This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/OW65PTWCsUr6rYv2nxQ4ao8piZo.roa File: OW65PTWCsUr6rYv2nxQ4ao8piZo.roa (raw, json) Hash identifier: VLNBF5WuX5ZBGEPR8/YSpx5OT5Jf+BPBXizwYwHgpSQ= Subject key identifier: 39:6E:B9:3D:35:82:B1:4A:FA:AD:8B:F6:9F:14:38:6A:8F:29:89:9A Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Certificate serial: 019B7BA33B1D64A9B40A72A5D459C5664EF3 Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/OW65PTWCsUr6rYv2nxQ4ao8piZo.roa Signing time: Thu 01 Jan 2026 22:17:33 +0000 ROA not before: Thu 01 Jan 2026 22:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209824 IP address blocks: 85.209.52.0/24 maxlen: 24 85.209.53.0/24 maxlen: 24 85.209.54.0/24 maxlen: 24 85.209.55.0/24 maxlen: 24 2a09:9340::/30 maxlen: 30 2a09:9344::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:3b:1d:64:a9:b4:0a:72:a5:d4:59:c5:66:4e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=396eb93d3582b14afaad8bf69f14386a8f29899a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:85:d3:f2:25:eb:03:75:f0:0a:5e:6a:81: ad:4b:e3:10:20:18:56:5d:8a:f8:88:4e:6b:d5:29: 9a:c1:c1:e3:a1:20:71:d6:84:72:af:42:a3:3e:0c: bf:82:c5:fe:99:63:87:70:aa:54:42:02:b6:42:ba: be:ba:b9:36:5c:ba:f9:a3:4f:f3:7f:81:40:44:72: de:7b:02:31:86:ef:4a:ca:c1:40:b4:28:05:30:aa: 08:a3:ad:02:95:1a:ba:fb:19:72:5d:64:ce:c6:20: 1c:9a:06:a8:15:01:96:8f:53:8e:51:e5:2f:a2:22: 62:85:c0:9b:8d:0a:09:1d:60:47:ee:39:80:83:3a: f4:39:2d:2b:26:57:42:92:5f:6b:99:09:e3:14:dd: 9b:e8:3a:5d:99:d8:48:64:15:39:19:70:65:df:d8: 9c:3d:bc:bd:0e:49:68:1e:62:a1:cb:90:bb:cb:65: 27:d6:cf:47:b2:f5:7a:16:4a:2e:14:d7:07:1e:49: 8a:c5:97:14:ad:a5:f5:e7:df:27:de:de:f3:49:f3: a0:cb:93:fc:d4:af:75:94:8a:70:3d:26:e5:f2:31: 45:60:6b:2b:fb:3b:82:eb:2d:b2:f5:6f:8b:e3:27: 84:e9:1e:ae:5e:18:66:cc:66:b0:21:ac:3a:b1:63: d6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6E:B9:3D:35:82:B1:4A:FA:AD:8B:F6:9F:14:38:6A:8F:29:89:9A X509v3 Authority Key Identifier: keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/OW65PTWCsUr6rYv2nxQ4ao8piZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.52.0/22 IPv6: 2a09:9340::/29 Signature Algorithm: sha256WithRSAEncryption 8e:05:20:60:c0:fd:a6:bb:8b:bb:f3:54:71:37:a3:30:2d:b7: a2:4d:ca:32:21:aa:08:89:93:ef:57:af:39:7a:35:71:f7:33: e7:95:a2:c1:48:ac:1f:21:ab:0a:1a:b6:28:de:89:15:6e:a9: 38:49:dd:d0:bf:bc:c9:ff:ae:91:74:46:79:92:5a:e4:ec:57: 64:b7:5b:29:90:07:10:e5:f9:02:ce:b1:35:aa:02:19:9f:07: a7:9d:71:53:f7:b7:a7:46:33:c0:ae:54:30:3d:31:c0:d4:94: 48:0c:4e:f9:4b:e4:51:f5:b8:38:78:84:45:d2:e3:ea:66:79: 08:34:1b:79:e9:b8:b1:af:f3:e4:b2:b0:12:38:34:1c:02:9b: b6:fa:a7:90:82:b8:54:f7:d4:76:ae:d7:5a:0b:24:ff:5c:d4: 94:9d:59:64:65:4a:86:19:e1:2b:30:35:bc:79:34:bf:a3:90: a6:e0:63:d2:a7:29:f6:1a:0e:44:c7:5a:1c:05:ed:36:f2:fd: 34:d7:e9:e7:04:aa:6f:51:a5:e3:23:bc:4e:0f:b4:2c:b3:d2: 48:6f:89:79:e4:11:da:ea:18:b0:15:37:c6:35:f3:12:9d:f2: 79:6d:cf:45:e0:32:a1:3a:70:de:c9:36:0e:69:f3:88:47:4d: 55:eb:eb:d1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7ozsdZKm0CnKl1FnFZk7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWY2MWY2NjA4ZjlhOWVhYzE0YjE4MjI0ODU0ODA3YmNk YzEzMjQwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTZlYjkzZDM1ODJiMTRhZmFhZDhiZjY5ZjE0Mzg2YThmMjk4OTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkaF0/Il6wN18ApeaoGtS+MQIBhW XYr4iE5r1SmawcHjoSBx1oRyr0KjPgy/gsX+mWOHcKpUQgK2Qrq+urk2XLr5o0/z f4FARHLeewIxhu9KysFAtCgFMKoIo60ClRq6+xlyXWTOxiAcmgaoFQGWj1OOUeUv oiJihcCbjQoJHWBH7jmAgzr0OS0rJldCkl9rmQnjFN2b6DpdmdhIZBU5GXBl39ic Pby9DkloHmKhy5C7y2Un1s9HsvV6FkouFNcHHkmKxZcUraX1598n3t7zSfOgy5P8 1K91lIpwPSbl8jFFYGsr+zuC6y2y9W+L4yeE6R6uXhhmzGawIaw6sWPWTQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDluuT01grFK+q2L9p8UOGqPKYmaMB8GA1UdIwQY MBaAFI2vYfZgj5qerBSxgiSFSAe83BMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUt ZmIyNGJlNzVhM2Y0LzEvT1c2NVBUV0NzVXI2cll2Mm54UTRhbzhwaVpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUtZmIyNGJlNzVhM2Y0 LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCVdE0MA0E AgACMAcDBQMqCZNAMA0GCSqGSIb3DQEBCwUAA4IBAQCOBSBgwP2mu4u781RxN6Mw LbeiTcoyIaoIiZPvV685ejVx9zPnlaLBSKwfIasKGrYo3okVbqk4Sd3Qv7zJ/66R dEZ5klrk7Fdkt1spkAcQ5fkCzrE1qgIZnwennXFT97enRjPArlQwPTHA1JRIDE75 S+RR9bg4eIRF0uPqZnkINBt56bixr/PksrASODQcApu2+qeQgrhU99R2rtdaCyT/ XNSUnVlkZUqGGeErMDW8eTS/o5Cm4GPSpyn2Gg5Ex1ocBe028v001+nnBKpvUaXj I7xOD7Qss9JIb4l55BHa6hiwFTfGNfMSnfJ5bc9F4DKhOnDeyTYOafOIR01V6+vR -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:17 2026 by rpki-client