This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/s0HOCx3ToCFGRzZUHm_UV-cLZBI.roa File: s0HOCx3ToCFGRzZUHm_UV-cLZBI.roa (raw, json) Hash identifier: OKS1HAKlGU2JN5vzskZAI17mKtPa16rejzU50FR3zwM= Subject key identifier: B3:41:CE:0B:1D:D3:A0:21:46:47:36:54:1E:6F:D4:57:E7:0B:64:12 Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Certificate serial: 019BE0A0C58D012C29133FE6B5827A7DC14B Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/s0HOCx3ToCFGRzZUHm_UV-cLZBI.roa Signing time: Wed 21 Jan 2026 12:56:31 +0000 ROA not before: Wed 21 Jan 2026 12:56:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214793 IP address blocks: 91.214.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:a0:c5:8d:01:2c:29:13:3f:e6:b5:82:7a:7d:c1:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51 Validity Not Before: Jan 21 12:56:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b341ce0b1dd3a021464736541e6fd457e70b6412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:7b:97:40:6b:21:5a:82:c9:67:06:2e:71: 39:67:94:90:97:c5:40:ad:9f:67:6a:6d:bb:7c:bf: 75:3d:54:27:ea:04:16:28:2f:62:0e:28:0d:f2:d6: a1:4a:68:3f:bc:e8:7d:45:52:07:93:50:13:f8:80: 49:ec:38:c6:1f:56:f0:8d:fc:33:6b:a8:03:25:a8: 27:24:06:07:d3:31:f3:7d:25:63:58:b9:10:e2:69: f3:b6:b0:a0:cd:ca:5a:41:5f:4f:88:89:0e:c8:bb: 37:cc:46:33:e7:76:6a:85:79:e0:66:86:27:c8:d7: 96:69:87:e4:a4:80:5c:20:77:67:f6:b4:aa:6b:e9: 77:7e:14:5d:b6:ce:a4:44:45:33:27:86:d0:0e:59: da:d0:71:79:3c:37:90:f4:30:45:d1:af:67:af:f7: 58:56:aa:84:3f:98:0f:0c:fd:93:bd:a8:eb:f6:88: 71:62:9f:63:48:ae:2c:a9:15:18:a3:20:0f:4f:01: b8:a7:f6:37:ef:1f:7f:b1:01:3e:8e:ce:7a:37:cd: 25:1e:e9:95:99:d8:e8:d3:fc:f3:f0:26:07:30:e0: 0e:2a:bb:8c:e6:81:50:67:46:10:95:0a:a2:ad:35: 6a:dc:67:e1:eb:34:af:49:4f:a6:9e:9f:72:af:be: d1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:41:CE:0B:1D:D3:A0:21:46:47:36:54:1E:6F:D4:57:E7:0B:64:12 X509v3 Authority Key Identifier: keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/s0HOCx3ToCFGRzZUHm_UV-cLZBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.79.0/24 Signature Algorithm: sha256WithRSAEncryption a3:72:80:23:3e:76:52:e6:5e:58:63:b0:fd:b9:1e:5f:3b:54: 68:d0:7a:c5:8b:ad:05:9c:ae:39:c7:88:bb:c3:fa:cb:08:3e: 35:49:b7:8e:ed:dd:34:89:c0:9e:b9:40:0f:21:e2:41:38:d0: 1d:32:d3:32:b3:a5:6d:d8:3f:5a:f3:9f:e4:d9:b1:97:88:41: 23:36:fe:a0:47:49:13:eb:0b:29:f0:e3:9e:4a:4b:da:a7:be: 5a:0a:37:a5:97:a9:70:5f:75:9f:5f:db:47:b6:3f:f9:f2:23: a0:39:05:77:fa:e3:c7:01:1b:48:16:90:44:9c:4d:dd:2b:b6: e4:06:24:57:d5:34:38:96:04:55:bf:bf:ca:02:8c:0e:30:0b: 47:d0:ed:72:cf:fd:52:9e:ea:61:51:66:5f:fb:c0:c3:b2:28: f3:c3:9e:42:db:12:67:7c:36:fb:9d:9b:72:6e:ce:64:4a:58: 06:94:3d:3e:fa:47:91:a6:c7:fe:d2:e5:1b:64:f0:25:69:5d: 04:dd:33:a4:e8:f2:2e:d8:3e:2f:0a:e5:87:8c:eb:11:84:b9: 4d:84:d6:24:3a:89:7e:b3:64:45:49:96:24:9d:8a:c8:2c:40: 15:40:de:df:df:9b:92:ae:23:b8:48:4d:c4:7b:37:85:dd:44: 3e:8e:a1:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvgoMWNASwpEz/mtYJ6fcFLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTE2MGYwY2U1ZTAzNWFmM2NiMjFmNGRmZDA0ZWFiOWVh N2VlNTEwHhcNMjYwMTIxMTI1NjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzQxY2UwYjFkZDNhMDIxNDY0NzM2NTQxZTZmZDQ1N2U3MGI2NDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCh7l0BrIVqCyWcGLnE5Z5SQl8VA rZ9nam27fL91PVQn6gQWKC9iDigN8tahSmg/vOh9RVIHk1AT+IBJ7DjGH1bwjfwz a6gDJagnJAYH0zHzfSVjWLkQ4mnztrCgzcpaQV9PiIkOyLs3zEYz53ZqhXngZoYn yNeWaYfkpIBcIHdn9rSqa+l3fhRdts6kREUzJ4bQDlna0HF5PDeQ9DBF0a9nr/dY VqqEP5gPDP2Tvajr9ohxYp9jSK4sqRUYoyAPTwG4p/Y37x9/sQE+js56N80lHumV mdjo0/zz8CYHMOAOKruM5oFQZ0YQlQqirTVq3Gfh6zSvSU+mnp9yr77RpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLNBzgsd06AhRkc2VB5v1FfnC2QSMB8GA1UdIwQY MBaAFPLhYPDOXgNa88sh9N/QTquep+5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUt ZmNlMjE0YzZmZmRhLzEvczBIT0N4M1RvQ0ZHUnpaVUhtX1VWLWNMWkJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUtZmNlMjE0YzZmZmRh LzEvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9ZPMA0G CSqGSIb3DQEBCwUAA4IBAQCjcoAjPnZS5l5YY7D9uR5fO1Ro0HrFi60FnK45x4i7 w/rLCD41SbeO7d00icCeuUAPIeJBONAdMtMys6Vt2D9a85/k2bGXiEEjNv6gR0kT 6wsp8OOeSkvap75aCjell6lwX3WfX9tHtj/58iOgOQV3+uPHARtIFpBEnE3dK7bk BiRX1TQ4lgRVv7/KAowOMAtH0O1yz/1SnuphUWZf+8DDsijzw55C2xJnfDb7nZty bs5kSlgGlD0++keRpsf+0uUbZPAlaV0E3TOk6PIu2D4vCuWHjOsRhLlNhNYkOol+ s2RFSZYknYrILEAVQN7f35uSriO4SE3EezeF3UQ+jqG1 -----END CERTIFICATE-----Generated at Sun Jan 25 19:19:11 2026 by rpki-client