This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/o0J93e2ynPAO_ooBBrsbWpkJmVk.roa File: o0J93e2ynPAO_ooBBrsbWpkJmVk.roa (raw, json) Hash identifier: 9+ceM91NO20zNjq2ssN5ZXrUJuK961JXQqmxnpqcpFM= Subject key identifier: A3:42:7D:DD:ED:B2:9C:F0:0E:FE:8A:01:06:BB:1B:5A:99:09:99:59 Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019B79ED50B2D170F2B2A902FF67D54914C5 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/o0J93e2ynPAO_ooBBrsbWpkJmVk.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203937 IP address blocks: 185.125.4.0/24 maxlen: 24 185.216.172.0/24 maxlen: 24 185.253.233.0/24 maxlen: 24 194.42.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:50:b2:d1:70:f2:b2:a9:02:ff:67:d5:49:14:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3427dddedb29cf00efe8a0106bb1b5a99099959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:d0:12:4e:f5:00:74:93:14:c9:31:a5:c7: ca:f2:94:ac:06:1a:1e:fb:47:45:6c:5b:9e:97:60: e8:49:53:6b:16:17:c3:60:ac:10:d9:4c:51:f7:ef: d8:56:de:93:3f:dd:36:38:29:b0:da:d7:3b:48:42: 01:12:30:9d:d6:c3:83:07:b9:78:ca:25:f0:32:3e: 97:29:5d:2e:7f:b6:67:6a:a2:5d:5d:7a:02:e6:97: 21:3b:92:89:fc:2d:3c:c9:1d:8b:f2:51:7e:61:d3: 50:48:4e:ac:35:24:37:72:b5:fb:d0:63:cd:8b:a3: 95:08:e7:c9:ae:cb:22:f8:66:df:17:62:67:d2:10: 30:28:73:61:fc:1b:45:4d:64:2c:d8:78:29:54:3b: 0c:b2:38:ce:a5:4c:09:5f:23:75:7c:62:89:f1:48: 81:c7:31:c6:ac:8d:da:55:1f:7e:38:08:33:91:98: 78:05:14:e9:7c:a9:85:bb:a0:de:1f:92:40:fa:e3: 00:06:f8:78:be:0b:5b:ab:91:c3:54:79:a3:fb:ef: ed:73:6b:71:7f:98:c2:bc:a7:a2:3b:e5:58:c9:7f: 49:bc:0c:53:09:a8:8f:66:02:6b:f7:a1:1d:06:c8: 03:07:f6:b3:65:5c:59:f2:3d:4e:79:10:e3:dc:27: 99:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:42:7D:DD:ED:B2:9C:F0:0E:FE:8A:01:06:BB:1B:5A:99:09:99:59 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/o0J93e2ynPAO_ooBBrsbWpkJmVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.4.0/24 185.216.172.0/24 185.253.233.0/24 194.42.118.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:8c:35:8b:e9:27:87:87:53:71:56:0b:70:12:52:46:c2:3b: d5:7a:28:ef:65:c5:f8:d9:b3:42:b7:e3:36:b9:cc:37:9f:d5: b1:93:d1:b0:12:d1:34:42:9c:83:bc:ea:5f:b3:01:e8:42:ab: 6b:6a:ed:77:b1:a4:9e:39:b5:e9:4f:8e:13:83:a7:18:b6:57: a2:ca:ae:41:48:71:fc:e2:a7:fb:68:83:cc:41:8a:6e:1a:e6: 9f:5d:a4:a4:50:72:5b:82:f4:c9:10:68:e6:d5:24:35:fe:4d: dd:ce:5c:19:b5:12:a1:dd:0e:10:8a:74:08:a7:a6:69:78:77: 18:57:de:81:09:53:95:e6:8a:b4:3d:6e:1c:96:a9:d2:f8:5a: 21:a7:c8:09:ba:ac:0b:a3:aa:b8:38:bc:9f:15:3e:69:c0:05: 51:e2:74:0d:3c:32:bc:fa:1e:1a:f7:8f:82:5f:e0:35:0f:41: 6d:99:21:de:cb:78:7a:e8:00:3e:e3:8c:09:ad:b2:fa:50:cb: ff:69:34:a4:d3:51:b0:48:db:bd:50:6e:7f:6c:8a:3a:36:b5: bb:3c:2c:69:a9:0c:e5:eb:26:fd:0e:96:ee:22:f5:24:a2:20: a0:0c:f2:c2:0f:16:ce:5b:de:38:0a:8b:92:8b:46:dc:fa:ba: 0d:0f:24:f6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt57VCy0XDysqkC/2fVSRTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzQyN2RkZGVkYjI5Y2YwMGVmZThhMDEwNmJiMWI1YTk5MDk5OTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdDQEk71AHSTFMkxpcfK8pSsBhoe +0dFbFuel2DoSVNrFhfDYKwQ2UxR9+/YVt6TP902OCmw2tc7SEIBEjCd1sODB7l4 yiXwMj6XKV0uf7ZnaqJdXXoC5pchO5KJ/C08yR2L8lF+YdNQSE6sNSQ3crX70GPN i6OVCOfJrssi+GbfF2Jn0hAwKHNh/BtFTWQs2HgpVDsMsjjOpUwJXyN1fGKJ8UiB xzHGrI3aVR9+OAgzkZh4BRTpfKmFu6DeH5JA+uMABvh4vgtbq5HDVHmj++/tc2tx f5jCvKeiO+VYyX9JvAxTCaiPZgJr96EdBsgDB/azZVxZ8j1OeRDj3CeZoQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKNCfd3tspzwDv6KAQa7G1qZCZlZMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvbzBKOTNlMnluUEFPX29vQkJyc2JXcGtKbVZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuX0EAwQA udisAwQAuf3pAwQBwip2MA0GCSqGSIb3DQEBCwUAA4IBAQCdjDWL6SeHh1NxVgtw ElJGwjvVeijvZcX42bNCt+M2ucw3n9Wxk9GwEtE0QpyDvOpfswHoQqtrau13saSe ObXpT44Tg6cYtleiyq5BSHH84qf7aIPMQYpuGuafXaSkUHJbgvTJEGjm1SQ1/k3d zlwZtRKh3Q4QinQIp6ZpeHcYV96BCVOV5oq0PW4clqnS+Fohp8gJuqwLo6q4OLyf FT5pwAVR4nQNPDK8+h4a94+CX+A1D0FtmSHey3h66AA+44wJrbL6UMv/aTSk01Gw SNu9UG5/bIo6NrW7PCxpqQzl6yb9DpbuIvUkoiCgDPLCDxbOW944CouSi0bc+roN DyT2 -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:49 2026 by rpki-client