This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/OfoRzb83TiUr9JWnqSw8Nlujw1Y.roa File: OfoRzb83TiUr9JWnqSw8Nlujw1Y.roa (raw, json) Hash identifier: C+NBqa/FoqkfVKSMS3H5Y1wqDnMMVE+Y4Fw4A7IWZm8= Subject key identifier: 39:FA:11:CD:BF:37:4E:25:2B:F4:95:A7:A9:2C:3C:36:5B:A3:C3:56 Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48 Certificate serial: 019B78A331C2C1C612C19CDB5E1D4D92DE00 Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/OfoRzb83TiUr9JWnqSw8Nlujw1Y.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213726 IP address blocks: 185.197.164.0/24 maxlen: 24 2a0a:7bc1:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:31:c2:c1:c6:12:c1:9c:db:5e:1d:4d:92:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39fa11cdbf374e252bf495a7a92c3c365ba3c356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9a:07:41:85:04:6a:35:b6:2f:0e:c2:1b:81: f6:4b:7d:91:6d:bf:0a:5e:7a:38:7d:3d:12:54:94: f3:a9:1d:78:e5:34:8d:d7:0b:c8:d6:1d:d6:d3:2f: 98:f2:d4:c2:e8:68:ef:a8:b3:fb:a1:7a:e9:e7:3f: 8e:e9:5f:67:49:77:ef:63:05:f5:4a:42:60:2a:8c: 60:77:87:c0:27:54:a4:d5:eb:f2:95:7f:a5:83:bb: ac:30:e3:4b:35:d8:e9:12:2f:93:58:66:10:0e:54: 39:78:b3:e2:0b:6f:76:12:f7:d3:b4:3b:58:a2:e4: f7:50:5d:6e:e1:e1:39:ca:f4:a3:41:f6:1b:dc:f7: 5e:c3:0d:39:b1:8e:20:e2:09:3f:e1:12:93:7a:3d: 13:f7:76:cd:cd:71:8c:ae:05:76:18:05:f7:a4:d5: f1:79:e4:f3:5c:80:27:d7:11:a1:78:ec:e5:04:c5: ea:01:3d:78:12:79:b7:fe:41:f1:70:06:75:e0:3a: 90:2f:f8:1c:c2:f2:81:e9:59:af:4c:fd:9b:c6:eb: 26:14:5c:6b:62:a9:d8:81:f5:e5:b8:32:01:f7:6f: e3:cf:2a:ef:7e:5a:ce:d8:9d:26:89:f5:8e:57:04: 18:46:6c:2a:a4:d9:64:22:c6:7c:13:92:63:98:7e: e8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FA:11:CD:BF:37:4E:25:2B:F4:95:A7:A9:2C:3C:36:5B:A3:C3:56 X509v3 Authority Key Identifier: keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/OfoRzb83TiUr9JWnqSw8Nlujw1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.164.0/24 IPv6: 2a0a:7bc1:1::/48 Signature Algorithm: sha256WithRSAEncryption 61:58:9a:3c:f9:5d:ed:65:19:37:f6:dd:3b:80:b8:a9:fc:62: b5:85:da:ea:1d:fc:8c:c0:bd:10:7a:aa:f4:40:1d:38:6d:82: eb:6d:18:74:1e:8a:d6:ff:6d:ca:25:78:03:8d:32:f4:bc:49: 04:5f:65:b1:21:27:46:94:98:cc:1e:44:f8:b8:f4:d1:9b:2a: 6a:ab:b7:f9:b2:a3:a1:71:e3:a8:fd:be:76:39:bf:b3:82:9d: e0:9b:de:3f:a6:d2:1e:15:05:cf:76:7b:6d:f9:5d:28:35:b3: d5:27:08:19:e1:d5:44:30:6c:11:84:7e:82:b0:45:ec:fe:42: 40:1b:96:39:a3:20:16:87:8f:1e:02:65:bc:cb:e8:7f:52:d1: 02:07:56:76:53:1c:75:e4:3a:68:3a:50:1d:e5:7a:71:7c:e2: e3:4f:ac:46:c7:5e:bf:84:7d:dc:48:a2:bc:c5:3c:d7:98:c1: d1:47:af:d1:34:07:f3:07:1b:6d:aa:2d:8a:28:6b:88:83:aa: 3b:af:63:99:fa:68:0a:ee:91:2f:7f:3e:26:93:1e:b8:86:0f: e6:a5:63:d7:b6:cf:90:8e:4c:fb:35:6f:93:52:ac:b4:91:fd: 58:05:38:06:a9:35:78:ed:89:a9:33:c8:c8:b2:37:14:13:f8: 2a:c7:b4:79 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4ozHCwcYSwZzbXh1Nkt4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YzFjMjQ2NWI0Zjk3M2ZiNGIwY2I2NjI4YTk4YjNiNTg4 OTZkNDgwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWZhMTFjZGJmMzc0ZTI1MmJmNDk1YTdhOTJjM2MzNjViYTNjMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpoHQYUEajW2Lw7CG4H2S32Rbb8K Xno4fT0SVJTzqR145TSN1wvI1h3W0y+Y8tTC6GjvqLP7oXrp5z+O6V9nSXfvYwX1 SkJgKoxgd4fAJ1Sk1evylX+lg7usMONLNdjpEi+TWGYQDlQ5eLPiC292EvfTtDtY ouT3UF1u4eE5yvSjQfYb3Pdeww05sY4g4gk/4RKTej0T93bNzXGMrgV2GAX3pNXx eeTzXIAn1xGheOzlBMXqAT14Enm3/kHxcAZ14DqQL/gcwvKB6VmvTP2bxusmFFxr YqnYgfXluDIB92/jzyrvflrO2J0mifWOVwQYRmwqpNlkIsZ8E5JjmH7o+wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDn6Ec2/N04lK/SVp6ksPDZbo8NWMB8GA1UdIwQY MBaAFNbBwkZbT5c/tLDLZiipiztYiW1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2Mt ZTQ5YTllMDZjNzAwLzEvT2ZvUnpiODNUaVVyOUpXbnFTdzhObHVqdzFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9kNzI1NzQtMjcyYS00MDlkLTlkM2MtZTQ5YTllMDZjNzAw LzEvMXNIQ1JsdFBsei0wc010bUtLbUxPMWlKYlVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAucWkMA8E AgACMAkDBwAqCnvBAAEwDQYJKoZIhvcNAQELBQADggEBAGFYmjz5Xe1lGTf23TuA uKn8YrWF2uod/IzAvRB6qvRAHThtguttGHQeitb/bcoleAONMvS8SQRfZbEhJ0aU mMweRPi49NGbKmqrt/myo6Fx46j9vnY5v7OCneCb3j+m0h4VBc92e235XSg1s9Un CBnh1UQwbBGEfoKwRez+QkAbljmjIBaHjx4CZbzL6H9S0QIHVnZTHHXkOmg6UB3l enF84uNPrEbHXr+EfdxIorzFPNeYwdFHr9E0B/MHG22qLYooa4iDqjuvY5n6aAru kS9/PiaTHriGD+alY9e2z5COTPs1b5NSrLSR/VgFOAapNXjtiakzyMiyNxQT+CrH tHk= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:53 2026 by rpki-client