This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/OSev0vjgGDQA5-w3Tkv31qu09wc.roa File: OSev0vjgGDQA5-w3Tkv31qu09wc.roa (raw, json) Hash identifier: pwjd8MNk+RPSr90pHaBWnVb6ON4Ty5RyozgNZzBJbhg= Subject key identifier: 39:27:AF:D2:F8:E0:18:34:00:E7:EC:37:4E:4B:F7:D6:AB:B4:F7:07 Certificate issuer: /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc Certificate serial: 019B7D5BB35A45B2722DD0DD012BE4578BB9 Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/OSev0vjgGDQA5-w3Tkv31qu09wc.roa Signing time: Fri 02 Jan 2026 06:18:40 +0000 ROA not before: Fri 02 Jan 2026 06:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24931 IP address blocks: 185.187.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:b3:5a:45:b2:72:2d:d0:dd:01:2b:e4:57:8b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc Validity Not Before: Jan 2 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3927afd2f8e0183400e7ec374e4bf7d6abb4f707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:e8:c5:15:61:ff:a7:67:30:cc:2d:a1:69:7f: db:4d:b2:70:bb:22:a2:99:af:13:67:4b:41:87:0c: 7d:0b:fd:26:86:67:9b:99:c0:a3:92:f1:70:bb:75: 15:d0:33:01:a3:7a:dd:01:bd:37:83:5f:b2:5c:60: e7:5e:22:a9:00:b9:02:fa:c7:e9:e5:1e:59:dd:a2: 8b:84:8b:03:69:a0:73:2b:96:17:ce:3a:b9:0a:3e: fc:c7:c6:a1:3c:7c:72:6a:d6:ab:95:70:51:60:98: ba:42:31:c6:5a:5b:b9:cf:3e:00:21:49:58:84:7c: 18:0a:d4:c4:00:84:10:ce:4e:cd:22:90:10:34:df: d7:8a:49:dc:0e:3f:f6:8d:0f:d9:04:11:5e:98:75: 33:29:e4:80:ea:b8:5e:c7:82:a9:cd:2f:f2:b7:dc: 8a:de:c2:ab:dc:2a:7f:0b:78:75:95:e6:07:f8:86: 6d:03:dc:5b:18:fc:30:e0:85:5b:3c:b9:69:d0:8a: 20:46:e5:a8:96:a1:69:2b:94:3a:0d:06:70:cd:9d: f3:49:14:11:9b:64:7a:89:3a:f1:7f:34:8a:7d:01: e1:9a:c5:aa:c3:e8:17:dc:68:84:c8:45:75:74:c1: 3b:2f:67:36:c1:1c:c3:5e:30:77:ad:ca:b5:93:88: 8c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:27:AF:D2:F8:E0:18:34:00:E7:EC:37:4E:4B:F7:D6:AB:B4:F7:07 X509v3 Authority Key Identifier: keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/OSev0vjgGDQA5-w3Tkv31qu09wc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.116.0/24 Signature Algorithm: sha256WithRSAEncryption 52:c5:51:89:09:94:05:98:e3:22:55:e7:9e:9a:18:cc:44:76: 8d:99:9c:34:d9:7c:64:b7:a6:66:7e:b6:41:c1:7b:48:28:a0: 8a:49:ef:7a:3a:25:30:33:7c:18:6c:33:9a:ad:5a:e7:5b:30: 64:88:88:80:e6:44:b8:5b:ad:80:ca:09:08:f1:3e:ed:1a:46: 33:10:fc:0b:07:d5:0f:f0:4a:1d:bd:5b:19:2c:35:0b:b9:b4: f9:0b:e7:25:3c:6b:4a:d0:c5:93:6c:fb:44:5b:c2:17:31:db: f4:a7:0d:ae:aa:38:08:f4:3a:e8:23:b0:52:46:f2:92:ae:02: 13:13:71:aa:b5:86:22:9a:63:77:94:aa:de:83:a5:04:f4:af: 8f:13:a0:a1:b8:e3:41:64:ee:13:fd:d1:c7:8e:96:08:34:2b: 14:5c:51:de:fa:a0:5d:81:2d:83:1f:cc:eb:f3:40:a0:3c:50: bf:75:a6:d0:8c:98:81:c4:b7:24:86:92:00:41:1a:08:04:38: a6:6b:db:60:c1:d1:eb:e5:fa:da:90:f7:22:01:38:8a:fb:e5: cd:e5:16:e0:54:1e:b1:4c:5a:8e:7b:c5:72:10:ab:77:4b:88: 88:11:48:11:87:56:b2:8d:b4:a9:ab:93:d2:f1:78:40:ad:12: 30:c5:64:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W7NaRbJyLdDdASvkV4u5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTYzMTFmMjA3ZTMwZTA0ZTVlZDE4OTYwYjMxZmIzYmE2 N2Q5Y2MwHhcNMjYwMTAyMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTI3YWZkMmY4ZTAxODM0MDBlN2VjMzc0ZTRiZjdkNmFiYjRmNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ujFFWH/p2cwzC2haX/bTbJwuyKi ma8TZ0tBhwx9C/0mhmebmcCjkvFwu3UV0DMBo3rdAb03g1+yXGDnXiKpALkC+sfp 5R5Z3aKLhIsDaaBzK5YXzjq5Cj78x8ahPHxyatarlXBRYJi6QjHGWlu5zz4AIUlY hHwYCtTEAIQQzk7NIpAQNN/XikncDj/2jQ/ZBBFemHUzKeSA6rhex4KpzS/yt9yK 3sKr3Cp/C3h1leYH+IZtA9xbGPww4IVbPLlp0IogRuWolqFpK5Q6DQZwzZ3zSRQR m2R6iTrxfzSKfQHhmsWqw+gX3GiEyEV1dME7L2c2wRzDXjB3rcq1k4iMPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDknr9L44Bg0AOfsN05L99artPcHMB8GA1UdIwQY MBaAFPyWMR8gfjDgTl7RiWCzH7O6Z9nMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pZeEh5Qi1NT0JPWHRHSllMTWZzN3BuMmN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iYzQ4ZDItMjhlOC00MDVkLTlmOWEt MDM4OTdmNGNiMzVkLzEvT1NldjB2amdHRFFBNS13M1RrdjMxcXUwOXdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iYzQ4ZDItMjhlOC00MDVkLTlmOWEtMDM4OTdmNGNiMzVk LzEvX0pZeEh5Qi1NT0JPWHRHSllMTWZzN3BuMmN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubt0MA0G CSqGSIb3DQEBCwUAA4IBAQBSxVGJCZQFmOMiVeeemhjMRHaNmZw02Xxkt6ZmfrZB wXtIKKCKSe96OiUwM3wYbDOarVrnWzBkiIiA5kS4W62AygkI8T7tGkYzEPwLB9UP 8EodvVsZLDULubT5C+clPGtK0MWTbPtEW8IXMdv0pw2uqjgI9DroI7BSRvKSrgIT E3GqtYYimmN3lKreg6UE9K+PE6ChuONBZO4T/dHHjpYINCsUXFHe+qBdgS2DH8zr 80CgPFC/dabQjJiBxLckhpIAQRoIBDima9tgwdHr5frakPciATiK++XN5RbgVB6x TFqOe8VyEKt3S4iIEUgRh1ayjbSpq5PS8XhArRIwxWTW -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:40 2026 by rpki-client