This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OR9wB6bWiqsZvjqNRRbC11UhrBA.roa File: OR9wB6bWiqsZvjqNRRbC11UhrBA.roa (raw, json) Hash identifier: BLhfuTsmrrfMXC8Lx4hjGsCFS5Q2HKcD1UJlTtem6+U= Subject key identifier: 39:1F:70:07:A6:D6:8A:AB:19:BE:3A:8D:45:16:C2:D7:55:21:AC:10 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019B7D5B6BB1F70CCCA71B68BAD02DE0AA24 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OR9wB6bWiqsZvjqNRRbC11UhrBA.roa Signing time: Fri 02 Jan 2026 06:18:21 +0000 ROA not before: Fri 02 Jan 2026 06:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209724 IP address blocks: 212.32.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:6b:b1:f7:0c:cc:a7:1b:68:ba:d0:2d:e0:aa:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jan 2 06:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=391f7007a6d68aab19be3a8d4516c2d75521ac10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:5b:f3:d9:f9:fd:01:50:76:bf:16:88:86: 11:40:b2:1c:0e:89:34:77:12:15:3c:7e:3b:a0:01: 07:f0:40:6c:3a:6a:7d:49:d8:7d:7e:1c:7f:a5:f9: 35:b3:8c:10:ca:39:80:86:90:6f:a4:d0:65:ff:4c: 71:41:36:73:12:8b:19:f3:8f:32:3c:12:c9:4e:f7: 06:fa:48:c2:aa:f0:d8:70:96:a5:3c:fc:a4:f6:b6: 76:c8:22:39:86:a5:c9:99:fe:c1:ec:c1:e3:15:5a: 3b:8f:14:b8:74:37:00:8e:71:26:60:86:39:fd:ee: 0c:d1:5c:8b:c3:0a:ac:5d:35:3b:01:49:2e:de:22: 88:93:72:22:9b:9f:21:cc:e5:f9:0b:3d:12:73:1a: 29:9d:7f:2d:4c:95:97:fe:25:55:3e:40:c7:6f:6b: d8:4f:22:11:54:0e:13:3d:5c:87:f0:1c:99:61:18: 15:67:d2:c5:1a:d1:84:ed:6a:cf:ad:8a:8b:52:ac: c6:0f:0f:eb:b8:5f:9d:f2:79:71:84:5b:d4:1f:e0: 24:f9:34:35:b0:b1:de:21:73:0d:a0:fb:51:f7:09: 74:fb:27:ed:eb:81:c9:4f:ca:e8:83:7a:9c:f1:8a: f2:e3:17:da:c3:cc:09:22:8f:e9:04:6d:e6:39:1e: 93:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1F:70:07:A6:D6:8A:AB:19:BE:3A:8D:45:16:C2:D7:55:21:AC:10 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OR9wB6bWiqsZvjqNRRbC11UhrBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.32.64.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:22:d2:48:9d:f8:36:73:fc:67:74:e4:a2:1e:ee:bc:9e:54: d1:31:41:33:d1:24:f8:17:15:61:a6:d5:2e:02:35:45:59:14: 47:20:ca:7c:e1:b3:3f:eb:f5:cd:f9:04:80:1c:51:79:cc:a0: 42:d7:a3:8b:8a:a0:db:1d:33:e5:ba:fc:42:bd:8c:40:a2:32: 48:e9:49:1f:77:f9:05:d0:5d:b2:2a:19:b2:12:86:d7:99:42: cb:81:08:45:86:2a:9a:87:02:97:ab:24:77:53:25:d2:9c:d4: 87:cc:4b:fd:48:04:4f:42:7d:44:64:4c:73:37:0d:58:59:2c: 65:78:7d:fc:3d:86:8f:9b:f0:bd:d1:3f:ff:ff:cd:03:31:b8: db:5b:6d:1c:3d:7f:dc:64:a4:da:71:29:9a:82:64:b4:c1:d5: 40:86:7d:35:72:43:c3:d7:dd:65:3f:63:94:f4:bf:80:2f:ce: 92:d8:4c:b4:21:b0:05:d3:5a:db:1d:7b:17:ee:83:fa:44:d4: fe:f8:e6:dd:0f:14:44:8e:41:05:11:db:ef:db:30:42:1e:87: e3:8f:e5:f3:cb:4e:28:75:42:74:9c:b8:7d:71:2c:89:82:61: 60:49:53:36:99:fb:b4:d7:f2:b4:7c:9d:e0:4d:4d:2a:9d:5d: 15:e5:a4:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W2ux9wzMpxtoutAt4KokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwMTAyMDYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTFmNzAwN2E2ZDY4YWFiMTliZTNhOGQ0NTE2YzJkNzU1MjFhYzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyJb89n5/QFQdr8WiIYRQLIcDok0 dxIVPH47oAEH8EBsOmp9Sdh9fhx/pfk1s4wQyjmAhpBvpNBl/0xxQTZzEosZ848y PBLJTvcG+kjCqvDYcJalPPyk9rZ2yCI5hqXJmf7B7MHjFVo7jxS4dDcAjnEmYIY5 /e4M0VyLwwqsXTU7AUku3iKIk3Iim58hzOX5Cz0ScxopnX8tTJWX/iVVPkDHb2vY TyIRVA4TPVyH8ByZYRgVZ9LFGtGE7WrPrYqLUqzGDw/ruF+d8nlxhFvUH+Ak+TQ1 sLHeIXMNoPtR9wl0+yft64HJT8rog3qc8Yry4xfaw8wJIo/pBG3mOR6TtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDkfcAem1oqrGb46jUUWwtdVIawQMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT1I5d0I2YldpcXNadmpxTlJSYkMxMVVockJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1CBAMA0G CSqGSIb3DQEBCwUAA4IBAQArItJInfg2c/xndOSiHu68nlTRMUEz0ST4FxVhptUu AjVFWRRHIMp84bM/6/XN+QSAHFF5zKBC16OLiqDbHTPluvxCvYxAojJI6Ukfd/kF 0F2yKhmyEobXmULLgQhFhiqahwKXqyR3UyXSnNSHzEv9SARPQn1EZExzNw1YWSxl eH38PYaPm/C90T///80DMbjbW20cPX/cZKTacSmagmS0wdVAhn01ckPD191lP2OU 9L+AL86S2Ey0IbAF01rbHXsX7oP6RNT++ObdDxREjkEFEdvv2zBCHofjj+Xzy04o dUJ0nLh9cSyJgmFgSVM2mfu01/K0fJ3gTU0qnV0V5aSc -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:03 2026 by rpki-client