This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/ocI1Tj5xjc77HCxaih4HTT8zJWQ.roa File: ocI1Tj5xjc77HCxaih4HTT8zJWQ.roa (raw, json) Hash identifier: 7GTm6dNpL+1aKtBHlqS15Lk5zVrRS8hQJ81O+NY5Eh4= Subject key identifier: A1:C2:35:4E:3E:71:8D:CE:FB:1C:2C:5A:8A:1E:07:4D:3F:33:25:64 Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68 Certificate serial: 019B7F15B8D6B31D5C5E392A891985989FC7 Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/ocI1Tj5xjc77HCxaih4HTT8zJWQ.roa Signing time: Fri 02 Jan 2026 14:21:28 +0000 ROA not before: Fri 02 Jan 2026 14:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2852 IP address blocks: 146.102.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b8:d6:b3:1d:5c:5e:39:2a:89:19:85:98:9f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68 Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1c2354e3e718dcefb1c2c5a8a1e074d3f332564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:eb:76:55:1d:f6:f9:d0:62:0b:5e:bf:6f:b4: 97:c0:3b:db:36:15:a4:50:20:c4:31:b9:12:fa:30: 73:3a:60:d4:28:02:33:ef:7a:53:95:91:68:e5:ba: 8f:14:9d:2f:ec:a8:7c:8d:9c:9c:95:4e:fa:04:1b: e5:05:0c:23:bc:f3:e7:45:91:8b:91:01:17:9d:cc: 04:74:f8:23:36:e4:42:4f:53:01:93:a7:4d:59:e2: 34:08:f6:d1:72:54:e9:54:9e:35:16:56:db:b9:a4: b1:3d:5a:70:d0:53:49:97:bd:d6:05:08:32:d5:5a: e5:e3:5b:f1:6b:f1:e2:05:15:b0:0c:13:47:a2:77: f3:b0:3b:9f:4e:52:03:ac:b5:15:5b:f5:4e:0e:8f: 3f:a0:43:d7:3b:18:36:be:17:e6:c6:aa:2e:3b:85: ff:12:56:af:f9:77:ea:8d:3d:d7:87:0d:60:1c:9f: bf:54:70:25:ec:6b:3e:5e:22:d2:f2:18:cc:32:ae: aa:d4:01:dc:56:06:fd:11:f4:95:8d:3f:e7:e2:1e: ce:29:1e:16:f7:2a:ae:98:82:b9:2d:b8:8d:59:fd: 0c:1b:e0:a3:15:80:f9:3c:fb:88:a5:f2:bf:60:70: 81:4b:8a:47:76:55:c8:42:38:aa:11:d1:7e:49:d8: 3e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C2:35:4E:3E:71:8D:CE:FB:1C:2C:5A:8A:1E:07:4D:3F:33:25:64 X509v3 Authority Key Identifier: keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/ocI1Tj5xjc77HCxaih4HTT8zJWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.102.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5d:7d:0f:e6:03:8b:32:c2:0e:6a:0d:f5:33:af:49:66:4c:4c: 55:13:da:0d:52:99:2b:4a:54:a0:d0:85:4c:65:c7:38:c7:55: ec:f1:40:a8:61:bc:55:f8:98:8e:c2:ba:fb:81:50:48:78:bd: f3:16:fc:e3:8a:5d:0a:3c:17:6c:22:54:bb:fe:20:25:80:45: 7a:80:63:dd:a6:c1:97:4b:16:67:71:93:59:0e:bb:a8:e0:25: 63:1f:67:1b:4c:fd:e3:d2:a8:61:7f:70:2f:76:38:06:49:9b: 96:dd:ab:d6:11:5e:89:df:7a:32:30:26:01:bb:58:65:77:13: 31:98:de:b7:24:3a:d5:16:dd:f3:ed:e6:e4:bb:aa:96:4e:89: 8e:8b:f9:26:c4:77:7a:99:79:9a:75:b7:e8:df:8f:ba:6d:58: 85:ae:fe:06:b0:f4:98:0a:16:b2:d7:1e:3c:f6:17:5b:e9:c8: cb:e2:b1:cb:a3:ff:26:73:d2:85:2d:89:c9:c8:a1:55:39:bd: d5:42:de:70:e6:96:c1:be:78:ff:9b:d9:c9:75:18:c6:9d:4e: e4:73:4f:93:97:16:8c:9e:96:26:04:cb:06:db:d9:8e:5a:01: 38:86:5f:33:a0:96:63:cb:3c:dc:6e:6c:e4:d5:ff:25:d5:d7: 3b:8f:ed:f5 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt/FbjWsx1cXjkqiRmFmJ/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MDJhZjcxM2UzNmU1MmM3MTg2NmM4YTllYmRhY2YzZDg2 MjliNjgwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWMyMzU0ZTNlNzE4ZGNlZmIxYzJjNWE4YTFlMDc0ZDNmMzMyNTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlut2VR32+dBiC16/b7SXwDvbNhWk UCDEMbkS+jBzOmDUKAIz73pTlZFo5bqPFJ0v7Kh8jZyclU76BBvlBQwjvPPnRZGL kQEXncwEdPgjNuRCT1MBk6dNWeI0CPbRclTpVJ41FlbbuaSxPVpw0FNJl73WBQgy 1Vrl41vxa/HiBRWwDBNHonfzsDufTlIDrLUVW/VODo8/oEPXOxg2vhfmxqouO4X/ Elav+XfqjT3Xhw1gHJ+/VHAl7Gs+XiLS8hjMMq6q1AHcVgb9EfSVjT/n4h7OKR4W 9yqumIK5LbiNWf0MG+CjFYD5PPuIpfK/YHCBS4pHdlXIQjiqEdF+Sdg+wQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFKHCNU4+cY3O+xwsWooeB00/MyVkMB8GA1UdIwQY MBaAFBUCr3E+NuUscYZsip69rPPYYptoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85ZGNjMjUtNWIwYS00YzNlLTkxNDkt NWE4MjMwZTc2NDNhLzEvb2NJMVRqNXhqYzc3SEN4YWloNEhUVDh6SldRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS85ZGNjMjUtNWIwYS00YzNlLTkxNDktNWE4MjMwZTc2NDNh LzEvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkmYwDQYJ KoZIhvcNAQELBQADggEBAF19D+YDizLCDmoN9TOvSWZMTFUT2g1SmStKVKDQhUxl xzjHVezxQKhhvFX4mI7CuvuBUEh4vfMW/OOKXQo8F2wiVLv+ICWARXqAY92mwZdL Fmdxk1kOu6jgJWMfZxtM/ePSqGF/cC92OAZJm5bdq9YRXonfejIwJgG7WGV3EzGY 3rckOtUW3fPt5uS7qpZOiY6L+SbEd3qZeZp1t+jfj7ptWIWu/gaw9JgKFrLXHjz2 F1vpyMviscuj/yZz0oUticnIoVU5vdVC3nDmlsG+eP+b2cl1GMadTuRzT5OXFoye liYEywbb2Y5aATiGXzOglmPLPNxubOTV/yXV1zuP7fU= -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:45 2026 by rpki-client