This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/o34HkKogYDy3COWTw4OOiTCeiTY.roa File: o34HkKogYDy3COWTw4OOiTCeiTY.roa (raw, json) Hash identifier: SBDvPSXVOifMr6nn4v5NmpV3IoqDKb/XoJHdisBWs9g= Subject key identifier: A3:7E:07:90:AA:20:60:3C:B7:08:E5:93:C3:83:8E:89:30:9E:89:36 Certificate issuer: /CN=b7a670e51c96419fc52028b12e45655ef914ddbb Certificate serial: 019B7C135644036834452D5C41B87E2A8A97 Authority key identifier: B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/o34HkKogYDy3COWTw4OOiTCeiTY.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43395 IP address blocks: 185.66.224.0/24 maxlen: 24 185.66.225.0/24 maxlen: 24 185.66.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:56:44:03:68:34:45:2d:5c:41:b8:7e:2a:8a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a670e51c96419fc52028b12e45655ef914ddbb Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a37e0790aa20603cb708e593c3838e89309e8936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:43:87:89:ca:e1:c8:af:37:94:48:9b:c2: ad:2b:18:60:29:ab:8d:0b:0f:39:f7:66:66:4b:37: 2f:1a:4c:e3:97:37:a3:80:41:a8:e9:ba:81:67:3c: cf:2d:51:ec:60:9e:c1:80:b7:5c:a2:6d:55:70:22: 19:8d:d2:73:0b:99:87:78:9e:80:3c:bd:18:9f:6d: ec:ba:04:72:f3:e7:7b:9c:3b:3f:cf:8f:24:b7:25: a3:67:d7:be:eb:cf:39:d6:2d:c9:7a:17:20:dd:37: 4b:0e:f7:26:8f:b6:c6:3c:0a:5b:1b:66:73:d1:d8: 61:6b:44:d7:ec:dc:af:f4:f6:27:04:85:3b:31:56: 70:ef:4b:6b:1c:09:67:12:54:8b:7c:c7:98:42:55: ff:ae:93:31:4d:3b:d2:f3:04:25:65:56:ab:89:bf: 85:0a:58:25:fd:c2:91:22:38:0f:e8:56:27:fb:1a: 83:4d:74:07:74:d5:97:67:31:86:5e:70:fb:5a:c4: cf:6b:11:78:a0:22:88:79:16:b3:43:63:06:a5:ca: 4c:f0:e1:22:c2:df:b9:ce:b0:be:90:7c:48:f4:32: ca:7b:8d:a9:fe:0a:fa:7c:ab:11:33:53:92:93:ce: d5:38:e0:d5:d0:f2:6e:b2:48:0a:80:f3:ce:b7:31: 7b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7E:07:90:AA:20:60:3C:B7:08:E5:93:C3:83:8E:89:30:9E:89:36 X509v3 Authority Key Identifier: keyid:B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/o34HkKogYDy3COWTw4OOiTCeiTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.224.0-185.66.226.255 Signature Algorithm: sha256WithRSAEncryption 85:55:7e:7a:fe:f4:7a:6b:0c:66:63:6b:b8:86:e6:b1:68:9d: e1:a9:62:ae:3f:ce:00:cc:65:d0:d2:76:4f:a3:89:85:07:1c: 2b:bb:ba:8f:8a:7d:d3:4f:5e:b7:81:06:d5:8b:52:1a:af:89: f4:6d:24:bf:a5:ce:9a:46:df:bd:9b:58:1d:dc:75:55:5c:cb: 5a:6d:11:2b:a5:b0:43:f7:e8:dd:4d:0f:d3:0f:cf:e2:9e:a7: 27:ae:d8:4c:7e:09:70:ee:fc:81:1b:90:51:fd:65:7e:47:b6: 6f:86:10:2c:98:d9:6b:50:8e:01:b6:95:85:5a:3e:6b:ce:14: bc:f3:52:b1:de:5e:91:a5:e7:fd:c4:73:2d:6f:88:93:15:bc: a6:7b:2d:d4:7a:a2:16:25:d2:72:11:26:4c:bf:e7:2d:96:86: a8:03:54:b3:f2:3c:44:a5:bc:6b:7b:1e:d0:47:ab:61:43:c0: d1:cc:c6:3d:dd:86:81:71:3a:90:29:38:0e:4a:af:3c:4e:9d: 7b:c2:9e:01:4d:1e:8e:18:94:83:c4:df:84:3e:7e:d7:87:da: 36:26:e9:14:7e:61:c1:28:33:21:e6:e8:72:d9:48:ff:19:f7: e9:5a:b9:68:bc:2a:68:3a:75:d3:63:f6:b0:eb:3a:dd:1f:be: c6:ab:03:9b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8E1ZEA2g0RS1cQbh+KoqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YTY3MGU1MWM5NjQxOWZjNTIwMjhiMTJlNDU2NTVlZjkx NGRkYmIwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzdlMDc5MGFhMjA2MDNjYjcwOGU1OTNjMzgzOGU4OTMwOWU4OTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt79Dh4nK4civN5RIm8KtKxhgKauN Cw8592ZmSzcvGkzjlzejgEGo6bqBZzzPLVHsYJ7BgLdcom1VcCIZjdJzC5mHeJ6A PL0Yn23sugRy8+d7nDs/z48ktyWjZ9e+68851i3Jehcg3TdLDvcmj7bGPApbG2Zz 0dhha0TX7Nyv9PYnBIU7MVZw70trHAlnElSLfMeYQlX/rpMxTTvS8wQlZVarib+F Clgl/cKRIjgP6FYn+xqDTXQHdNWXZzGGXnD7WsTPaxF4oCKIeRazQ2MGpcpM8OEi wt+5zrC+kHxI9DLKe42p/gr6fKsRM1OSk87VOODV0PJuskgKgPPOtzF7vwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKN+B5CqIGA8twjlk8ODjokwnok2MB8GA1UdIwQY MBaAFLemcOUclkGfxSAosS5FZV75FN27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZadzVSeVdRWl9GSUNpeExrVmxYdmtVM2JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jNGNhOWQtNWQzMi00ZWZkLThlMWIt MTMyOTM3ZDM5Y2VhLzEvbzM0SGtLb2dZRHkzQ09XVHc0T09pVENlaVRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jNGNhOWQtNWQzMi00ZWZkLThlMWItMTMyOTM3ZDM5Y2Vh LzEvdDZadzVSeVdRWl9GSUNpeExrVmxYdmtVM2JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAW5QuAD BAC5QuIwDQYJKoZIhvcNAQELBQADggEBAIVVfnr+9HprDGZja7iG5rFoneGpYq4/ zgDMZdDSdk+jiYUHHCu7uo+KfdNPXreBBtWLUhqvifRtJL+lzppG372bWB3cdVVc y1ptESulsEP36N1ND9MPz+Kepyeu2Ex+CXDu/IEbkFH9ZX5Htm+GECyY2WtQjgG2 lYVaPmvOFLzzUrHeXpGl5/3Ecy1viJMVvKZ7LdR6ohYl0nIRJky/5y2WhqgDVLPy PESlvGt7HtBHq2FDwNHMxj3dhoFxOpApOA5KrzxOnXvCngFNHo4YlIPE34Q+fteH 2jYm6RR+YcEoMyHm6HLZSP8Z9+lauWi8Kmg6ddNj9rDrOt0fvsarA5s= -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:45 2026 by rpki-client