This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/OO4UeIu2pZRwdw_cQD5hbxnhgQQ.roa File: OO4UeIu2pZRwdw_cQD5hbxnhgQQ.roa (raw, json) Hash identifier: +kQoI4rjTpXglxI12QH7DoBnxEuQkXp03BvIA+oV7h0= Subject key identifier: 38:EE:14:78:8B:B6:A5:94:70:77:0F:DC:40:3E:61:6F:19:E1:81:04 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C69678ADF244EFC09548B818895FE9 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/OO4UeIu2pZRwdw_cQD5hbxnhgQQ.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8342 IP address blocks: 46.8.4.0/24 maxlen: 24 188.130.200.0/22 maxlen: 22 188.130.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:96:78:ad:f2:44:ef:c0:95:48:b8:18:89:5f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38ee14788bb6a59470770fdc403e616f19e18104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d4:f2:9b:11:53:4d:b7:e5:a8:8f:a5:14:25: cd:90:e2:dc:8f:76:7f:42:90:bd:90:33:d5:68:bd: d9:8b:62:8c:21:71:12:f9:55:08:10:a2:ec:4d:53: af:5a:11:ac:6a:d2:71:58:13:15:76:81:44:cc:2d: d9:ec:0b:d3:b8:f8:ab:89:06:47:d4:b9:d8:e7:83: 5e:18:c4:33:70:d1:e1:e4:0c:67:dd:3e:9d:31:10: 6d:75:8f:87:2d:ae:ac:53:09:b8:de:7c:8e:97:2b: 1b:4e:c4:4f:f7:62:2d:c4:ad:cc:88:26:61:2c:c5: 8f:11:b0:fb:0f:14:f6:47:4e:95:3b:f3:f7:ae:2f: a2:45:ce:a1:ac:55:7f:fd:50:d1:65:13:32:5e:32: c7:6c:bb:c7:75:36:ec:e4:79:72:8b:11:eb:3e:55: ce:e4:0d:64:02:af:1d:22:07:0b:09:dd:99:d2:93: b2:8f:65:71:74:62:78:9e:72:94:28:31:af:41:48: 3a:0b:e1:93:f3:11:17:59:85:a7:b4:e8:04:1f:6b: 84:48:df:25:81:73:63:27:2d:8a:c5:b4:ff:8b:5d: 30:58:2f:28:4f:e8:0e:96:a6:94:6f:9e:25:8f:29: 94:91:f9:15:59:0b:48:e8:88:70:19:cd:5a:94:9b: c4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EE:14:78:8B:B6:A5:94:70:77:0F:DC:40:3E:61:6F:19:E1:81:04 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/OO4UeIu2pZRwdw_cQD5hbxnhgQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.4.0/24 188.130.200.0-188.130.204.255 Signature Algorithm: sha256WithRSAEncryption 98:fe:b6:07:98:32:19:4e:eb:9f:b8:ed:8b:95:1f:be:88:39: 3f:0d:c2:77:09:27:3b:68:c2:d9:ab:10:15:c8:d7:8d:09:c3: 20:50:f0:cf:18:3a:27:62:ea:b5:c2:e3:31:4d:ea:5f:67:e3: 5d:5f:04:5a:d0:31:cf:37:89:aa:4b:37:78:27:84:3a:ec:c4: d2:00:8f:cd:54:5b:69:2c:d4:2d:c5:0d:7b:1e:2c:f6:28:ab: 38:b0:89:34:75:92:55:81:80:53:3b:ea:d6:e7:00:b3:f6:0c: 04:22:42:84:16:58:8e:f2:c3:05:90:74:2f:e5:21:ec:8c:e5: 3c:fc:d8:71:24:2b:59:f7:fd:2a:7f:6e:35:77:e0:dc:2b:01: 79:20:ac:dc:ec:c6:14:92:8e:80:90:1d:89:ac:c7:b1:3a:17: f6:19:7f:76:da:a8:70:4f:40:5c:6e:e0:90:a5:cb:6e:a5:c2: ec:82:86:dd:d2:33:99:07:96:f3:d4:56:11:aa:cd:54:ca:dc: d2:52:26:e5:86:d8:64:2c:98:6d:2b:72:a5:fb:90:ce:1d:45: 42:43:02:6a:c6:06:90:bd:59:fc:4b:78:a8:52:96:a7:ac:79: 27:bf:4b:8e:d0:b9:8b:86:71:71:94:07:a4:77:fa:00:fe:ad: 8d:95:55:d7 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3xpZ4rfJE78CVSLgYiV/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGVlMTQ3ODhiYjZhNTk0NzA3NzBmZGM0MDNlNjE2ZjE5ZTE4MTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztTymxFTTbflqI+lFCXNkOLcj3Z/ QpC9kDPVaL3Zi2KMIXES+VUIEKLsTVOvWhGsatJxWBMVdoFEzC3Z7AvTuPiriQZH 1LnY54NeGMQzcNHh5Axn3T6dMRBtdY+HLa6sUwm43nyOlysbTsRP92ItxK3MiCZh LMWPEbD7DxT2R06VO/P3ri+iRc6hrFV//VDRZRMyXjLHbLvHdTbs5HlyixHrPlXO 5A1kAq8dIgcLCd2Z0pOyj2VxdGJ4nnKUKDGvQUg6C+GT8xEXWYWntOgEH2uESN8l gXNjJy2KxbT/i10wWC8oT+gOlqaUb54ljymUkfkVWQtI6IhwGc1alJvEYwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFDjuFHiLtqWUcHcP3EA+YW8Z4YEEMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvT080VWVJdTJwWlJ3ZHdfY1FENWhieG5oZ1FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALggEMAwD BAO8gsgDBAC8gswwDQYJKoZIhvcNAQELBQADggEBAJj+tgeYMhlO65+47YuVH76I OT8NwncJJztowtmrEBXI140JwyBQ8M8YOidi6rXC4zFN6l9n411fBFrQMc83iapL N3gnhDrsxNIAj81UW2ks1C3FDXseLPYoqziwiTR1klWBgFM76tbnALP2DAQiQoQW WI7ywwWQdC/lIeyM5Tz82HEkK1n3/Sp/bjV34NwrAXkgrNzsxhSSjoCQHYmsx7E6 F/YZf3baqHBPQFxu4JCly26lwuyCht3SM5kHlvPUVhGqzVTK3NJSJuWG2GQsmG0r cqX7kM4dRUJDAmrGBpC9WfxLeKhSlqeseSe/S47QuYuGcXGUB6R3+gD+rY2VVdc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:15 2026 by rpki-client