This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/c_oENNVrxFPVAMacaK8uMygPMcw.roa File: c_oENNVrxFPVAMacaK8uMygPMcw.roa (raw, json) Hash identifier: U67dR17Uns8VypZywGlUd9q3cng2/ZI5Cpev9GEfzfo= Subject key identifier: 73:FA:04:34:D5:6B:C4:53:D5:00:C6:9C:68:AF:2E:33:28:0F:31:CC Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019BE5809F92D0514D18DF64BF01C2456D84 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/c_oENNVrxFPVAMacaK8uMygPMcw.roa Signing time: Thu 22 Jan 2026 11:39:30 +0000 ROA not before: Thu 22 Jan 2026 11:39:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 402044 IP address blocks: 185.143.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:80:9f:92:d0:51:4d:18:df:64:bf:01:c2:45:6d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 22 11:39:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73fa0434d56bc453d500c69c68af2e33280f31cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:11:9a:58:cf:e3:09:2b:e8:83:04:1a:79:d7: d3:f8:92:fe:df:10:2a:a1:3d:aa:44:11:d4:a3:7b: b1:ee:1f:f2:b9:87:9a:68:a1:ce:c2:0a:c3:1b:d7: d4:83:c8:7d:93:db:4d:cd:c6:e3:a3:34:9a:82:5f: 8a:5f:4b:b0:ca:5d:24:20:62:07:00:c0:a0:ae:6f: d1:2c:21:70:10:17:40:c5:6f:eb:dd:11:6f:c5:6d: 0d:29:d3:cd:29:de:e8:d1:26:4e:6c:ba:47:64:90: 8a:e0:3d:8e:96:07:d8:c6:fe:a3:35:61:65:be:41: fc:4f:7e:8d:50:7d:96:d6:fe:17:c1:f7:3f:ad:67: d9:44:dc:87:86:2c:f5:da:45:3c:8b:5c:6e:7b:cd: c2:42:96:01:2e:6b:47:5a:81:62:2d:7d:ca:db:64: 1c:3f:12:36:71:f5:c6:41:5e:15:30:bc:64:5f:f7: 93:41:75:e1:38:14:da:3d:a0:72:d7:ac:77:a7:fe: d5:9f:57:9b:39:a0:e2:90:89:c7:a1:37:ef:9e:3a: 95:95:e3:a1:22:e5:45:79:79:e4:48:b4:c2:d8:20: 18:ef:5b:2a:d1:fa:f0:38:79:5b:a8:d2:11:7a:8c: 82:6e:94:2d:5a:2a:02:cf:1b:9e:8e:7c:b8:4c:73: 86:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FA:04:34:D5:6B:C4:53:D5:00:C6:9C:68:AF:2E:33:28:0F:31:CC X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/c_oENNVrxFPVAMacaK8uMygPMcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.73.0/24 Signature Algorithm: sha256WithRSAEncryption 80:56:dc:2f:d7:9d:3e:b4:4d:58:bf:cb:a6:5f:69:3a:ba:5b: 2f:11:dc:58:6d:5f:f1:c5:8e:a5:86:27:49:27:a5:57:42:dd: 14:10:72:79:6b:c8:95:bd:b3:a9:04:f2:cc:4a:23:0a:9e:63: bb:f8:40:b4:87:c3:05:28:62:18:94:a7:cd:39:d4:a1:78:0a: 9a:de:c1:8f:71:92:53:c3:5d:14:69:b1:2d:67:d8:db:b3:f7: 53:7c:68:7b:ba:be:bc:20:e6:95:40:90:40:06:cb:aa:03:b9: 6d:d2:06:e4:d5:f1:f4:ec:4b:75:1f:98:2a:1b:ce:e1:c3:2b: 23:14:ad:b5:69:88:12:39:d4:ed:fe:da:94:f4:c5:f1:7d:38: 0f:0b:82:b1:7e:5b:41:0e:97:e0:b8:29:1a:76:cf:1a:1e:10: cd:f8:dd:33:64:5d:06:77:da:1c:11:ce:76:e7:83:2d:be:fb: 30:08:ea:88:bc:a5:1b:39:70:ae:8c:a9:d6:a4:8f:e9:c6:dd: 2d:1a:6c:37:c4:6c:db:a1:40:7a:a1:80:bd:ca:65:07:b3:d3: ec:f3:75:7b:db:d6:28:85:e4:1c:d3:29:07:f0:61:ca:e2:63: d4:f2:7d:8b:05:e2:00:f4:6d:0b:2d:dd:1e:e2:55:df:cf:f4: c7:a3:0c:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvlgJ+S0FFNGN9kvwHCRW2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTIyMTEzOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2ZhMDQzNGQ1NmJjNDUzZDUwMGM2OWM2OGFmMmUzMzI4MGYzMWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRGaWM/jCSvogwQaedfT+JL+3xAq oT2qRBHUo3ux7h/yuYeaaKHOwgrDG9fUg8h9k9tNzcbjozSagl+KX0uwyl0kIGIH AMCgrm/RLCFwEBdAxW/r3RFvxW0NKdPNKd7o0SZObLpHZJCK4D2OlgfYxv6jNWFl vkH8T36NUH2W1v4Xwfc/rWfZRNyHhiz12kU8i1xue83CQpYBLmtHWoFiLX3K22Qc PxI2cfXGQV4VMLxkX/eTQXXhOBTaPaBy16x3p/7Vn1ebOaDikInHoTfvnjqVleOh IuVFeXnkSLTC2CAY71sq0frwOHlbqNIReoyCbpQtWioCzxuejny4THOGuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHP6BDTVa8RT1QDGnGivLjMoDzHMMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvY19vRU5OVnJ4RlBWQU1hY2FLOHVNeWdQTWN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY9JMA0G CSqGSIb3DQEBCwUAA4IBAQCAVtwv150+tE1Yv8umX2k6ulsvEdxYbV/xxY6lhidJ J6VXQt0UEHJ5a8iVvbOpBPLMSiMKnmO7+EC0h8MFKGIYlKfNOdSheAqa3sGPcZJT w10UabEtZ9jbs/dTfGh7ur68IOaVQJBABsuqA7lt0gbk1fH07Et1H5gqG87hwysj FK21aYgSOdTt/tqU9MXxfTgPC4KxfltBDpfguCkads8aHhDN+N0zZF0Gd9ocEc52 54MtvvswCOqIvKUbOXCujKnWpI/pxt0tGmw3xGzboUB6oYC9ymUHs9Ps83V729Yo heQc0ykH8GHK4mPU8n2LBeIA9G0LLd0e4lXfz/THowwK -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:13 2026 by rpki-client