This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/oFmVPpAqArTolT86zoYzDNps-ck.roa File: oFmVPpAqArTolT86zoYzDNps-ck.roa (raw, json) Hash identifier: vxR9GCqj5WIpQWRTxrTVSqLQRxXTFqzFObqIUCYCQMY= Subject key identifier: A0:59:95:3E:90:2A:02:B4:E8:95:3F:3A:CE:86:33:0C:DA:6C:F9:C9 Certificate issuer: /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6 Certificate serial: 019B7FF073FB91AD2D900E7ABAC6C0B29DE4 Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/oFmVPpAqArTolT86zoYzDNps-ck.roa Signing time: Fri 02 Jan 2026 18:20:23 +0000 ROA not before: Fri 02 Jan 2026 18:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31293 IP address blocks: 185.118.241.0/24 maxlen: 24 185.118.242.0/24 maxlen: 24 185.118.243.0/24 maxlen: 24 194.150.116.0/22 maxlen: 22 194.150.116.0/24 maxlen: 24 194.150.117.0/24 maxlen: 24 194.150.118.0/24 maxlen: 24 194.150.119.0/24 maxlen: 24 2a06:9680::/29 maxlen: 48 2a06:9680:1::/48 maxlen: 48 2a06:9680:2::/48 maxlen: 48 2a06:9680:3::/48 maxlen: 48 2a06:9680:4::/48 maxlen: 48 2a06:9680:5::/48 maxlen: 48 2a06:9680:6::/48 maxlen: 48 2a06:9680:7::/48 maxlen: 48 2a06:9680:8::/48 maxlen: 48 2a06:9680:9::/48 maxlen: 48 2a06:9680:a::/48 maxlen: 48 2a06:9680:b::/48 maxlen: 48 2a06:9680:c::/48 maxlen: 48 2a06:9680:d::/48 maxlen: 48 2a06:9680:e::/48 maxlen: 48 2a06:9680:f::/48 maxlen: 48 2a06:9680:10::/48 maxlen: 48 2a06:9680:11::/48 maxlen: 48 2a06:9680:12::/48 maxlen: 48 2a06:9680:13::/48 maxlen: 48 2a06:9680:14::/48 maxlen: 48 2a06:9680:15::/48 maxlen: 48 2a06:9680:16::/48 maxlen: 48 2a06:9680:17::/48 maxlen: 48 2a06:9680:18::/48 maxlen: 48 2a06:9680:19::/48 maxlen: 48 2a06:9680:1a::/48 maxlen: 48 2a06:9680:1b::/48 maxlen: 48 2a06:9680:1c::/48 maxlen: 48 2a06:9680:1d::/48 maxlen: 48 2a06:9680:1e::/48 maxlen: 48 2a06:9680:1f::/48 maxlen: 48 2a06:9680:20::/48 maxlen: 48 2a06:9680:21::/48 maxlen: 48 2a06:9680:22::/48 maxlen: 48 2a06:9680:23::/48 maxlen: 48 2a06:9680:24::/48 maxlen: 48 2a06:9680:25::/48 maxlen: 48 2a06:9680:26::/48 maxlen: 48 2a06:9680:27::/48 maxlen: 48 2a06:9680:28::/48 maxlen: 48 2a06:9680:29::/48 maxlen: 48 2a06:9680:2a::/48 maxlen: 48 2a06:9680:2b::/48 maxlen: 48 2a06:9680:2c::/48 maxlen: 48 2a06:9680:2d::/48 maxlen: 48 2a06:9680:2e::/48 maxlen: 48 2a06:9680:2f::/48 maxlen: 48 2a06:9680:30::/48 maxlen: 48 2a06:9680:31::/48 maxlen: 48 2a06:9680:32::/48 maxlen: 48 2a06:9680:33::/48 maxlen: 48 2a06:9680:34::/48 maxlen: 48 2a06:9680:35::/48 maxlen: 48 2a06:9680:36::/48 maxlen: 48 2a06:9680:37::/48 maxlen: 48 2a06:9680:38::/48 maxlen: 48 2a06:9680:39::/48 maxlen: 48 2a06:9680:3a::/48 maxlen: 48 2a06:9680:3b::/48 maxlen: 48 2a06:9680:3c::/48 maxlen: 48 2a06:9680:3d::/48 maxlen: 48 2a06:9680:3e::/48 maxlen: 48 2a06:9680:3f::/48 maxlen: 48 2a06:9680:40::/48 maxlen: 48 2a06:9680:41::/48 maxlen: 48 2a06:9680:42::/48 maxlen: 48 2a06:9680:43::/48 maxlen: 48 2a06:9682::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:73:fb:91:ad:2d:90:0e:7a:ba:c6:c0:b2:9d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6 Validity Not Before: Jan 2 18:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a059953e902a02b4e8953f3ace86330cda6cf9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:37:ac:2e:42:2b:01:ff:1f:5c:96:31:b7:5e: dd:79:b7:5d:6d:5a:b4:02:b5:92:04:b5:37:69:dd: df:60:50:7b:ce:2c:3f:ec:6c:6d:c2:4f:05:92:ac: 86:23:bc:46:7a:df:ce:44:fd:04:3d:5c:20:6e:2f: e9:be:70:2c:d7:d6:22:b5:44:c0:f9:97:8e:e4:95: d7:68:f9:4c:cf:9a:67:2c:ed:cf:82:f6:e8:d1:4c: 5c:e1:b9:d4:91:5f:ca:22:9f:00:a2:ba:17:a5:27: b6:ec:f6:25:a7:a7:19:7e:65:d5:e2:77:c1:87:06: 30:d6:30:86:5e:4d:fc:da:e2:f4:32:10:4c:08:eb: e5:0b:2a:c2:43:31:db:6e:b4:a8:a8:83:81:d7:90: b4:7f:d4:ac:96:fd:b0:41:a2:fb:c1:89:15:3c:e9: a8:e9:3c:3b:5e:1c:a3:61:e4:fa:03:9d:42:6a:bc: 00:42:69:d0:a8:d2:73:22:61:ad:86:a1:a1:a9:3b: 27:0b:8e:5d:cd:1e:7c:c2:f0:f8:3b:59:70:ae:85: 89:07:87:7c:15:1b:30:e1:68:67:d2:6c:44:51:2f: b3:f5:77:e2:ba:7d:3d:4b:40:0e:a1:d9:46:82:92: 17:51:bf:c1:2d:fa:50:a7:97:79:c3:ed:35:53:13: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:59:95:3E:90:2A:02:B4:E8:95:3F:3A:CE:86:33:0C:DA:6C:F9:C9 X509v3 Authority Key Identifier: keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/oFmVPpAqArTolT86zoYzDNps-ck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.241.0-185.118.243.255 194.150.116.0/22 IPv6: 2a06:9680::/29 Signature Algorithm: sha256WithRSAEncryption 44:12:7f:18:05:61:68:22:46:0b:08:c1:42:b2:b2:f2:46:38: b7:53:96:a0:fd:ff:74:ec:c3:36:58:5d:cb:db:52:06:c9:d4: 27:10:f2:49:87:88:9d:69:b1:f8:c3:d4:74:5e:56:c2:12:3c: c6:88:10:fe:46:17:71:ea:7e:5f:f5:5b:20:ec:b5:96:0f:1c: 47:d0:c0:c4:ae:a9:ea:e4:08:ce:d5:c3:4c:83:c7:c8:e7:ff: d0:3c:49:92:35:e4:21:6d:15:e1:ba:85:18:f9:98:c7:c3:79: c0:49:26:4f:9d:30:f2:cf:54:8a:1a:14:de:ef:f8:8f:e4:7e: 38:09:5e:9c:3f:a2:42:c8:b0:ce:96:1b:26:da:b6:61:e7:0c: 32:5d:5b:fc:c8:a4:61:ee:18:b6:c5:79:2d:01:41:11:29:29: 35:bc:0c:ae:ee:28:3d:5c:d5:0c:e6:cb:8c:b8:45:9c:d2:75: 81:be:0e:e2:fb:c5:7f:0d:0f:e4:31:65:68:f1:44:28:76:57: 46:24:26:12:43:b9:c6:18:43:1b:b9:5c:70:0f:b3:a3:b9:49: 9a:75:7d:64:22:21:2e:3c:8a:03:43:a4:77:d2:f1:a5:55:ca: 37:65:e7:fb:38:8d:53:48:a3:9e:ef:5b:de:ad:0e:2f:a1:a5: de:92:7c:be -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/8HP7ka0tkA56usbAsp3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2I4ODc3ZTFhMTMwZmU1MDM4NmM2MTBkNmVhZDU2NDFi OTdiYTYwHhcNMjYwMTAyMTgyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDU5OTUzZTkwMmEwMmI0ZTg5NTNmM2FjZTg2MzMwY2RhNmNmOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DesLkIrAf8fXJYxt17debddbVq0 ArWSBLU3ad3fYFB7ziw/7Gxtwk8FkqyGI7xGet/ORP0EPVwgbi/pvnAs19YitUTA +ZeO5JXXaPlMz5pnLO3Pgvbo0Uxc4bnUkV/KIp8AoroXpSe27PYlp6cZfmXV4nfB hwYw1jCGXk382uL0MhBMCOvlCyrCQzHbbrSoqIOB15C0f9Sslv2wQaL7wYkVPOmo 6Tw7XhyjYeT6A51CarwAQmnQqNJzImGthqGhqTsnC45dzR58wvD4O1lwroWJB4d8 FRsw4Whn0mxEUS+z9Xfiun09S0AOodlGgpIXUb/BLfpQp5d5w+01UxPrLQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFKBZlT6QKgK06JU/Os6GMwzabPnJMB8GA1UdIwQY MBaAFHw7iHfhoTD+UDhsYQ1urVZBuXumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTIt MTIwMjVjNTRmNDg0LzEvb0ZtVlBwQXFBclRvbFQ4NnpvWXpETnBzLWNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTItMTIwMjVjNTRmNDg0 LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAC5dvED BAK5dvADBALClnQwDQQCAAIwBwMFAyoGloAwDQYJKoZIhvcNAQELBQADggEBAEQS fxgFYWgiRgsIwUKysvJGOLdTlqD9/3TswzZYXcvbUgbJ1CcQ8kmHiJ1psfjD1HRe VsISPMaIEP5GF3Hqfl/1WyDstZYPHEfQwMSuqerkCM7Vw0yDx8jn/9A8SZI15CFt FeG6hRj5mMfDecBJJk+dMPLPVIoaFN7v+I/kfjgJXpw/okLIsM6WGybatmHnDDJd W/zIpGHuGLbFeS0BQREpKTW8DK7uKD1c1Qzmy4y4RZzSdYG+DuL7xX8ND+QxZWjx RCh2V0YkJhJDucYYQxu5XHAPs6O5SZp1fWQiIS48igNDpHfS8aVVyjdl5/s4jVNI o57vW96tDi+hpd6SfL4= -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:04 2026 by rpki-client