This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/OC1nyRt0bfVZANX8lUlsmij_SRQ.roa File: OC1nyRt0bfVZANX8lUlsmij_SRQ.roa (raw, json) Hash identifier: Rdwkl90u1nSZHEd8rY7u8aTFZGWKHVXtuaJS4W++hPQ= Subject key identifier: 38:2D:67:C9:1B:74:6D:F5:59:00:D5:FC:95:49:6C:9A:28:FF:49:14 Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31 Certificate serial: 019B7DCB0A94E3B5FAEC6A9483B0D6B4C2D0 Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/OC1nyRt0bfVZANX8lUlsmij_SRQ.roa Signing time: Fri 02 Jan 2026 08:20:17 +0000 ROA not before: Fri 02 Jan 2026 08:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199738 IP address blocks: 86.106.4.0/22 maxlen: 22 86.106.4.0/24 maxlen: 24 86.106.5.0/24 maxlen: 24 86.106.6.0/24 maxlen: 24 86.106.7.0/24 maxlen: 24 86.106.64.0/22 maxlen: 22 86.106.68.0/23 maxlen: 23 86.106.68.0/24 maxlen: 24 86.106.69.0/24 maxlen: 24 86.106.70.0/23 maxlen: 23 89.32.112.0/24 maxlen: 24 89.32.116.0/23 maxlen: 23 89.32.116.0/24 maxlen: 24 89.32.117.0/24 maxlen: 24 89.37.76.0/22 maxlen: 22 89.37.76.0/24 maxlen: 24 89.37.77.0/24 maxlen: 24 89.37.78.0/24 maxlen: 24 89.37.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0a:94:e3:b5:fa:ec:6a:94:83:b0:d6:b4:c2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31 Validity Not Before: Jan 2 08:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=382d67c91b746df55900d5fc95496c9a28ff4914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:64:d9:89:38:2b:cd:f8:21:eb:48:fc:18: 09:0c:ef:55:d9:97:37:f3:08:fb:ba:f6:c4:4b:55: 02:e4:0e:cf:c9:27:03:bd:e3:09:29:59:a2:27:cf: c1:22:65:3a:89:f7:22:e5:e7:73:f8:18:de:d6:d5: ed:5b:3f:ee:7d:88:10:25:9a:86:a0:a1:a1:8c:7f: 33:eb:75:91:00:4c:df:25:8f:18:5e:75:76:e4:93: 45:c1:9a:4c:41:e1:d9:90:23:4d:2d:38:aa:dd:a7: 7e:b2:3b:c1:49:cc:55:d3:e5:40:ce:ac:ed:99:06: 2d:5f:c5:08:8f:77:e4:6f:c8:9c:19:0b:89:13:80: 92:f5:f4:76:e6:c4:3f:25:cc:cf:9e:5b:da:b5:de: 46:df:60:a3:57:37:ad:96:9d:17:0a:c6:6f:8c:09: 7f:e8:f8:4c:1a:e1:7c:ff:61:9b:33:d3:08:48:99: c7:5f:5c:46:97:37:7b:76:49:65:e4:4b:b9:df:84: 28:68:f8:bd:86:df:42:bd:26:12:20:05:24:29:8c: ad:1a:19:50:18:d0:73:f1:11:2a:2d:4d:ff:86:44: e8:fa:46:79:59:48:39:5c:e0:33:0e:bc:a9:bd:9b: 37:42:19:93:e9:bb:c2:a2:18:7d:6d:1c:5d:09:2e: fd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2D:67:C9:1B:74:6D:F5:59:00:D5:FC:95:49:6C:9A:28:FF:49:14 X509v3 Authority Key Identifier: keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/OC1nyRt0bfVZANX8lUlsmij_SRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.4.0/22 86.106.64.0/21 89.32.112.0/24 89.32.116.0/23 89.37.76.0/22 Signature Algorithm: sha256WithRSAEncryption 83:cd:a3:55:2d:72:59:d9:ea:ec:3a:93:f7:fd:2e:9a:b2:f1: 73:a1:37:11:3b:6d:16:2f:f4:07:4f:b2:0f:ee:c6:1e:ea:59: d3:d0:75:a1:11:c4:a0:96:04:bf:95:72:28:de:ba:df:95:b0: 5b:64:7d:8e:fa:f0:4f:b5:7d:a2:e4:89:71:e2:21:ac:28:c1: 85:e1:00:eb:2d:c7:13:4c:86:d5:25:5e:da:cf:e9:75:d2:6f: 3f:56:e8:5e:89:98:e5:62:1e:ef:ee:6a:b7:57:14:3b:67:34: 9c:4f:46:08:9f:58:c8:05:22:ab:30:14:6b:89:f0:df:6d:64: f3:08:28:30:26:91:94:1c:07:90:10:71:6f:c0:75:5e:e7:3a: 2c:f4:bf:77:15:21:fd:99:dc:71:bb:ad:62:1c:4f:6a:c2:77: e1:8f:0b:ba:83:90:ce:0f:61:7c:31:9b:1d:6d:14:0b:fc:68: 6f:52:51:c7:72:db:d6:9e:51:53:09:2e:2d:cf:7d:f5:2c:7c: 73:06:a6:1d:02:26:5b:db:02:b4:68:9a:56:68:8f:7d:d0:28: bc:0a:3d:b3:4c:ba:4a:3f:c5:4d:72:0d:3e:1a:21:b0:6d:c6: bf:09:5f:96:25:db:fc:43:01:50:72:61:f3:cf:84:35:55:22: c5:bf:e6:8e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9ywqU47X67GqUg7DWtMLQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4 OTJlMzEwHhcNMjYwMTAyMDgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODJkNjdjOTFiNzQ2ZGY1NTkwMGQ1ZmM5NTQ5NmM5YTI4ZmY0OTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNJk2Yk4K834IetI/BgJDO9V2Zc3 8wj7uvbES1UC5A7PyScDveMJKVmiJ8/BImU6ifci5edz+Bje1tXtWz/ufYgQJZqG oKGhjH8z63WRAEzfJY8YXnV25JNFwZpMQeHZkCNNLTiq3ad+sjvBScxV0+VAzqzt mQYtX8UIj3fkb8icGQuJE4CS9fR25sQ/JczPnlvatd5G32CjVzetlp0XCsZvjAl/ 6PhMGuF8/2GbM9MISJnHX1xGlzd7dkll5Eu534QoaPi9ht9CvSYSIAUkKYytGhlQ GNBz8REqLU3/hkTo+kZ5WUg5XOAzDrypvZs3QhmT6bvCohh9bRxdCS79JwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDgtZ8kbdG31WQDV/JVJbJoo/0kUMB8GA1UdIwQY MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt MzY2YmExNzAwZmUwLzEvT0MxbnlSdDBiZlZaQU5YOGxVbHNtaWpfU1JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCVmoEAwQD VmpAAwQAWSBwAwQBWSB0AwQCWSVMMA0GCSqGSIb3DQEBCwUAA4IBAQCDzaNVLXJZ 2ersOpP3/S6asvFzoTcRO20WL/QHT7IP7sYe6lnT0HWhEcSglgS/lXIo3rrflbBb ZH2O+vBPtX2i5Ilx4iGsKMGF4QDrLccTTIbVJV7az+l10m8/VuheiZjlYh7v7mq3 VxQ7ZzScT0YIn1jIBSKrMBRrifDfbWTzCCgwJpGUHAeQEHFvwHVe5zos9L93FSH9 mdxxu61iHE9qwnfhjwu6g5DOD2F8MZsdbRQL/GhvUlHHctvWnlFTCS4tz331LHxz BqYdAiZb2wK0aJpWaI990Ci8Cj2zTLpKP8VNcg0+GiGwbca/CV+WJdv8QwFQcmHz z4Q1VSLFv+aO -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:08 2026 by rpki-client