This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/OAN3WdNCBOx9GAH-afVSq5R89fo.roa File: OAN3WdNCBOx9GAH-afVSq5R89fo.roa (raw, json) Hash identifier: /EI4b5flaVJsTGBAEIzkodT4ndbdEXX0V5sGa/1LzJE= Subject key identifier: 38:03:77:59:D3:42:04:EC:7D:18:01:FE:69:F5:52:AB:94:7C:F5:FA Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019B7C133B78FC00218A0DC38813C5EE758D Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/OAN3WdNCBOx9GAH-afVSq5R89fo.roa Signing time: Fri 02 Jan 2026 00:19:53 +0000 ROA not before: Fri 02 Jan 2026 00:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16347 IP address blocks: 85.14.166.0/23 maxlen: 23 85.14.174.0/24 maxlen: 24 85.14.178.0/23 maxlen: 23 109.74.84.0/23 maxlen: 23 109.74.91.0/24 maxlen: 24 217.171.23.0/24 maxlen: 24 217.171.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3b:78:fc:00:21:8a:0d:c3:88:13:c5:ee:75:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Jan 2 00:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38037759d34204ec7d1801fe69f552ab947cf5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:5a:85:5d:93:25:59:5b:8e:89:4b:f5:b2: 36:0d:da:fe:44:c3:6d:4d:52:e0:00:ce:79:29:05: fe:58:c2:40:b9:46:0a:04:4d:be:ae:e8:4f:3d:38: c5:31:37:0d:5c:7f:a2:6b:9d:99:a0:a1:cb:4c:1f: 4c:79:a3:df:ab:ac:01:14:a9:a5:87:b9:e3:5f:39: b2:2c:97:ae:75:6a:57:53:97:ec:a8:d3:b2:4d:45: f4:bd:0b:3a:cb:e6:d1:ae:34:d4:a1:e0:75:67:ac: d4:9b:d6:7e:ac:a9:71:ca:81:7d:db:ac:72:fc:e0: aa:26:59:04:38:71:60:9f:59:52:78:8b:01:20:72: 1a:6d:ba:24:1e:a5:82:9c:70:77:96:d7:c5:c6:5a: aa:96:78:4d:2b:92:9b:d8:c4:c3:4d:cc:47:5d:d4: 1d:12:6b:41:95:ee:de:73:31:b6:97:23:56:8e:be: 64:24:4d:4d:a4:e6:71:a4:5d:ea:99:ca:1b:37:f6: 37:e3:90:5b:01:9d:78:ae:b9:71:46:87:45:4e:cb: f6:8a:d0:c8:5d:b4:a9:bc:2c:eb:36:f9:69:68:7f: fb:c1:87:84:1f:6c:1a:f3:9f:84:ef:9f:4d:41:3a: 5c:6e:f4:46:07:e8:ee:fa:87:66:b8:0a:5c:16:eb: df:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:03:77:59:D3:42:04:EC:7D:18:01:FE:69:F5:52:AB:94:7C:F5:FA X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/OAN3WdNCBOx9GAH-afVSq5R89fo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.14.166.0/23 85.14.174.0/24 85.14.178.0/23 109.74.84.0/23 109.74.91.0/24 217.171.23.0/24 217.171.28.0/24 Signature Algorithm: sha256WithRSAEncryption 95:56:56:53:a3:07:b2:87:d6:74:17:fc:e8:f8:a6:47:6a:25: 85:1c:b1:cb:4d:2f:5f:ce:ad:1b:48:ac:bf:96:64:3c:1e:c2: f4:65:16:87:8e:54:59:e1:98:f0:89:58:ef:54:a7:d1:4c:e5: 92:29:36:3f:72:81:e3:a2:c3:d6:16:17:2f:93:9a:24:bd:28: 92:61:a1:1d:64:c8:a0:31:43:16:27:46:76:57:51:25:af:59: 22:15:c4:80:1f:5d:45:1a:ed:7b:5e:c3:7e:2c:34:c0:9e:1d: 60:66:35:1f:a6:29:4d:d7:7b:29:55:4f:4c:70:26:02:9c:0a: b8:1f:5e:de:e6:dd:f2:16:59:2d:23:2d:a5:4a:57:87:5e:9e: 54:46:ad:d5:72:9c:04:e1:b3:62:f3:71:ae:d1:34:fc:8d:52: 2a:fa:60:89:bd:e1:f7:67:d2:c1:60:43:75:5d:8d:e6:00:ab: a4:a2:2a:dd:d9:06:a9:5b:a7:79:c9:b9:b9:88:50:5a:29:8e: 84:07:99:9c:15:bc:c5:3b:20:b6:38:24:b1:02:ef:1f:c8:8a: f9:13:b1:9d:4d:b6:53:07:1d:ef:80:47:33:4b:99:17:c3:27: 7a:a2:82:c7:21:52:e4:5d:b3:27:ea:11:22:e1:c5:7b:97:27: 00:2d:ab:6b -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt8Ezt4/AAhig3DiBPF7nWNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwMTAyMDAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODAzNzc1OWQzNDIwNGVjN2QxODAxZmU2OWY1NTJhYjk0N2NmNWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz5ahV2TJVlbjolL9bI2Ddr+RMNt TVLgAM55KQX+WMJAuUYKBE2+ruhPPTjFMTcNXH+ia52ZoKHLTB9MeaPfq6wBFKml h7njXzmyLJeudWpXU5fsqNOyTUX0vQs6y+bRrjTUoeB1Z6zUm9Z+rKlxyoF926xy /OCqJlkEOHFgn1lSeIsBIHIabbokHqWCnHB3ltfFxlqqlnhNK5Kb2MTDTcxHXdQd EmtBle7eczG2lyNWjr5kJE1NpOZxpF3qmcobN/Y345BbAZ14rrlxRodFTsv2itDI XbSpvCzrNvlpaH/7wYeEH2wa85+E759NQTpcbvRGB+ju+odmuApcFuvfTwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFDgDd1nTQgTsfRgB/mn1UquUfPX6MB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvT0FOM1dkTkNCT3g5R0FILWFmVlNxNVI4OWZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBVQ6mAwQA VQ6uAwQBVQ6yAwQBbUpUAwQAbUpbAwQA2asXAwQA2ascMA0GCSqGSIb3DQEBCwUA A4IBAQCVVlZToweyh9Z0F/zo+KZHaiWFHLHLTS9fzq0bSKy/lmQ8HsL0ZRaHjlRZ 4ZjwiVjvVKfRTOWSKTY/coHjosPWFhcvk5okvSiSYaEdZMigMUMWJ0Z2V1Elr1ki FcSAH11FGu17XsN+LDTAnh1gZjUfpilN13spVU9McCYCnAq4H17e5t3yFlktIy2l SleHXp5URq3VcpwE4bNi83Gu0TT8jVIq+mCJveH3Z9LBYEN1XY3mAKukoird2Qap W6d5ybm5iFBaKY6EB5mcFbzFOyC2OCSxAu8fyIr5E7GdTbZTBx3vgEczS5kXwyd6 ooLHIVLkXbMn6hEi4cV7lycALatr -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:19 2026 by rpki-client