This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/OLGjOqT5j1PoTYEtyKXUGBIFkbI.roa File: OLGjOqT5j1PoTYEtyKXUGBIFkbI.roa (raw, json) Hash identifier: DiG4yHrI0kfPeYPN9aDsXIafjZKsHrnExZ+/Ie46DI0= Subject key identifier: 38:B1:A3:3A:A4:F9:8F:53:E8:4D:81:2D:C8:A5:D4:18:12:05:91:B2 Certificate issuer: /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0 Certificate serial: 019B7E38E00440E0A6DA2126892CD154A108 Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/OLGjOqT5j1PoTYEtyKXUGBIFkbI.roa Signing time: Fri 02 Jan 2026 10:20:15 +0000 ROA not before: Fri 02 Jan 2026 10:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15623 IP address blocks: 185.157.0.0/23 maxlen: 23 185.157.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e0:04:40:e0:a6:da:21:26:89:2c:d1:54:a1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0 Validity Not Before: Jan 2 10:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38b1a33aa4f98f53e84d812dc8a5d418120591b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:a8:0d:e7:10:c9:00:ea:16:ff:8e:8c:11: a1:a2:48:40:c4:aa:d2:81:aa:4b:c2:2a:bf:84:18: 3d:4d:d4:ec:52:fd:63:8e:34:24:ee:43:43:6f:30: 32:59:bd:ad:3e:ab:28:07:e5:46:f2:ff:00:49:33: 02:6e:c4:3b:33:2d:bc:22:31:f3:9b:63:c8:ae:e6: bb:24:0b:81:5f:dd:3e:87:14:ff:b2:d7:bd:02:9e: a3:83:c7:2a:a3:fc:ec:7c:8b:e1:aa:27:e0:77:3d: 3f:ac:52:ad:f5:0f:b1:5d:42:6e:3e:b0:2f:30:d7: 89:86:88:56:33:b4:f2:71:e1:3b:9d:0f:e7:b6:b8: 0d:be:86:d1:79:e0:c0:76:61:b7:b7:8f:c2:71:60: 31:ba:a8:25:47:26:00:75:da:7a:32:79:13:da:45: 5c:73:bc:1f:b6:08:a3:71:a1:e5:da:ce:b5:17:4b: 86:15:d8:c5:20:ca:0b:67:de:94:5c:e7:53:9b:bb: 77:a5:cd:74:b9:9b:55:53:d2:50:e2:d0:13:32:04: 3d:c8:b2:f5:e3:35:55:c1:6d:78:67:6e:0d:58:37: ef:81:5c:f1:21:3b:b5:70:2a:22:da:56:0d:5f:37: 48:07:86:10:18:1b:ce:10:d6:9e:bc:11:35:02:f0: 52:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B1:A3:3A:A4:F9:8F:53:E8:4D:81:2D:C8:A5:D4:18:12:05:91:B2 X509v3 Authority Key Identifier: keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/OLGjOqT5j1PoTYEtyKXUGBIFkbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.0.0-185.157.2.255 Signature Algorithm: sha256WithRSAEncryption 5b:44:c1:c5:4f:b0:16:03:cd:64:e6:27:a1:ca:87:25:14:1e: 96:a6:9a:32:88:56:bf:d1:fc:2b:79:9b:87:8c:c3:e1:4e:2f: fa:89:ca:7c:d2:86:79:ba:e5:17:e3:4b:48:81:76:78:b8:1b: b7:08:f6:6b:29:a3:1e:d9:da:36:f1:75:cf:64:ef:b3:5f:bc: dd:cf:26:63:10:16:1f:5a:eb:08:a4:13:c1:fc:57:44:b6:91: 0d:28:72:5b:da:c6:0d:67:fa:cc:c8:62:f7:00:64:29:68:5a: 9e:c1:9d:27:af:6a:83:b1:93:62:79:82:0d:6e:24:f3:b1:95: b8:cd:a5:8a:a2:00:70:8d:50:8d:66:b6:83:c2:51:ba:ef:0c: b4:13:09:cc:88:ff:a0:c7:58:28:78:e7:52:dd:13:0e:c2:57: 4c:a1:c7:74:b3:ae:37:01:85:a9:d6:55:6e:af:b8:da:db:59: 09:42:46:6c:15:3f:00:65:12:aa:04:bf:a5:39:ea:3f:f1:94: 78:df:e7:16:91:75:a0:2f:f5:89:7d:9c:93:8b:e5:da:86:7d: 83:de:a3:ab:2e:61:63:48:e1:50:d8:3a:1f:1e:c8:35:2d:f1: 7f:02:53:db:71:d1:0c:05:96:60:26:dd:16:ae:75:93:68:d1: 68:2c:9d:c2 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt+OOAEQOCm2iEmiSzRVKEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YmI3NzQ5YWJkZTZmNWRhNGViMWM2ZWQxYzU3NjgxNjE3 ODQ2YjAwHhcNMjYwMTAyMTAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGIxYTMzYWE0Zjk4ZjUzZTg0ZDgxMmRjOGE1ZDQxODEyMDU5MWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3GoDecQyQDqFv+OjBGhokhAxKrS gapLwiq/hBg9TdTsUv1jjjQk7kNDbzAyWb2tPqsoB+VG8v8ASTMCbsQ7My28IjHz m2PIrua7JAuBX90+hxT/ste9Ap6jg8cqo/zsfIvhqifgdz0/rFKt9Q+xXUJuPrAv MNeJhohWM7TyceE7nQ/ntrgNvobReeDAdmG3t4/CcWAxuqglRyYAddp6MnkT2kVc c7wftgijcaHl2s61F0uGFdjFIMoLZ96UXOdTm7t3pc10uZtVU9JQ4tATMgQ9yLL1 4zVVwW14Z24NWDfvgVzxITu1cCoi2lYNXzdIB4YQGBvOENaevBE1AvBSAQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFDixozqk+Y9T6E2BLcil1BgSBZGyMB8GA1UdIwQY MBaAFHm7d0mr3m9dpOscbtHFdoFheEawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWJ0M1NhdmViMTJrNnh4dTBjVjJnV0Y0UnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yNWI3YjgtYzMwMi00ZGRhLTg5OGEt NDgyNWUxOGQ3MzAxLzEvT0xHak9xVDVqMVBvVFlFdHlLWFVHQklGa2JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yNWI3YjgtYzMwMi00ZGRhLTg5OGEtNDgyNWUxOGQ3MzAx LzEvZWJ0M1NhdmViMTJrNnh4dTBjVjJnV0Y0UnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwC5nQME ALmdAjANBgkqhkiG9w0BAQsFAAOCAQEAW0TBxU+wFgPNZOYnocqHJRQelqaaMohW v9H8K3mbh4zD4U4v+onKfNKGebrlF+NLSIF2eLgbtwj2aymjHtnaNvF1z2Tvs1+8 3c8mYxAWH1rrCKQTwfxXRLaRDShyW9rGDWf6zMhi9wBkKWhansGdJ69qg7GTYnmC DW4k87GVuM2liqIAcI1QjWa2g8JRuu8MtBMJzIj/oMdYKHjnUt0TDsJXTKHHdLOu NwGFqdZVbq+42ttZCUJGbBU/AGUSqgS/pTnqP/GUeN/nFpF1oC/1iX2ck4vl2oZ9 g96jqy5hY0jhUNg6Hx7INS3xfwJT23HRDAWWYCbdFq51k2jRaCydwg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:37 2026 by rpki-client