This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/FOt64C6RCxN5JGIdYYt0-jp9RJQ.roa File: FOt64C6RCxN5JGIdYYt0-jp9RJQ.roa (raw, json) Hash identifier: tamHBKuLjpWpXY8LQK286Mn5I3Q0OVkX8D4lvECCpD8= Subject key identifier: 14:EB:7A:E0:2E:91:0B:13:79:24:62:1D:61:8B:74:FA:3A:7D:44:94 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019B7D5B6B622B7D326B0717BE189597C638 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/FOt64C6RCxN5JGIdYYt0-jp9RJQ.roa Signing time: Fri 02 Jan 2026 06:18:21 +0000 ROA not before: Fri 02 Jan 2026 06:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208650 IP address blocks: 185.202.134.0/24 maxlen: 24 185.202.135.0/24 maxlen: 24 2a0a:d6c0:134::/48 maxlen: 48 2a0a:d6c0:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:6b:62:2b:7d:32:6b:07:17:be:18:95:97:c6:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jan 2 06:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14eb7ae02e910b137924621d618b74fa3a7d4494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:65:2e:d9:ed:8c:3e:3d:a7:5c:61:9c:f0:43: a6:86:3d:64:d0:d2:ed:8e:b5:4a:06:b4:67:7e:cf: 82:20:22:08:34:d8:91:72:d1:77:9e:d4:82:a8:39: d6:00:68:57:48:d2:3b:ae:fa:7e:42:a4:76:3b:ef: 46:27:23:c7:b9:85:0e:a9:dd:66:00:3d:e5:f8:a2: 3b:b9:1d:8c:96:d7:13:c1:9b:3a:92:16:8b:f5:88: e5:50:c0:9e:5c:ce:63:15:d8:65:6b:7b:7e:5b:84: 91:10:6d:59:73:fe:94:03:63:f6:86:a1:72:6b:51: b5:c7:da:6a:ab:df:bd:32:fc:da:87:dc:19:1b:b7: 7d:2d:d0:cc:21:29:95:e5:15:82:70:30:2e:d0:de: f3:91:1f:24:75:8a:90:d7:ae:15:68:6e:10:c3:33: 6e:1e:7e:5e:ee:d2:72:a3:0c:05:3a:af:46:a9:a2: f1:04:c1:0e:a6:13:48:0e:d6:7d:21:be:f8:06:4e: cc:53:1f:3b:37:5d:e9:a9:0b:86:b8:2d:be:6b:9a: ce:32:13:15:fa:0c:f1:d8:f6:fa:15:0a:c7:13:4a: 57:15:d1:19:79:08:84:94:90:50:c9:d4:67:99:36: 02:96:4e:5c:b9:fc:a2:3e:f0:0a:82:18:f2:57:66: 1b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EB:7A:E0:2E:91:0B:13:79:24:62:1D:61:8B:74:FA:3A:7D:44:94 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/FOt64C6RCxN5JGIdYYt0-jp9RJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.134.0/23 IPv6: 2a0a:d6c0:134::/47 Signature Algorithm: sha256WithRSAEncryption 55:29:da:3c:2e:ea:76:b7:d7:ca:89:b8:20:27:55:25:01:25: 98:d0:e0:0b:bb:bd:0c:b0:9c:c6:da:d1:01:04:9e:0c:10:19: 72:65:a1:a6:d1:e8:0f:c4:e1:09:0c:50:e8:14:f3:8c:bc:7f: 20:7d:69:7c:b3:2e:f4:95:a4:2d:19:47:5b:86:47:c3:d7:19: 65:23:57:52:c7:5b:ef:a3:aa:45:27:e5:d5:56:32:be:8c:3d: 65:9c:9c:cd:77:d4:bc:8a:9b:ed:cd:33:1d:3f:3e:14:51:5a: f0:cf:32:fe:80:4b:5e:60:2a:72:5d:4c:c8:fc:65:b3:0c:b7: ac:d8:9c:e2:f5:ff:7c:77:f3:76:3d:1f:e0:ab:89:c8:df:49: ef:cc:d8:13:1c:66:68:91:e1:0d:60:52:b4:13:12:ac:8a:04: f7:c1:94:1e:72:7b:4b:28:d7:32:dc:a2:d3:91:41:48:ec:73: 74:ea:1e:b4:a0:1b:8e:f7:14:4e:9d:e3:66:d3:b5:e6:06:98: 5c:6c:93:b5:be:89:d9:a9:af:51:f8:b1:7f:8a:a2:49:f7:1a: 88:50:55:b8:43:2a:71:b8:bc:a1:b3:4f:92:84:f6:f2:95:e1: 42:4b:6c:23:f8:67:92:bc:30:84:a3:cf:e3:ab:29:33:94:37: 76:df:98:1f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9W2tiK30yawcXvhiVl8Y4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwMTAyMDYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGViN2FlMDJlOTEwYjEzNzkyNDYyMWQ2MThiNzRmYTNhN2Q0NDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWUu2e2MPj2nXGGc8EOmhj1k0NLt jrVKBrRnfs+CICIINNiRctF3ntSCqDnWAGhXSNI7rvp+QqR2O+9GJyPHuYUOqd1m AD3l+KI7uR2MltcTwZs6khaL9YjlUMCeXM5jFdhla3t+W4SREG1Zc/6UA2P2hqFy a1G1x9pqq9+9Mvzah9wZG7d9LdDMISmV5RWCcDAu0N7zkR8kdYqQ164VaG4QwzNu Hn5e7tJyowwFOq9GqaLxBMEOphNIDtZ9Ib74Bk7MUx87N13pqQuGuC2+a5rOMhMV +gzx2Pb6FQrHE0pXFdEZeQiElJBQydRnmTYClk5cufyiPvAKghjyV2YbvQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBTreuAukQsTeSRiHWGLdPo6fUSUMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvRk90NjRDNlJDeE41SkdJZFlZdDAtanA5UkpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBucqGMA8E AgACMAkDBwEqCtbAATQwDQYJKoZIhvcNAQELBQADggEBAFUp2jwu6na318qJuCAn VSUBJZjQ4Au7vQywnMba0QEEngwQGXJloabR6A/E4QkMUOgU84y8fyB9aXyzLvSV pC0ZR1uGR8PXGWUjV1LHW++jqkUn5dVWMr6MPWWcnM131LyKm+3NMx0/PhRRWvDP Mv6AS15gKnJdTMj8ZbMMt6zYnOL1/3x383Y9H+CricjfSe/M2BMcZmiR4Q1gUrQT EqyKBPfBlB5ye0so1zLcotORQUjsc3TqHrSgG473FE6d42bTteYGmFxsk7W+idmp r1H4sX+Kokn3GohQVbhDKnG4vKGzT5KE9vKV4UJLbCP4Z5K8MISjz+OrKTOUN3bf mB8= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:01 2026 by rpki-client