This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/osiPIqZHFwJFJVDnL4CHHio8HdM.roa File: osiPIqZHFwJFJVDnL4CHHio8HdM.roa (raw, json) Hash identifier: vGPA8SjpFPALGX8zEZpTARWGQMkoh1k17+6L+YmNaLY= Subject key identifier: A2:C8:8F:22:A6:47:17:02:45:25:50:E7:2F:80:87:1E:2A:3C:1D:D3 Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89 Certificate serial: 019B7E39147B5AD892B8753E26022A3FD4CD Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/osiPIqZHFwJFJVDnL4CHHio8HdM.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61424 IP address blocks: 5.35.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:14:7b:5a:d8:92:b8:75:3e:26:02:2a:3f:d4:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89 Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2c88f22a6471702452550e72f80871e2a3c1dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:28:4c:5b:cd:50:0f:83:6f:e7:bf:40:9b:33: 12:d1:46:56:21:8f:fe:b7:02:d3:b4:1b:16:ca:ed: 8a:c5:bf:97:87:aa:ed:4e:9f:0e:af:15:2d:3c:41: f4:f8:11:e4:2f:ec:bf:43:f5:e1:05:cc:51:17:96: b3:08:a9:e1:7a:db:f5:93:f7:fd:ce:30:fb:c8:24: f5:06:50:47:22:2b:a2:3e:d0:d2:4a:0f:f0:c5:f7: 61:ae:21:24:96:70:02:7a:f6:ed:26:02:b2:11:d2: e0:6a:fa:1b:f9:f7:29:72:d8:2e:e8:5a:75:4e:6c: 43:1b:b2:3e:dc:e8:cc:02:34:12:1a:68:d1:59:84: 6a:82:1b:6e:bb:5d:9c:6b:e8:cd:0d:27:0e:10:c9: 94:8b:f8:8b:f9:ab:97:86:70:46:b6:04:13:e9:01: 00:41:4d:43:90:30:e8:d6:bf:9b:cb:48:62:dd:4a: 58:7a:fe:73:3b:ef:e5:43:1a:3b:6a:8d:64:be:3e: 77:2b:17:5f:62:0f:73:3f:19:7d:78:11:27:a5:b0: 34:da:b8:2e:f4:b5:11:e1:78:c7:43:b9:c6:d6:d8: b3:53:a9:60:9e:42:81:86:31:db:8c:3e:44:fd:c8: 40:25:e1:56:e5:44:a2:b6:d2:ff:ac:19:a3:98:98: ae:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C8:8F:22:A6:47:17:02:45:25:50:E7:2F:80:87:1E:2A:3C:1D:D3 X509v3 Authority Key Identifier: keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/osiPIqZHFwJFJVDnL4CHHio8HdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.103.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:c1:b4:ae:33:50:79:be:3e:d2:e3:76:95:82:d5:d4:05:85: 25:f6:80:cc:be:ae:15:42:6b:89:4b:9a:b8:a1:4c:67:2a:a1: 2f:ff:0a:c3:ac:ad:43:e4:14:e6:29:05:19:35:7c:c1:91:fc: 23:76:04:13:58:5a:1a:6f:6d:97:69:08:88:e9:9b:f1:30:3f: 95:c9:da:c9:bf:1b:3d:66:79:80:8f:12:a2:3a:d5:e0:22:a5: 71:9b:83:8d:73:11:a2:55:a8:47:da:aa:05:9e:f7:46:b5:21: 3a:cc:3c:f1:b6:9e:b2:4f:62:7e:2f:fe:96:99:56:63:23:51: 3b:90:1e:34:c6:a0:3e:17:1e:09:67:60:83:fd:c9:4d:73:a5: 16:95:c0:a8:e1:45:2a:ff:dc:1a:4f:79:59:77:8f:8a:c9:83: 68:dc:54:e4:28:c0:fc:50:7a:a0:4e:12:69:98:e1:4e:cf:b4: 92:4a:ae:6c:b5:a8:fe:c7:e1:7b:1f:d9:b7:18:78:50:98:ae: 2d:c8:b5:b0:11:ee:70:cf:6a:7b:71:43:09:10:72:26:d7:43: de:51:59:9d:88:f2:74:45:3a:40:c8:6e:cf:fd:cf:f6:89:03: 6e:38:9e:9c:96:d9:57:51:3e:13:82:4b:31:00:96:dd:56:93: 9b:ad:69:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORR7WtiSuHU+JgIqP9TNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NTJkMGQyNjY1NTczODU4MzZhYWI3YWUzZmRjZWQ0Y2E3 NGFkODkwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmM4OGYyMmE2NDcxNzAyNDUyNTUwZTcyZjgwODcxZTJhM2MxZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyChMW81QD4Nv579AmzMS0UZWIY/+ twLTtBsWyu2Kxb+Xh6rtTp8OrxUtPEH0+BHkL+y/Q/XhBcxRF5azCKnhetv1k/f9 zjD7yCT1BlBHIiuiPtDSSg/wxfdhriEklnACevbtJgKyEdLgavob+fcpctgu6Fp1 TmxDG7I+3OjMAjQSGmjRWYRqghtuu12ca+jNDScOEMmUi/iL+auXhnBGtgQT6QEA QU1DkDDo1r+by0hi3UpYev5zO+/lQxo7ao1kvj53KxdfYg9zPxl9eBEnpbA02rgu 9LUR4XjHQ7nG1tizU6lgnkKBhjHbjD5E/chAJeFW5USittL/rBmjmJiuwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKLIjyKmRxcCRSVQ5y+Ahx4qPB3TMB8GA1UdIwQY MBaAFKlS0NJmVXOFg2qreuP9ztTKdK2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAt NGMyMWE1MDVmMzQ2LzEvb3NpUElxWkhGd0pGSlZEbkw0Q0hIaW84SGRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAtNGMyMWE1MDVmMzQ2 LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSNnMA0G CSqGSIb3DQEBCwUAA4IBAQA6wbSuM1B5vj7S43aVgtXUBYUl9oDMvq4VQmuJS5q4 oUxnKqEv/wrDrK1D5BTmKQUZNXzBkfwjdgQTWFoab22XaQiI6ZvxMD+VydrJvxs9 ZnmAjxKiOtXgIqVxm4ONcxGiVahH2qoFnvdGtSE6zDzxtp6yT2J+L/6WmVZjI1E7 kB40xqA+Fx4JZ2CD/clNc6UWlcCo4UUq/9waT3lZd4+KyYNo3FTkKMD8UHqgThJp mOFOz7SSSq5staj+x+F7H9m3GHhQmK4tyLWwEe5wz2p7cUMJEHIm10PeUVmdiPJ0 RTpAyG7P/c/2iQNuOJ6cltlXUT4TgksxAJbdVpObrWkF -----END CERTIFICATE-----Generated at Sun Jan 25 14:40:05 2026 by rpki-client