This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/O4J-NYIe9H0u52beSrp6KYfxSyM.roa File: O4J-NYIe9H0u52beSrp6KYfxSyM.roa (raw, json) Hash identifier: 9cGF5R/YNUjncOYY/j5mBT3HsIQEUCIbaqGilj06Z9Y= Subject key identifier: 3B:82:7E:35:82:1E:F4:7D:2E:E7:66:DE:4A:BA:7A:29:87:F1:4B:23 Certificate issuer: /CN=077946f04742c66279acd322009be15e3d588a5a Certificate serial: 019B7C114BAB328A9AE7008733CFFEF9A662 Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/O4J-NYIe9H0u52beSrp6KYfxSyM.roa Signing time: Fri 02 Jan 2026 00:17:46 +0000 ROA not before: Fri 02 Jan 2026 00:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24806 IP address blocks: 85.255.0.0/20 maxlen: 32 185.186.20.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:4b:ab:32:8a:9a:e7:00:87:33:cf:fe:f9:a6:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=077946f04742c66279acd322009be15e3d588a5a Validity Not Before: Jan 2 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b827e35821ef47d2ee766de4aba7a2987f14b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:30:3e:32:a8:64:3d:c3:04:fe:26:0a:4f: 78:f3:38:85:b3:ed:55:e2:b0:66:21:01:4b:04:d1: e9:54:b4:83:06:85:5b:c7:b2:e9:d7:49:41:81:5e: e5:28:6d:82:f7:f8:85:89:78:3b:14:66:67:13:77: 36:6f:40:4a:a4:aa:c4:ab:07:d6:1f:2e:dc:2e:4e: 01:22:7d:0f:e1:ac:7b:22:ae:5f:1e:36:b5:26:00: c1:1b:35:04:ae:89:ab:3b:1c:b8:9b:e3:70:74:48: ee:7d:05:55:fc:c8:a4:de:46:48:08:7e:2b:19:c6: e4:59:01:a0:f9:7e:4e:c0:d9:12:f9:ba:43:b1:9c: 3f:05:4c:77:cf:47:af:80:19:0c:53:d3:b3:aa:40: 0b:56:9b:28:a8:e6:ee:c8:c6:b8:5d:3c:88:f9:8e: 6e:0e:99:6f:2b:10:8a:ff:46:e1:c7:22:67:66:d8: a9:27:fc:74:4a:f2:e6:f9:0d:10:fd:3b:f2:65:35: f8:2f:f9:32:82:0d:92:3b:12:ac:f6:75:75:61:58: db:14:7e:af:71:77:6e:55:d4:df:1c:ba:f3:74:48: 6b:9e:97:2f:14:01:b1:cc:a3:6b:d3:2d:7f:5a:fb: a2:4a:35:7a:ed:57:6f:5d:d5:c9:ab:9f:fd:dc:ac: 47:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:82:7E:35:82:1E:F4:7D:2E:E7:66:DE:4A:BA:7A:29:87:F1:4B:23 X509v3 Authority Key Identifier: keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/O4J-NYIe9H0u52beSrp6KYfxSyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.255.0.0/20 185.186.20.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:08:eb:f1:14:ca:fe:3d:69:ee:e0:6f:91:cc:73:b2:25:01: 71:62:4d:6a:c3:4f:bb:94:bd:c9:55:3f:ef:6a:7d:34:6f:87: dd:95:96:1f:c4:53:ab:9a:1e:8b:f9:17:fd:21:c4:f8:42:21: 73:47:d1:81:62:67:b8:78:63:3a:90:0c:cb:15:1a:4b:cb:28: f6:27:72:59:cc:7b:4c:81:14:e7:66:d2:bc:eb:b4:80:a4:f1: f8:47:97:55:48:35:ae:ae:82:ca:1f:1f:31:d6:d1:2d:09:f8: 17:d6:d1:00:e1:51:ca:33:39:42:2c:6b:bb:d8:25:a3:96:db: 7a:5a:40:1e:e5:97:81:70:06:4d:03:ad:df:a8:de:cb:7d:31: 7d:19:ef:ed:22:fe:98:88:7e:63:48:a8:8d:cf:02:4e:1e:57: 2d:96:f0:a1:a2:c7:a7:df:e7:86:c8:0e:89:28:ea:42:fc:57: 84:ed:47:c4:51:c6:82:62:88:f6:0a:bb:ed:1c:5d:16:da:d3: 67:30:3a:a2:5c:bb:e4:0b:25:e1:33:3e:12:29:a6:0a:c6:75: 50:16:b1:fb:84:dd:16:5c:4a:1d:db:18:fe:76:5d:1f:c2:42: 48:e8:39:76:77:e9:e3:0a:f9:56:2f:dd:bd:b3:fc:0e:fe:cc: c9:69:ea:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EUurMoqa5wCHM8/++aZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3Nzk0NmYwNDc0MmM2NjI3OWFjZDMyMjAwOWJlMTVlM2Q1 ODhhNWEwHhcNMjYwMTAyMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjgyN2UzNTgyMWVmNDdkMmVlNzY2ZGU0YWJhN2EyOTg3ZjE0YjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPUwPjKoZD3DBP4mCk948ziFs+1V 4rBmIQFLBNHpVLSDBoVbx7Lp10lBgV7lKG2C9/iFiXg7FGZnE3c2b0BKpKrEqwfW Hy7cLk4BIn0P4ax7Iq5fHja1JgDBGzUEromrOxy4m+NwdEjufQVV/Mik3kZICH4r GcbkWQGg+X5OwNkS+bpDsZw/BUx3z0evgBkMU9OzqkALVpsoqObuyMa4XTyI+Y5u DplvKxCK/0bhxyJnZtipJ/x0SvLm+Q0Q/TvyZTX4L/kygg2SOxKs9nV1YVjbFH6v cXduVdTfHLrzdEhrnpcvFAGxzKNr0y1/WvuiSjV67VdvXdXJq5/93KxHswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDuCfjWCHvR9Ludm3kq6eimH8UsjMB8GA1UdIwQY MBaAFAd5RvBHQsZieazTIgCb4V49WIpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNsRzhFZEN4bUo1ck5NaUFKdmhYajFZaWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lM2ZkMGItOWY0YS00NDUyLTkyYWYt YmUxNTE4MzlmMzY2LzEvTzRKLU5ZSWU5SDB1NTJiZVNycDZLWWZ4U3lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9lM2ZkMGItOWY0YS00NDUyLTkyYWYtYmUxNTE4MzlmMzY2 LzEvQjNsRzhFZEN4bUo1ck5NaUFKdmhYajFZaWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEVf8AAwQC uboUMA0GCSqGSIb3DQEBCwUAA4IBAQBqCOvxFMr+PWnu4G+RzHOyJQFxYk1qw0+7 lL3JVT/van00b4fdlZYfxFOrmh6L+Rf9IcT4QiFzR9GBYme4eGM6kAzLFRpLyyj2 J3JZzHtMgRTnZtK867SApPH4R5dVSDWuroLKHx8x1tEtCfgX1tEA4VHKMzlCLGu7 2CWjltt6WkAe5ZeBcAZNA63fqN7LfTF9Ge/tIv6YiH5jSKiNzwJOHlctlvChosen 3+eGyA6JKOpC/FeE7UfEUcaCYoj2CrvtHF0W2tNnMDqiXLvkCyXhMz4SKaYKxnVQ FrH7hN0WXEod2xj+dl0fwkJI6Dl2d+njCvlWL929s/wO/szJaeou -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:12 2026 by rpki-client