This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OURJuUogLW03Ludxn4Ljgq_wxhQ.roa File: OURJuUogLW03Ludxn4Ljgq_wxhQ.roa (raw, json) Hash identifier: if3rVxV8ktzJJ9N60CLTOFFFkFPJAzQdKaBZTNtTwFg= Subject key identifier: 39:44:49:B9:4A:20:2D:6D:37:2E:E7:71:9F:82:E3:82:AF:F0:C6:14 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1378551E373431DA767F88881A2DDC Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OURJuUogLW03Ludxn4Ljgq_wxhQ.roa Signing time: Fri 02 Jan 2026 00:20:09 +0000 ROA not before: Fri 02 Jan 2026 00:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 185.206.248.0/24 maxlen: 24 185.206.251.0/24 maxlen: 24 185.209.36.0/23 maxlen: 24 185.210.152.0/24 maxlen: 24 185.210.153.0/24 maxlen: 24 185.210.154.0/24 maxlen: 24 185.210.155.0/24 maxlen: 24 185.218.102.0/24 maxlen: 24 185.223.76.0/24 maxlen: 24 185.225.2.0/24 maxlen: 24 185.227.145.0/24 maxlen: 24 185.234.20.0/22 maxlen: 24 185.234.23.0/24 maxlen: 24 185.238.228.0/22 maxlen: 24 185.240.120.0/23 maxlen: 24 185.251.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:78:55:1e:37:34:31:da:76:7f:88:88:1a:2d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=394449b94a202d6d372ee7719f82e382aff0c614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d0:86:74:cc:48:21:b1:d7:3b:40:2d:6f:db: 29:78:07:22:0a:e5:6b:d6:19:6c:8d:7a:a4:ff:7b: 33:9e:dc:00:70:8b:34:04:a7:94:43:92:4d:1a:bb: 2d:3a:26:9b:d9:42:a8:4d:5c:ed:9e:43:a8:25:6e: 64:4b:d1:a2:2a:e6:bb:7c:7b:04:80:5a:85:c0:b1: 6e:94:3a:c3:83:97:b5:c2:1e:0b:1e:15:67:ec:60: 54:e0:ed:2c:b6:52:aa:48:ff:b1:56:49:54:12:0b: fc:6a:af:86:59:25:c1:41:94:f1:9a:11:ed:ad:00: 43:29:7b:33:7e:7a:d8:0f:eb:c0:0f:c0:e8:93:be: 2f:e9:f8:dc:9a:36:ad:a9:b5:0f:c5:b7:0a:34:4b: 30:e7:f3:c7:db:de:0b:4b:31:91:03:09:79:4f:40: 35:3f:3d:f3:82:49:c3:a9:27:d0:7a:75:29:dd:85: 88:0e:0e:9c:a8:04:7a:80:98:22:20:69:36:09:c8: 88:ee:be:7e:2d:72:62:56:8a:fb:2d:80:64:7f:4f: 4b:59:83:42:ae:f2:39:ea:64:62:13:bb:38:13:f3: d1:b5:ff:24:87:82:73:09:51:c6:40:cf:57:3a:9e: a3:47:70:80:92:d2:0f:6a:e4:cb:c9:85:c7:fa:b0: e0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:44:49:B9:4A:20:2D:6D:37:2E:E7:71:9F:82:E3:82:AF:F0:C6:14 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OURJuUogLW03Ludxn4Ljgq_wxhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.248.0/24 185.206.251.0/24 185.209.36.0/23 185.210.152.0/22 185.218.102.0/24 185.223.76.0/24 185.225.2.0/24 185.227.145.0/24 185.234.20.0/22 185.238.228.0/22 185.240.120.0/23 185.251.231.0/24 Signature Algorithm: sha256WithRSAEncryption b1:ee:a2:34:8b:d8:30:62:45:21:21:1d:6f:3c:3f:f7:1f:c5: 49:7b:4e:18:71:05:54:b8:1d:58:33:e4:e1:b1:3b:24:a4:9a: a2:bf:9e:c5:4f:32:01:1b:19:4a:a9:d9:8d:0e:5f:ab:3c:77: 1c:3c:b7:82:c8:b1:4a:64:db:e4:3e:f2:60:27:96:e9:bc:21: 6b:26:81:39:6e:28:40:4c:2c:c5:d9:42:7d:10:da:6b:19:14: c9:c6:8b:7a:b5:49:7e:a5:a2:af:1e:48:2e:01:3d:1b:fa:0f: 4e:9c:fc:2b:45:02:c4:3a:00:e9:b1:1e:ae:54:37:4e:66:70: c9:0c:d8:5b:15:33:23:3d:1b:9e:15:00:71:16:e9:35:d0:9f: 62:22:fa:7a:f3:5e:fe:cf:68:e7:1f:a2:b6:85:56:cd:62:76: 5e:20:15:e9:46:74:4e:37:f7:0f:21:07:3c:2b:16:ad:c5:f3: ce:12:2b:23:9c:dc:05:1a:19:cf:37:58:71:bd:2d:ed:15:73: ea:ef:ac:af:8a:69:14:22:97:1e:38:e5:a3:a7:59:cb:ab:95: 7e:ae:b0:e3:14:9b:de:b4:7a:7c:bb:15:54:b4:82:b6:01:bb: 8b:68:df:66:57:d2:37:b9:50:d6:6e:2a:dd:e9:30:5d:83:f8: b8:06:08:a7 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt8E3hVHjc0Mdp2f4iIGi3cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTQ0NDliOTRhMjAyZDZkMzcyZWU3NzE5ZjgyZTM4MmFmZjBjNjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NCGdMxIIbHXO0Atb9speAciCuVr 1hlsjXqk/3szntwAcIs0BKeUQ5JNGrstOiab2UKoTVztnkOoJW5kS9GiKua7fHsE gFqFwLFulDrDg5e1wh4LHhVn7GBU4O0stlKqSP+xVklUEgv8aq+GWSXBQZTxmhHt rQBDKXszfnrYD+vAD8Dok74v6fjcmjatqbUPxbcKNEsw5/PH294LSzGRAwl5T0A1 Pz3zgknDqSfQenUp3YWIDg6cqAR6gJgiIGk2CciI7r5+LXJiVor7LYBkf09LWYNC rvI56mRiE7s4E/PRtf8kh4JzCVHGQM9XOp6jR3CAktIPauTLyYXH+rDgFwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDlESblKIC1tNy7ncZ+C44Kv8MYUMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvT1VSSnVVb2dMVzAzTHVkeG40TGpncV93eGhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAuc74AwQA uc77AwQBudEkAwQCudKYAwQAudpmAwQAud9MAwQAueECAwQAueORAwQCueoUAwQC ue7kAwQBufB4AwQAufvnMA0GCSqGSIb3DQEBCwUAA4IBAQCx7qI0i9gwYkUhIR1v PD/3H8VJe04YcQVUuB1YM+ThsTskpJqiv57FTzIBGxlKqdmNDl+rPHccPLeCyLFK ZNvkPvJgJ5bpvCFrJoE5bihATCzF2UJ9ENprGRTJxot6tUl+paKvHkguAT0b+g9O nPwrRQLEOgDpsR6uVDdOZnDJDNhbFTMjPRueFQBxFuk10J9iIvp6817+z2jnH6K2 hVbNYnZeIBXpRnRON/cPIQc8KxatxfPOEisjnNwFGhnPN1hxvS3tFXPq76yvimkU IpceOOWjp1nLq5V+rrDjFJvetHp8uxVUtIK2AbuLaN9mV9I3uVDWbird6TBdg/i4 Bgin -----END CERTIFICATE-----Generated at Sun Jan 25 11:43:20 2026 by rpki-client