This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oobxvQhtj9Lrv2dulqwJXGkGY9w.roa File: oobxvQhtj9Lrv2dulqwJXGkGY9w.roa (raw, json) Hash identifier: jc3it6IwuM25x5oDnU15scpVAadFDARF5Qnu0rB6rkI= Subject key identifier: A2:86:F1:BD:08:6D:8F:D2:EB:BF:67:6E:96:AC:09:5C:69:06:63:DC Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC5E23185B7D6E525BD751012EA207 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oobxvQhtj9Lrv2dulqwJXGkGY9w.roa Signing time: Thu 01 Jan 2026 14:18:12 +0000 ROA not before: Thu 01 Jan 2026 14:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7385 IP address blocks: 185.207.135.0/24 maxlen: 24 185.216.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:5e:23:18:5b:7d:6e:52:5b:d7:51:01:2e:a2:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a286f1bd086d8fd2ebbf676e96ac095c690663dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:13:54:23:18:c7:e3:ff:0b:60:a5:98:98: c8:9b:69:eb:15:94:81:6e:f6:b7:7c:b0:ac:e3:60: 36:5d:6b:d7:f5:1e:8f:87:57:2b:bf:72:14:1d:ac: a4:ed:d8:8c:e6:16:f7:07:c4:4c:58:6f:38:ee:5f: 30:fe:7b:ae:17:54:26:a2:4c:b6:6b:3a:e8:d1:ed: dc:36:81:a9:8a:ee:db:71:96:70:5e:f6:a1:50:5d: b3:86:96:bf:2b:25:e1:f5:cc:10:98:81:a1:7f:b2: 88:c0:ba:dc:45:18:8e:1d:35:41:28:57:ca:06:55: f0:8f:25:e5:e5:de:8e:2a:2e:1c:92:8f:ab:75:52: 3f:f3:6f:a2:0b:f1:95:3d:95:2d:d6:b5:fc:3d:fa: df:1b:7e:64:8d:e1:b9:b4:41:94:ea:e6:e3:87:d0: 73:0c:e1:c2:7a:28:18:f8:07:e4:a6:46:48:a4:4a: 86:12:f9:4b:b1:3a:93:47:12:51:4f:ef:6c:21:e7: 9a:c3:58:41:83:1d:a8:40:a5:e7:ad:68:58:94:2f: 03:ab:05:9a:3f:8b:77:17:55:36:ed:06:f3:1f:17: 53:3b:5c:5c:38:bf:48:d2:10:7b:22:db:a7:f6:41: a0:82:35:b2:65:a8:e3:2e:a2:02:10:9f:ca:e9:64: aa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:86:F1:BD:08:6D:8F:D2:EB:BF:67:6E:96:AC:09:5C:69:06:63:DC X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oobxvQhtj9Lrv2dulqwJXGkGY9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.135.0/24 185.216.104.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:00:02:9d:01:36:a3:7f:b9:9f:21:9a:91:a2:b6:02:d4:d8: 92:13:4f:03:8f:fa:57:86:61:d4:81:3a:f5:86:cb:1e:70:1b: 1b:3a:87:3e:6e:44:c3:c0:02:63:a6:86:2b:1f:ec:bd:90:9b: b4:45:58:af:1a:10:58:dc:32:c5:85:9e:6e:03:c0:86:fb:3a: e7:07:b4:32:ff:75:fc:7e:06:47:c6:62:aa:ba:7e:ba:7a:c6: 05:59:fd:fa:2e:cc:23:27:7b:5b:21:39:3f:3f:1c:d6:55:66: 9b:3e:a3:23:57:1c:26:73:00:a5:fc:32:06:5c:35:79:07:02: 33:4a:8b:08:12:54:e6:40:ed:36:d3:8e:78:77:d3:cb:9c:76: ff:20:f0:e1:c0:81:c8:83:d2:5c:a6:f4:2a:57:5f:3f:78:f2: 7a:a1:a1:39:91:ba:c7:91:8a:3a:94:82:03:1a:ab:2e:a2:dc: 15:38:ff:7d:58:05:12:9c:8b:83:15:59:94:3d:17:6f:40:95: 55:c5:8a:07:ce:33:bf:31:58:6b:c7:1d:3d:3e:49:ce:85:05: cc:74:fc:37:c7:fd:b1:d2:ff:bd:93:6a:17:0d:0f:b0:9b:cb: 2c:67:da:7f:b9:85:eb:5d:05:e7:c2:e7:ee:d7:f3:a1:7a:39: 28:67:c0:d1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57F4jGFt9blJb11EBLqIHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjg2ZjFiZDA4NmQ4ZmQyZWJiZjY3NmU5NmFjMDk1YzY5MDY2M2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt98TVCMYx+P/C2ClmJjIm2nrFZSB bva3fLCs42A2XWvX9R6Ph1crv3IUHayk7diM5hb3B8RMWG847l8w/nuuF1Qmoky2 azro0e3cNoGpiu7bcZZwXvahUF2zhpa/KyXh9cwQmIGhf7KIwLrcRRiOHTVBKFfK BlXwjyXl5d6OKi4cko+rdVI/82+iC/GVPZUt1rX8PfrfG35kjeG5tEGU6ubjh9Bz DOHCeigY+AfkpkZIpEqGEvlLsTqTRxJRT+9sIeeaw1hBgx2oQKXnrWhYlC8DqwWa P4t3F1U27QbzHxdTO1xcOL9I0hB7Itun9kGggjWyZajjLqICEJ/K6WSqQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKKG8b0IbY/S679nbpasCVxpBmPcMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvb29ieHZRaHRqOUxydjJkdWxxd0pYR2tHWTl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuc+HAwQC udhoMA0GCSqGSIb3DQEBCwUAA4IBAQBaAAKdATajf7mfIZqRorYC1NiSE08Dj/pX hmHUgTr1hssecBsbOoc+bkTDwAJjpoYrH+y9kJu0RVivGhBY3DLFhZ5uA8CG+zrn B7Qy/3X8fgZHxmKqun66esYFWf36LswjJ3tbITk/PxzWVWabPqMjVxwmcwCl/DIG XDV5BwIzSosIElTmQO020454d9PLnHb/IPDhwIHIg9JcpvQqV18/ePJ6oaE5kbrH kYo6lIIDGqsuotwVOP99WAUSnIuDFVmUPRdvQJVVxYoHzjO/MVhrxx09PknOhQXM dPw3x/2x0v+9k2oXDQ+wm8ssZ9p/uYXrXQXnwufu1/OhejkoZ8DR -----END CERTIFICATE-----Generated at Sun Jan 25 07:36:29 2026 by rpki-client