This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/oBx_PUd9jIs7YBgUmwcA4lLwIh8.roa File: oBx_PUd9jIs7YBgUmwcA4lLwIh8.roa (raw, json) Hash identifier: hhGP/lSRzYSBVwOdWUcy+jdF25VySsbxm9Awg1JpKdQ= Subject key identifier: A0:1C:7F:3D:47:7D:8C:8B:3B:60:18:14:9B:07:00:E2:52:F0:22:1F Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2 Certificate serial: 019B7E3910C848C7D91D7DAA55031E6CA51A Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/oBx_PUd9jIs7YBgUmwcA4lLwIh8.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205647 IP address blocks: 185.211.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:10:c8:48:c7:d9:1d:7d:aa:55:03:1e:6c:a5:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2 Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a01c7f3d477d8c8b3b6018149b0700e252f0221f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ed:60:b8:a4:1e:af:e9:1f:ac:e3:c4:01:88: fd:52:29:d8:22:81:2b:df:0e:21:cc:e7:e2:71:47: 44:1d:e7:f9:3d:5c:33:83:10:18:a9:60:a0:89:f5: a6:9b:7e:f9:48:7f:1c:42:da:9e:e0:0d:e1:fc:6a: 36:d9:b1:47:75:91:14:e6:23:80:4b:5b:dc:ae:dc: 8f:3a:1c:ec:81:ba:65:87:03:24:e9:bb:02:c7:1a: d5:57:60:68:06:f0:c9:e3:ab:ed:bd:29:c3:97:b6: f2:c7:cf:c9:de:36:31:1f:c4:97:40:da:a9:7a:4a: de:2d:dd:60:02:95:be:72:28:cc:57:8d:71:e8:a5: cc:52:ce:4b:d9:70:a1:93:ba:a1:e2:ba:4e:97:06: 34:34:2a:6b:e1:df:11:3b:af:da:94:4d:f2:2d:69: b7:c8:33:08:3d:2f:09:87:f9:d2:54:bb:38:e4:69: b7:70:21:5b:98:e2:7c:80:61:14:2a:13:57:67:b8: 00:62:a7:df:7f:23:4b:27:12:9f:a8:8f:71:50:d0: 13:6a:fe:86:0f:7c:76:50:2a:a0:25:d8:62:af:4f: fe:b7:b2:36:23:01:67:b9:a7:a4:73:fe:62:86:58: 5b:37:a9:e8:6f:33:8a:45:80:79:1c:1b:04:81:07: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1C:7F:3D:47:7D:8C:8B:3B:60:18:14:9B:07:00:E2:52:F0:22:1F X509v3 Authority Key Identifier: keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/oBx_PUd9jIs7YBgUmwcA4lLwIh8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.86.0/23 Signature Algorithm: sha256WithRSAEncryption 75:6d:14:9c:70:25:8e:4a:ff:4f:86:cd:d9:02:52:e0:0f:b1: 59:a0:fb:cf:e7:af:06:88:2c:ab:97:87:66:eb:23:cc:85:8d: db:69:d0:bf:f9:82:2e:3b:7a:82:00:c1:40:c9:5d:8f:29:1b: 6d:98:46:b1:59:ef:9c:74:df:67:0c:fe:06:f1:61:ac:c1:23: 44:b7:12:82:3f:4f:98:a4:4c:42:39:74:81:ec:b1:4d:6b:9d: c8:11:6e:8a:41:18:d9:58:bc:12:33:9e:2e:e1:36:a9:81:d7: f7:b2:4d:bc:19:e2:b6:85:41:1f:16:31:f3:f2:6c:3e:03:e6: 09:78:8c:21:f2:a7:09:4b:fb:8d:b2:c3:a5:2c:1a:1a:67:4d: 8d:c9:46:a8:83:cd:6b:6c:d0:a3:2b:c1:f8:44:b8:4b:3d:b1: ed:7e:9b:ea:b2:20:2b:29:31:f6:3f:78:96:38:48:81:f3:0a: 18:3a:a2:18:64:20:5b:f7:76:c4:d5:62:c8:56:aa:21:26:24: a7:55:b3:34:dc:63:18:5f:32:a0:c3:b7:3d:63:8e:19:5f:53: da:35:ad:d3:22:fc:d2:50:f7:df:95:97:f2:e2:b8:cf:7a:26: 6c:ae:90:a9:1c:0c:6a:b5:4c:a0:b1:87:69:d0:a2:19:17:55: 3a:d3:a0:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORDISMfZHX2qVQMebKUaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YTM3MmI3NTRlNDkyMDhkNjQ2YWE3ODU5ZTM0OGI0NzVl NTI2ZDIwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDFjN2YzZDQ3N2Q4YzhiM2I2MDE4MTQ5YjA3MDBlMjUyZjAyMjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+1guKQer+kfrOPEAYj9UinYIoEr 3w4hzOficUdEHef5PVwzgxAYqWCgifWmm375SH8cQtqe4A3h/Go22bFHdZEU5iOA S1vcrtyPOhzsgbplhwMk6bsCxxrVV2BoBvDJ46vtvSnDl7byx8/J3jYxH8SXQNqp ekreLd1gApW+cijMV41x6KXMUs5L2XChk7qh4rpOlwY0NCpr4d8RO6/alE3yLWm3 yDMIPS8Jh/nSVLs45Gm3cCFbmOJ8gGEUKhNXZ7gAYqfffyNLJxKfqI9xUNATav6G D3x2UCqgJdhir0/+t7I2IwFnuaekc/5ihlhbN6nobzOKRYB5HBsEgQePCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKAcfz1HfYyLO2AYFJsHAOJS8CIfMB8GA1UdIwQY MBaAFHajcrdU5JII1kaqeFnjSLR15SbSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yMzVmZWMtYWZjOS00ZDJmLThiNTkt YTk5ZWE5MWNiNWI5LzEvb0J4X1BVZDlqSXM3WUJnVW13Y0E0bEx3SWg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8yMzVmZWMtYWZjOS00ZDJmLThiNTktYTk5ZWE5MWNiNWI5 LzEvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudNWMA0G CSqGSIb3DQEBCwUAA4IBAQB1bRSccCWOSv9Phs3ZAlLgD7FZoPvP568GiCyrl4dm 6yPMhY3badC/+YIuO3qCAMFAyV2PKRttmEaxWe+cdN9nDP4G8WGswSNEtxKCP0+Y pExCOXSB7LFNa53IEW6KQRjZWLwSM54u4Tapgdf3sk28GeK2hUEfFjHz8mw+A+YJ eIwh8qcJS/uNssOlLBoaZ02NyUaog81rbNCjK8H4RLhLPbHtfpvqsiArKTH2P3iW OEiB8woYOqIYZCBb93bE1WLIVqohJiSnVbM03GMYXzKgw7c9Y44ZX1PaNa3TIvzS UPfflZfy4rjPeiZsrpCpHAxqtUygsYdp0KIZF1U606DS -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:05 2026 by rpki-client