This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/OEpwskwsLrz2yf1kQY123zPLnE4.roa File: OEpwskwsLrz2yf1kQY123zPLnE4.roa (raw, json) Hash identifier: r+MJQWljp0uomcKdAOLj7x+bZJ8VoSCvYTEYvyJMs5s= Subject key identifier: 38:4A:70:B2:4C:2C:2E:BC:F6:C9:FD:64:41:8D:76:DF:33:CB:9C:4E Certificate issuer: /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca Certificate serial: 019BB6D904A7F7FE2B5DA7E2CCE9B264128B Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/OEpwskwsLrz2yf1kQY123zPLnE4.roa Signing time: Tue 13 Jan 2026 10:13:54 +0000 ROA not before: Tue 13 Jan 2026 10:13:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201602 IP address blocks: 185.199.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:d9:04:a7:f7:fe:2b:5d:a7:e2:cc:e9:b2:64:12:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca Validity Not Before: Jan 13 10:13:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=384a70b24c2c2ebcf6c9fd64418d76df33cb9c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:47:f7:b2:6b:aa:e0:be:9d:70:31:69:08: 53:48:fb:1f:9d:86:89:3f:74:e9:8e:2f:14:ab:23: fe:4e:f9:5a:f7:e2:50:f1:7c:44:2d:14:4b:93:3d: 9a:af:62:66:64:73:a4:db:06:f0:a8:a7:44:59:7e: 61:00:fd:27:df:ee:8c:b4:91:eb:0f:38:d0:04:6e: 3b:27:5f:de:cd:0c:b9:10:c3:1b:c1:b1:7d:12:3e: ea:37:e3:73:cb:fe:3b:3c:12:b5:62:39:cd:25:45: 67:f7:66:1c:f0:7e:57:a6:94:99:c2:4c:c5:1c:97: 83:c0:ff:0a:f9:eb:97:aa:b8:8f:01:11:22:1f:9e: 3a:ac:6d:11:fe:43:52:54:ba:d6:05:1b:2e:ac:7e: 71:ef:d9:59:32:ec:7a:50:1d:3a:35:1d:d9:af:3f: 08:a3:be:af:10:43:7c:a6:2e:2a:3e:36:f8:17:3f: 0b:9c:8c:53:78:af:41:b9:12:a9:de:83:89:f3:04: f1:89:82:40:99:65:44:7b:de:88:95:8a:cc:3e:9a: 89:45:69:96:d0:81:1a:78:dc:df:51:31:95:24:d4: d0:b6:b1:96:e8:78:e2:f6:5b:67:a8:c0:3e:45:f4: 1f:a3:bc:96:27:ff:21:f2:c9:51:bf:40:51:7f:06: 39:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4A:70:B2:4C:2C:2E:BC:F6:C9:FD:64:41:8D:76:DF:33:CB:9C:4E X509v3 Authority Key Identifier: keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/OEpwskwsLrz2yf1kQY123zPLnE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.50.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:a3:53:fc:d3:a2:ed:45:62:e8:d6:87:bf:2a:af:2d:47:86: 90:66:57:ac:23:b6:cc:ad:d2:a4:aa:71:2b:9f:19:b9:78:7f: f8:86:a7:ad:4b:dc:2a:9c:78:4c:e0:6b:7a:b9:f8:37:bb:7d: 3b:cc:9a:d7:ae:47:e0:67:20:3d:d4:ff:a2:81:9d:9f:4c:12: e2:6d:17:2a:26:d5:00:89:88:f5:8e:e9:4c:21:13:8b:c3:30: 9e:56:0c:de:84:4c:ab:56:90:c1:f1:41:66:48:8a:e2:24:ce: b2:42:9d:fc:b0:92:e1:ae:8c:19:56:99:68:c0:5a:e9:1b:72: d2:dc:60:68:6f:3a:ae:24:61:db:9b:a2:97:d3:08:d3:1d:ce: 2c:40:e0:76:be:48:4c:8a:0e:bc:9b:8c:3a:a8:13:bc:f4:83: 08:a4:9a:c0:00:8d:e7:62:26:af:fa:b1:e4:7c:7c:ce:7d:c4: 49:dd:c6:f8:0e:ca:13:de:00:53:83:41:de:1d:2b:b5:0e:82: e3:bc:20:ac:9e:3f:77:95:9a:ba:ef:4c:5f:92:75:5e:44:e0: cf:dd:41:f1:3a:af:80:ff:a1:7c:f6:ca:3f:f4:58:51:82:ef: 38:1a:30:b9:3b:39:75:7c:c8:f9:2d:85:6c:52:26:a4:82:37: e4:8c:2c:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu22QSn9/4rXafizOmyZBKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNjhmNzkyOGMxMGZjMmI1NGI1YjU4OTQ0OGZlNzdkNDA0 MjE4Y2EwHhcNMjYwMTEzMTAxMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODRhNzBiMjRjMmMyZWJjZjZjOWZkNjQ0MThkNzZkZjMzY2I5YzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHhH97JrquC+nXAxaQhTSPsfnYaJ P3Tpji8UqyP+Tvla9+JQ8XxELRRLkz2ar2JmZHOk2wbwqKdEWX5hAP0n3+6MtJHr DzjQBG47J1/ezQy5EMMbwbF9Ej7qN+Nzy/47PBK1YjnNJUVn92Yc8H5XppSZwkzF HJeDwP8K+euXqriPAREiH546rG0R/kNSVLrWBRsurH5x79lZMux6UB06NR3Zrz8I o76vEEN8pi4qPjb4Fz8LnIxTeK9BuRKp3oOJ8wTxiYJAmWVEe96IlYrMPpqJRWmW 0IEaeNzfUTGVJNTQtrGW6Hji9ltnqMA+RfQfo7yWJ/8h8slRv0BRfwY5qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDhKcLJMLC689sn9ZEGNdt8zy5xOMB8GA1UdIwQY MBaAFI1o95KMEPwrVLW1iUSP531AQhjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaldqM2tvd1FfQ3RVdGJXSlJJX25mVUJDR01vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hZWM4NjEtODExMi00ZDhhLWIyMTYt ZDAxMTE1MDg5NDYzLzEvT0Vwd3Nrd3NMcnoyeWYxa1FZMTIzelBMbkU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hZWM4NjEtODExMi00ZDhhLWIyMTYtZDAxMTE1MDg5NDYz LzEvaldqM2tvd1FfQ3RVdGJXSlJJX25mVUJDR01vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuccyMA0G CSqGSIb3DQEBCwUAA4IBAQANo1P806LtRWLo1oe/Kq8tR4aQZlesI7bMrdKkqnEr nxm5eH/4hqetS9wqnHhM4Gt6ufg3u307zJrXrkfgZyA91P+igZ2fTBLibRcqJtUA iYj1julMIROLwzCeVgzehEyrVpDB8UFmSIriJM6yQp38sJLhrowZVplowFrpG3LS 3GBobzquJGHbm6KX0wjTHc4sQOB2vkhMig68m4w6qBO89IMIpJrAAI3nYiav+rHk fHzOfcRJ3cb4DsoT3gBTg0HeHSu1DoLjvCCsnj93lZq670xfknVeRODP3UHxOq+A /6F89so/9FhRgu84GjC5Ozl1fMj5LYVsUiakgjfkjCym -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:01 2026 by rpki-client