This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/OCwZn3M2fA5Hq8kNmQdHXm6169A.roa File: OCwZn3M2fA5Hq8kNmQdHXm6169A.roa (raw, json) Hash identifier: hYYgtO03EJt7YSnRsoX8WPt38DBVQ4OQ4v1UuaWwBlg= Subject key identifier: 38:2C:19:9F:73:36:7C:0E:47:AB:C9:0D:99:07:47:5E:6E:B5:EB:D0 Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642 Certificate serial: 019B7F813CFB9723C3191B8CF3FEA2326F30 Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/OCwZn3M2fA5Hq8kNmQdHXm6169A.roa Signing time: Fri 02 Jan 2026 16:18:54 +0000 ROA not before: Fri 02 Jan 2026 16:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43108 IP address blocks: 185.242.184.0/24 maxlen: 24 2a13:6000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:3c:fb:97:23:c3:19:1b:8c:f3:fe:a2:32:6f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642 Validity Not Before: Jan 2 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=382c199f73367c0e47abc90d9907475e6eb5ebd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:ed:30:cf:cb:70:fa:3b:c3:1d:b3:63:18: 4d:4c:8a:f9:7a:af:f8:92:20:f6:18:03:ad:83:7a: 00:62:5e:bf:d0:74:6a:67:1c:54:cf:99:14:b3:cd: 45:5b:ad:76:98:f8:dd:6f:fa:95:73:0b:c9:7d:d3: a4:c2:65:ad:49:f4:44:b5:cb:c1:da:0c:36:72:43: d5:7d:d1:a1:de:ec:18:ca:05:40:37:ed:87:a5:f9: ac:cd:04:e9:9f:a8:92:f1:17:ec:53:f1:59:a5:b2: 23:ba:06:1a:89:8c:b6:c6:2b:de:a8:0c:f4:eb:b6: fb:b4:fe:36:9a:eb:29:b8:68:1d:0d:22:63:d2:ac: 60:72:1b:71:8e:72:f7:73:1b:d6:46:f0:bf:c9:36: 76:6c:56:7e:7b:38:24:5b:79:63:80:c9:9c:93:0b: 40:9e:20:3b:53:d4:90:c4:b7:6a:e6:d4:93:e5:59: 00:48:73:e6:05:ce:5c:2e:ec:6d:4f:c8:3c:49:d7: f3:6f:ce:4e:6f:8a:c3:80:1b:07:7c:b9:3c:26:30: ce:2c:a9:cc:96:e2:f4:bc:68:7b:a0:72:a5:e3:19: b3:d7:9a:33:10:c2:ad:46:d1:0f:ed:bd:cd:a4:51: 6c:b0:46:08:50:8e:27:06:0e:50:11:0e:e1:7b:1d: c5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2C:19:9F:73:36:7C:0E:47:AB:C9:0D:99:07:47:5E:6E:B5:EB:D0 X509v3 Authority Key Identifier: keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/OCwZn3M2fA5Hq8kNmQdHXm6169A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.184.0/24 IPv6: 2a13:6000::/29 Signature Algorithm: sha256WithRSAEncryption c9:33:eb:8b:af:9e:26:b0:19:10:6b:43:11:99:f4:db:8a:0b: 59:f7:db:27:0a:00:09:0a:01:6b:75:9b:9e:2d:e6:f5:6a:60: f0:5b:9b:b5:ea:44:a6:e2:b2:04:bb:82:0b:02:bb:f9:31:e6: c9:3b:43:6e:27:bf:ad:fb:12:e7:1a:a7:d8:4a:38:62:93:06: 81:cd:b2:41:00:70:93:37:97:60:b5:55:2b:7c:84:1b:a3:ee: da:5e:f7:05:b0:5d:d5:94:8c:ec:8a:a2:42:a2:0a:4a:e4:bb: c5:c7:11:bb:70:9d:8f:e3:37:93:b0:5c:82:ba:b2:c2:c8:ea: 92:b5:c1:32:4b:48:da:6a:5a:24:bb:4b:ef:aa:df:f4:40:3e: b4:41:70:f0:b4:7d:53:38:9c:28:d7:a3:0f:33:67:4e:8e:97: 3a:3e:c8:f6:3c:3c:56:dc:c9:ca:1f:c3:01:e9:4e:cd:74:84: 8b:97:dd:e1:65:7d:a0:35:df:de:00:34:7c:33:cf:bc:e3:a8: a3:18:ca:4f:08:83:63:00:03:b5:75:c5:00:63:36:70:e1:19: ee:70:49:b9:22:97:73:f2:1c:de:60:80:79:a6:d5:8d:15:1d: a1:8b:af:11:69:8b:bd:5f:7f:09:f0:f1:4f:16:e7:d1:75:7e: 1f:81:c4:c8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gTz7lyPDGRuM8/6iMm8wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1M2Y0YmM0MTY2MzlhN2UxYjZjNGYwMTk5ZTAyZTMxNjBh MWU2NDIwHhcNMjYwMTAyMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODJjMTk5ZjczMzY3YzBlNDdhYmM5MGQ5OTA3NDc1ZTZlYjVlYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzntMM/LcPo7wx2zYxhNTIr5eq/4 kiD2GAOtg3oAYl6/0HRqZxxUz5kUs81FW612mPjdb/qVcwvJfdOkwmWtSfREtcvB 2gw2ckPVfdGh3uwYygVAN+2HpfmszQTpn6iS8RfsU/FZpbIjugYaiYy2xiveqAz0 67b7tP42muspuGgdDSJj0qxgchtxjnL3cxvWRvC/yTZ2bFZ+ezgkW3ljgMmckwtA niA7U9SQxLdq5tST5VkASHPmBc5cLuxtT8g8Sdfzb85Ob4rDgBsHfLk8JjDOLKnM luL0vGh7oHKl4xmz15ozEMKtRtEP7b3NpFFssEYIUI4nBg5QEQ7hex3FqQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDgsGZ9zNnwOR6vJDZkHR15utevQMB8GA1UdIwQY MBaAFFU/S8QWY5p+G2xPAZngLjFgoeZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlQ5THhCWmptbjRiYkU4Qm1lQXVNV0NoNWtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kMTE5ZjYtODgwZC00ZjViLWIwNzkt NWRkYWZiNTk1NGJhLzEvT0N3Wm4zTTJmQTVIcThrTm1RZEhYbTYxNjlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9kMTE5ZjYtODgwZC00ZjViLWIwNzktNWRkYWZiNTk1NGJh LzEvVlQ5THhCWmptbjRiYkU4Qm1lQXVNV0NoNWtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufK4MA0E AgACMAcDBQMqE2AAMA0GCSqGSIb3DQEBCwUAA4IBAQDJM+uLr54msBkQa0MRmfTb igtZ99snCgAJCgFrdZueLeb1amDwW5u16kSm4rIEu4ILArv5MebJO0NuJ7+t+xLn GqfYSjhikwaBzbJBAHCTN5dgtVUrfIQbo+7aXvcFsF3VlIzsiqJCogpK5LvFxxG7 cJ2P4zeTsFyCurLCyOqStcEyS0jaaloku0vvqt/0QD60QXDwtH1TOJwo16MPM2dO jpc6Psj2PDxW3MnKH8MB6U7NdISLl93hZX2gNd/eADR8M8+846ijGMpPCINjAAO1 dcUAYzZw4RnucEm5Ipdz8hzeYIB5ptWNFR2hi68RaYu9X38J8PFPFufRdX4fgcTI -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:41 2026 by rpki-client