This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/O6ZAZ4typgOI3suTxfN-rxJmiqo.roa File: O6ZAZ4typgOI3suTxfN-rxJmiqo.roa (raw, json) Hash identifier: vmBhZBWRzaR03mbT3PYidf4G6v/Azs/K8CL0/p3O6Bg= Subject key identifier: 3B:A6:40:67:8B:72:A6:03:88:DE:CB:93:C5:F3:7E:AF:12:66:8A:AA Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba Certificate serial: 019B7AC7E0F988E8610067BD6761A35DD1A1 Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/O6ZAZ4typgOI3suTxfN-rxJmiqo.roa Signing time: Thu 01 Jan 2026 18:17:58 +0000 ROA not before: Thu 01 Jan 2026 18:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199724 IP address blocks: 212.146.128.0/24 maxlen: 24 212.146.129.0/24 maxlen: 24 212.146.130.0/24 maxlen: 24 212.146.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e0:f9:88:e8:61:00:67:bd:67:61:a3:5d:d1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba Validity Not Before: Jan 1 18:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ba640678b72a60388decb93c5f37eaf12668aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:2d:02:5d:d9:5e:94:b4:90:cb:d9:96:d3: 3c:00:92:89:1d:a5:9a:a8:79:b0:db:53:60:10:da: 35:e9:ba:6c:06:dc:92:30:fb:ca:c0:38:cd:a2:89: 6e:5b:b5:a7:2e:89:36:1d:0e:cc:e6:ae:02:8a:56: 2b:bb:1f:b9:ed:4e:ee:69:e7:6e:df:1f:3d:72:6b: e1:ca:90:5d:79:65:27:95:e9:63:28:f6:d6:39:84: b3:d8:0d:67:5c:54:4f:0e:d9:b8:4c:ce:5a:3f:c1: 9d:9e:39:fb:84:31:36:90:6d:51:d3:89:20:a8:11: e4:ee:61:4e:20:0c:2e:4c:43:02:cb:e2:3b:ac:de: dd:97:c9:d0:5d:12:5b:f8:0f:23:59:ca:01:7f:92: 8f:46:86:04:cb:db:e8:6c:c1:80:dc:7c:d5:00:37: 6b:46:1c:03:bc:fa:53:22:83:af:59:bb:91:fc:47: 6e:21:77:86:db:61:2c:e1:06:29:a7:64:ea:b7:5f: db:f1:ac:4e:1d:59:0d:1d:3d:fb:b7:9f:25:5e:46: cf:35:97:1d:56:d9:33:c9:16:80:28:c6:c1:7a:6f: 28:19:5e:c6:f5:e8:24:9a:57:1d:34:40:7a:a3:9c: 4c:44:f8:93:03:92:28:8f:fc:1b:fd:67:bd:7e:5a: e2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A6:40:67:8B:72:A6:03:88:DE:CB:93:C5:F3:7E:AF:12:66:8A:AA X509v3 Authority Key Identifier: keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/O6ZAZ4typgOI3suTxfN-rxJmiqo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.146.128.0/22 Signature Algorithm: sha256WithRSAEncryption 47:eb:e1:85:96:39:bb:ab:de:2b:26:24:8a:d1:05:7c:ea:7c: ed:6e:32:38:d9:82:74:6e:36:13:b7:59:24:2e:ac:6d:c5:c9: c2:14:44:29:4d:69:0b:54:98:ee:b3:19:6c:8d:ad:8c:91:c9: 86:64:16:3b:c4:36:74:13:26:56:35:8f:a0:ef:03:35:b7:4b: de:1d:e0:cf:3c:a8:45:bc:d7:d6:a8:92:64:42:c0:15:97:4b: 23:9c:12:dd:d7:f5:21:22:3b:9e:93:a5:f2:f8:fc:8c:39:fc: 07:54:59:a9:8b:a1:b8:e9:03:89:11:0f:a7:21:41:c8:7c:57: 45:f1:af:6a:6d:68:c7:0f:f4:80:c8:3c:4a:75:b2:ec:db:96: 4e:c2:0e:f6:d3:dd:5a:55:da:8d:0d:04:60:23:d9:e1:3e:d7: e5:2d:42:3a:35:d3:ce:54:bf:e5:d4:5b:2f:2e:e4:1e:c1:cc: aa:e7:19:0f:31:ff:5e:9c:f7:42:24:42:17:a3:63:b4:a9:46: 75:6b:e7:aa:39:51:d5:61:78:1f:0e:b7:a0:c1:32:58:7b:9c: db:ac:7c:56:7a:75:7d:df:39:71:53:22:76:61:6c:15:49:ad: d8:25:5b:c3:07:5a:aa:42:84:78:c7:a2:4e:72:00:28:4a:c5: c4:56:04:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+D5iOhhAGe9Z2GjXdGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzcxZGQ3ZGVhMjJlMzVmZGFmMTliNTFiODM5ZjQzNzIx MjcwYmEwHhcNMjYwMTAxMTgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmE2NDA2NzhiNzJhNjAzODhkZWNiOTNjNWYzN2VhZjEyNjY4YWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbgtAl3ZXpS0kMvZltM8AJKJHaWa qHmw21NgENo16bpsBtySMPvKwDjNooluW7WnLok2HQ7M5q4CilYrux+57U7uaedu 3x89cmvhypBdeWUnleljKPbWOYSz2A1nXFRPDtm4TM5aP8Gdnjn7hDE2kG1R04kg qBHk7mFOIAwuTEMCy+I7rN7dl8nQXRJb+A8jWcoBf5KPRoYEy9vobMGA3HzVADdr RhwDvPpTIoOvWbuR/EduIXeG22Es4QYpp2Tqt1/b8axOHVkNHT37t58lXkbPNZcd VtkzyRaAKMbBem8oGV7G9egkmlcdNEB6o5xMRPiTA5Ioj/wb/We9flrigwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDumQGeLcqYDiN7Lk8Xzfq8SZoqqMB8GA1UdIwQY MBaAFBB3Hdfeoi41/a8ZtRuDn0NyEnC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83NTE0OGEtZTQwZS00MDlmLThhMGIt ZGE4NTFhNzE1ZmE0LzEvTzZaQVo0dHlwZ09JM3N1VHhmTi1yeEptaXFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy83NTE0OGEtZTQwZS00MDlmLThhMGItZGE4NTFhNzE1ZmE0 LzEvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1JKAMA0G CSqGSIb3DQEBCwUAA4IBAQBH6+GFljm7q94rJiSK0QV86nztbjI42YJ0bjYTt1kk LqxtxcnCFEQpTWkLVJjusxlsja2MkcmGZBY7xDZ0EyZWNY+g7wM1t0veHeDPPKhF vNfWqJJkQsAVl0sjnBLd1/UhIjuek6Xy+PyMOfwHVFmpi6G46QOJEQ+nIUHIfFdF 8a9qbWjHD/SAyDxKdbLs25ZOwg72091aVdqNDQRgI9nhPtflLUI6NdPOVL/l1Fsv LuQewcyq5xkPMf9enPdCJEIXo2O0qUZ1a+eqOVHVYXgfDregwTJYe5zbrHxWenV9 3zlxUyJ2YWwVSa3YJVvDB1qqQoR4x6JOcgAoSsXEVgSY -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:47 2026 by rpki-client