This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa File: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (raw, json) Hash identifier: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ= Subject key identifier: D4:E2:FE:AA:CB:35:C4:BF:98:A5:E6:86:1E:67:E3:CD:BB:3E:78:14 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B77C66F51EA35A961FB0E3BDE2C55D266 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204487 IP address blocks: 185.29.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6f:51:ea:35:a9:61:fb:0e:3b:de:2c:55:d2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4e2feaacb35c4bf98a5e6861e67e3cdbb3e7814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c3:dc:c9:40:39:a7:81:70:63:bb:f7:31:eb: c9:05:5a:88:6b:06:f0:12:46:a2:50:00:6d:30:34: 04:af:67:de:65:dd:f7:1e:3e:05:23:89:82:85:de: 47:23:c4:9a:64:58:20:3b:fc:ea:68:32:1f:fb:7a: ce:7f:e9:2f:18:63:08:1a:80:ec:92:0f:58:7d:0d: 88:d6:65:0c:85:8b:ad:cc:8f:ca:cc:ef:82:2a:23: 6c:08:c1:af:3f:48:8b:98:ef:ad:18:75:af:a2:ed: 51:81:e7:d8:08:ce:09:31:fe:a5:58:32:5a:68:ac: 23:d7:72:7e:9b:92:7e:11:5d:c7:5f:55:58:09:2b: 56:98:f6:f8:f3:ad:f1:f8:06:40:c7:dd:6d:b5:d8: bc:f2:b7:c4:71:ae:01:31:d7:1b:31:bd:54:18:54: d0:3d:3e:3c:b2:18:98:91:45:dd:df:46:31:b2:9b: 83:7d:05:04:ee:35:c3:f9:ca:08:c9:04:b4:42:14: 4b:e6:b3:66:2c:93:b7:0c:38:43:33:8e:9d:17:8b: a0:8d:64:0b:01:9f:fb:55:7d:4d:c2:b6:87:5b:94: 2d:4c:fd:6c:24:f0:c2:61:40:6e:ca:cb:3f:8d:03: a9:75:05:64:c4:d4:c8:63:b9:b7:12:82:27:5a:b0: d2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E2:FE:AA:CB:35:C4:BF:98:A5:E6:86:1E:67:E3:CD:BB:3E:78:14 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.255.0/24 Signature Algorithm: sha256WithRSAEncryption 64:6c:67:3d:61:20:ee:73:dc:d9:f4:f0:7c:4d:93:c5:de:15: 45:ff:03:07:b5:c8:52:4e:b4:bc:f6:6d:a7:19:a8:7d:e1:5a: 4b:70:01:e4:a2:e6:fb:06:23:e8:ba:79:f9:b6:21:7b:f2:2d: da:c3:68:fd:af:f5:b1:65:a1:b7:49:86:a8:14:24:34:29:fa: b7:ba:b6:f3:85:b7:fe:3d:aa:94:0a:2c:42:8f:43:f0:bc:07: 5a:6c:f2:56:54:c1:ba:42:13:b9:6b:26:79:63:c4:63:53:e6: 3d:50:d5:fa:ac:f2:6e:f0:bf:a1:22:7b:c9:b8:66:cb:d3:33: e2:31:60:a9:77:a8:48:ae:be:1b:a8:61:dc:aa:46:ee:98:6d: 45:6d:45:91:77:f0:36:1d:ed:a6:c5:1b:2e:58:db:84:7d:77: b2:73:98:dd:00:cb:95:c5:93:41:30:e2:1c:7b:7c:48:a5:6d: d6:de:6e:dd:96:f1:65:16:bc:da:34:b3:27:e7:40:76:83:29: f9:76:5c:85:4a:eb:a9:8e:72:77:d2:85:35:e9:4e:bd:ea:97: c6:79:b6:70:de:d3:48:7c:4c:c6:84:81:89:3c:63:d4:f0:8c: 4d:14:3b:6d:6d:3c:f5:5c:8c:5a:9a:d4:70:e1:9b:78:87:1b: 01:e1:35:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xm9R6jWpYfsOO94sVdJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGUyZmVhYWNiMzVjNGJmOThhNWU2ODYxZTY3ZTNjZGJiM2U3ODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcPcyUA5p4FwY7v3MevJBVqIawbw EkaiUABtMDQEr2feZd33Hj4FI4mChd5HI8SaZFggO/zqaDIf+3rOf+kvGGMIGoDs kg9YfQ2I1mUMhYutzI/KzO+CKiNsCMGvP0iLmO+tGHWvou1RgefYCM4JMf6lWDJa aKwj13J+m5J+EV3HX1VYCStWmPb4863x+AZAx91ttdi88rfEca4BMdcbMb1UGFTQ PT48shiYkUXd30YxspuDfQUE7jXD+coIyQS0QhRL5rNmLJO3DDhDM46dF4ugjWQL AZ/7VX1NwraHW5QtTP1sJPDCYUBuyss/jQOpdQVkxNTIY7m3EoInWrDShwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNTi/qrLNcS/mKXmhh5n4827PngUMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvMU9MLXFzczF4TC1ZcGVhR0htZmp6YnMtZUJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR3/MA0G CSqGSIb3DQEBCwUAA4IBAQBkbGc9YSDuc9zZ9PB8TZPF3hVF/wMHtchSTrS89m2n Gah94VpLcAHkoub7BiPounn5tiF78i3aw2j9r/WxZaG3SYaoFCQ0Kfq3urbzhbf+ PaqUCixCj0PwvAdabPJWVMG6QhO5ayZ5Y8RjU+Y9UNX6rPJu8L+hInvJuGbL0zPi MWCpd6hIrr4bqGHcqkbumG1FbUWRd/A2He2mxRsuWNuEfXeyc5jdAMuVxZNBMOIc e3xIpW3W3m7dlvFlFrzaNLMn50B2gyn5dlyFSuupjnJ30oU16U696pfGebZw3tNI fEzGhIGJPGPU8IxNFDttbTz1XIxamtRw4Zt4hxsB4TUC -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:13 2026 by rpki-client