This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/oluFcKd04dxpY6SBSmCmuqZrS88.roa File: oluFcKd04dxpY6SBSmCmuqZrS88.roa (raw, json) Hash identifier: KFH+bY6wncAOQdUwwJb+fxlikqPQMitBxlXuxYgpo4w= Subject key identifier: A2:5B:85:70:A7:74:E1:DC:69:63:A4:81:4A:60:A6:BA:A6:6B:4B:CF Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a Certificate serial: 019B7F8283309FAB09F3ABFB6C0895A98975 Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/oluFcKd04dxpY6SBSmCmuqZrS88.roa Signing time: Fri 02 Jan 2026 16:20:18 +0000 ROA not before: Fri 02 Jan 2026 16:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9167 IP address blocks: 85.235.224.0/19 maxlen: 19 195.184.96.0/19 maxlen: 19 213.150.32.0/19 maxlen: 19 213.173.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:83:30:9f:ab:09:f3:ab:fb:6c:08:95:a9:89:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a Validity Not Before: Jan 2 16:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a25b8570a774e1dc6963a4814a60a6baa66b4bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:d0:8c:44:e7:12:c0:68:fb:d9:54:61:37: eb:56:49:1c:7d:1b:f7:4e:8b:20:0e:28:0c:37:06: 9a:ac:18:95:16:d2:9e:9e:74:be:64:cf:e4:f4:6d: 14:c3:72:5c:9b:3e:1b:8f:11:b7:c8:c4:07:c2:b8: 9b:d6:06:09:84:34:7e:fc:b4:d4:bc:42:4f:61:f4: 81:53:cc:53:ed:fc:a5:80:9a:ee:8a:a0:ce:c0:54: 7f:f0:08:de:bc:da:8b:dc:8e:97:44:33:5a:9d:00: 93:0b:c4:0e:84:dd:bd:b4:9b:4c:b1:7d:13:f8:6d: 59:a8:5f:84:4e:2d:b2:27:46:e8:4b:a5:9f:f2:7f: 4d:0a:65:af:a7:cd:c4:1d:34:14:f7:b7:00:e0:e5: 23:76:ca:4f:1b:41:ea:db:dc:4f:da:38:d3:ee:c8: b2:70:b8:8c:a3:8c:25:aa:90:67:2c:eb:a9:a5:d2: 0b:db:ca:4c:c1:b5:46:4e:0a:39:69:e5:62:72:0f: f2:a5:e7:08:bd:b7:10:de:1a:ef:8e:aa:82:5b:f4: d5:5c:90:65:22:e0:de:c3:f9:ba:b8:04:93:0a:2a: 08:07:9f:f9:c2:90:17:0f:d9:44:ca:77:9a:c7:fb: 17:b1:51:62:7b:93:be:fe:4f:8c:fe:49:99:35:cf: 68:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5B:85:70:A7:74:E1:DC:69:63:A4:81:4A:60:A6:BA:A6:6B:4B:CF X509v3 Authority Key Identifier: keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/oluFcKd04dxpY6SBSmCmuqZrS88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.235.224.0/19 195.184.96.0/19 213.150.32.0/19 213.173.224.0/19 Signature Algorithm: sha256WithRSAEncryption 77:a0:10:8b:8f:37:c5:3a:87:83:76:e2:60:aa:8b:64:5c:1b: a6:03:bf:a4:83:a4:a0:3b:a3:be:c4:ae:f8:c9:77:67:9c:ed: 9c:57:56:9f:f7:e2:27:9b:b6:30:94:08:e9:3f:b2:b8:66:a2: c9:9e:39:e7:ff:3f:6e:66:91:5d:f0:98:a6:f6:3c:b6:ae:62: cd:02:7f:fe:95:82:49:40:c4:1b:3a:94:1c:23:e0:79:5d:8e: 55:43:ac:9b:73:ec:a2:d1:84:ae:82:99:02:0a:45:3d:33:95: 3b:a7:56:f9:f1:6e:8e:88:d0:c9:61:bc:fc:36:c5:5d:f2:f1: cf:c3:6a:bd:ab:f5:0a:d9:d2:3f:a1:6f:54:7c:65:9e:71:a6: cd:c9:5f:a8:8b:89:fa:f2:dd:a0:7d:bb:16:8e:1b:dd:65:20: ca:3c:98:a1:10:1e:71:75:5d:48:01:5f:3b:19:a9:05:cc:10: 06:c2:2a:a8:71:8e:c2:b9:80:2b:03:9c:51:f7:22:57:e1:0c: b6:37:6a:4e:01:f6:35:b6:2a:77:c9:be:54:7e:83:16:2a:04: 06:a3:cb:ad:fc:4f:24:76:61:f3:3a:3b:d6:97:1f:97:1e:96: 0e:cb:7f:6a:12:c6:86:c1:89:54:5d:13:94:97:99:c4:57:6e: 53:ff:91:cc -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/goMwn6sJ86v7bAiVqYl1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYjVkM2U4ZGRjZjUyNGMyMGMzMjM4N2VkMzEwM2Q0Y2Jm MmE1NmEwHhcNMjYwMTAyMTYyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjViODU3MGE3NzRlMWRjNjk2M2E0ODE0YTYwYTZiYWE2NmI0YmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnnQjETnEsBo+9lUYTfrVkkcfRv3 TosgDigMNwaarBiVFtKennS+ZM/k9G0Uw3Jcmz4bjxG3yMQHwrib1gYJhDR+/LTU vEJPYfSBU8xT7fylgJruiqDOwFR/8AjevNqL3I6XRDNanQCTC8QOhN29tJtMsX0T +G1ZqF+ETi2yJ0boS6Wf8n9NCmWvp83EHTQU97cA4OUjdspPG0Hq29xP2jjT7siy cLiMo4wlqpBnLOuppdIL28pMwbVGTgo5aeVicg/ypecIvbcQ3hrvjqqCW/TVXJBl IuDew/m6uASTCioIB5/5wpAXD9lEyneax/sXsVFie5O+/k+M/kmZNc9ogQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKJbhXCndOHcaWOkgUpgprqma0vPMB8GA1UdIwQY MBaAFAy10+jdz1JMIMMjh+0xA9TL8qVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTIt NjNjZDNjODYxZDhlLzEvb2x1RmNLZDA0ZHhwWTZTQlNtQ211cVpyUzg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTItNjNjZDNjODYxZDhl LzEvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFVevgAwQF w7hgAwQF1ZYgAwQF1a3gMA0GCSqGSIb3DQEBCwUAA4IBAQB3oBCLjzfFOoeDduJg qotkXBumA7+kg6SgO6O+xK74yXdnnO2cV1af9+Inm7YwlAjpP7K4ZqLJnjnn/z9u ZpFd8Jim9jy2rmLNAn/+lYJJQMQbOpQcI+B5XY5VQ6ybc+yi0YSugpkCCkU9M5U7 p1b58W6OiNDJYbz8NsVd8vHPw2q9q/UK2dI/oW9UfGWecabNyV+oi4n68t2gfbsW jhvdZSDKPJihEB5xdV1IAV87GakFzBAGwiqocY7CuYArA5xR9yJX4Qy2N2pOAfY1 tip3yb5UfoMWKgQGo8ut/E8kdmHzOjvWlx+XHpYOy39qEsaGwYlUXROUl5nEV25T /5HM -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:52 2026 by rpki-client