This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/OgDedPoLqQ8e0IHdzPTL4sAzlxc.roa File: OgDedPoLqQ8e0IHdzPTL4sAzlxc.roa (raw, json) Hash identifier: B++2fKZYAzjlOxy+tDnJEo09oVmzZa6HnhPwxHljg8k= Subject key identifier: 3A:00:DE:74:FA:0B:A9:0F:1E:D0:81:DD:CC:F4:CB:E2:C0:33:97:17 Certificate issuer: /CN=5ee004befa553ddb35564fb7762b05eb222ecf93 Certificate serial: 019B7EA6EE8B1FF537F402CE2A61124F4A48 Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/OgDedPoLqQ8e0IHdzPTL4sAzlxc.roa Signing time: Fri 02 Jan 2026 12:20:27 +0000 ROA not before: Fri 02 Jan 2026 12:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48519 IP address blocks: 185.95.96.0/23 maxlen: 24 185.95.98.0/23 maxlen: 24 2a00:1c3e:96::/47 maxlen: 48 2a00:1c3e:98::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ee:8b:1f:f5:37:f4:02:ce:2a:61:12:4f:4a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93 Validity Not Before: Jan 2 12:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a00de74fa0ba90f1ed081ddccf4cbe2c0339717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9f:7a:08:75:52:77:b0:75:b6:cb:08:cd:3d: 0d:fd:0e:7d:b5:fa:42:f1:a5:b8:d4:a5:c1:5c:aa: f8:02:c5:4d:90:e8:96:1b:ac:31:89:4c:94:73:af: 6c:a5:01:fa:71:dd:8d:da:9e:f0:43:79:b3:39:14: ee:f4:1f:53:64:a0:37:61:7a:c9:39:3a:b9:f7:5c: 52:0e:8c:3d:47:7c:16:8d:c0:95:e6:ea:c8:81:54: e3:01:b4:45:40:9f:f4:4b:4c:db:b9:9b:23:5f:c1: 70:08:3a:c5:4f:91:c1:42:3f:87:71:b8:c9:51:66: 75:25:91:2e:de:f7:14:73:2a:8a:ac:c5:b9:74:0f: 52:19:6a:36:32:15:e2:42:af:74:bc:37:44:a2:9b: 85:76:8c:62:f4:c9:68:7e:1b:b8:6f:d6:d8:23:0c: 9b:8a:35:bd:ba:ff:7b:85:49:95:a8:48:71:2c:fc: ab:d4:bd:5f:b1:62:e9:aa:f8:da:81:c3:5f:4a:fb: e3:c4:1b:8e:ed:87:86:34:e8:f5:1a:83:30:59:76: 6f:0c:01:76:a8:06:9c:a6:16:59:9f:ce:e5:87:e1: 17:04:f2:1a:5b:02:f0:7a:04:be:fa:03:a2:8f:32: 9d:a6:a6:1f:b2:cd:32:17:36:b7:d2:1f:de:d8:62: ea:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:00:DE:74:FA:0B:A9:0F:1E:D0:81:DD:CC:F4:CB:E2:C0:33:97:17 X509v3 Authority Key Identifier: keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/OgDedPoLqQ8e0IHdzPTL4sAzlxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.96.0/22 IPv6: 2a00:1c3e:96::-2a00:1c3e:99:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 36:e3:51:06:0c:89:f3:a2:5c:d3:f5:ce:11:8a:c4:3b:4b:0e: ac:9b:5f:81:20:0d:e9:06:a7:9f:c0:56:2c:dd:0b:d0:66:e2: f8:54:e4:fb:fd:76:ba:6d:55:3b:a9:d0:ab:80:5c:20:04:a5: 60:62:7f:c4:b6:ae:f3:cc:49:b1:97:c6:57:33:dc:61:69:9e: bc:77:2c:6d:7b:c0:2f:72:f9:32:cb:f8:cf:35:42:0b:81:94: 85:9b:e4:98:30:05:aa:d8:d2:0c:86:b3:a3:68:40:6b:30:2d: b5:d0:95:6a:4a:c6:e9:30:14:7a:2e:6a:1b:cb:77:a3:ec:b1: 38:6b:e0:db:24:44:8e:ae:95:16:26:e9:5c:51:48:7c:75:73: 63:38:45:1a:74:c6:dc:a1:b2:6a:e3:af:a9:7c:62:7f:78:0c: ca:a4:ce:d7:a3:7e:b4:96:de:8a:b2:f5:71:09:8c:49:55:4b: 22:3d:e0:15:29:5a:39:64:ac:17:bf:37:e0:8d:4d:72:c1:8a: 57:ab:4f:9d:c5:a3:e5:a0:65:6f:f1:08:ab:79:62:2c:3e:21: 8a:48:4d:23:37:5f:6c:5a:84:bb:83:35:d5:d2:d8:7a:08:7a: ba:fc:99:12:ef:ff:47:2a:e1:77:49:11:3a:10:37:c5:2c:b0: b7:30:ff:3b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt+pu6LH/U39ALOKmEST0pIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTAwNGJlZmE1NTNkZGIzNTU2NGZiNzc2MmIwNWViMjIy ZWNmOTMwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTAwZGU3NGZhMGJhOTBmMWVkMDgxZGRjY2Y0Y2JlMmMwMzM5NzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ96CHVSd7B1tssIzT0N/Q59tfpC 8aW41KXBXKr4AsVNkOiWG6wxiUyUc69spQH6cd2N2p7wQ3mzORTu9B9TZKA3YXrJ OTq591xSDow9R3wWjcCV5urIgVTjAbRFQJ/0S0zbuZsjX8FwCDrFT5HBQj+HcbjJ UWZ1JZEu3vcUcyqKrMW5dA9SGWo2MhXiQq90vDdEopuFdoxi9Mlofhu4b9bYIwyb ijW9uv97hUmVqEhxLPyr1L1fsWLpqvjagcNfSvvjxBuO7YeGNOj1GoMwWXZvDAF2 qAacphZZn87lh+EXBPIaWwLwegS++gOijzKdpqYfss0yFza30h/e2GLq9wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDoA3nT6C6kPHtCB3cz0y+LAM5cXMB8GA1UdIwQY MBaAFF7gBL76VT3bNVZPt3YrBesiLs+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zYzM1ZWEtN2M5YS00OGUyLWIzYjIt ZTIyOGFhYjQ1MDE0LzEvT2dEZWRQb0xxUThlMElIZHpQVEw0c0F6bHhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zYzM1ZWEtN2M5YS00OGUyLWIzYjItZTIyOGFhYjQ1MDE0 LzEvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQCuV9gMBoE AgACMBQwEgMHASoAHD4AlgMHASoAHD4AmDANBgkqhkiG9w0BAQsFAAOCAQEANuNR BgyJ86Jc0/XOEYrEO0sOrJtfgSAN6Qann8BWLN0L0Gbi+FTk+/12um1VO6nQq4Bc IASlYGJ/xLau88xJsZfGVzPcYWmevHcsbXvAL3L5Msv4zzVCC4GUhZvkmDAFqtjS DIazo2hAazAttdCVakrG6TAUei5qG8t3o+yxOGvg2yREjq6VFibpXFFIfHVzYzhF GnTG3KGyauOvqXxif3gMyqTO16N+tJbeirL1cQmMSVVLIj3gFSlaOWSsF7834I1N csGKV6tPncWj5aBlb/EIq3liLD4hikhNIzdfbFqEu4M11dLYegh6uvyZEu//Ryrh d0kROhA3xSywtzD/Ow== -----END CERTIFICATE-----Generated at Sun Jan 25 18:21:00 2026 by rpki-client