This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/of6LgZjZn377OWe4qW9VxsrXlzU.roa File: of6LgZjZn377OWe4qW9VxsrXlzU.roa (raw, json) Hash identifier: mzM/Cns9/j03lTiA+9ZfDQNcGWtBmHN0WQWYMBfi0eo= Subject key identifier: A1:FE:8B:81:98:D9:9F:7E:FB:39:67:B8:A9:6F:55:C6:CA:D7:97:35 Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 019B7D5CA8FD9F412E074E14673AE6688F99 Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/of6LgZjZn377OWe4qW9VxsrXlzU.roa Signing time: Fri 02 Jan 2026 06:19:43 +0000 ROA not before: Fri 02 Jan 2026 06:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273908 IP address blocks: 185.75.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a8:fd:9f:41:2e:07:4e:14:67:3a:e6:68:8f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: Jan 2 06:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1fe8b8198d99f7efb3967b8a96f55c6cad79735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:e9:39:6b:32:b1:36:b9:77:2f:3b:bb:09: e7:f3:e8:a4:c8:7b:43:4f:84:06:d0:23:cd:c0:46: 0f:3c:27:58:b3:c7:b7:49:e2:4e:75:0b:ee:a0:e3: da:34:88:ab:8c:50:1b:bb:c2:65:f0:90:9c:1e:ab: 34:10:3f:f7:7f:72:04:58:1d:9b:25:51:c5:92:c4: 27:a8:1b:d2:f0:24:80:90:cb:60:f9:ee:91:e8:27: 0f:d8:9c:0e:40:fb:e0:92:fd:d6:5d:bb:11:f7:9a: af:d0:b1:1d:8d:15:4e:6c:82:f9:d8:9d:23:b7:b8: f1:dc:0f:e0:8a:8b:5b:c1:a1:0f:11:ef:73:53:e4: 92:2b:50:60:56:e0:09:f1:e3:bf:6d:38:07:d4:22: 33:ab:95:b9:8e:4d:19:63:b9:2a:de:7a:8f:7f:68: 3e:87:d1:8b:ee:66:c4:2f:38:d7:11:de:b2:91:0f: d2:41:1d:c2:d6:65:48:04:a7:37:eb:1b:f8:5e:1f: cc:73:c7:ed:c9:07:49:9e:c8:df:04:d7:71:40:e5: 45:fe:d6:0b:69:db:58:55:1f:99:85:dc:b4:d6:0c: e8:ad:52:c5:c6:0a:b1:c9:fe:18:4b:93:43:88:cc: 6b:ab:82:91:cd:a4:1a:d8:65:a6:9f:2d:44:f2:5a: e4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FE:8B:81:98:D9:9F:7E:FB:39:67:B8:A9:6F:55:C6:CA:D7:97:35 X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/of6LgZjZn377OWe4qW9VxsrXlzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.13.0/24 Signature Algorithm: sha256WithRSAEncryption 68:d5:d9:a5:6c:36:a7:19:a4:3c:dc:06:ae:86:51:60:9f:4e: 39:7a:2d:89:52:38:ab:f0:91:67:53:73:8c:df:de:c9:1d:9d: 5a:a3:a6:47:82:73:38:44:7d:a0:10:2d:c7:79:a0:68:a8:21: 2a:6b:38:21:f7:bf:f0:6a:26:8d:42:e4:3f:a7:77:f8:17:de: a8:a8:38:6b:e7:64:9b:24:00:2e:99:12:c8:e6:ce:f1:89:05: ac:1a:dd:51:26:c3:6b:07:e7:41:8e:4b:72:b4:55:06:be:36: 67:d4:16:3c:91:f5:34:df:73:33:42:7c:1d:54:1f:7f:10:d3: dc:1f:09:60:fc:e2:4d:a4:55:6e:0c:01:f4:b9:b7:e3:6a:a7: 14:7b:53:c6:07:4a:db:2c:eb:ca:c1:94:e3:9c:df:32:4a:6b: a5:b7:65:6b:f8:8b:eb:75:25:58:bc:87:79:58:c0:f9:2d:e4: 4c:82:6d:60:9c:dc:b2:c5:97:ce:a8:a9:0f:9b:ee:5e:ea:0b: 24:23:b5:36:56:3e:5f:45:c8:49:16:b3:e9:f2:14:f0:2c:c5: f5:9b:3b:2d:e8:74:42:0f:41:42:0b:13:1c:49:ac:c4:2a:e4: c1:46:a1:be:99:fb:a6:7d:34:4a:5f:1f:a0:8e:d9:14:4b:ba: 13:b5:fc:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKj9n0EuB04UZzrmaI+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjYwMTAyMDYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWZlOGI4MTk4ZDk5ZjdlZmIzOTY3YjhhOTZmNTVjNmNhZDc5NzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMzpOWsysTa5dy87uwnn8+ikyHtD T4QG0CPNwEYPPCdYs8e3SeJOdQvuoOPaNIirjFAbu8Jl8JCcHqs0ED/3f3IEWB2b JVHFksQnqBvS8CSAkMtg+e6R6CcP2JwOQPvgkv3WXbsR95qv0LEdjRVObIL52J0j t7jx3A/giotbwaEPEe9zU+SSK1BgVuAJ8eO/bTgH1CIzq5W5jk0ZY7kq3nqPf2g+ h9GL7mbELzjXEd6ykQ/SQR3C1mVIBKc36xv4Xh/Mc8ftyQdJnsjfBNdxQOVF/tYL adtYVR+Zhdy01gzorVLFxgqxyf4YS5NDiMxrq4KRzaQa2GWmny1E8lrkewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKH+i4GY2Z9++zlnuKlvVcbK15c1MB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvb2Y2TGdaalpuMzc3T1dlNHFXOVZ4c3JYbHpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUsNMA0G CSqGSIb3DQEBCwUAA4IBAQBo1dmlbDanGaQ83AauhlFgn045ei2JUjir8JFnU3OM 397JHZ1ao6ZHgnM4RH2gEC3HeaBoqCEqazgh97/waiaNQuQ/p3f4F96oqDhr52Sb JAAumRLI5s7xiQWsGt1RJsNrB+dBjktytFUGvjZn1BY8kfU033MzQnwdVB9/ENPc Hwlg/OJNpFVuDAH0ubfjaqcUe1PGB0rbLOvKwZTjnN8ySmult2Vr+IvrdSVYvId5 WMD5LeRMgm1gnNyyxZfOqKkPm+5e6gskI7U2Vj5fRchJFrPp8hTwLMX1mzst6HRC D0FCCxMcSazEKuTBRqG+mfumfTRKXx+gjtkUS7oTtfyn -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:00 2026 by rpki-client