptL/shGW91vJe/6WoKJ29WDHPAdpYax4xfvtpOmEMsEhjBf my4IY8RhTHdue4G+BStLwvD+QJLG2DZhj+AmEXnnanM5aYcPRQSzf5LWesUtFngM yn1Fpkd4A4ErzZDWPYaLtgyUG8kHak6w9jky1g6gL81WekbCVgB4Nzh/dQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKNAdwPrjljCdEN6yOtmYmVtWjy+MB8GA1UdIwQY MBaAFPobJHjf4PM6J4sT9C3TGWAdY3ioMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oc2tlTl9nOHpvbml4UDBMZE1aWUIxamVLZy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvMDhhOWM4LTRiZTMtNDY4Mi1hZjgy LTJhMWNjZTdkMmM2NS8xL28wQjNBLXVPV01KMFEzckk2MlppWlcxYVBMNC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYWYvMDhhOWM4LTRiZTMtNDY4Mi1hZjgyLTJhMWNjZTdkMmM2 NS8xLzEtaHNrZU5fZzh6b25peFAwTGRNWllCMWplS2cuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABX7wsw DQYJKoZIhvcNAQELBQADggEBAGBj0jE7xnIJxsSsgkAi85/wORwiK/KqMrnwtIJA 1Zoi5mADTvF93bdDCjGv33AgDBvY27tDXj7ordbHJm8mca29wWLW3fRfzzfE+o/5 tdxwAO2q2S+xdy4EG5kzgR5Zgmhw3FP9IDgnrQ0f1yLGYFZzNWdNvozXAbDjLFyN mVBCZKgVIUkf7dTUjpBlLQ0gXKE4fcpurWn2FrpPXqXQYRsOh2bw3WNgu8WIRZqZ uuHu5mES5ADyrSJBprRAy16IEErR6zrch4xt0PQ+ixEaLoGpziJUfnhsgvwBKVMk OC/+nyIHwscPDcuf2MkayDmnfl3tH9KRZrH7RZs2NJGRdb4= -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:06 2026 by rpki-client