This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/OwXJ8_aEBHXSy1C37RbJt1tMNVE.roa File: OwXJ8_aEBHXSy1C37RbJt1tMNVE.roa (raw, json) Hash identifier: qtj2hH8I97IITpCpJRG/cr14e5foNr9LkXNGjgwaZLo= Subject key identifier: 3B:05:C9:F3:F6:84:04:75:D2:CB:50:B7:ED:16:C9:B7:5B:4C:35:51 Certificate issuer: /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74 Certificate serial: 019B7B35BDDD6D7E2A05A01280A41B719B93 Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/OwXJ8_aEBHXSy1C37RbJt1tMNVE.roa Signing time: Thu 01 Jan 2026 20:17:58 +0000 ROA not before: Thu 01 Jan 2026 20:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205842 IP address blocks: 185.202.72.0/23 maxlen: 23 185.202.74.0/23 maxlen: 23 185.239.188.0/23 maxlen: 23 2a0a:d2c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:bd:dd:6d:7e:2a:05:a0:12:80:a4:1b:71:9b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74 Validity Not Before: Jan 1 20:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b05c9f3f6840475d2cb50b7ed16c9b75b4c3551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:ac:e9:69:b1:08:9f:d5:3a:21:0e:d1:88: 3d:a8:e9:81:9a:2e:c6:cd:10:6d:8d:07:fe:d1:1d: 1e:ac:27:07:40:c1:01:16:85:3f:1c:92:c7:9f:d8: b3:3c:27:af:ef:05:f4:be:9e:ab:6d:13:63:66:b8: 3e:e9:81:13:ec:c2:41:ca:0c:ee:27:da:d6:f6:f6: 31:c0:63:f1:8a:b3:bb:27:1b:09:51:15:18:29:82: fd:14:02:fd:36:05:a9:13:29:3d:44:2c:40:b9:50: 62:bb:04:34:64:4b:3e:99:60:b8:2f:7f:cd:c6:d5: 27:49:7a:24:1c:e5:f4:86:7f:69:37:04:9d:10:70: 9c:5c:80:a5:98:7f:39:fa:9c:8b:52:aa:06:32:76: 6c:9b:ba:9b:74:90:66:78:67:f6:7a:9c:51:76:8f: f6:bc:94:29:61:cf:a3:ef:88:b1:84:5c:06:ee:27: 41:6d:87:5b:ae:5a:d8:57:bf:47:98:56:e6:89:97: 55:b6:81:e3:cf:ce:51:57:af:db:7a:0b:d0:c1:67: 30:da:e7:ac:4c:c5:9c:64:29:a7:f5:c3:de:c7:04: 03:2e:72:12:83:5b:54:16:86:1e:a4:43:63:3e:fb: a9:10:be:2f:59:b5:a0:2b:37:97:c5:6c:e8:9b:a4: 4c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:05:C9:F3:F6:84:04:75:D2:CB:50:B7:ED:16:C9:B7:5B:4C:35:51 X509v3 Authority Key Identifier: keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/OwXJ8_aEBHXSy1C37RbJt1tMNVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.72.0/22 185.239.188.0/23 IPv6: 2a0a:d2c0::/29 Signature Algorithm: sha256WithRSAEncryption 03:9c:54:8a:4d:cb:f8:ee:6d:28:61:d9:b6:f4:11:ec:fb:bb: 45:56:d2:2a:4e:cd:2e:21:2a:bd:92:8a:08:cc:a0:66:35:bc: a9:c8:5a:24:1d:db:12:27:62:60:1b:1d:fd:4e:56:90:1b:7c: ac:3f:dc:c5:e8:b9:78:c3:3b:40:d8:55:aa:85:16:f0:6e:37: 8a:02:7c:b7:3e:f4:ad:bd:e3:72:64:ef:05:65:91:8e:01:2f: 43:27:df:55:c3:6b:4f:e7:1a:ec:08:5b:8a:92:7a:c2:a7:e5: 4b:4c:37:71:a6:9e:ad:0a:71:b8:77:39:28:45:1a:5d:9d:6a: 03:ea:39:a0:ee:b8:50:98:dd:a5:e2:63:1c:da:ef:ce:75:27: f2:a7:2b:af:b4:4f:42:59:e5:d6:2a:d4:1e:14:a5:64:a2:54: 08:19:66:79:1d:85:71:61:35:d1:d1:56:64:33:9f:64:5f:27: 11:39:84:cf:08:5b:69:04:ef:93:e6:32:11:9e:81:5e:4a:db: 60:55:24:d6:15:6d:5c:0f:64:8d:90:3a:6b:7e:ec:a8:41:8b: ce:34:4b:e8:48:35:e7:a6:45:84:5a:8b:c2:a3:69:4d:1c:5e: cf:9d:21:7d:54:65:09:96:15:a7:7f:ed:68:5d:4f:c6:3e:fa: 8c:68:cb:24 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7Nb3dbX4qBaASgKQbcZuTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZDAzNTlmOWY4YjIwODE1Y2U0ZDk4OGUxMDliZjgyMzA2 ZTRjNzQwHhcNMjYwMTAxMjAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjA1YzlmM2Y2ODQwNDc1ZDJjYjUwYjdlZDE2YzliNzViNGMzNTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqms6WmxCJ/VOiEO0Yg9qOmBmi7G zRBtjQf+0R0erCcHQMEBFoU/HJLHn9izPCev7wX0vp6rbRNjZrg+6YET7MJBygzu J9rW9vYxwGPxirO7JxsJURUYKYL9FAL9NgWpEyk9RCxAuVBiuwQ0ZEs+mWC4L3/N xtUnSXokHOX0hn9pNwSdEHCcXIClmH85+pyLUqoGMnZsm7qbdJBmeGf2epxRdo/2 vJQpYc+j74ixhFwG7idBbYdbrlrYV79HmFbmiZdVtoHjz85RV6/begvQwWcw2ues TMWcZCmn9cPexwQDLnISg1tUFoYepENjPvupEL4vWbWgKzeXxWzom6RMJwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDsFyfP2hAR10stQt+0WybdbTDVRMB8GA1UdIwQY MBaAFFPQNZ+fiyCBXOTZiOEJv4Iwbkx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTlBMW41LUxJSUZjNU5tSTRRbV9nakJ1VEhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80OTM1NzEtMjEwZS00ZDFhLTg4MTkt YTZjNDljZTkwNzU2LzEvT3dYSjhfYUVCSFhTeTFDMzdSYkp0MXRNTlZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC80OTM1NzEtMjEwZS00ZDFhLTg4MTktYTZjNDljZTkwNzU2 LzEvVTlBMW41LUxJSUZjNU5tSTRRbV9nakJ1VEhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCucpIAwQB ue+8MA0EAgACMAcDBQMqCtLAMA0GCSqGSIb3DQEBCwUAA4IBAQADnFSKTcv47m0o Ydm29BHs+7tFVtIqTs0uISq9kooIzKBmNbypyFokHdsSJ2JgGx39TlaQG3ysP9zF 6Ll4wztA2FWqhRbwbjeKAny3PvStveNyZO8FZZGOAS9DJ99Vw2tP5xrsCFuKknrC p+VLTDdxpp6tCnG4dzkoRRpdnWoD6jmg7rhQmN2l4mMc2u/OdSfypyuvtE9CWeXW KtQeFKVkolQIGWZ5HYVxYTXR0VZkM59kXycROYTPCFtpBO+T5jIRnoFeSttgVSTW FW1cD2SNkDprfuyoQYvONEvoSDXnpkWEWovCo2lNHF7PnSF9VGUJlhWnf+1oXU/G PvqMaMsk -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:43 2026 by rpki-client