This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/oBGjNalwQcywSWsj5gtghzqeF0w.roa File: oBGjNalwQcywSWsj5gtghzqeF0w.roa (raw, json) Hash identifier: dFzB1q7vZdu9hl2vNdihc5PjtXwc0tRQLB+AyCxfksw= Subject key identifier: A0:11:A3:35:A9:70:41:CC:B0:49:6B:23:E6:0B:60:87:3A:9E:17:4C Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019BD8839B6F91E6A7B08A12E01B1843C6C6 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/oBGjNalwQcywSWsj5gtghzqeF0w.roa Signing time: Mon 19 Jan 2026 23:07:42 +0000 ROA not before: Mon 19 Jan 2026 23:07:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215727 IP address blocks: 45.136.0.0/24 maxlen: 32 45.136.2.0/24 maxlen: 32 45.136.3.0/24 maxlen: 32 128.0.119.0/24 maxlen: 32 185.117.21.0/24 maxlen: 32 185.117.23.0/24 maxlen: 32 185.144.100.0/24 maxlen: 32 185.144.101.0/24 maxlen: 32 185.144.102.0/24 maxlen: 32 185.211.48.0/24 maxlen: 32 185.211.49.0/24 maxlen: 32 185.211.50.0/24 maxlen: 32 185.227.240.0/24 maxlen: 32 185.227.241.0/24 maxlen: 32 185.227.242.0/24 maxlen: 32 185.227.243.0/24 maxlen: 32 193.201.209.0/24 maxlen: 32 193.201.210.0/24 maxlen: 32 193.201.211.0/24 maxlen: 32 194.36.102.0/24 maxlen: 32 194.36.103.0/24 maxlen: 32 194.124.64.0/24 maxlen: 32 194.124.66.0/24 maxlen: 32 194.124.67.0/24 maxlen: 32 195.85.68.0/24 maxlen: 32 195.85.69.0/24 maxlen: 32 195.85.70.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:83:9b:6f:91:e6:a7:b0:8a:12:e0:1b:18:43:c6:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 19 23:07:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a011a335a97041ccb0496b23e60b60873a9e174c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b9:6e:a1:2c:60:bf:3b:de:65:89:2e:f8:41: 41:19:7f:ad:49:9f:6d:d3:e2:24:5f:fd:1b:e7:94: 65:73:9c:4e:f4:1d:d8:62:5a:ed:e9:f0:47:06:10: cd:ea:2b:1d:e3:ce:c6:a8:e3:9c:bd:e4:cd:61:80: 5a:2e:a7:45:71:eb:f3:d6:2c:33:15:d2:a4:bd:06: c5:16:a3:23:d0:21:b6:64:81:74:db:b9:6e:e3:9b: 12:94:c6:f6:15:e9:af:eb:7b:7c:62:7e:92:d9:49: 2b:25:08:0e:04:83:e3:25:6d:b2:98:2a:97:12:61: 36:b8:b8:b6:be:f7:aa:da:62:41:4d:37:d2:b9:f9: b3:4c:f0:95:9b:8c:f6:e0:5f:40:37:3a:10:4f:ce: 41:77:0e:fb:dd:07:a1:bd:1d:a4:de:6d:3f:f0:13: d0:51:6d:00:bb:d4:08:9a:07:14:77:26:7c:8e:a7: bc:05:79:0a:f2:ad:b4:98:d1:67:41:bf:5c:4b:37: e1:31:5b:bb:ef:63:e9:6d:8c:c1:e9:8d:b0:aa:b1: 7e:33:34:9e:7e:74:54:23:b9:e0:83:78:3c:33:fa: e2:f6:64:a4:9e:41:26:18:4d:67:f3:8c:60:f7:ce: 42:b5:19:ba:b9:5f:10:2b:a1:99:00:7a:ed:e3:95: 05:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:11:A3:35:A9:70:41:CC:B0:49:6B:23:E6:0B:60:87:3A:9E:17:4C X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/oBGjNalwQcywSWsj5gtghzqeF0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.0.0/24 45.136.2.0/23 128.0.119.0/24 185.117.21.0/24 185.117.23.0/24 185.144.100.0-185.144.102.255 185.211.48.0-185.211.50.255 185.227.240.0/22 193.201.209.0-193.201.211.255 194.36.102.0/23 194.124.64.0/24 194.124.66.0/23 195.85.68.0-195.85.70.255 Signature Algorithm: sha256WithRSAEncryption cc:32:e5:ca:30:f6:e1:1f:80:78:61:1e:1d:c3:d8:a2:97:e0: ed:30:37:cc:cd:93:d5:4d:51:d0:3f:53:5a:8d:84:28:24:77: 43:76:14:50:32:c0:eb:b0:aa:db:95:52:d0:fb:97:32:fe:2d: 6e:70:b1:1b:8b:5d:23:30:dc:ab:a0:53:53:b1:c1:fb:a6:cf: 6c:50:5e:db:9e:d7:94:a6:0a:11:d4:f1:c6:e1:4f:eb:f0:5d: e3:6b:8c:d2:50:39:23:00:6c:07:0b:1e:b3:fb:0c:ac:25:10: f9:1c:46:a5:4b:b2:e2:c7:bc:a6:ff:64:a6:66:5f:42:a7:21: df:ab:72:7d:c9:25:dc:a3:fa:c9:52:39:70:03:95:19:ac:ac: 3a:87:c8:d0:65:d8:0f:68:f1:f2:aa:cd:96:84:f5:c0:29:8c: b7:05:bd:b7:bc:48:f1:7b:d6:82:20:12:16:a0:03:a8:5e:a8: 5b:47:79:84:d5:af:70:61:5e:63:93:dc:e9:55:88:87:7d:82: 81:06:14:0c:a3:aa:53:63:bb:f5:1d:62:2c:e7:c3:99:0c:69: d9:78:4c:cf:07:1b:a4:1d:b2:64:d6:01:04:36:42:85:d2:9f: b9:7b:69:4c:16:05:c6:bf:81:c0:d2:80:b0:d8:89:5d:7c:40: 44:ad:95:ed -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZvYg5tvkeansIoS4BsYQ8bGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTE5MjMwNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDExYTMzNWE5NzA0MWNjYjA0OTZiMjNlNjBiNjA4NzNhOWUxNzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7luoSxgvzveZYku+EFBGX+tSZ9t 0+IkX/0b55Rlc5xO9B3YYlrt6fBHBhDN6isd487GqOOcveTNYYBaLqdFcevz1iwz FdKkvQbFFqMj0CG2ZIF027lu45sSlMb2Femv63t8Yn6S2UkrJQgOBIPjJW2ymCqX EmE2uLi2vveq2mJBTTfSufmzTPCVm4z24F9ANzoQT85Bdw773QehvR2k3m0/8BPQ UW0Au9QImgcUdyZ8jqe8BXkK8q20mNFnQb9cSzfhMVu772PpbYzB6Y2wqrF+MzSe fnRUI7ngg3g8M/ri9mSknkEmGE1n84xg985CtRm6uV8QK6GZAHrt45UFzQIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFKARozWpcEHMsElrI+YLYIc6nhdMMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvb0JHak5hbHdRY3l3U1dzajVndGdoenFlRjB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAC2IAAME AS2IAgMEAIAAdwMEALl1FQMEALl1FzAMAwQCuZBkAwQAuZBmMAwDBAS50zADBAC5 0zIDBAK54/AwDAMEAMHJ0QMEAsHJ0AMEAcIkZgMEAMJ8QAMEAcJ8QjAMAwQCw1VE AwQAw1VGMA0GCSqGSIb3DQEBCwUAA4IBAQDMMuXKMPbhH4B4YR4dw9iil+DtMDfM zZPVTVHQP1NajYQoJHdDdhRQMsDrsKrblVLQ+5cy/i1ucLEbi10jMNyroFNTscH7 ps9sUF7bnteUpgoR1PHG4U/r8F3ja4zSUDkjAGwHCx6z+wysJRD5HEalS7Lix7ym /2SmZl9CpyHfq3J9ySXco/rJUjlwA5UZrKw6h8jQZdgPaPHyqs2WhPXAKYy3Bb23 vEjxe9aCIBIWoAOoXqhbR3mE1a9wYV5jk9zpVYiHfYKBBhQMo6pTY7v1HWIs58OZ DGnZeEzPBxukHbJk1gEENkKF0p+5e2lMFgXGv4HA0oCw2IldfEBErZXt -----END CERTIFICATE-----Generated at Sun Jan 25 15:06:24 2026 by rpki-client