This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/oRy8UxR8Vc3XM-6AZCofxXbESbU.roa File: oRy8UxR8Vc3XM-6AZCofxXbESbU.roa (raw, json) Hash identifier: OxE0g4307Lmb3G4tCr6jdPxniZZCP8iXtLRIdgc9vMc= Subject key identifier: A1:1C:BC:53:14:7C:55:CD:D7:33:EE:80:64:2A:1F:C5:76:C4:49:B5 Certificate issuer: /CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2 Certificate serial: 019B7F14ED88C00D0444EF303E6541D1B38F Authority key identifier: 84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/oRy8UxR8Vc3XM-6AZCofxXbESbU.roa Signing time: Fri 02 Jan 2026 14:20:36 +0000 ROA not before: Fri 02 Jan 2026 14:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52013 IP address blocks: 46.183.224.0/21 maxlen: 24 185.106.135.0/24 maxlen: 24 188.94.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:ed:88:c0:0d:04:44:ef:30:3e:65:41:d1:b3:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2 Validity Not Before: Jan 2 14:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a11cbc53147c55cdd733ee80642a1fc576c449b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:80:25:a2:24:a2:37:2d:20:62:e5:d3:86:2c: 6d:dc:5b:ad:e2:76:d9:d5:89:5e:2f:05:9c:37:d1: 92:e8:75:9f:ab:17:2d:3b:90:f6:5a:66:21:0d:41: 98:08:29:0a:0a:85:88:7d:5e:da:59:89:2e:c2:12: 91:34:fa:c5:64:6d:35:d1:f1:0e:85:57:ac:54:96: 06:fe:f5:ab:3d:98:4a:9f:02:4c:50:4f:ec:2f:44: 5d:eb:63:bb:a4:b0:70:fb:ee:2b:9d:4e:d4:02:6d: 40:04:f4:71:3a:01:db:52:09:06:8b:7b:99:a6:9b: 28:ee:70:fe:ae:80:d4:db:d4:25:ac:63:54:a1:d0: a8:54:8c:cf:44:4b:a7:42:1d:58:76:39:d1:27:f6: 2a:79:6c:f8:83:08:f5:0c:8a:79:77:50:8f:e3:9a: 21:25:64:80:d0:14:1d:d6:87:bd:0b:2f:4d:e8:00: b7:59:5b:b4:7f:7d:66:b5:9b:28:ad:bf:8e:a2:ad: 79:ff:34:78:d2:b5:b9:b2:e9:2b:49:a5:4a:3a:82: 47:fb:48:fc:67:5b:e9:0c:d2:9c:ff:8d:3a:df:7f: 1a:d8:bb:59:e4:32:f0:64:cd:43:b3:b9:54:6a:7e: 16:54:b6:d1:95:6b:fa:7e:95:e2:36:e5:58:f6:d8: 28:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1C:BC:53:14:7C:55:CD:D7:33:EE:80:64:2A:1F:C5:76:C4:49:B5 X509v3 Authority Key Identifier: keyid:84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/oRy8UxR8Vc3XM-6AZCofxXbESbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.224.0/21 185.106.135.0/24 188.94.4.0/22 Signature Algorithm: sha256WithRSAEncryption 50:ee:90:d1:c8:e6:60:c4:9c:86:7d:62:04:66:f7:c1:6a:9f: cd:27:62:ad:03:bb:cc:24:8d:8e:9b:ea:1c:36:d1:d2:3b:5d: 13:c9:a5:aa:d7:13:24:6d:b4:2f:0f:44:39:43:ee:51:ed:48: 0b:88:06:d9:82:ec:d0:a2:71:2b:c9:6c:29:de:da:02:6e:f3: 18:10:e5:a4:51:6a:12:17:e6:0a:bc:59:8b:2f:54:28:16:14: 16:ac:35:82:20:ad:d8:18:61:af:9d:b3:84:6a:df:cd:41:8a: ad:93:b8:06:38:2b:5a:5e:5b:fe:a0:d1:7b:12:ce:54:0c:a7: 72:2e:ff:ce:6f:b1:54:ea:92:53:c8:60:84:a6:bd:59:35:0f: e9:17:58:ec:62:b9:4f:c2:e6:75:7c:c2:62:df:ab:52:94:56: 44:c6:6c:ac:aa:85:9f:e3:72:53:b0:97:e8:36:02:3d:f5:cf: ab:22:15:72:66:49:2d:b3:f2:21:4d:60:21:c4:e7:4e:13:8c: 3c:39:85:c5:41:ad:22:f6:28:68:01:64:ff:8d:67:e7:ba:6d: 24:ab:8d:d8:ca:df:05:1d:8e:42:1b:01:37:12:d8:92:d9:69: 25:86:46:c4:51:7b:fb:19:f2:5c:63:26:41:e1:30:d4:16:8b: fd:48:f2:b2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FO2IwA0ERO8wPmVB0bOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MWYzNmZjYmY3MzM0ZWZmNmI5MWU4MDI5N2VhNWIyNWM0 ZWNmZDIwHhcNMjYwMTAyMTQyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTFjYmM1MzE0N2M1NWNkZDczM2VlODA2NDJhMWZjNTc2YzQ0OWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIAloiSiNy0gYuXThixt3Fut4nbZ 1YleLwWcN9GS6HWfqxctO5D2WmYhDUGYCCkKCoWIfV7aWYkuwhKRNPrFZG010fEO hVesVJYG/vWrPZhKnwJMUE/sL0Rd62O7pLBw++4rnU7UAm1ABPRxOgHbUgkGi3uZ ppso7nD+roDU29QlrGNUodCoVIzPREunQh1YdjnRJ/YqeWz4gwj1DIp5d1CP45oh JWSA0BQd1oe9Cy9N6AC3WVu0f31mtZsorb+Ooq15/zR40rW5sukrSaVKOoJH+0j8 Z1vpDNKc/406338a2LtZ5DLwZM1Ds7lUan4WVLbRlWv6fpXiNuVY9tgo9wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKEcvFMUfFXN1zPugGQqH8V2xEm1MB8GA1UdIwQY MBaAFIQfNvy/czTv9rkegCl+pbJcTs/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEI4Ml9MOXpOT18ydVI2QUtYNmxzbHhPejlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jMzdjMTYtMDYwMy00ODQ1LWI0ZDQt OTVkZGIwOTc0ZTRiLzEvb1J5OFV4UjhWYzNYTS02QVpDb2Z4WGJFU2JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9jMzdjMTYtMDYwMy00ODQ1LWI0ZDQtOTVkZGIwOTc0ZTRi LzEvaEI4Ml9MOXpOT18ydVI2QUtYNmxzbHhPejlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDLrfgAwQA uWqHAwQCvF4EMA0GCSqGSIb3DQEBCwUAA4IBAQBQ7pDRyOZgxJyGfWIEZvfBap/N J2KtA7vMJI2Om+ocNtHSO10TyaWq1xMkbbQvD0Q5Q+5R7UgLiAbZguzQonEryWwp 3toCbvMYEOWkUWoSF+YKvFmLL1QoFhQWrDWCIK3YGGGvnbOEat/NQYqtk7gGOCta Xlv+oNF7Es5UDKdyLv/Ob7FU6pJTyGCEpr1ZNQ/pF1jsYrlPwuZ1fMJi36tSlFZE xmysqoWf43JTsJfoNgI99c+rIhVyZkkts/IhTWAhxOdOE4w8OYXFQa0i9ihoAWT/ jWfnum0kq43Yyt8FHY5CGwE3EtiS2WklhkbEUXv7GfJcYyZB4TDUFov9SPKy -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:41 2026 by rpki-client