This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/o-KeOtGqQYJCymvrV8r9HfOrq9k.roa File: o-KeOtGqQYJCymvrV8r9HfOrq9k.roa (raw, json) Hash identifier: UoDtbFFKcrDfR017cPTt032e6iAULTmVfReOTRfK9VA= Subject key identifier: A3:E2:9E:3A:D1:AA:41:82:42:CA:6B:EB:57:CA:FD:1D:F3:AB:AB:D9 Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44 Certificate serial: 019B7A5B8856B7E6FBDA5BA3318BEB70F11E Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/o-KeOtGqQYJCymvrV8r9HfOrq9k.roa Signing time: Thu 01 Jan 2026 16:19:37 +0000 ROA not before: Thu 01 Jan 2026 16:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209252 IP address blocks: 85.208.28.0/24 maxlen: 24 85.208.29.0/24 maxlen: 24 85.208.30.0/24 maxlen: 24 85.208.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:88:56:b7:e6:fb:da:5b:a3:31:8b:eb:70:f1:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44 Validity Not Before: Jan 1 16:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3e29e3ad1aa418242ca6beb57cafd1df3ababd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b8:cb:a1:dc:3d:d4:92:a9:91:f1:17:d6:5b: 34:1f:ed:54:0f:8b:54:9d:52:c0:03:b4:06:18:da: 2d:88:2f:ec:05:2f:c0:12:da:f9:d2:5d:db:3a:28: fa:68:51:27:cd:18:79:37:0a:7a:51:65:97:6f:22: 11:3d:51:17:ef:20:32:77:36:e7:7f:64:df:f8:29: 71:fa:8d:91:9c:a7:41:b3:a6:9b:7f:53:1f:ea:73: 1a:4e:1a:b1:94:d2:59:e7:54:f6:b0:53:7d:57:4e: 47:e6:39:8e:ac:fd:8d:b1:31:40:02:ed:54:dd:a8: d5:b6:c3:a0:1d:6a:e1:fb:19:e3:2a:5a:57:73:6e: a2:cd:0a:8a:ff:db:ae:0b:1d:d9:07:98:5a:27:a9: 5d:a9:e4:e5:e4:16:a5:43:7d:86:bc:08:4a:15:b9: 32:fd:a3:27:62:3b:71:80:a3:b4:57:57:da:63:89: 2d:d6:6b:2b:b2:aa:70:6d:c9:f7:4c:76:93:41:99: ea:65:43:fa:77:f4:b4:99:7b:9b:13:15:c3:1f:94: 29:1b:b4:d1:20:66:2e:ac:64:e3:a1:4c:04:6e:a3: 32:4e:e9:52:34:5a:bc:98:b7:5f:62:f4:54:7b:8c: c4:18:11:4e:ca:c9:aa:22:1e:eb:6e:9a:60:f4:cd: c9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E2:9E:3A:D1:AA:41:82:42:CA:6B:EB:57:CA:FD:1D:F3:AB:AB:D9 X509v3 Authority Key Identifier: keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/o-KeOtGqQYJCymvrV8r9HfOrq9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.28.0/22 Signature Algorithm: sha256WithRSAEncryption 73:db:d9:18:b2:6c:e2:36:e7:9f:da:3c:e0:b5:8f:8c:9d:56: ad:a6:dc:a2:ee:d7:1e:32:69:94:27:4d:32:ea:d6:71:ed:b2: 63:0a:9f:00:fa:de:b5:e4:3e:27:2e:61:d5:d7:09:ee:79:9c: f0:0c:82:48:b6:42:12:5a:9c:0e:07:b2:cc:ca:8b:46:e2:68: 8d:12:65:34:5c:0a:69:72:54:a1:14:b0:ca:b8:30:b5:36:69: 13:f7:82:3b:36:73:36:a1:07:64:f4:48:56:e7:48:46:3f:3d: 36:cf:04:e0:f8:fb:8e:6b:36:0a:7d:d2:d1:ba:d7:43:f6:3d: f6:1e:24:13:43:45:f0:4b:6a:98:d6:87:a4:c1:45:d4:3a:55: 9c:e1:b7:eb:c4:84:4c:1c:c9:b2:11:ac:d1:f4:21:20:d5:c8: 29:38:a2:16:1c:78:a0:13:e0:eb:72:e7:c1:da:b2:38:c0:0a: b9:55:81:e7:52:84:76:50:7c:11:0c:34:c7:9a:d4:0c:dd:f4: 21:bd:49:9a:ff:dc:29:27:44:a6:f9:05:00:94:23:4c:48:04: 83:8c:9d:45:58:f7:bb:af:dd:4d:bd:94:51:99:17:54:32:9e: ad:bb:bf:f9:98:64:14:db:21:b0:c5:1e:c2:7d:3b:15:30:14: b7:e4:31:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4hWt+b72lujMYvrcPEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNjhlNTQ2MGRiYTU4NzFkYmU1MjMyMTQ4NDM5ZTIxNWIy OWJkNDQwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2UyOWUzYWQxYWE0MTgyNDJjYTZiZWI1N2NhZmQxZGYzYWJhYmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bjLodw91JKpkfEX1ls0H+1UD4tU nVLAA7QGGNotiC/sBS/AEtr50l3bOij6aFEnzRh5Nwp6UWWXbyIRPVEX7yAydzbn f2Tf+Clx+o2RnKdBs6abf1Mf6nMaThqxlNJZ51T2sFN9V05H5jmOrP2NsTFAAu1U 3ajVtsOgHWrh+xnjKlpXc26izQqK/9uuCx3ZB5haJ6ldqeTl5BalQ32GvAhKFbky /aMnYjtxgKO0V1faY4kt1msrsqpwbcn3THaTQZnqZUP6d/S0mXubExXDH5QpG7TR IGYurGTjoUwEbqMyTulSNFq8mLdfYvRUe4zEGBFOysmqIh7rbppg9M3JawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKPinjrRqkGCQspr61fK/R3zq6vZMB8GA1UdIwQY MBaAFDto5UYNulhx2+UjIUhDniFbKb1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWIt MDU1MTEyNTYwZmM5LzEvby1LZU90R3FRWUpDeW12clY4cjlIZk9ycTlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWItMDU1MTEyNTYwZmM5 LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdAcMA0G CSqGSIb3DQEBCwUAA4IBAQBz29kYsmziNuef2jzgtY+MnVatptyi7tceMmmUJ00y 6tZx7bJjCp8A+t615D4nLmHV1wnueZzwDIJItkISWpwOB7LMyotG4miNEmU0XApp clShFLDKuDC1NmkT94I7NnM2oQdk9EhW50hGPz02zwTg+PuOazYKfdLRutdD9j32 HiQTQ0XwS2qY1oekwUXUOlWc4bfrxIRMHMmyEazR9CEg1cgpOKIWHHigE+DrcufB 2rI4wAq5VYHnUoR2UHwRDDTHmtQM3fQhvUma/9wpJ0Sm+QUAlCNMSASDjJ1FWPe7 r91NvZRRmRdUMp6tu7/5mGQU2yGwxR7CfTsVMBS35DFI -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:18 2026 by rpki-client