This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/o_4znoNuO2BlgKbgpDwRbvS5e9M.roa File: o_4znoNuO2BlgKbgpDwRbvS5e9M.roa (raw, json) Hash identifier: UG/yd3TL4Rh6gQUIGrMAEttNV+zSF20Hc2Z6UKPMWAc= Subject key identifier: A3:FE:33:9E:83:6E:3B:60:65:80:A6:E0:A4:3C:11:6E:F4:B9:7B:D3 Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442 Certificate serial: 019B7A5ACD4EF811E60937B1D4A1E58566B3 Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/o_4znoNuO2BlgKbgpDwRbvS5e9M.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393559 IP address blocks: 185.230.180.0/22 maxlen: 24 185.230.181.0/24 maxlen: 24 2a13:d00::/29 maxlen: 48 2a13:d00:c100::/40 maxlen: 48 2a13:d00:cf00::/40 maxlen: 48 2a13:d00:cf8b::/48 maxlen: 48 2a13:d00:cf8c::/48 maxlen: 48 2a13:d00:cf8d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cd:4e:f8:11:e6:09:37:b1:d4:a1:e5:85:66:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442 Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3fe339e836e3b606580a6e0a43c116ef4b97bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:55:50:97:b3:a3:67:0b:8d:2f:6d:22:b3:4c: dd:87:12:11:cd:34:f9:bd:01:10:b9:9c:60:32:1d: 6d:e3:ae:01:3a:e6:e7:a8:84:93:47:14:8c:c2:9e: 7c:d2:50:b8:2f:01:7d:2a:cb:25:a9:34:17:03:8b: a9:52:c6:af:55:00:15:1f:68:22:74:42:f9:d4:e3: 1a:01:ed:fe:72:d4:02:1c:e9:49:13:d8:e2:0c:c9: d2:db:b7:47:cf:78:8e:1a:6a:6c:bc:61:8e:6b:0c: dc:4d:7b:77:b2:92:03:1e:04:82:52:68:84:40:e5: b9:ff:86:d8:79:e3:49:9c:0e:da:7f:8d:ff:1a:90: b4:ef:4a:0d:a2:0a:26:ba:49:3a:74:4f:d3:51:fa: c1:83:83:06:44:1b:67:9a:67:c8:ba:0f:2a:eb:f3: 5f:5f:75:24:1a:77:53:39:58:7a:9c:7b:2c:9f:80: 44:1f:9a:71:ce:fa:47:7b:8f:72:6c:e8:6f:42:06: 58:fb:a7:02:df:0a:c1:e4:db:54:2f:1b:e9:f9:0b: b0:b7:0e:d0:4e:fd:8c:d6:07:ff:0b:11:2d:a4:52: 77:06:3d:23:df:e1:35:27:9b:ea:a3:3b:73:d8:0b: b9:71:26:96:a1:1f:01:66:21:65:7d:76:07:0c:fb: e6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FE:33:9E:83:6E:3B:60:65:80:A6:E0:A4:3C:11:6E:F4:B9:7B:D3 X509v3 Authority Key Identifier: keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/o_4znoNuO2BlgKbgpDwRbvS5e9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.180.0/22 IPv6: 2a13:d00::/29 Signature Algorithm: sha256WithRSAEncryption 23:72:2a:ad:ab:46:a6:a7:dd:d8:15:b6:d1:12:2e:25:d4:19: 42:8b:64:a2:ad:05:c0:28:79:42:64:35:d9:55:31:b7:bb:16: fc:5d:05:06:5e:bb:93:15:99:99:38:90:24:be:2b:45:d4:0d: 93:a4:b1:f2:be:26:b3:7c:4a:93:fe:af:56:e0:cc:10:db:f8: 99:54:a3:cb:57:02:7c:ef:f4:d2:d3:96:76:03:af:cc:92:b4: f6:20:30:a4:5e:31:39:cf:92:47:fe:8e:df:43:4b:49:ef:4f: 4d:8f:51:02:10:29:57:65:4c:44:cb:16:9b:00:92:ca:a5:61: 1d:e0:69:fd:0e:27:4e:4f:5c:5a:c9:ad:6e:63:39:ac:55:e3: 89:1f:29:61:75:0b:5f:7f:e0:49:e4:5c:da:38:0d:8c:15:7a: c4:01:8b:ad:8f:3e:26:2f:3e:f8:f4:fd:a9:95:2f:a5:0c:f8: c5:8c:6f:f5:18:b0:5a:cb:3d:df:b6:28:30:6a:fe:a3:17:0e: b8:29:68:0b:47:43:3d:1a:00:24:fc:10:b9:7b:bb:19:60:60: 26:84:b2:b1:1b:c1:c5:bc:2e:35:54:82:f1:d8:a4:17:31:28: 72:38:de:be:f9:68:f9:40:aa:2c:96:c2:9a:a9:0c:a4:f0:49: b1:40:ab:59 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6Ws1O+BHmCTex1KHlhWazMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OWJkODRkYTE3OTk3Y2JiMjg2YWY5MDIyYWIyZTA1YmEw OGI0NDIwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2ZlMzM5ZTgzNmUzYjYwNjU4MGE2ZTBhNDNjMTE2ZWY0Yjk3YmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlVQl7OjZwuNL20is0zdhxIRzTT5 vQEQuZxgMh1t464BOubnqISTRxSMwp580lC4LwF9KsslqTQXA4upUsavVQAVH2gi dEL51OMaAe3+ctQCHOlJE9jiDMnS27dHz3iOGmpsvGGOawzcTXt3spIDHgSCUmiE QOW5/4bYeeNJnA7af43/GpC070oNogomukk6dE/TUfrBg4MGRBtnmmfIug8q6/Nf X3UkGndTOVh6nHssn4BEH5pxzvpHe49ybOhvQgZY+6cC3wrB5NtULxvp+Quwtw7Q Tv2M1gf/CxEtpFJ3Bj0j3+E1J5vqoztz2Au5cSaWoR8BZiFlfXYHDPvmuQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKP+M56DbjtgZYCm4KQ8EW70uXvTMB8GA1UdIwQY MBaAFLSb2E2heZfLsoavkCKrLgW6CLRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2It MGM5MDliZjViZTRkLzEvb180em5vTnVPMkJsZ0tiZ3BEd1JidlM1ZTlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2ItMGM5MDliZjViZTRk LzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuea0MA0E AgACMAcDBQMqEw0AMA0GCSqGSIb3DQEBCwUAA4IBAQAjciqtq0amp93YFbbREi4l 1BlCi2SirQXAKHlCZDXZVTG3uxb8XQUGXruTFZmZOJAkvitF1A2TpLHyviazfEqT /q9W4MwQ2/iZVKPLVwJ87/TS05Z2A6/MkrT2IDCkXjE5z5JH/o7fQ0tJ709Nj1EC EClXZUxEyxabAJLKpWEd4Gn9DidOT1xaya1uYzmsVeOJHylhdQtff+BJ5FzaOA2M FXrEAYutjz4mLz749P2plS+lDPjFjG/1GLBayz3ftigwav6jFw64KWgLR0M9GgAk /BC5e7sZYGAmhLKxG8HFvC41VILx2KQXMShyON6++Wj5QKoslsKaqQyk8EmxQKtZ -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:13 2026 by rpki-client