This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/o0mi1ecW1qDQy0JOYUzQEq3UCno.roa File: o0mi1ecW1qDQy0JOYUzQEq3UCno.roa (raw, json) Hash identifier: hV2jBoTpFaaL+UTs/7eomqtU5upO4Ya9tPbfPL2XyYU= Subject key identifier: A3:49:A2:D5:E7:16:D6:A0:D0:CB:42:4E:61:4C:D0:12:AD:D4:0A:7A Certificate issuer: /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45 Certificate serial: 019B7F80A4944338D0799AB83763B5DF2F56 Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/o0mi1ecW1qDQy0JOYUzQEq3UCno.roa Signing time: Fri 02 Jan 2026 16:18:15 +0000 ROA not before: Fri 02 Jan 2026 16:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212150 IP address blocks: 185.115.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:a4:94:43:38:d0:79:9a:b8:37:63:b5:df:2f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45 Validity Not Before: Jan 2 16:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a349a2d5e716d6a0d0cb424e614cd012add40a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:de:82:22:8b:e0:28:f5:e7:4b:2a:e4:e4:97: be:bf:39:ac:75:28:2c:1d:86:c5:8e:e5:b3:5b:62: 1a:7e:ba:61:f5:21:b6:45:8d:35:88:09:61:33:9a: 12:3c:0f:9d:4e:69:da:c5:e1:9b:1d:1e:ee:46:63: f1:81:9d:fa:69:18:e3:d2:29:e3:86:c8:4b:5d:2b: 13:25:1f:05:32:b1:84:8f:40:55:9f:49:92:3c:b1: 8f:b0:34:e5:32:0e:6d:5f:e1:33:1c:14:c8:cc:af: 9d:b7:0b:51:a9:d6:65:59:6b:24:aa:16:f4:1e:2e: 9c:97:23:48:58:d8:72:20:fd:50:d1:ef:1b:1c:f7: 45:a2:8d:77:b3:ce:74:b7:f0:d8:6d:55:1a:2f:76: 6b:bb:42:10:52:52:08:9a:e2:14:54:a3:7f:b6:ec: 24:5d:e6:dc:32:1d:ff:4a:81:94:25:f5:02:b2:7a: e9:3b:0a:1d:77:30:a3:bd:ea:07:e2:2d:d0:d6:6b: 25:ca:ec:4d:7e:f4:92:b6:e5:87:4d:03:ed:e9:3b: ad:76:46:30:5b:ef:e7:a2:4a:75:fc:cd:a9:8b:9d: c3:de:d2:3d:9e:a4:14:9d:61:74:25:dc:0b:4b:0a: fd:63:0d:0e:8d:a6:8a:64:e3:98:e4:55:ac:f4:b3: aa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:49:A2:D5:E7:16:D6:A0:D0:CB:42:4E:61:4C:D0:12:AD:D4:0A:7A X509v3 Authority Key Identifier: keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/o0mi1ecW1qDQy0JOYUzQEq3UCno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.163.0/24 Signature Algorithm: sha256WithRSAEncryption 11:5b:8f:7d:76:75:02:cf:c8:a0:7c:f5:d4:b1:2c:13:aa:2f: e8:cc:d5:34:7b:b7:fb:62:ed:64:dc:f8:e8:c3:72:36:c2:27: 7f:c0:a1:2b:63:56:65:06:7b:fc:07:14:76:84:e8:9b:c2:bb: c1:63:0d:b9:2e:c2:20:73:d2:25:0c:41:41:b3:56:93:02:ba: ed:a0:63:82:94:14:b0:a9:54:9c:eb:5e:79:d1:c5:47:ec:24: ca:e3:4b:47:e8:8f:79:3a:3a:e5:58:ba:35:fb:8f:4b:f8:13: 99:36:08:46:06:a1:a4:45:22:1d:59:20:c9:e2:d0:93:08:75: 7b:73:5a:04:8d:9a:b1:62:5e:7f:e8:dd:98:4b:e4:2c:6c:ff: 43:56:55:44:a9:52:d6:93:2e:28:32:41:0f:79:4e:a2:3c:98: b5:b3:cf:a5:eb:32:8f:b8:29:90:a5:72:2c:d7:80:bd:28:65: e1:7d:67:07:c4:b9:bd:27:dd:67:9d:c7:99:6b:44:7c:7e:fd: ae:7d:88:99:6a:a6:3f:3e:81:ec:c9:3e:45:ff:34:c8:6c:b0: 01:d1:a6:dd:e9:3e:3d:09:a3:94:ea:8e:68:27:e9:f0:fa:8e: 25:01:37:1c:48:e1:2a:5d:ea:16:f3:65:f2:8b:1a:9e:95:82: 2b:02:10:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gKSUQzjQeZq4N2O13y9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4Y2E2ZGUxYTQ4YTRlOGM1YjhhZjFlYWU5YjVlODBiZmNm OTJjNDUwHhcNMjYwMTAyMTYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzQ5YTJkNWU3MTZkNmEwZDBjYjQyNGU2MTRjZDAxMmFkZDQwYTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv96CIovgKPXnSyrk5Je+vzmsdSgs HYbFjuWzW2Iafrph9SG2RY01iAlhM5oSPA+dTmnaxeGbHR7uRmPxgZ36aRjj0inj hshLXSsTJR8FMrGEj0BVn0mSPLGPsDTlMg5tX+EzHBTIzK+dtwtRqdZlWWskqhb0 Hi6clyNIWNhyIP1Q0e8bHPdFoo13s850t/DYbVUaL3Zru0IQUlIImuIUVKN/tuwk XebcMh3/SoGUJfUCsnrpOwoddzCjveoH4i3Q1mslyuxNfvSStuWHTQPt6TutdkYw W+/nokp1/M2pi53D3tI9nqQUnWF0JdwLSwr9Yw0OjaaKZOOY5FWs9LOqoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKNJotXnFtag0MtCTmFM0BKt1Ap6MB8GA1UdIwQY MBaAFBjKbeGkik6MW4rx6um16Av8+SxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmYyYzYtZDg3Yy00ZDY1LWEyNTYt MWM4MjI1ZDQwN2I1LzEvbzBtaTFlY1cxcURReTBKT1lVelFFcTNVQ25vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kZmYyYzYtZDg3Yy00ZDY1LWEyNTYtMWM4MjI1ZDQwN2I1 LzEvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXOjMA0G CSqGSIb3DQEBCwUAA4IBAQARW499dnUCz8igfPXUsSwTqi/ozNU0e7f7Yu1k3Pjo w3I2wid/wKErY1ZlBnv8BxR2hOibwrvBYw25LsIgc9IlDEFBs1aTArrtoGOClBSw qVSc61550cVH7CTK40tH6I95OjrlWLo1+49L+BOZNghGBqGkRSIdWSDJ4tCTCHV7 c1oEjZqxYl5/6N2YS+QsbP9DVlVEqVLWky4oMkEPeU6iPJi1s8+l6zKPuCmQpXIs 14C9KGXhfWcHxLm9J91nnceZa0R8fv2ufYiZaqY/PoHsyT5F/zTIbLAB0abd6T49 CaOU6o5oJ+nw+o4lATccSOEqXeoW82XyixqelYIrAhCG -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:09 2026 by rpki-client