This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/o-kyHNKgNIUjHSBED-Es8cwoO9E.roa File: o-kyHNKgNIUjHSBED-Es8cwoO9E.roa (raw, json) Hash identifier: lOa1Oo5w8/mV1ahZL5zKke2ZPT9sWJF3NLgPW5L4ayE= Subject key identifier: A3:E9:32:1C:D2:A0:34:85:23:1D:20:44:0F:E1:2C:F1:CC:28:3B:D1 Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c Certificate serial: 019B76EB4023E4405B6CFA94EE269E32D90B Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/o-kyHNKgNIUjHSBED-Es8cwoO9E.roa Signing time: Thu 01 Jan 2026 00:18:07 +0000 ROA not before: Thu 01 Jan 2026 00:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60855 IP address blocks: 185.24.184.0/23 maxlen: 23 185.24.184.0/24 maxlen: 24 185.24.185.0/24 maxlen: 24 185.24.186.0/23 maxlen: 23 185.24.186.0/24 maxlen: 24 185.24.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:40:23:e4:40:5b:6c:fa:94:ee:26:9e:32:d9:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c Validity Not Before: Jan 1 00:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3e9321cd2a03485231d20440fe12cf1cc283bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ff:f9:86:ca:ba:c7:0c:e8:f5:65:66:62:b0: 9e:57:11:b4:87:b9:29:d1:10:2e:a3:19:a8:13:ae: 45:28:40:de:fe:d1:c5:b9:7b:68:34:d3:d2:46:65: bb:39:f5:65:44:21:a0:d8:09:89:9a:7f:88:38:32: 19:a3:7c:b5:f8:f6:f1:f7:e5:aa:71:4a:42:ec:bd: 94:8d:68:84:52:05:3c:66:64:6d:98:59:3f:de:47: 9e:97:87:56:52:8e:a5:f4:cb:8d:1c:37:07:2b:a0: 64:f6:1e:fb:14:a2:ad:56:7b:95:64:df:71:a3:84: 06:2d:26:7f:4e:4e:80:3e:1d:49:61:05:9e:f7:63: f9:18:29:fd:75:c4:23:00:17:11:89:4a:57:6b:60: 04:24:58:2c:3a:16:cc:c0:bc:74:09:25:b7:88:dd: c9:2e:1a:68:15:1c:07:8e:79:ff:90:60:7e:be:02: 8e:71:56:a8:fe:80:cf:71:50:ca:c2:32:38:3a:01: 53:01:15:f5:37:61:2c:c2:a3:75:62:b8:db:56:89: d5:ea:63:61:1b:04:0c:9f:c5:58:65:c9:59:f0:58: 18:d6:b1:39:5f:c7:cf:ce:90:c4:07:35:ab:3e:a7: d0:5c:35:cd:fa:b7:48:66:43:fa:30:92:0e:67:43: 17:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E9:32:1C:D2:A0:34:85:23:1D:20:44:0F:E1:2C:F1:CC:28:3B:D1 X509v3 Authority Key Identifier: keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/o-kyHNKgNIUjHSBED-Es8cwoO9E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.24.184.0/22 Signature Algorithm: sha256WithRSAEncryption 26:51:f9:a3:7a:ae:5c:4f:29:2f:8b:93:a7:1a:d0:f8:7c:88: 35:cd:2e:75:09:d5:79:5e:a5:09:96:d9:e2:40:14:74:80:39: 8c:28:1b:be:a7:5e:6b:55:8a:0e:b6:66:15:ab:ff:59:04:e8: fa:61:af:a5:1b:fe:29:e3:3d:9b:61:6c:26:b0:ab:eb:93:0c: 19:ec:ea:ba:f0:23:16:c9:18:ba:de:1e:ab:5c:21:7b:b3:e5: 61:35:b5:5f:19:51:df:18:29:c2:ba:1a:30:a3:bf:ab:b8:48: c5:30:77:dd:0e:e6:82:67:a9:fc:40:7a:07:53:be:87:2e:5e: a9:0d:2b:54:e8:41:67:c4:13:eb:74:23:91:2a:28:89:32:55: bb:d5:41:16:bd:f4:54:53:6c:c0:48:a3:6b:98:11:19:72:c1: 48:23:6a:77:d2:02:0c:3f:1a:3e:10:6b:92:73:6b:ef:63:0f: 10:c1:2c:52:24:41:10:53:1d:c1:25:bd:6d:1e:f1:6f:aa:01: 9a:3c:63:ee:91:1a:82:95:20:ad:41:d6:c0:8f:b0:d0:5f:7a: 83:d3:28:e3:60:df:ba:71:72:93:e9:dd:45:fa:1b:bb:18:aa: 3c:24:0e:0e:e9:65:64:12:6a:59:ce:e2:b4:c3:f1:5c:3f:9e: 31:bc:c7:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt260Aj5EBbbPqU7iaeMtkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNDU2YzlmN2Y3OWI5ODcxOTZjNDY4NDAyMzk2YTE4N2Mx NTZkN2MwHhcNMjYwMTAxMDAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2U5MzIxY2QyYTAzNDg1MjMxZDIwNDQwZmUxMmNmMWNjMjgzYmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f/5hsq6xwzo9WVmYrCeVxG0h7kp 0RAuoxmoE65FKEDe/tHFuXtoNNPSRmW7OfVlRCGg2AmJmn+IODIZo3y1+Pbx9+Wq cUpC7L2UjWiEUgU8ZmRtmFk/3keel4dWUo6l9MuNHDcHK6Bk9h77FKKtVnuVZN9x o4QGLSZ/Tk6APh1JYQWe92P5GCn9dcQjABcRiUpXa2AEJFgsOhbMwLx0CSW3iN3J LhpoFRwHjnn/kGB+vgKOcVao/oDPcVDKwjI4OgFTARX1N2EswqN1YrjbVonV6mNh GwQMn8VYZclZ8FgY1rE5X8fPzpDEBzWrPqfQXDXN+rdIZkP6MJIOZ0MXsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKPpMhzSoDSFIx0gRA/hLPHMKDvRMB8GA1UdIwQY MBaAFFtFbJ9/ebmHGWxGhAI5ahh8FW18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTIt OWZlODZkZWE4NjJhLzEvby1reUhOS2dOSVVqSFNCRUQtRXM4Y3dvTzlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTItOWZlODZkZWE4NjJh LzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRi4MA0G CSqGSIb3DQEBCwUAA4IBAQAmUfmjeq5cTykvi5OnGtD4fIg1zS51CdV5XqUJltni QBR0gDmMKBu+p15rVYoOtmYVq/9ZBOj6Ya+lG/4p4z2bYWwmsKvrkwwZ7Oq68CMW yRi63h6rXCF7s+VhNbVfGVHfGCnCuhowo7+ruEjFMHfdDuaCZ6n8QHoHU76HLl6p DStU6EFnxBPrdCORKiiJMlW71UEWvfRUU2zASKNrmBEZcsFII2p30gIMPxo+EGuS c2vvYw8QwSxSJEEQUx3BJb1tHvFvqgGaPGPukRqClSCtQdbAj7DQX3qD0yjjYN+6 cXKT6d1F+hu7GKo8JA4O6WVkEmpZzuK0w/FcP54xvMdl -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:46 2026 by rpki-client