This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/Ov08WMAA8s4fGJQZj-YBPxQx7ao.roa File: Ov08WMAA8s4fGJQZj-YBPxQx7ao.roa (raw, json) Hash identifier: AmlE5tYLPssjw9U4Xmt2RH2S2h07B8JY5rM+qQje4aM= Subject key identifier: 3A:FD:3C:58:C0:00:F2:CE:1F:18:94:19:8F:E6:01:3F:14:31:ED:AA Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Certificate serial: 019B77C771F0666B3785DA4A9C04CA9AC199 Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/Ov08WMAA8s4fGJQZj-YBPxQx7ao.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204569 IP address blocks: 194.92.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:71:f0:66:6b:37:85:da:4a:9c:04:ca:9a:c1:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3afd3c58c000f2ce1f1894198fe6013f1431edaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:66:69:bd:8e:66:51:2e:0b:aa:81:c2:f9: 3c:3f:14:39:0e:a7:21:fc:b0:6c:9b:92:61:67:e3: d4:b8:df:fb:0e:c8:d3:fb:a2:59:78:20:91:7b:ef: 6d:4a:ba:56:3d:31:92:1c:c1:d0:c1:16:fb:22:5e: 68:30:e6:90:8f:50:99:92:2f:7f:29:40:d8:58:f0: 65:6d:d3:34:b9:8a:0e:7a:4b:c8:10:62:51:27:13: f9:0a:a9:20:28:9d:b8:6c:3e:6a:57:78:b3:cc:11: 45:94:8c:65:bd:fe:df:4e:aa:3b:fc:48:48:79:91: 5b:0f:89:54:80:d9:fb:d4:7e:dd:4f:c7:b2:d0:5e: c4:bb:6e:32:20:90:44:f6:1b:be:d9:c2:90:4e:b9: ff:98:1d:ec:8f:da:86:d3:65:ce:2b:a5:bb:76:be: 24:c2:f0:e1:93:c7:be:f3:57:63:08:a3:b5:41:7a: 26:3e:db:c5:02:20:46:5f:b1:4a:aa:d4:84:d4:e1: b1:03:7a:c5:23:e8:a4:0d:62:70:72:34:22:ce:ef: 4b:9e:92:44:0a:ae:ac:89:7a:72:a1:3e:1b:6a:9f: 53:cd:9e:60:35:7b:fa:02:12:4f:c2:ee:7d:22:44: 3f:f6:16:78:2c:aa:6e:ce:d6:9e:d8:e9:bd:24:f9: e1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FD:3C:58:C0:00:F2:CE:1F:18:94:19:8F:E6:01:3F:14:31:ED:AA X509v3 Authority Key Identifier: keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/Ov08WMAA8s4fGJQZj-YBPxQx7ao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.92.106.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:ed:39:c1:ff:e0:b8:67:4b:a6:d6:cc:d8:41:8c:10:00:44: 26:56:e0:2c:db:64:3f:23:b1:e0:d1:56:c7:1e:37:b1:65:01: 0d:2b:a5:1e:fd:8b:62:07:e5:42:e5:d9:73:5a:e3:f9:7a:7e: 0d:b2:a6:f2:a9:58:18:6c:55:99:e5:6e:40:5d:94:25:60:c9: e3:8c:fc:fb:65:2d:2b:43:9a:fe:45:3e:e3:d0:f9:ed:1a:7c: c8:e7:d4:e3:12:4f:14:f5:a2:fe:b4:11:e4:a8:ad:96:4d:61: ed:b7:30:48:cf:df:c9:46:c5:1e:a2:1d:36:c7:64:2f:17:2f: 18:31:59:29:20:8e:a6:6e:12:dd:31:cc:88:2c:0b:6e:7f:5e: 2e:a4:b8:78:89:aa:b7:e2:37:5f:ec:da:f2:85:be:2d:ed:7e: 2a:68:29:8d:48:7f:43:22:02:69:e1:3a:f2:d3:67:f7:fa:98: 56:b8:6c:cd:a5:68:4e:4a:d2:2b:a5:74:c5:82:d7:46:ef:00: 0b:04:8b:ce:58:36:f2:a2:3d:4e:7f:2f:40:58:26:8d:74:fe: 0c:96:e3:9a:cf:d3:c1:d1:00:29:af:d1:8c:6e:08:bc:58:b2: 68:ce:f9:91:5b:88:a3:20:79:66:86:aa:6a:2c:3a:0f:3b:ef: 12:6a:fa:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3HwZms3hdpKnATKmsGZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm NjA3MzkwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWZkM2M1OGMwMDBmMmNlMWYxODk0MTk4ZmU2MDEzZjE0MzFlZGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDhmab2OZlEuC6qBwvk8PxQ5Dqch /LBsm5JhZ+PUuN/7DsjT+6JZeCCRe+9tSrpWPTGSHMHQwRb7Il5oMOaQj1CZki9/ KUDYWPBlbdM0uYoOekvIEGJRJxP5CqkgKJ24bD5qV3izzBFFlIxlvf7fTqo7/EhI eZFbD4lUgNn71H7dT8ey0F7Eu24yIJBE9hu+2cKQTrn/mB3sj9qG02XOK6W7dr4k wvDhk8e+81djCKO1QXomPtvFAiBGX7FKqtSE1OGxA3rFI+ikDWJwcjQizu9LnpJE Cq6siXpyoT4bap9TzZ5gNXv6AhJPwu59IkQ/9hZ4LKpuztae2Om9JPnhZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDr9PFjAAPLOHxiUGY/mAT8UMe2qMB8GA1UdIwQY MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt YmFmNGUwYjRhNjllLzEvT3YwOFdNQUE4czRmR0pRWmotWUJQeFF4N2FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlxqMA0G CSqGSIb3DQEBCwUAA4IBAQAM7TnB/+C4Z0um1szYQYwQAEQmVuAs22Q/I7Hg0VbH HjexZQENK6Ue/YtiB+VC5dlzWuP5en4NsqbyqVgYbFWZ5W5AXZQlYMnjjPz7ZS0r Q5r+RT7j0PntGnzI59TjEk8U9aL+tBHkqK2WTWHttzBIz9/JRsUeoh02x2QvFy8Y MVkpII6mbhLdMcyILAtuf14upLh4iaq34jdf7Nryhb4t7X4qaCmNSH9DIgJp4Try 02f3+phWuGzNpWhOStIrpXTFgtdG7wALBIvOWDbyoj1Ofy9AWCaNdP4MluOaz9PB 0QApr9GMbgi8WLJozvmRW4ijIHlmhqpqLDoPO+8SavoV -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:54 2026 by rpki-client