This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/oWZr4E334Nl5dhHXKUDjCqLCGyM.roa File: oWZr4E334Nl5dhHXKUDjCqLCGyM.roa (raw, json) Hash identifier: nZfWnD1u4woMdciLaCwLWuHO0I+/98sheC0fCywH+V8= Subject key identifier: A1:66:6B:E0:4D:F7:E0:D9:79:76:11:D7:29:40:E3:0A:A2:C2:1B:23 Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5 Certificate serial: 019B7D5C05EEA6FEC09E50E18CB9B5F63723 Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/oWZr4E334Nl5dhHXKUDjCqLCGyM.roa Signing time: Fri 02 Jan 2026 06:19:01 +0000 ROA not before: Fri 02 Jan 2026 06:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201689 IP address blocks: 185.66.228.0/22 maxlen: 22 185.66.228.0/24 maxlen: 24 185.66.229.0/24 maxlen: 24 185.66.230.0/24 maxlen: 24 185.66.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:05:ee:a6:fe:c0:9e:50:e1:8c:b9:b5:f6:37:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5 Validity Not Before: Jan 2 06:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1666be04df7e0d9797611d72940e30aa2c21b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fb:2e:81:82:01:89:0a:69:88:37:c8:02:d1: 69:37:3f:b1:06:7e:02:74:4c:7c:d6:f3:cf:77:79: ef:00:58:83:7c:c8:ca:13:d8:63:ae:67:87:9a:b1: 28:6b:7a:a7:b1:45:28:3c:59:1b:80:63:5a:b5:aa: 1b:5f:26:bf:84:99:dc:71:ed:03:ab:ed:a9:67:69: e8:7a:5f:51:6e:08:a6:6a:58:2b:16:e7:4e:04:6f: 38:10:fd:8f:b5:3f:09:7c:3c:3b:97:b8:97:43:d6: fe:7b:84:d6:0c:32:d3:8e:dc:85:af:48:67:d8:9e: f8:3d:19:84:57:41:53:00:4b:73:4f:3f:1e:c3:da: 1c:b9:73:13:9c:d5:3d:74:06:d1:5a:8d:9a:c1:d4: 90:80:a4:07:88:ee:22:d7:2d:ad:67:74:c8:56:6f: 9c:c7:c0:55:c0:75:59:8b:7e:69:2a:6e:3e:31:fc: b0:74:ec:68:9f:ff:15:ce:83:7b:22:bf:53:ba:d7: 76:3f:4b:53:d9:62:93:00:0d:79:eb:b4:75:e3:cd: e3:2d:44:f7:bb:08:cf:71:0b:f8:cd:88:a5:55:ae: a5:c6:aa:8d:41:39:b8:e5:45:d0:a5:4a:ea:5c:20: f5:dc:6f:93:84:79:9f:c1:8d:07:e5:c8:9a:ef:69: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:66:6B:E0:4D:F7:E0:D9:79:76:11:D7:29:40:E3:0A:A2:C2:1B:23 X509v3 Authority Key Identifier: keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/oWZr4E334Nl5dhHXKUDjCqLCGyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.228.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:29:ac:45:fb:05:dc:80:67:14:49:14:d6:f9:80:79:13:cf: 1c:10:5f:74:ec:5a:27:c5:49:fd:db:46:b8:fc:d2:26:12:0f: be:48:d1:39:52:b2:7d:81:b6:ea:dd:8c:24:8a:97:73:4a:29: a5:de:a0:0f:9b:b7:92:4e:fc:84:f5:c0:c8:4d:3c:de:1f:61: bf:7e:a6:45:28:18:2e:7d:5b:5d:2c:9a:5b:f5:bd:2f:8c:7d: 39:4f:c9:8a:e4:4c:39:22:64:75:c4:8f:fd:84:f8:fe:34:cb: fb:d7:03:b7:d1:5d:5b:cd:0e:99:e0:0c:fc:57:94:99:4e:ce: bc:72:8f:96:06:6f:73:a9:75:82:02:70:be:fa:3c:62:bf:41: 90:b1:bd:fa:15:5f:bb:fa:98:5a:d6:fa:14:11:82:3f:50:32: eb:95:58:bc:9e:fc:11:e8:4d:74:29:5a:34:e4:9c:5c:fe:e2: 5c:39:28:2f:0b:e8:27:51:ce:01:ae:07:b6:dd:73:33:15:cb: e9:19:d1:4b:5f:de:d4:f5:e7:db:86:df:07:b2:f3:73:99:79: 4a:a3:7e:9e:50:89:35:1f:b3:ab:9a:0f:a5:11:0f:71:80:3c: da:52:99:3a:59:03:1a:14:f9:02:87:f2:59:1b:de:14:ff:5b: 55:58:ae:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XAXupv7AnlDhjLm19jcjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNWRiODExYjVkNWQwNWJlYzM3ZWU5ZDA5YTRlYzUyZWVl ZDFhZDUwHhcNMjYwMTAyMDYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTY2NmJlMDRkZjdlMGQ5Nzk3NjExZDcyOTQwZTMwYWEyYzIxYjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fsugYIBiQppiDfIAtFpNz+xBn4C dEx81vPPd3nvAFiDfMjKE9hjrmeHmrEoa3qnsUUoPFkbgGNataobXya/hJncce0D q+2pZ2noel9RbgimalgrFudOBG84EP2PtT8JfDw7l7iXQ9b+e4TWDDLTjtyFr0hn 2J74PRmEV0FTAEtzTz8ew9ocuXMTnNU9dAbRWo2awdSQgKQHiO4i1y2tZ3TIVm+c x8BVwHVZi35pKm4+MfywdOxon/8VzoN7Ir9Tutd2P0tT2WKTAA1567R1483jLUT3 uwjPcQv4zYilVa6lxqqNQTm45UXQpUrqXCD13G+ThHmfwY0H5cia72kNRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKFma+BN9+DZeXYR1ylA4wqiwhsjMB8GA1UdIwQY MBaAFL9duBG11dBb7DfunQmk7FLu7RrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2Mt NzE1ZjA5ODE3MzQxLzEvb1dacjRFMzM0Tmw1ZGhIWEtVRGpDcUxDR3lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2MtNzE1ZjA5ODE3MzQx LzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuULkMA0G CSqGSIb3DQEBCwUAA4IBAQBdKaxF+wXcgGcUSRTW+YB5E88cEF907FonxUn920a4 /NImEg++SNE5UrJ9gbbq3YwkipdzSiml3qAPm7eSTvyE9cDITTzeH2G/fqZFKBgu fVtdLJpb9b0vjH05T8mK5Ew5ImR1xI/9hPj+NMv71wO30V1bzQ6Z4Az8V5SZTs68 co+WBm9zqXWCAnC++jxiv0GQsb36FV+7+pha1voUEYI/UDLrlVi8nvwR6E10KVo0 5Jxc/uJcOSgvC+gnUc4Brge23XMzFcvpGdFLX97U9efbht8HsvNzmXlKo36eUIk1 H7Ormg+lEQ9xgDzaUpk6WQMaFPkCh/JZG94U/1tVWK5k -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:49 2026 by rpki-client