This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/B3OeokPEIHVspK8KnB4E2xEIauA.roa File: B3OeokPEIHVspK8KnB4E2xEIauA.roa (raw, json) Hash identifier: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4= Subject key identifier: 07:73:9E:A2:43:C4:20:75:6C:A4:AF:0A:9C:1E:04:DB:11:08:6A:E0 Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019B797F34D9A7073610F6497635163727C9 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/B3OeokPEIHVspK8KnB4E2xEIauA.roa Signing time: Thu 01 Jan 2026 12:18:58 +0000 ROA not before: Thu 01 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197540 IP address blocks: 185.158.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:34:d9:a7:07:36:10:f6:49:76:35:16:37:27:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07739ea243c420756ca4af0a9c1e04db11086ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7f:f1:1c:52:9d:d6:a1:f0:fd:c6:24:e3:c7: 18:9f:5f:54:1d:ea:5a:0a:9e:e6:96:91:9d:90:99: 03:10:99:f3:3a:03:98:66:96:11:a7:f1:f8:4e:95: d5:fa:23:81:68:6d:f3:ec:ed:b7:e9:b5:1e:44:09: ab:99:68:f5:be:e7:55:57:be:e6:ed:ed:a0:23:26: 4a:aa:9f:d8:48:35:23:f9:c9:cc:e8:7c:1f:d9:5d: 58:c7:13:21:8e:d1:a4:de:7a:bb:ab:d8:93:27:ca: 66:49:9b:e3:fb:dd:b6:e2:48:f9:6f:92:e4:a6:c5: 99:03:6d:a5:c5:e2:c8:a4:ed:de:e2:2d:de:04:81: 89:26:3f:92:af:13:58:d6:b6:db:e7:90:52:f0:17: ab:a5:6f:7a:8d:86:ca:ba:25:37:5f:2c:05:bd:0e: c5:b5:c1:e6:3b:92:31:a6:5a:88:36:86:48:83:c0: 2d:bd:4a:d3:70:11:a5:2a:a7:34:6c:86:aa:c8:8b: 01:5d:6c:d5:ba:87:1c:ab:08:5e:5a:d2:d0:34:ca: ad:05:62:95:64:b4:b7:de:3c:36:62:4d:92:f0:79: 4e:80:74:1b:c4:db:6c:6e:0f:f2:3f:cb:5f:34:1a: bc:b8:02:5b:36:62:9c:13:0b:03:4e:42:c4:cc:96: ff:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:73:9E:A2:43:C4:20:75:6C:A4:AF:0A:9C:1E:04:DB:11:08:6A:E0 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/B3OeokPEIHVspK8KnB4E2xEIauA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.212.0/22 Signature Algorithm: sha256WithRSAEncryption 40:0b:5f:5f:a6:ea:59:d5:28:67:65:c9:53:0d:3b:39:5f:6c: b6:18:9a:71:12:c7:f2:d1:36:f1:97:90:c2:3d:7b:0b:61:a3: 95:11:01:5e:49:b4:2c:23:04:1c:46:4b:e5:76:4f:57:b0:08: f6:ac:ab:f9:dc:25:67:12:45:16:21:e0:6e:a1:00:6a:f9:9f: fd:8a:8f:22:ec:e4:b8:70:bd:33:f2:f3:c6:28:88:5e:9e:17: 6d:6e:fb:2e:1d:23:86:5d:c1:6d:48:80:bd:56:02:16:df:e6: bb:ab:77:21:00:18:7c:d8:b4:8d:9c:1f:f4:b0:fc:99:c3:8f: 10:85:bd:49:88:1f:53:67:d5:99:43:46:f8:13:69:cf:d2:d8: 60:3a:0b:18:be:9e:68:c5:3a:31:87:ea:0d:a6:18:a6:f8:12: 38:50:49:99:06:c4:4f:2e:80:75:2d:45:e8:8d:17:e7:4c:94: f3:b0:50:75:8b:02:cd:3c:d2:a3:70:e4:c8:7f:d2:8e:46:a8: 7f:fa:64:1d:89:83:84:5e:b3:2c:c5:ce:b1:34:db:5c:56:77: c4:50:bb:13:fd:05:71:21:96:85:a5:47:57:d3:c2:77:87:03: 87:02:a2:9c:c1:1f:99:0c:4d:c6:dc:73:ba:fe:00:ac:68:98: 90:8d:37:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzTZpwc2EPZJdjUWNyfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzczOWVhMjQzYzQyMDc1NmNhNGFmMGE5YzFlMDRkYjExMDg2YWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn/xHFKd1qHw/cYk48cYn19UHepa Cp7mlpGdkJkDEJnzOgOYZpYRp/H4TpXV+iOBaG3z7O236bUeRAmrmWj1vudVV77m 7e2gIyZKqp/YSDUj+cnM6Hwf2V1YxxMhjtGk3nq7q9iTJ8pmSZvj+9224kj5b5Lk psWZA22lxeLIpO3e4i3eBIGJJj+SrxNY1rbb55BS8BerpW96jYbKuiU3XywFvQ7F tcHmO5IxplqINoZIg8AtvUrTcBGlKqc0bIaqyIsBXWzVuoccqwheWtLQNMqtBWKV ZLS33jw2Yk2S8HlOgHQbxNtsbg/yP8tfNBq8uAJbNmKcEwsDTkLEzJb/DQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAdznqJDxCB1bKSvCpweBNsRCGrgMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEvQjNPZW9rUEVJSFZzcEs4S25CNEUyeEVJYXVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ7UMA0G CSqGSIb3DQEBCwUAA4IBAQBAC19fpupZ1ShnZclTDTs5X2y2GJpxEsfy0Tbxl5DC PXsLYaOVEQFeSbQsIwQcRkvldk9XsAj2rKv53CVnEkUWIeBuoQBq+Z/9io8i7OS4 cL0z8vPGKIhenhdtbvsuHSOGXcFtSIC9VgIW3+a7q3chABh82LSNnB/0sPyZw48Q hb1JiB9TZ9WZQ0b4E2nP0thgOgsYvp5oxToxh+oNphim+BI4UEmZBsRPLoB1LUXo jRfnTJTzsFB1iwLNPNKjcOTIf9KORqh/+mQdiYOEXrMsxc6xNNtcVnfEULsT/QVx IZaFpUdX08J3hwOHAqKcwR+ZDE3G3HO6/gCsaJiQjTdU -----END CERTIFICATE-----Generated at Sun Jan 25 22:17:07 2026 by rpki-client