This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/oFw3SjXONxoRvFCb2uNV1sjLFI0.roa File: oFw3SjXONxoRvFCb2uNV1sjLFI0.roa (raw, json) Hash identifier: 7GoC5001gn3Up9F24iVhhvmDvHAYiicBVJ35jiod/jg= Subject key identifier: A0:5C:37:4A:35:CE:37:1A:11:BC:50:9B:DA:E3:55:D6:C8:CB:14:8D Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C12303F1F1349B1B7E4D795B8DA771B Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/oFw3SjXONxoRvFCb2uNV1sjLFI0.roa Signing time: Fri 02 Jan 2026 00:18:45 +0000 ROA not before: Fri 02 Jan 2026 00:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8517 IP address blocks: 79.123.128.0/17 maxlen: 24 95.183.128.0/17 maxlen: 24 185.7.0.0/22 maxlen: 22 193.140.0.0/16 maxlen: 24 193.140.1.0/24 maxlen: 24 193.140.2.0/23 maxlen: 23 193.140.4.0/22 maxlen: 22 193.140.24.0/22 maxlen: 22 193.140.35.0/24 maxlen: 24 193.140.68.0/23 maxlen: 23 193.140.83.0/24 maxlen: 24 193.140.88.0/24 maxlen: 24 193.140.98.0/23 maxlen: 23 193.140.134.0/24 maxlen: 24 193.140.152.0/22 maxlen: 22 193.140.159.0/24 maxlen: 24 193.140.183.0/24 maxlen: 24 193.140.244.0/22 maxlen: 22 193.140.248.0/22 maxlen: 22 193.140.252.0/23 maxlen: 23 193.255.0.0/16 maxlen: 24 193.255.58.0/24 maxlen: 24 194.27.0.0/16 maxlen: 24 194.27.43.0/24 maxlen: 24 194.27.232.0/22 maxlen: 22 194.27.236.0/23 maxlen: 23 2001:a98::/32 maxlen: 32 2001:a98:1e::/48 maxlen: 48 2001:a98:20::/48 maxlen: 48 2001:a98:120::/48 maxlen: 48 2001:a98:130::/48 maxlen: 48 2001:a98:150::/48 maxlen: 48 2001:a98:160::/48 maxlen: 48 2001:a98:170::/48 maxlen: 48 2001:a98:180::/48 maxlen: 48 2001:a98:190::/48 maxlen: 48 2001:a98:1a0::/48 maxlen: 48 2001:a98:1b0::/48 maxlen: 48 2001:a98:1c0::/48 maxlen: 48 2001:a98:1d0::/48 maxlen: 48 2001:a98:1e0::/48 maxlen: 48 2001:a98:1f0::/48 maxlen: 48 2001:a98:200::/48 maxlen: 48 2001:a98:210::/48 maxlen: 48 2001:a98:220::/48 maxlen: 48 2001:a98:230::/48 maxlen: 48 2001:a98:240::/48 maxlen: 48 2001:a98:250::/48 maxlen: 48 2001:a98:260::/48 maxlen: 48 2001:a98:280::/48 maxlen: 48 2001:a98:290::/48 maxlen: 48 2001:a98:600::/48 maxlen: 48 2001:a98:1050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:30:3f:1f:13:49:b1:b7:e4:d7:95:b8:da:77:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a05c374a35ce371a11bc509bdae355d6c8cb148d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2d:88:45:5d:08:84:a7:b6:b8:0c:9b:49:86: 9a:c3:10:ab:80:f7:7b:f6:1f:88:5b:7c:75:01:3e: 59:c9:bd:3d:9f:2e:7b:e9:be:37:7b:49:fc:0a:82: e4:95:d6:34:53:c8:8b:dd:05:b0:18:20:0f:29:cd: 16:08:c0:ff:f7:1b:de:4a:f2:cb:b9:0d:fb:05:84: b4:8c:78:22:e5:53:fe:f2:e0:8b:1d:29:e6:61:66: 11:1a:45:80:8b:fe:d2:94:91:66:5c:6b:de:82:ab: c9:6e:21:e1:59:1a:fb:05:2c:42:5e:bb:09:aa:d6: 9d:84:e1:c4:e0:21:38:91:84:7a:d5:f3:a5:5b:39: ea:3e:5a:40:99:83:ff:60:48:59:d3:f1:14:f8:b4: 87:1c:bf:f9:e3:53:62:95:8b:e5:0c:5c:9b:eb:bb: 8c:c3:f7:b8:60:3a:73:1a:e1:a1:a0:5e:51:72:38: ea:a5:a8:47:1a:fb:39:8f:58:c6:20:54:03:b6:7b: 1e:d6:72:2a:5c:85:b6:f7:40:80:94:66:e2:5f:1e: 15:df:a2:db:b4:9f:3f:64:05:15:d2:35:eb:0d:58: b2:f7:53:7a:f5:ff:dc:94:cf:10:5a:4d:f3:90:41: 6b:96:3e:db:83:4e:e5:64:da:25:8f:68:7c:72:40: ef:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5C:37:4A:35:CE:37:1A:11:BC:50:9B:DA:E3:55:D6:C8:CB:14:8D X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/oFw3SjXONxoRvFCb2uNV1sjLFI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.123.128.0/17 95.183.128.0/17 185.7.0.0/22 193.140.0.0/16 193.255.0.0/16 194.27.0.0/16 IPv6: 2001:a98::/32 Signature Algorithm: sha256WithRSAEncryption 22:f5:eb:38:95:8f:91:fd:8b:4b:76:ef:61:dc:9d:18:64:1c: 34:64:9c:2b:47:ad:e6:fa:31:b3:67:4e:0e:53:46:31:cf:9f: 04:6f:89:38:ec:cd:46:55:b0:25:e2:75:80:ee:0f:d4:32:a5: 1b:57:f7:6a:cd:b8:f5:e2:f5:fa:d6:d9:91:55:35:66:23:93: a5:63:f2:1a:d8:b8:d7:26:bf:4d:d0:2d:e9:c5:66:5c:e0:b8: c7:b8:e6:e1:8e:ec:19:66:5a:ee:18:05:96:5a:31:f9:6c:26: 35:19:d5:29:a3:47:73:85:2f:3a:77:71:34:7d:9d:04:cc:4a: 9b:31:4a:da:5f:a7:94:10:1d:a9:99:e5:0b:e0:f6:70:8e:5b: 5a:39:62:32:54:4d:8a:7a:ef:16:ee:cf:1a:76:27:6f:e8:a7: 75:b0:79:e6:55:7b:62:08:75:4a:35:78:8e:b6:de:73:89:52: 44:1c:d2:15:6a:9f:db:26:95:4e:ae:d7:eb:fd:a8:e7:a4:56: a2:80:72:80:10:db:d5:ad:e1:ba:28:5c:28:b7:56:63:2a:b2: 53:36:af:ed:65:0c:56:24:81:13:1c:f9:5b:ac:70:8b:8b:b5: 02:ab:a0:d3:11:11:0b:73:6b:3b:fa:40:c7:cb:0b:0d:ff:c1: 5d:08:8d:3b -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt8EjA/HxNJsbfk15W42ncbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDVjMzc0YTM1Y2UzNzFhMTFiYzUwOWJkYWUzNTVkNmM4Y2IxNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy2IRV0IhKe2uAybSYaawxCrgPd7 9h+IW3x1AT5Zyb09ny576b43e0n8CoLkldY0U8iL3QWwGCAPKc0WCMD/9xveSvLL uQ37BYS0jHgi5VP+8uCLHSnmYWYRGkWAi/7SlJFmXGvegqvJbiHhWRr7BSxCXrsJ qtadhOHE4CE4kYR61fOlWznqPlpAmYP/YEhZ0/EU+LSHHL/541NilYvlDFyb67uM w/e4YDpzGuGhoF5RcjjqpahHGvs5j1jGIFQDtnse1nIqXIW290CAlGbiXx4V36Lb tJ8/ZAUV0jXrDViy91N69f/clM8QWk3zkEFrlj7bg07lZNolj2h8ckDvwQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFKBcN0o1zjcaEbxQm9rjVdbIyxSNMB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvb0Z3M1NqWE9OeG9SdkZDYjJ1TlYxc2pMRkkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAnBAIAATAhAwQHT3uAAwQH X7eAAwQCuQcAAwMAwYwDAwDB/wMDAMIbMA0EAgACMAcDBQAgAQqYMA0GCSqGSIb3 DQEBCwUAA4IBAQAi9es4lY+R/YtLdu9h3J0YZBw0ZJwrR63m+jGzZ04OU0Yxz58E b4k47M1GVbAl4nWA7g/UMqUbV/dqzbj14vX61tmRVTVmI5OlY/Ia2LjXJr9N0C3p xWZc4LjHuObhjuwZZlruGAWWWjH5bCY1GdUpo0dzhS86d3E0fZ0EzEqbMUraX6eU EB2pmeUL4PZwjltaOWIyVE2Keu8W7s8adidv6Kd1sHnmVXtiCHVKNXiOtt5ziVJE HNIVap/bJpVOrtfr/ajnpFaigHKAENvVreG6KFwot1ZjKrJTNq/tZQxWJIETHPlb rHCLi7UCq6DTERELc2s7+kDHywsN/8FdCI07 -----END CERTIFICATE-----Generated at Mon Jan 26 11:06:20 2026 by rpki-client