This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/O764NAcKXNTjQ9sszmYMH0M-HC0.roa File: O764NAcKXNTjQ9sszmYMH0M-HC0.roa (raw, json) Hash identifier: AyepL0+2wVG0+WCZlglCmaw7Rr7sdYw42s/HNe9N7IM= Subject key identifier: 3B:BE:B8:34:07:0A:5C:D4:E3:43:DB:2C:CE:66:0C:1F:43:3E:1C:2D Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d Certificate serial: 019B7A5B3DFEA901A96A44DF0D9C3280D628 Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/O764NAcKXNTjQ9sszmYMH0M-HC0.roa Signing time: Thu 01 Jan 2026 16:19:18 +0000 ROA not before: Thu 01 Jan 2026 16:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34863 IP address blocks: 193.46.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:3d:fe:a9:01:a9:6a:44:df:0d:9c:32:80:d6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d Validity Not Before: Jan 1 16:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bbeb834070a5cd4e343db2cce660c1f433e1c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4a:2b:48:08:d3:e6:81:76:9b:ca:34:14:45: e2:45:35:3e:1a:3d:e8:33:2e:70:23:9f:31:02:ba: 55:e0:5a:08:25:36:78:12:f4:42:2c:b4:cd:7f:18: 60:dc:27:a8:2a:ab:b3:81:09:ad:99:4c:6a:cf:bb: d0:94:0d:4b:df:b9:49:4b:d9:88:98:70:45:1e:b9: 22:e8:0c:1f:51:81:b4:43:db:2b:07:b9:34:7b:0f: 01:30:f7:d1:06:be:88:94:ab:ee:c4:27:1a:3c:db: 55:8d:84:45:88:07:b0:51:f7:e5:b5:fa:e0:05:e4: b9:87:74:7e:04:95:a0:a9:9e:be:ed:74:69:0e:10: ff:47:a3:5b:d1:9c:fe:72:a8:90:bd:6a:7c:40:af: e7:33:25:f2:69:37:ce:0f:2e:82:30:d4:a4:f4:c0: 11:3a:cf:4a:b0:91:bc:bf:c0:56:1b:ab:70:45:76: 14:e6:b3:08:36:f4:5a:67:b2:c0:2d:8a:e7:0f:21: ee:24:51:b6:20:3c:a1:9f:fb:42:10:fa:2e:c8:3b: ac:4e:2d:ab:0d:73:45:d0:12:f4:fc:d9:70:9e:ce: a7:ed:ae:79:bb:a9:80:f1:cb:85:64:00:c7:2f:ee: 32:db:53:bf:ef:4e:f9:b1:37:92:96:db:5c:3d:46: 98:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BE:B8:34:07:0A:5C:D4:E3:43:DB:2C:CE:66:0C:1F:43:3E:1C:2D X509v3 Authority Key Identifier: keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/O764NAcKXNTjQ9sszmYMH0M-HC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.85.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:18:a7:39:55:c5:46:4b:7a:6c:f0:0f:9d:4f:8f:4a:02:64: f4:54:f6:c3:ab:e2:dd:da:3a:5b:b4:c6:f7:4d:14:2c:a4:af: 42:5a:49:39:62:bd:7f:11:c5:bd:3c:b3:2f:7b:43:b4:14:8f: 1e:6f:ee:c8:ee:3c:2f:59:bd:0d:9f:80:0c:cf:5a:79:00:21: 22:ee:84:0a:54:a2:82:98:8e:bf:1e:fc:da:2d:d1:9c:ea:07: dd:9f:44:64:2a:8f:a4:83:b7:21:06:e3:ff:bf:7a:4e:47:85: 11:ae:aa:01:a4:20:c2:93:e0:58:ff:26:0e:da:48:f5:a5:d2: 89:15:b7:d3:b7:9c:9d:ff:eb:4e:ce:0f:1f:e1:d4:da:11:04: 50:92:0d:d7:94:eb:67:5a:a6:89:0a:58:79:b2:f6:d7:d8:fc: 31:48:e4:6c:74:09:fe:63:e5:d6:7e:6f:07:c9:30:82:42:f8: b8:8d:cb:72:56:cf:6f:96:bd:66:fc:16:9f:56:65:b6:02:d5: 35:89:9a:03:31:27:81:6b:e7:a5:6b:3c:ff:5b:f9:12:7e:25: 1d:3d:df:51:da:ca:5a:7a:76:2f:11:7e:8b:40:bc:0a:e2:03: ec:d9:1d:6a:f8:9f:93:bc:ff:a6:55:22:98:a3:e4:fe:e4:61: 51:d4:d1:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wz3+qQGpakTfDZwygNYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmIzNjcxYzlmYzc0NmExY2E2MzQ0OTU0NjU1N2NhOWU5 YTdkNmQwHhcNMjYwMTAxMTYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmJlYjgzNDA3MGE1Y2Q0ZTM0M2RiMmNjZTY2MGMxZjQzM2UxYzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10orSAjT5oF2m8o0FEXiRTU+Gj3o My5wI58xArpV4FoIJTZ4EvRCLLTNfxhg3CeoKquzgQmtmUxqz7vQlA1L37lJS9mI mHBFHrki6AwfUYG0Q9srB7k0ew8BMPfRBr6IlKvuxCcaPNtVjYRFiAewUffltfrg BeS5h3R+BJWgqZ6+7XRpDhD/R6Nb0Zz+cqiQvWp8QK/nMyXyaTfODy6CMNSk9MAR Os9KsJG8v8BWG6twRXYU5rMINvRaZ7LALYrnDyHuJFG2IDyhn/tCEPouyDusTi2r DXNF0BL0/Nlwns6n7a55u6mA8cuFZADHL+4y21O/7075sTeSlttcPUaYNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDu+uDQHClzU40PbLM5mDB9DPhwtMB8GA1UdIwQY MBaAFLv7NnHJ/HRqHKY0SVRlV8qemn1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzkt OTVjNTA1MzFkNGQ4LzEvTzc2NE5BY0tYTlRqUTlzc3ptWU1IME0tSEMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzktOTVjNTA1MzFkNGQ4 LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS5VMA0G CSqGSIb3DQEBCwUAA4IBAQBrGKc5VcVGS3ps8A+dT49KAmT0VPbDq+Ld2jpbtMb3 TRQspK9CWkk5Yr1/EcW9PLMve0O0FI8eb+7I7jwvWb0Nn4AMz1p5ACEi7oQKVKKC mI6/HvzaLdGc6gfdn0RkKo+kg7chBuP/v3pOR4URrqoBpCDCk+BY/yYO2kj1pdKJ FbfTt5yd/+tOzg8f4dTaEQRQkg3XlOtnWqaJClh5svbX2PwxSORsdAn+Y+XWfm8H yTCCQvi4jctyVs9vlr1m/BafVmW2AtU1iZoDMSeBa+elazz/W/kSfiUdPd9R2spa enYvEX6LQLwK4gPs2R1q+J+TvP+mVSKYo+T+5GFR1NHy -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:48 2026 by rpki-client