This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/ovEHIgoLlT5gFEr99b8QyIfy0Hw.roa File: ovEHIgoLlT5gFEr99b8QyIfy0Hw.roa (raw, json) Hash identifier: iBbHmTmPmE2txWf3AwnVIHjDVj/1ExRukaV5Q59K53k= Subject key identifier: A2:F1:07:22:0A:0B:95:3E:60:14:4A:FD:F5:BF:10:C8:87:F2:D0:7C Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977 Certificate serial: 019B7CED6A5883C326541F12A30E1F538531 Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/ovEHIgoLlT5gFEr99b8QyIfy0Hw.roa Signing time: Fri 02 Jan 2026 04:18:12 +0000 ROA not before: Fri 02 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202691 IP address blocks: 185.157.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:6a:58:83:c3:26:54:1f:12:a3:0e:1f:53:85:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977 Validity Not Before: Jan 2 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2f107220a0b953e60144afdf5bf10c887f2d07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:dd:1a:98:e1:19:5e:2f:bc:5a:a8:98:9a: f0:b7:e1:a7:0c:ce:6e:95:2c:3c:94:0b:9b:17:f1: 20:1f:4d:c0:5d:cd:5c:0c:f8:4b:a7:d5:89:9a:5d: 74:ed:3f:49:d6:ff:b4:b0:bc:d9:94:cc:c1:8f:d2: 45:8a:d5:20:6e:f8:59:4e:61:0e:c6:8f:ee:40:2e: 6d:bb:44:a4:22:8f:69:e1:d4:07:fb:86:78:13:65: 8b:b6:18:53:30:09:22:04:47:5f:02:bf:2d:86:be: e1:74:25:2d:f7:61:78:09:bd:1c:a5:05:e9:c9:36: 62:16:ce:34:f3:93:af:aa:51:4d:dc:c3:c3:f8:3c: cd:98:6a:b1:9f:b9:39:cd:fa:c5:87:cb:af:d3:80: 63:2f:af:d2:a1:23:c3:2d:60:5a:5a:fd:56:e8:2c: 84:0f:1d:e9:f0:c4:22:49:d6:cf:fe:05:8b:69:78: 2f:56:00:a3:25:09:99:05:ff:99:78:a7:71:a3:2c: d5:b9:64:b9:6e:fa:21:f0:c0:90:57:d3:a0:7f:a0: 2a:6e:d9:f5:fd:62:e2:68:c3:f7:92:58:cf:6d:54: 08:51:41:dc:56:a6:9f:10:75:3c:4b:d1:5c:5e:c8: 39:7b:21:63:bc:0a:be:36:52:9f:06:61:76:a4:1f: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F1:07:22:0A:0B:95:3E:60:14:4A:FD:F5:BF:10:C8:87:F2:D0:7C X509v3 Authority Key Identifier: keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/ovEHIgoLlT5gFEr99b8QyIfy0Hw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.72.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:4f:5b:0d:37:17:70:9a:48:25:52:26:88:cc:5b:28:a9:eb: c8:f7:ca:a5:7d:b8:d9:21:59:ed:55:58:e9:6f:fd:e8:f1:f7: e5:3d:33:64:8e:69:db:30:b8:d8:19:27:b1:eb:d2:c8:9b:2e: 4f:03:92:8f:40:dd:e2:f5:32:c7:a3:09:da:bf:ca:e3:f0:66: 16:59:12:b7:38:b2:3f:92:3d:dc:b7:f4:7a:8b:b1:81:ac:fb: 01:66:54:22:45:b5:bd:5e:a9:cb:bd:38:c8:ec:e6:3a:13:c6: d7:f6:01:7a:85:d6:70:9c:34:d9:4c:36:c7:c6:a5:de:c4:96: 16:ef:bf:00:3b:93:65:23:f2:d2:90:ed:70:d1:d8:ee:6a:3a: 01:54:95:81:57:33:83:f4:89:45:bb:8b:a3:44:f7:cb:69:a3: 91:cf:8d:ba:2e:08:9f:57:ea:f1:66:08:f7:1e:b8:69:3a:70: 77:c9:16:d6:ab:1a:e9:b3:6c:82:3d:c4:2f:46:32:07:0d:3c: f0:4e:0b:b2:af:32:6c:d3:cf:9c:68:1a:0d:4c:a8:1f:d0:07: e9:75:52:32:90:cf:45:07:d2:11:fa:da:d7:5c:41:de:32:77: a6:da:ef:31:7b:15:13:f4:d4:81:24:78:57:0d:6c:74:14:6b: c0:f1:e6:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87WpYg8MmVB8Sow4fU4UxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYTA2MjUyNTI5MmEyOWU5N2ZlNmEwNTViOWJkNjA4NGE3 NzE5NzcwHhcNMjYwMTAyMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmYxMDcyMjBhMGI5NTNlNjAxNDRhZmRmNWJmMTBjODg3ZjJkMDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+vdGpjhGV4vvFqomJrwt+GnDM5u lSw8lAubF/EgH03AXc1cDPhLp9WJml107T9J1v+0sLzZlMzBj9JFitUgbvhZTmEO xo/uQC5tu0SkIo9p4dQH+4Z4E2WLthhTMAkiBEdfAr8thr7hdCUt92F4Cb0cpQXp yTZiFs4085OvqlFN3MPD+DzNmGqxn7k5zfrFh8uv04BjL6/SoSPDLWBaWv1W6CyE Dx3p8MQiSdbP/gWLaXgvVgCjJQmZBf+ZeKdxoyzVuWS5bvoh8MCQV9Ogf6Aqbtn1 /WLiaMP3kljPbVQIUUHcVqafEHU8S9FcXsg5eyFjvAq+NlKfBmF2pB9phwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKLxByIKC5U+YBRK/fW/EMiH8tB8MB8GA1UdIwQY MBaAFIOgYlJSkqKel/5qBVub1ghKdxl3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzIt MzIxYzlkNjZjODQ3LzEvb3ZFSElnb0xsVDVnRkVyOTliOFF5SWZ5MEh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzItMzIxYzlkNjZjODQ3 LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ1IMA0G CSqGSIb3DQEBCwUAA4IBAQBMT1sNNxdwmkglUiaIzFsoqevI98qlfbjZIVntVVjp b/3o8fflPTNkjmnbMLjYGSex69LImy5PA5KPQN3i9TLHownav8rj8GYWWRK3OLI/ kj3ct/R6i7GBrPsBZlQiRbW9XqnLvTjI7OY6E8bX9gF6hdZwnDTZTDbHxqXexJYW 778AO5NlI/LSkO1w0djuajoBVJWBVzOD9IlFu4ujRPfLaaORz426LgifV+rxZgj3 HrhpOnB3yRbWqxrps2yCPcQvRjIHDTzwTguyrzJs08+caBoNTKgf0AfpdVIykM9F B9IR+trXXEHeMnem2u8xexUT9NSBJHhXDWx0FGvA8eYk -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:01 2026 by rpki-client