This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/OuSNh2M72KbvToQcKNkDvhusBH8.roa File: OuSNh2M72KbvToQcKNkDvhusBH8.roa (raw, json) Hash identifier: 5m4/LjfjkWP62WmEV7r5DbFxSXgwwOR8Uq8cTF6XiHk= Subject key identifier: 3A:E4:8D:87:63:3B:D8:A6:EF:4E:84:1C:28:D9:03:BE:1B:AC:04:7F Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC7A27C32D924271A4FE329694BB23B Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/OuSNh2M72KbvToQcKNkDvhusBH8.roa Signing time: Thu 01 Jan 2026 18:17:42 +0000 ROA not before: Thu 01 Jan 2026 18:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213503 IP address blocks: 87.247.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a2:7c:32:d9:24:27:1a:4f:e3:29:69:4b:b2:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ae48d87633bd8a6ef4e841c28d903be1bac047f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bf:d6:0f:02:c0:08:44:fd:22:ac:7f:80:d0: 41:e2:05:3b:3d:04:87:c7:35:a9:a2:ed:82:e7:5c: 3c:1c:e1:79:b7:22:47:d4:97:da:2e:e4:53:c4:e2: 03:16:fd:d6:63:53:19:e0:0c:4d:25:b8:a8:33:94: be:1f:bd:b0:bb:18:5b:f1:52:f3:29:5d:9d:16:ca: 00:1c:4c:f2:cc:10:78:8c:46:13:cd:6a:7d:a4:5a: c8:b4:e6:c9:61:9d:bd:3c:c8:07:eb:7c:41:5a:aa: 79:ff:22:48:fa:04:e0:c0:10:46:b9:7e:c5:4f:31: b7:9a:58:01:68:5c:61:ed:dd:ec:78:e1:d7:b1:e5: 53:fb:13:77:f4:03:ac:5e:a2:8d:fc:ca:b7:36:ce: 69:8f:3b:4a:38:a0:2a:91:55:df:e6:fe:60:7c:b8: 54:37:74:8f:7a:9d:40:01:da:dd:93:7e:70:70:16: 1b:c1:8f:e0:cf:cb:95:d6:f4:2e:d5:fc:c3:1d:bb: f2:47:c2:a0:0d:76:12:80:f8:ff:9c:30:55:51:f7: 29:dd:24:08:1d:f9:68:a0:0e:9f:80:c6:a2:f5:59: a2:ae:a2:3a:82:f3:6b:ec:b7:dd:a3:ac:86:89:e8: 54:11:fc:39:34:d8:5e:76:4d:e3:e3:9a:23:7a:a4: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E4:8D:87:63:3B:D8:A6:EF:4E:84:1C:28:D9:03:BE:1B:AC:04:7F X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/OuSNh2M72KbvToQcKNkDvhusBH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.247.159.0/24 Signature Algorithm: sha256WithRSAEncryption 88:14:00:43:4c:90:58:cf:ee:67:2f:dc:b7:ef:00:c3:c4:8f: 4e:c8:52:47:f7:b6:32:1a:b7:11:e3:fa:c8:e0:58:b0:77:ec: 63:c5:1c:48:01:0c:36:71:74:2c:11:37:6c:14:e6:4c:af:87: 62:b5:10:47:2d:b0:67:10:fb:4e:15:ae:e1:ed:de:f9:2b:fa: c1:6a:e1:68:76:f4:2b:4c:6c:8e:ce:60:7b:98:ac:74:93:67: 95:61:76:e6:53:c6:5d:b2:cb:01:ad:39:d7:56:01:3c:8f:d0: 6e:92:c2:81:6b:b3:33:e6:53:9a:13:2c:23:16:4d:83:42:de: 5d:8d:cd:aa:b0:82:f0:91:41:64:c0:c2:5b:eb:88:07:20:e9: 51:e3:06:0b:2e:59:ce:07:0b:82:ce:c4:f3:02:41:8c:06:d1: cc:40:58:09:f6:3c:ec:a2:93:09:cd:1a:eb:52:c8:5c:a9:40: 28:f3:7d:23:02:2d:06:2d:a7:9b:32:a3:07:6e:0d:a3:b0:51: 70:89:4f:f8:07:7d:ea:8c:fa:6c:a7:28:35:23:e4:ea:47:cf: 55:f3:f9:15:27:04:87:f6:ce:3a:9e:48:d1:2b:78:77:c2:e3: e7:92:7d:0d:43:e3:30:48:98:88:ee:d8:2d:e3:c9:d5:99:60: 2c:59:16:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6J8MtkkJxpP4ylpS7I7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWU0OGQ4NzYzM2JkOGE2ZWY0ZTg0MWMyOGQ5MDNiZTFiYWMwNDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r/WDwLACET9Iqx/gNBB4gU7PQSH xzWpou2C51w8HOF5tyJH1JfaLuRTxOIDFv3WY1MZ4AxNJbioM5S+H72wuxhb8VLz KV2dFsoAHEzyzBB4jEYTzWp9pFrItObJYZ29PMgH63xBWqp5/yJI+gTgwBBGuX7F TzG3mlgBaFxh7d3seOHXseVT+xN39AOsXqKN/Mq3Ns5pjztKOKAqkVXf5v5gfLhU N3SPep1AAdrdk35wcBYbwY/gz8uV1vQu1fzDHbvyR8KgDXYSgPj/nDBVUfcp3SQI HflooA6fgMai9VmirqI6gvNr7Lfdo6yGiehUEfw5NNhedk3j45ojeqThqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDrkjYdjO9im706EHCjZA74brAR/MB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvT3VTTmgyTTcyS2J2VG9RY0tOa0R2aHVzQkg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/efMA0G CSqGSIb3DQEBCwUAA4IBAQCIFABDTJBYz+5nL9y37wDDxI9OyFJH97YyGrcR4/rI 4Fiwd+xjxRxIAQw2cXQsETdsFOZMr4ditRBHLbBnEPtOFa7h7d75K/rBauFodvQr TGyOzmB7mKx0k2eVYXbmU8ZdsssBrTnXVgE8j9BuksKBa7Mz5lOaEywjFk2DQt5d jc2qsILwkUFkwMJb64gHIOlR4wYLLlnOBwuCzsTzAkGMBtHMQFgJ9jzsopMJzRrr UshcqUAo830jAi0GLaebMqMHbg2jsFFwiU/4B33qjPpspyg1I+TqR89V8/kVJwSH 9s46nkjRK3h3wuPnkn0NQ+MwSJiI7tgt48nVmWAsWRaP -----END CERTIFICATE-----Generated at Sat Jan 3 06:25:49 2026 by rpki-client