This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/AOSmkpfSOFbjllRlkR-Fn2Na0J8.roa File: AOSmkpfSOFbjllRlkR-Fn2Na0J8.roa (raw, json) Hash identifier: R7ujwir+23h2sfZusY8cXn1txSjNrZOQvbvn6Spqcws= Subject key identifier: 00:E4:A6:92:97:D2:38:56:E3:96:54:65:91:1F:85:9F:63:5A:D0:9F Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b Certificate serial: 019B7F1454D0707BE2A3D9CAF14E012727A9 Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/AOSmkpfSOFbjllRlkR-Fn2Na0J8.roa Signing time: Fri 02 Jan 2026 14:19:57 +0000 ROA not before: Fri 02 Jan 2026 14:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7473 IP address blocks: 185.84.218.0/24 maxlen: 24 185.84.219.0/24 maxlen: 24 193.103.148.0/24 maxlen: 24 2a05:a884:de10::/48 maxlen: 48 2a05:a884:de20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:54:d0:70:7b:e2:a3:d9:ca:f1:4e:01:27:27:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b Validity Not Before: Jan 2 14:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00e4a69297d23856e3965465911f859f635ad09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:30:35:db:4e:e3:ac:ca:30:8a:d1:4a:29:cb: 74:88:1d:a3:dd:d6:38:8a:ba:5f:c4:05:df:b6:41: a7:e2:ea:0b:00:07:bc:79:38:82:24:d5:e3:a0:df: 67:fd:4f:54:48:45:07:b1:b6:f8:f5:09:20:56:2b: 11:8b:5e:7b:45:0c:d4:c4:84:12:41:6f:ed:05:5d: 6a:78:83:84:f3:b9:65:f5:86:61:ac:59:f3:d2:eb: 05:7b:57:d9:c6:39:a1:49:ad:53:83:34:1b:2f:a6: 5f:df:e3:9d:6d:d0:02:8e:bc:8f:2d:d6:6b:2d:d0: 0c:49:02:83:c4:9e:53:fe:56:b9:94:6e:1c:e0:27: e7:f3:ff:31:7a:d9:f7:4f:68:03:f8:12:be:b8:c6: 57:92:d6:fb:24:61:94:20:c4:40:9e:29:d7:70:4a: 31:a8:3c:bb:46:33:ff:90:b3:99:98:80:d6:57:56: 30:9d:70:16:d7:fc:42:d5:b6:8d:2d:2d:ac:dc:62: 64:7a:42:3e:88:97:38:c3:e7:ae:43:2f:05:3f:4a: 36:35:fe:b5:0f:5e:3b:76:36:3c:e3:ae:e6:89:92: 7b:16:58:32:28:0c:22:75:c8:67:43:06:aa:6a:dd: 2f:8f:19:2d:23:b3:a0:c0:b0:b9:87:89:b3:0c:5e: 3f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E4:A6:92:97:D2:38:56:E3:96:54:65:91:1F:85:9F:63:5A:D0:9F X509v3 Authority Key Identifier: keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/AOSmkpfSOFbjllRlkR-Fn2Na0J8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.218.0/23 193.103.148.0/24 IPv6: 2a05:a884:de10::/48 2a05:a884:de20::/48 Signature Algorithm: sha256WithRSAEncryption 9b:ad:3f:48:54:7f:95:91:bd:d5:6a:8b:7e:72:3b:28:cd:e3: 0e:df:c1:d1:59:0c:1c:1e:76:55:2f:8d:cf:6e:4f:1c:1d:60: 27:21:82:78:93:37:c6:b7:83:dc:30:a3:1b:e7:98:c2:3e:3a: f7:fb:5a:97:95:58:c8:94:53:01:57:d0:01:cf:64:7d:5b:c9: d3:04:54:86:e1:91:f9:b8:fa:03:8b:d6:2a:56:3b:23:6c:46: df:2c:31:b9:20:49:24:eb:0e:36:3f:a8:17:2d:2a:a2:b0:99: 96:ed:10:b6:4c:d6:56:be:8e:a2:7d:9d:7c:8e:16:7b:12:96: 58:87:85:18:4c:8b:dd:cc:ba:df:e4:db:9c:54:49:49:f4:41: be:ea:bc:7b:db:df:1c:31:27:39:42:cd:f9:9a:af:ee:da:65: 65:65:3f:7c:76:cd:a6:53:90:dd:2b:d4:fe:5b:21:c5:df:0a: 65:81:d5:a9:38:62:e1:b2:7c:6d:f7:10:0e:d6:74:f3:af:8f: 80:5c:33:1a:12:c0:02:48:3a:1d:ba:4f:e5:a2:af:35:9d:80: 5f:5f:99:51:80:0d:f2:c7:e0:10:44:5a:9d:36:9d:8b:69:9d: b5:90:4c:71:64:8f:44:88:95:3e:d0:cc:7b:9d:19:8a:41:2f: df:ed:3e:53 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt/FFTQcHvio9nK8U4BJyepMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZWRhOGY3MjZhNjliNTA0ZGU5OTQ5NDNiMGE1ZjIzMDhj MmE5NmIwHhcNMjYwMTAyMTQxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGU0YTY5Mjk3ZDIzODU2ZTM5NjU0NjU5MTFmODU5ZjYzNWFkMDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDA1207jrMowitFKKct0iB2j3dY4 irpfxAXftkGn4uoLAAe8eTiCJNXjoN9n/U9USEUHsbb49QkgVisRi157RQzUxIQS QW/tBV1qeIOE87ll9YZhrFnz0usFe1fZxjmhSa1TgzQbL6Zf3+OdbdACjryPLdZr LdAMSQKDxJ5T/la5lG4c4Cfn8/8xetn3T2gD+BK+uMZXktb7JGGUIMRAninXcEox qDy7RjP/kLOZmIDWV1YwnXAW1/xC1baNLS2s3GJkekI+iJc4w+euQy8FP0o2Nf61 D147djY8467miZJ7FlgyKAwidchnQwaqat0vjxktI7OgwLC5h4mzDF4/TwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFADkppKX0jhW45ZUZZEfhZ9jWtCfMB8GA1UdIwQY MBaAFHftqPcmpptQTemUlDsKXyMIwqlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTkt NjA4NGNmYzZlNGM0LzEvQU9TbWtwZlNPRmJqbGxSbGtSLUZuMk5hMEo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTktNjA4NGNmYzZlNGM0 LzEvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBuVTaAwQA wWeUMBgEAgACMBIDBwAqBaiE3hADBwAqBaiE3iAwDQYJKoZIhvcNAQELBQADggEB AJutP0hUf5WRvdVqi35yOyjN4w7fwdFZDBwedlUvjc9uTxwdYCchgniTN8a3g9ww oxvnmMI+Ovf7WpeVWMiUUwFX0AHPZH1bydMEVIbhkfm4+gOL1ipWOyNsRt8sMbkg SSTrDjY/qBctKqKwmZbtELZM1la+jqJ9nXyOFnsSlliHhRhMi93Mut/k25xUSUn0 Qb7qvHvb3xwxJzlCzfmar+7aZWVlP3x2zaZTkN0r1P5bIcXfCmWB1ak4YuGyfG33 EA7WdPOvj4BcMxoSwAJIOh26T+WirzWdgF9fmVGADfLH4BBEWp02nYtpnbWQTHFk j0SIlT7QzHudGYpBL9/tPlM= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:20 2026 by rpki-client