This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/OADJfv4sJk1hBJpusL11pl6fFtI.roa File: OADJfv4sJk1hBJpusL11pl6fFtI.roa (raw, json) Hash identifier: CYKU8NdxaFNmdeaAWm70OIx6aPv3u8b/dlSWiMUH5iU= Subject key identifier: 38:00:C9:7E:FE:2C:26:4D:61:04:9A:6E:B0:BD:75:A6:5E:9F:16:D2 Certificate issuer: /CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0 Certificate serial: 019B7A5B60357D469D8A3920FF3C53810249 Authority key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/OADJfv4sJk1hBJpusL11pl6fFtI.roa Signing time: Thu 01 Jan 2026 16:19:27 +0000 ROA not before: Thu 01 Jan 2026 16:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44901 IP address blocks: 185.196.101.0/24 maxlen: 24 185.196.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:60:35:7d:46:9d:8a:39:20:ff:3c:53:81:02:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0 Validity Not Before: Jan 1 16:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3800c97efe2c264d61049a6eb0bd75a65e9f16d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ce:df:4b:41:bb:9f:ef:7c:d8:af:da:e7:19: a6:83:10:1b:d7:f6:e2:4c:9d:8e:21:e8:fa:dc:41: 5d:57:8e:c0:7f:d4:e2:12:d1:1e:c3:c5:1c:60:62: bd:99:80:6a:e3:72:c2:79:a5:c0:ad:02:84:86:01: ef:dc:25:f5:ce:6d:94:72:c3:6d:62:65:7b:8c:37: ed:09:86:41:a7:0c:73:49:89:56:74:3c:37:c1:56: bc:03:f7:36:30:2c:4c:cb:93:59:0e:87:b8:d2:5b: 6b:b7:41:22:73:8a:ca:fb:80:ab:1f:d5:90:4a:fb: 4f:cd:d5:a1:3b:4f:20:9a:68:a7:91:47:67:2e:01: aa:80:bd:50:d7:e9:87:46:7d:b9:6b:45:1f:44:81: 97:5a:15:75:32:2a:e8:c5:38:fc:f6:e2:89:29:4f: 29:a8:4f:32:f4:59:23:19:95:65:df:6a:48:26:a5: 12:47:48:e0:9a:a0:2c:df:d8:e6:83:08:ba:3f:fb: 46:99:8d:96:7e:ad:30:b4:0d:06:46:d0:38:d5:04: d2:16:29:4a:0b:8a:a4:a1:c7:d8:2c:dd:86:63:17: ee:78:f0:0e:81:b0:94:f8:51:78:77:61:1f:2c:a1: 50:e6:10:e4:47:1e:20:0f:5b:c6:ba:48:65:57:5b: aa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:00:C9:7E:FE:2C:26:4D:61:04:9A:6E:B0:BD:75:A6:5E:9F:16:D2 X509v3 Authority Key Identifier: keyid:5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/OADJfv4sJk1hBJpusL11pl6fFtI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.101.0/24 185.196.103.0/24 Signature Algorithm: sha256WithRSAEncryption 36:2d:29:61:66:f0:27:21:48:06:9f:8d:b6:5a:98:ce:ae:e7: 54:a7:9e:0b:1c:4a:30:7c:92:40:8a:f3:ab:54:a2:f4:fd:de: 3e:08:41:bd:f5:70:ec:0b:cd:fc:0f:b5:3c:20:84:d0:fa:8e: 86:b8:c3:58:44:1a:1b:4b:26:00:fb:a1:ab:f5:60:29:6c:3f: a8:b4:97:19:57:97:b7:74:14:fc:e0:c1:54:97:31:05:20:5c: 75:b8:c1:07:f5:db:a9:e6:fd:b1:91:b7:e9:bb:58:92:d7:1c: 18:f7:42:48:20:2c:67:a2:37:ef:8c:f0:ff:aa:be:60:7a:fc: f7:20:3c:2c:57:4c:7a:bb:ed:69:33:94:c3:ec:c8:27:11:2e: c6:34:81:a4:45:9f:e3:42:bd:7c:eb:09:74:cf:56:a8:a2:4b: ee:6b:d4:00:b1:72:8d:30:64:5a:bd:ee:2d:87:79:29:64:ba: 54:fb:3d:ce:a5:a1:e2:51:ef:1c:dc:3e:aa:4e:5f:33:f1:4b: 5a:28:a1:c2:26:4c:25:79:35:9c:05:3a:96:72:fe:dd:f6:90: e8:7a:93:0b:18:e8:54:3c:4b:f6:1b:9f:1c:46:93:d9:d3:68: 5c:5e:38:88:92:58:0e:0e:86:97:57:01:45:29:85:af:d8:dd: 73:48:53:83 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W2A1fUadijkg/zxTgQJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZTFhYWUwYzkzYWQwNGI3Mjk4MDgyYjY4YmY2YTU0ZmE2 OGJjZjAwHhcNMjYwMTAxMTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODAwYzk3ZWZlMmMyNjRkNjEwNDlhNmViMGJkNzVhNjVlOWYxNmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo87fS0G7n+982K/a5xmmgxAb1/bi TJ2OIej63EFdV47Af9TiEtEew8UcYGK9mYBq43LCeaXArQKEhgHv3CX1zm2UcsNt YmV7jDftCYZBpwxzSYlWdDw3wVa8A/c2MCxMy5NZDoe40ltrt0Eic4rK+4CrH9WQ SvtPzdWhO08gmminkUdnLgGqgL1Q1+mHRn25a0UfRIGXWhV1MiroxTj89uKJKU8p qE8y9FkjGZVl32pIJqUSR0jgmqAs39jmgwi6P/tGmY2Wfq0wtA0GRtA41QTSFilK C4qkocfYLN2GYxfuePAOgbCU+FF4d2EfLKFQ5hDkRx4gD1vGukhlV1uqbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDgAyX7+LCZNYQSabrC9daZenxbSMB8GA1UdIwQY MBaAFFzhquDJOtBLcpgIK2i/alT6aLzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE9HcTRNazYwRXR5bUFncmFMOXFWUHBvdlBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZjM2MTgtNzAzMi00MTQzLTkzNzQt YmExNDE4ZDIyMDg3LzEvT0FESmZ2NHNKazFoQkpwdXNMMTFwbDZmRnRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9mZjM2MTgtNzAzMi00MTQzLTkzNzQtYmExNDE4ZDIyMDg3 LzEvWE9HcTRNazYwRXR5bUFncmFMOXFWUHBvdlBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAucRlAwQA ucRnMA0GCSqGSIb3DQEBCwUAA4IBAQA2LSlhZvAnIUgGn422WpjOrudUp54LHEow fJJAivOrVKL0/d4+CEG99XDsC838D7U8IITQ+o6GuMNYRBobSyYA+6Gr9WApbD+o tJcZV5e3dBT84MFUlzEFIFx1uMEH9dup5v2xkbfpu1iS1xwY90JIICxnojfvjPD/ qr5gevz3IDwsV0x6u+1pM5TD7MgnES7GNIGkRZ/jQr186wl0z1aookvua9QAsXKN MGRave4th3kpZLpU+z3OpaHiUe8c3D6qTl8z8UtaKKHCJkwleTWcBTqWcv7d9pDo epMLGOhUPEv2G58cRpPZ02hcXjiIklgODoaXVwFFKYWv2N1zSFOD -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:53 2026 by rpki-client