This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/2OzQAiJ84eR942-HL-mCfiNn304.roa File: 2OzQAiJ84eR942-HL-mCfiNn304.roa (raw, json) Hash identifier: DoCu0JYoFviUnpmkl9K5MvFhWvoS3a+KpBFHFpRP62c= Subject key identifier: D8:EC:D0:02:22:7C:E1:E4:7D:E3:6F:87:2F:E9:82:7E:23:67:DF:4E Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2 Certificate serial: 019B7EA712503FE67B6FD7FF67D9C6D7ACA5 Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/2OzQAiJ84eR942-HL-mCfiNn304.roa Signing time: Fri 02 Jan 2026 12:20:36 +0000 ROA not before: Fri 02 Jan 2026 12:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199980 IP address blocks: 45.85.208.0/22 maxlen: 22 45.143.72.0/22 maxlen: 22 81.161.108.0/22 maxlen: 22 185.144.244.0/22 maxlen: 22 193.105.178.0/24 maxlen: 24 195.211.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:12:50:3f:e6:7b:6f:d7:ff:67:d9:c6:d7:ac:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2 Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8ecd002227ce1e47de36f872fe9827e2367df4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:2d:06:01:b0:d2:7c:ce:1c:04:6e:52:75: 86:d2:42:b5:99:c1:f2:17:92:e5:8b:3a:8b:b9:9b: 96:f1:58:ff:f1:1b:6a:90:77:b3:13:a7:c5:7a:b9: 2b:1f:38:71:7b:70:e9:68:10:a7:05:75:1b:45:3f: de:51:00:72:b5:bb:73:fb:29:2c:aa:e1:0e:9f:fa: 8e:42:72:df:24:00:de:aa:48:48:35:75:f1:38:1a: 69:83:bb:78:4d:62:2f:17:44:63:e8:d3:c7:69:42: 31:1b:35:d0:08:64:26:5b:9e:06:5c:a6:60:cb:0a: 6b:81:b0:70:57:2d:ea:ae:e9:98:9a:b1:56:26:ea: 50:72:8d:1a:ea:48:af:c8:27:a1:f6:7f:b5:2d:b5: f7:f3:9e:c0:c2:ef:c6:fe:b8:24:f4:5b:f0:89:e4: ab:eb:73:9f:dc:04:28:91:92:42:f9:a1:55:14:3f: 3a:46:37:4f:27:a2:e2:61:d3:75:d2:b0:72:6a:77: 05:10:32:29:21:a3:e5:37:71:08:e4:90:7c:8d:3d: 93:2a:21:d5:a2:c4:fa:23:d2:da:33:fd:46:43:48: 23:ff:2d:ec:21:f5:00:e8:5d:7f:23:76:78:22:2d: 65:34:05:79:9e:4a:13:e2:12:10:89:8c:ef:42:00: 1f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EC:D0:02:22:7C:E1:E4:7D:E3:6F:87:2F:E9:82:7E:23:67:DF:4E X509v3 Authority Key Identifier: keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/2OzQAiJ84eR942-HL-mCfiNn304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.208.0/22 45.143.72.0/22 81.161.108.0/22 185.144.244.0/22 193.105.178.0/24 195.211.68.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:98:40:34:eb:d7:2a:13:d2:32:f0:3b:55:bf:22:85:41:8a: d9:a7:05:92:5e:21:14:45:1c:3b:db:2e:1c:92:50:68:9b:d2: a8:ce:dd:55:16:b2:a6:88:fd:71:a0:ec:cc:7a:26:c3:93:9d: ff:d5:17:65:17:b9:aa:fb:41:ac:b4:6a:de:bb:2d:55:bf:07: 58:98:89:ca:7b:c5:e0:16:fd:32:2c:e8:72:e5:04:a3:11:88: e0:0b:5f:7f:0a:74:88:bd:35:74:43:2d:f1:c8:a3:7d:bc:a0: 4f:d9:00:5b:7c:d8:38:04:65:15:6a:a1:c2:dc:91:47:fd:15: ab:8f:7e:b9:3b:5a:2c:9d:56:07:ae:cc:bb:ed:18:3a:3c:b2: 4b:5c:68:22:df:32:8e:25:96:df:79:7e:a5:1b:8d:47:74:ff: 27:32:5f:02:b6:bb:d9:97:ea:91:54:69:97:76:a5:f7:df:49: f6:15:2c:b8:a3:16:6e:eb:22:7f:78:ec:0a:f4:ea:e9:a6:dc: d9:ce:cc:4a:6c:7e:bf:69:21:f4:86:ba:88:a1:06:00:6d:24: d2:d1:81:14:1f:95:c0:84:c0:23:99:25:24:a7:d9:71:0f:01: 47:6e:08:3b:ad:c2:c7:24:8b:aa:fd:c6:33:bb:dd:14:1e:ca: 43:8f:32:58 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt+pxJQP+Z7b9f/Z9nG16ylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzU3ZjViZWUxODVmYzYxMTU3MDg2ZDU5ODU0ODUzNjli MmFjZDIwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGVjZDAwMjIyN2NlMWU0N2RlMzZmODcyZmU5ODI3ZTIzNjdkZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxYtBgGw0nzOHARuUnWG0kK1mcHy F5LlizqLuZuW8Vj/8RtqkHezE6fFerkrHzhxe3DpaBCnBXUbRT/eUQBytbtz+yks quEOn/qOQnLfJADeqkhINXXxOBppg7t4TWIvF0Rj6NPHaUIxGzXQCGQmW54GXKZg ywprgbBwVy3qrumYmrFWJupQco0a6kivyCeh9n+1LbX3857Awu/G/rgk9FvwieSr 63Of3AQokZJC+aFVFD86RjdPJ6LiYdN10rByancFEDIpIaPlN3EI5JB8jT2TKiHV osT6I9LaM/1GQ0gj/y3sIfUA6F1/I3Z4Ii1lNAV5nkoT4hIQiYzvQgAfrwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFNjs0AIifOHkfeNvhy/pgn4jZ99OMB8GA1UdIwQY MBaAFAg1f1vuGF/GEVcIbVmFSFNpsqzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kY2ZmM2EtOGQzZC00N2NlLWEwZTQt MmY0OWVmYzVjY2IwLzEvMk96UUFpSjg0ZVI5NDItSEwtbUNmaU5uMzA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9kY2ZmM2EtOGQzZC00N2NlLWEwZTQtMmY0OWVmYzVjY2Iw LzEvQ0RWX1ctNFlYOFlSVndodFdZVklVMm15ck5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLVXQAwQC LY9IAwQCUaFsAwQCuZD0AwQAwWmyAwQAw9NEMA0GCSqGSIb3DQEBCwUAA4IBAQAf mEA069cqE9Iy8DtVvyKFQYrZpwWSXiEURRw72y4cklBom9Kozt1VFrKmiP1xoOzM eibDk53/1RdlF7mq+0GstGreuy1VvwdYmInKe8XgFv0yLOhy5QSjEYjgC19/CnSI vTV0Qy3xyKN9vKBP2QBbfNg4BGUVaqHC3JFH/RWrj365O1osnVYHrsy77Rg6PLJL XGgi3zKOJZbfeX6lG41HdP8nMl8CtrvZl+qRVGmXdqX330n2FSy4oxZu6yJ/eOwK 9OrpptzZzsxKbH6/aSH0hrqIoQYAbSTS0YEUH5XAhMAjmSUkp9lxDwFHbgg7rcLH JIuq/cYzu90UHspDjzJY -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:57 2026 by rpki-client