This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/OOyqRP0gd9tRLzkY54anBAAI-Ts.roa File: OOyqRP0gd9tRLzkY54anBAAI-Ts.roa (raw, json) Hash identifier: mWMdkSR/gQ5UfnlPmZfRMxuxRlkVUgWwnFMsgx7vcjU= Subject key identifier: 38:EC:AA:44:FD:20:77:DB:51:2F:39:18:E7:86:A7:04:00:08:F9:3B Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019B7F15D9C9253007164C3368CC02783C69 Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/OOyqRP0gd9tRLzkY54anBAAI-Ts.roa Signing time: Fri 02 Jan 2026 14:21:36 +0000 ROA not before: Fri 02 Jan 2026 14:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205261 IP address blocks: 72.56.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d9:c9:25:30:07:16:4c:33:68:cc:02:78:3c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Jan 2 14:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38ecaa44fd2077db512f3918e786a7040008f93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1c:c7:4e:66:c5:98:9c:69:32:d0:ab:74:1b: f4:ac:e6:d6:f2:12:ad:d9:16:50:d7:d1:81:c0:47: ed:77:3e:02:6b:21:f9:d6:dc:cd:2a:bf:c0:8d:81: bb:62:3c:59:05:5f:ea:f9:1c:9f:0f:65:33:ba:70: d4:d0:99:91:ce:24:7d:45:63:e9:ed:1a:43:fd:fb: 83:02:95:4e:65:81:1d:d3:71:cc:eb:07:6d:fa:86: 51:e4:0d:3f:db:bc:28:05:0a:83:42:92:d1:df:21: 48:a9:2b:dc:34:12:53:80:f2:07:1c:83:e3:bc:e5: af:5d:c0:27:28:ad:f8:7d:95:8b:7c:22:6a:5d:39: b1:cd:d7:9c:9a:18:ea:0a:32:4e:f1:ef:2a:6a:1d: a6:1b:10:88:f0:de:74:fa:a2:89:d0:56:3f:cf:ba: 7d:28:4b:16:ce:8b:f3:64:7a:bd:24:c6:71:8f:0d: 98:97:35:2f:a7:05:ff:30:ee:88:8b:8f:0b:2f:ea: 22:ff:91:2f:cc:9e:2d:d7:53:04:33:fe:7e:a7:70: 99:28:c7:75:0f:af:3a:ce:e1:24:c2:ef:ed:28:3d: 2e:a4:13:b5:fd:5d:33:cd:37:28:2c:16:49:21:9a: 82:21:63:58:ab:29:e2:d5:ae:b0:b6:21:25:86:56: 76:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EC:AA:44:FD:20:77:DB:51:2F:39:18:E7:86:A7:04:00:08:F9:3B X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/OOyqRP0gd9tRLzkY54anBAAI-Ts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.56.61.0/24 Signature Algorithm: sha256WithRSAEncryption d0:20:cf:0c:83:39:30:bf:46:6b:a5:ad:65:25:42:4a:63:e9: 5d:01:4c:a0:da:75:80:01:6b:a9:2d:27:00:b5:22:8c:f5:f2: 49:7d:5b:7e:c6:78:ef:2e:6c:1d:bd:1a:5e:55:14:dd:66:c0: 1c:af:1a:a8:73:b7:fd:a9:c0:0b:5c:70:c8:05:52:9c:9b:6e: 74:3a:9b:80:45:e4:af:39:a8:b7:6a:df:82:fb:a8:e8:d8:43: 1a:a7:ff:ae:71:ec:53:26:76:18:6d:22:3d:54:e8:56:cf:2d: 7e:47:82:a1:de:aa:f7:60:32:c8:7d:17:56:68:f8:90:9f:d5: 23:ee:5c:97:70:54:cc:d8:3c:33:89:cd:93:f0:04:5a:de:5f: 47:90:1d:1e:e6:ab:7e:f5:5f:fe:c0:ff:d5:26:d8:3a:ce:99: 96:22:77:fc:82:2c:08:5e:65:7a:89:19:89:62:1c:4b:af:de: eb:a0:94:84:0e:2b:9d:1e:35:17:a4:cc:de:bb:8b:b6:fb:96: c6:75:7a:f7:98:4f:92:f0:26:93:e5:5b:05:76:6f:1f:3f:78: 88:02:f5:d1:5c:b7:ea:3c:60:8c:9f:af:db:be:b9:cf:fb:a0: df:eb:d9:9c:58:65:0b:c8:58:c3:ff:3c:f0:2b:e3:e1:4f:82: e7:c3:a0:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FdnJJTAHFkwzaMwCeDxpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwMTAyMTQyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGVjYWE0NGZkMjA3N2RiNTEyZjM5MThlNzg2YTcwNDAwMDhmOTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBzHTmbFmJxpMtCrdBv0rObW8hKt 2RZQ19GBwEftdz4CayH51tzNKr/AjYG7YjxZBV/q+RyfD2UzunDU0JmRziR9RWPp 7RpD/fuDApVOZYEd03HM6wdt+oZR5A0/27woBQqDQpLR3yFIqSvcNBJTgPIHHIPj vOWvXcAnKK34fZWLfCJqXTmxzdecmhjqCjJO8e8qah2mGxCI8N50+qKJ0FY/z7p9 KEsWzovzZHq9JMZxjw2YlzUvpwX/MO6Ii48LL+oi/5EvzJ4t11MEM/5+p3CZKMd1 D686zuEkwu/tKD0upBO1/V0zzTcoLBZJIZqCIWNYqyni1a6wtiElhlZ2tQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDjsqkT9IHfbUS85GOeGpwQACPk7MB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvT095cVJQMGdkOXRSTHprWTU0YW5CQUFJLVRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDg9MA0G CSqGSIb3DQEBCwUAA4IBAQDQIM8Mgzkwv0Zrpa1lJUJKY+ldAUyg2nWAAWupLScA tSKM9fJJfVt+xnjvLmwdvRpeVRTdZsAcrxqoc7f9qcALXHDIBVKcm250OpuAReSv Oai3at+C+6jo2EMap/+ucexTJnYYbSI9VOhWzy1+R4Kh3qr3YDLIfRdWaPiQn9Uj 7lyXcFTM2Dwzic2T8ARa3l9HkB0e5qt+9V/+wP/VJtg6zpmWInf8giwIXmV6iRmJ YhxLr97roJSEDiudHjUXpMzeu4u2+5bGdXr3mE+S8CaT5VsFdm8fP3iIAvXRXLfq PGCMn6/bvrnP+6Df69mcWGULyFjD/zzwK+PhT4Lnw6DO -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:45 2026 by rpki-client