This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/OYrxag2gdKVWmcS_MSjERgU_Ji0.roa File: OYrxag2gdKVWmcS_MSjERgU_Ji0.roa (raw, json) Hash identifier: Up6LnAiF7e1D845y6IhDGcXjWiOaIs0vsPTFZeoDQ24= Subject key identifier: 39:8A:F1:6A:0D:A0:74:A5:56:99:C4:BF:31:28:C4:46:05:3F:26:2D Certificate issuer: /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776 Certificate serial: 019B7AC8A9AA82E1701935277ABB074B771E Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/OYrxag2gdKVWmcS_MSjERgU_Ji0.roa Signing time: Thu 01 Jan 2026 18:18:49 +0000 ROA not before: Thu 01 Jan 2026 18:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39010 IP address blocks: 185.142.40.0/24 maxlen: 24 185.142.42.0/24 maxlen: 24 185.142.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a9:aa:82:e1:70:19:35:27:7a:bb:07:4b:77:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776 Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=398af16a0da074a55699c4bf3128c446053f262d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:e4:2d:5d:11:57:34:84:56:1a:40:1a:a4: c2:c3:e3:32:28:86:15:25:f5:e3:b1:63:8d:ca:c4: 9c:a3:a8:9c:d2:d5:2c:1a:35:b2:e8:93:d1:a4:2a: 14:5b:a3:10:9a:bb:5e:db:d2:c0:14:e7:63:a4:9e: 13:38:e3:54:c8:ed:33:9d:9d:ec:df:d8:04:4d:e1: 69:21:b2:5e:03:6a:dd:77:ff:8f:f8:d9:16:87:72: 0b:ae:98:93:28:1d:a7:36:cb:c1:9d:0c:bc:b4:cd: 1c:ab:39:0d:9c:a3:86:84:ab:bb:bf:53:1c:8b:5e: de:e6:9a:a4:0b:ff:12:ec:7b:44:b9:76:84:54:8f: 41:73:ca:b3:4c:66:a6:be:0f:f8:83:6e:1e:f4:05: f4:db:41:72:78:f2:81:0f:f6:84:5a:42:98:8a:1a: d0:f9:3e:58:f2:58:d3:80:75:b0:56:d0:8c:37:42: db:59:9c:54:81:1f:69:3c:47:1b:e5:6a:91:0f:f8: eb:83:b8:a8:68:0e:29:dd:d4:08:28:9b:b3:bb:a5: 09:bb:98:1d:42:eb:44:b2:d1:29:6d:a6:c1:26:5f: d5:9f:ee:49:6c:c7:6c:8b:e2:1e:61:1e:51:77:51: dc:f6:a9:15:d5:30:63:a5:67:9f:d8:7d:39:bc:0c: cb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8A:F1:6A:0D:A0:74:A5:56:99:C4:BF:31:28:C4:46:05:3F:26:2D X509v3 Authority Key Identifier: keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/OYrxag2gdKVWmcS_MSjERgU_Ji0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.40.0/24 185.142.42.0/23 Signature Algorithm: sha256WithRSAEncryption 93:86:cd:84:a5:c1:08:95:a3:c8:3e:94:fb:f6:48:6f:9b:37: 32:09:a6:8d:a1:a3:b0:bf:c1:65:de:ee:b4:34:77:5e:bd:6f: 8f:ef:b8:ef:30:a1:36:70:0d:94:3e:1d:6b:61:ad:a2:10:d4: c6:ed:e2:79:fa:68:dd:5d:a2:a0:e6:48:3b:80:ca:09:d3:dd: 84:77:0f:2d:e4:70:7f:f9:7b:6f:14:af:b6:c0:a7:a9:72:e3: 1a:bd:ad:f5:b7:8b:ed:c5:27:52:54:a4:58:ba:07:ce:f2:e2: 09:08:7b:99:45:a4:45:62:87:b1:14:d3:d9:ab:e0:e6:54:05: 94:1f:55:77:c9:a2:bf:b4:ba:66:fd:42:a2:7c:17:f5:10:ca: 7c:c6:50:91:52:a8:57:6b:6c:bd:d7:ae:4c:d0:6d:1b:04:3c: 1c:5b:d0:cc:31:ab:c2:41:8e:1d:85:4f:b3:a6:47:bc:11:49: e1:09:c7:e0:db:67:77:a7:fa:00:74:3c:e2:7a:41:ba:22:85: 65:e5:2f:77:90:ed:fc:7e:d6:9a:20:bb:35:66:b9:c4:f2:35: c7:91:8c:53:98:b5:ae:e7:0e:3b:20:96:64:a3:f5:1a:f0:f4: 8a:fc:c4:bb:d9:47:2e:63:42:15:30:6f:0a:ed:9c:f4:1e:0b: 6d:f7:53:db -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yKmqguFwGTUnersHS3ceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhODc5ZGUxYzc1ZmJiZDJjMzFkMWQ5MDgxNDA1NmYyN2Q1 N2Q3NzYwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOThhZjE2YTBkYTA3NGE1NTY5OWM0YmYzMTI4YzQ0NjA1M2YyNjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPnkLV0RVzSEVhpAGqTCw+MyKIYV JfXjsWONysSco6ic0tUsGjWy6JPRpCoUW6MQmrte29LAFOdjpJ4TOONUyO0znZ3s 39gETeFpIbJeA2rdd/+P+NkWh3ILrpiTKB2nNsvBnQy8tM0cqzkNnKOGhKu7v1Mc i17e5pqkC/8S7HtEuXaEVI9Bc8qzTGamvg/4g24e9AX020FyePKBD/aEWkKYihrQ +T5Y8ljTgHWwVtCMN0LbWZxUgR9pPEcb5WqRD/jrg7ioaA4p3dQIKJuzu6UJu5gd QutEstEpbabBJl/Vn+5JbMdsi+IeYR5Rd1Hc9qkV1TBjpWef2H05vAzL0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDmK8WoNoHSlVpnEvzEoxEYFPyYtMB8GA1UdIwQY MBaAFBqHneHHX7vSwx0dkIFAVvJ9V9d2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR29lZDRjZGZ1OUxESFIyUWdVQlc4bjFYMTNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82YTYzMTMtODU0Ni00MDMxLWJlOWIt OGIyZWJlNGUyOWNlLzEvT1lyeGFnMmdkS1ZXbWNTX01TakVSZ1VfSmkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS82YTYzMTMtODU0Ni00MDMxLWJlOWItOGIyZWJlNGUyOWNl LzEvR29lZDRjZGZ1OUxESFIyUWdVQlc4bjFYMTNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuY4oAwQB uY4qMA0GCSqGSIb3DQEBCwUAA4IBAQCThs2EpcEIlaPIPpT79khvmzcyCaaNoaOw v8Fl3u60NHdevW+P77jvMKE2cA2UPh1rYa2iENTG7eJ5+mjdXaKg5kg7gMoJ092E dw8t5HB/+XtvFK+2wKepcuMava31t4vtxSdSVKRYugfO8uIJCHuZRaRFYoexFNPZ q+DmVAWUH1V3yaK/tLpm/UKifBf1EMp8xlCRUqhXa2y9165M0G0bBDwcW9DMMavC QY4dhU+zpke8EUnhCcfg22d3p/oAdDziekG6IoVl5S93kO38ftaaILs1ZrnE8jXH kYxTmLWu5w47IJZko/Ua8PSK/MS72UcuY0IVMG8K7Zz0Hgtt91Pb -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:53 2026 by rpki-client