This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/OvbRlSnTXlATqx6AnWYr1toDU7w.roa File: OvbRlSnTXlATqx6AnWYr1toDU7w.roa (raw, json) Hash identifier: Q7J38waQ9GMMd+3BefTKWI7xIc5v9QQp9c12zI1W6yo= Subject key identifier: 3A:F6:D1:95:29:D3:5E:50:13:AB:1E:80:9D:66:2B:D6:DA:03:53:BC Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2 Certificate serial: 019B7758DBF4BF6A094547FE98F3A8470A2B Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/OvbRlSnTXlATqx6AnWYr1toDU7w.roa Signing time: Thu 01 Jan 2026 02:17:50 +0000 ROA not before: Thu 01 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60102 IP address blocks: 185.52.200.0/22 maxlen: 22 185.52.200.0/24 maxlen: 24 185.52.201.0/24 maxlen: 24 185.52.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:db:f4:bf:6a:09:45:47:fe:98:f3:a8:47:0a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3af6d19529d35e5013ab1e809d662bd6da0353bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:09:a1:62:11:4f:0b:0a:c7:89:d1:4b:60:ba: 7a:cc:49:ae:4a:08:c9:d1:97:99:56:9c:95:22:b1: dc:7d:1c:84:0e:5a:68:42:b2:78:0e:41:77:6f:6e: aa:1b:3d:61:58:3a:ad:43:33:ab:6d:1c:08:e5:c1: 96:da:bc:c0:8a:52:e3:eb:bd:84:d9:6c:fe:99:e6: 04:30:0d:59:17:64:6b:8d:a4:2c:bf:52:f4:7c:ae: 8b:4f:29:98:f4:00:02:12:4a:67:56:d6:cf:df:9b: 06:4f:37:85:f4:a6:0a:08:b9:d0:e5:fc:6b:52:11: 83:94:4a:84:b5:15:3d:8e:08:ed:0e:c9:b5:c5:bc: 26:50:a5:95:24:e3:aa:a5:8b:42:f4:f3:a0:e0:db: c5:05:e0:d5:a3:3a:52:a1:12:95:dd:49:af:db:9d: 43:ee:34:b4:e7:58:cd:df:e2:93:e5:db:04:ea:96: d5:6d:f3:31:1d:fc:10:c2:f3:2e:4b:42:7e:e1:06: fc:74:45:f7:f2:89:fb:98:b3:a6:d6:4b:2f:6a:c9: 3c:fa:cc:56:df:c9:05:61:20:00:1c:76:87:23:95: d8:73:49:0b:06:16:b9:6b:5b:b6:29:61:2a:d4:81: 12:a4:31:58:1b:37:0b:ae:61:c4:7d:58:3a:bc:d3: ce:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F6:D1:95:29:D3:5E:50:13:AB:1E:80:9D:66:2B:D6:DA:03:53:BC X509v3 Authority Key Identifier: keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/OvbRlSnTXlATqx6AnWYr1toDU7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.52.200.0/22 Signature Algorithm: sha256WithRSAEncryption 19:59:05:3b:46:28:96:e5:d4:14:e0:de:45:5d:45:bb:38:65: f4:0e:bd:35:e7:1e:5f:db:c3:d0:c2:46:4b:7a:5a:2c:a8:d5: 3f:75:2b:ba:6b:8a:da:9b:e2:ad:d8:6c:2d:ab:9a:e8:9e:0a: dd:07:53:8c:d7:3b:13:af:4e:4f:55:92:04:f8:f5:d3:67:29: 21:7a:80:da:e3:7a:e8:64:c1:7b:48:9e:99:c0:09:7c:dd:68: 3a:3b:7e:cb:60:34:f7:25:ea:75:9f:8c:8c:1c:93:43:03:66: 24:bd:2d:25:b1:0c:e9:4b:44:9b:50:d0:74:04:e5:55:3a:e2: 19:c8:b7:32:c1:cc:21:fc:91:6d:89:04:8d:ba:5b:15:98:27: 50:6e:fd:1f:05:de:d1:11:4e:cd:79:ef:4b:e2:26:91:b3:32: 85:47:a7:f7:e1:e5:27:50:e0:f1:f3:78:4c:1e:8b:b3:02:4c: b7:0c:66:c4:80:b8:3b:d4:97:61:97:12:46:6f:56:9d:89:8c: 8f:82:91:d4:86:8b:f9:47:af:75:cb:4f:68:f9:4a:35:72:ca: 49:d0:a3:2e:a0:c4:5a:e2:0a:bf:68:17:bb:e2:02:f0:a5:0e: 8f:8e:96:eb:73:51:be:60:91:7d:9d:cb:3a:e3:28:8c:0a:18: 2a:9a:64:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WNv0v2oJRUf+mPOoRworMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYjg4ZDkxNzg4ZmU5OTIxMDg5ZDliNjI3MWUyMTBmN2Y4 OTE0YTIwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWY2ZDE5NTI5ZDM1ZTUwMTNhYjFlODA5ZDY2MmJkNmRhMDM1M2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AmhYhFPCwrHidFLYLp6zEmuSgjJ 0ZeZVpyVIrHcfRyEDlpoQrJ4DkF3b26qGz1hWDqtQzOrbRwI5cGW2rzAilLj672E 2Wz+meYEMA1ZF2RrjaQsv1L0fK6LTymY9AACEkpnVtbP35sGTzeF9KYKCLnQ5fxr UhGDlEqEtRU9jgjtDsm1xbwmUKWVJOOqpYtC9POg4NvFBeDVozpSoRKV3Umv251D 7jS051jN3+KT5dsE6pbVbfMxHfwQwvMuS0J+4Qb8dEX38on7mLOm1ksvask8+sxW 38kFYSAAHHaHI5XYc0kLBha5a1u2KWEq1IESpDFYGzcLrmHEfVg6vNPOpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDr20ZUp015QE6segJ1mK9baA1O8MB8GA1UdIwQY MBaAFF+4jZF4j+mSEInZticeIQ9/iRSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQt NGNlNGQ4ZmVhNmVmLzEvT3ZiUmxTblRYbEFUcXg2QW5XWXIxdG9EVTd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQtNGNlNGQ4ZmVhNmVm LzEvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTTIMA0G CSqGSIb3DQEBCwUAA4IBAQAZWQU7RiiW5dQU4N5FXUW7OGX0Dr015x5f28PQwkZL elosqNU/dSu6a4ram+Kt2Gwtq5rongrdB1OM1zsTr05PVZIE+PXTZykheoDa43ro ZMF7SJ6ZwAl83Wg6O37LYDT3Jep1n4yMHJNDA2YkvS0lsQzpS0SbUNB0BOVVOuIZ yLcywcwh/JFtiQSNulsVmCdQbv0fBd7REU7Nee9L4iaRszKFR6f34eUnUODx83hM HouzAky3DGbEgLg71JdhlxJGb1adiYyPgpHUhov5R691y09o+Uo1cspJ0KMuoMRa 4gq/aBe74gLwpQ6Pjpbrc1G+YJF9ncs64yiMChgqmmRO -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:23 2026 by rpki-client