This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/OvDyFgQ7aVEur7yi4gHYha9Nw7M.roa File: OvDyFgQ7aVEur7yi4gHYha9Nw7M.roa (raw, json) Hash identifier: cCoaNTZocMlM/qThQBA0C6Jf87gZHNJ0d8o+1R7Z+44= Subject key identifier: 3A:F0:F2:16:04:3B:69:51:2E:AF:BC:A2:E2:01:D8:85:AF:4D:C3:B3 Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7 Certificate serial: 019B78A30742C4DC1876963B18B9A3B13C18 Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/OvDyFgQ7aVEur7yi4gHYha9Nw7M.roa Signing time: Thu 01 Jan 2026 08:18:28 +0000 ROA not before: Thu 01 Jan 2026 08:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13101 IP address blocks: 185.230.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:07:42:c4:dc:18:76:96:3b:18:b9:a3:b1:3c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7 Validity Not Before: Jan 1 08:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3af0f216043b69512eafbca2e201d885af4dc3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:73:17:2f:eb:b3:d5:dd:9d:59:54:c8:85: 2f:1e:70:e5:e0:94:0b:c5:2d:dd:aa:20:96:3a:f2: 4b:87:0c:99:84:d5:3b:20:20:55:f6:cd:40:d9:b7: 5f:06:8c:6d:37:28:ce:d8:ba:e7:9b:92:8e:9d:44: e5:ba:d4:fe:1b:c4:30:74:3e:32:b7:65:7d:6c:01: 9d:f5:fd:e2:c7:f3:02:96:70:ef:06:c0:a2:5d:40: d3:24:7b:b9:08:8f:f4:75:2b:41:07:6c:0a:25:b6: 2a:21:50:c2:7c:23:13:af:14:70:ff:14:b6:16:30: 72:df:ee:6e:fd:71:e4:37:0b:ae:57:2f:56:17:2f: 02:aa:52:3f:e1:23:dc:9f:cf:d3:c3:f7:45:b4:9c: 1f:ec:ed:5f:a0:f8:bb:80:62:7c:8b:1f:7b:09:86: 2b:87:e2:8e:c0:04:16:29:59:f5:c5:a0:1a:f0:4b: 19:0a:5a:53:6e:05:23:19:41:56:c8:dc:72:db:05: 00:c1:39:ea:da:4b:73:ab:2e:d5:27:9a:3a:a1:6e: 27:a2:90:47:07:e7:1f:0b:7a:ba:f2:9c:f2:27:18: 4c:c2:63:d4:4c:8e:99:5d:c7:c6:9e:43:09:5c:b8: 75:86:7d:ef:55:15:5e:fb:8d:60:c1:43:2e:2a:19: 1c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F0:F2:16:04:3B:69:51:2E:AF:BC:A2:E2:01:D8:85:AF:4D:C3:B3 X509v3 Authority Key Identifier: keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/OvDyFgQ7aVEur7yi4gHYha9Nw7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.196.0/24 Signature Algorithm: sha256WithRSAEncryption ae:1f:1e:e9:e9:f6:93:c2:86:4e:2d:0f:b2:63:56:6f:d4:99: 9f:01:b0:a7:fe:30:e4:c5:63:c4:bb:0a:fe:a4:62:5a:ac:11: da:55:cc:56:be:ff:fb:be:60:51:2c:b9:07:ca:72:65:4d:03: 26:b9:02:c8:3a:f4:de:61:ba:6e:08:6e:0e:ad:ae:3c:4b:8e: 6a:8a:a5:2b:63:12:84:4a:f7:ac:03:7f:f5:07:da:7d:a1:bb: f2:47:5b:4c:8d:77:72:61:e0:f4:7f:5e:c4:77:ce:16:50:58: fc:89:b6:c7:0b:0f:23:0a:21:d8:ec:6e:4f:8b:48:40:29:03: 4e:77:3c:d7:5c:1a:1e:51:fd:ac:9f:1f:9d:11:7f:56:fc:b7: 59:72:68:2d:4a:ec:2d:0c:75:7f:36:fe:b2:4a:3f:97:14:cb: 6d:38:e0:13:63:ce:98:f9:c8:34:0a:8c:65:ab:88:78:5e:3d: f9:91:6a:9b:59:02:a0:bc:46:70:4b:7a:d5:10:74:b7:cb:eb: 60:da:47:57:80:7d:03:37:9f:44:25:f3:34:f3:b6:51:44:5a: e7:17:08:86:2e:2b:00:68:a3:2e:e6:3c:31:7d:fa:53:fc:74: 4a:08:00:6f:d7:91:63:0b:69:10:4f:3d:ee:18:8a:33:a9:c7: a0:d5:f4:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owdCxNwYdpY7GLmjsTwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYjgwZWEwZjk5NjVmNjg4MDMyOWIxMmZlYzI3YTkzOTBm YzFjYjcwHhcNMjYwMTAxMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWYwZjIxNjA0M2I2OTUxMmVhZmJjYTJlMjAxZDg4NWFmNGRjM2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQpzFy/rs9XdnVlUyIUvHnDl4JQL xS3dqiCWOvJLhwyZhNU7ICBV9s1A2bdfBoxtNyjO2Lrnm5KOnUTlutT+G8QwdD4y t2V9bAGd9f3ix/MClnDvBsCiXUDTJHu5CI/0dStBB2wKJbYqIVDCfCMTrxRw/xS2 FjBy3+5u/XHkNwuuVy9WFy8CqlI/4SPcn8/Tw/dFtJwf7O1foPi7gGJ8ix97CYYr h+KOwAQWKVn1xaAa8EsZClpTbgUjGUFWyNxy2wUAwTnq2ktzqy7VJ5o6oW4nopBH B+cfC3q68pzyJxhMwmPUTI6ZXcfGnkMJXLh1hn3vVRVe+41gwUMuKhkcNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDrw8hYEO2lRLq+8ouIB2IWvTcOzMB8GA1UdIwQY MBaAFNq4DqD5ll9ogDKbEv7CepOQ/By3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xNTNmZjctZDRiMi00MDdmLWEyMTYt OWY2YWE0Y2YwNzk5LzEvT3ZEeUZnUTdhVkV1cjd5aTRnSFloYTlOdzdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xNTNmZjctZDRiMi00MDdmLWEyMTYtOWY2YWE0Y2YwNzk5 LzEvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuebEMA0G CSqGSIb3DQEBCwUAA4IBAQCuHx7p6faTwoZOLQ+yY1Zv1JmfAbCn/jDkxWPEuwr+ pGJarBHaVcxWvv/7vmBRLLkHynJlTQMmuQLIOvTeYbpuCG4Ora48S45qiqUrYxKE SvesA3/1B9p9obvyR1tMjXdyYeD0f17Ed84WUFj8ibbHCw8jCiHY7G5Pi0hAKQNO dzzXXBoeUf2snx+dEX9W/LdZcmgtSuwtDHV/Nv6ySj+XFMttOOATY86Y+cg0Coxl q4h4Xj35kWqbWQKgvEZwS3rVEHS3y+tg2kdXgH0DN59EJfM087ZRRFrnFwiGLisA aKMu5jwxffpT/HRKCABv15FjC2kQTz3uGIozqceg1fTn -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:27 2026 by rpki-client