This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/OI35XoymoB6MP1yUw26XHqoFg6g.roa File: OI35XoymoB6MP1yUw26XHqoFg6g.roa (raw, json) Hash identifier: tm//eWUHhKpLMpw9iA8GDpoBhBmL46Acbtwne2U0G1E= Subject key identifier: 38:8D:F9:5E:8C:A6:A0:1E:8C:3F:5C:94:C3:6E:97:1E:AA:05:83:A8 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C67F99D516853715094E5561B7038A Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/OI35XoymoB6MP1yUw26XHqoFg6g.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 185.150.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7f:99:d5:16:85:37:15:09:4e:55:61:b7:03:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=388df95e8ca6a01e8c3f5c94c36e971eaa0583a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bd:ad:33:fb:ee:18:96:a8:a5:0d:31:56:eb: 5c:3b:7f:a3:4e:f6:24:79:a0:83:df:08:15:aa:8f: 29:fd:8d:46:6b:8b:14:16:46:d3:68:ee:ba:5f:b8: 24:af:d0:d7:45:ac:e7:38:dd:47:9c:a7:e3:6d:c9: be:1e:46:99:ab:c0:9e:39:07:ab:af:28:1c:b1:da: 6c:10:58:b9:62:44:6c:04:01:e2:e1:c2:5b:b6:35: 06:0e:e7:38:5d:ef:33:12:94:96:0b:d1:f1:e3:9c: f3:d3:26:b1:a3:b2:23:b4:a0:41:01:11:bb:d6:c4: 18:aa:61:2b:ed:9b:15:a2:35:6d:2a:44:9b:ee:49: 4d:89:4d:31:92:1f:10:7d:d2:e1:cc:e4:a4:ce:b2: 8a:8a:c6:a8:d4:01:fa:bb:c7:03:b2:0b:f8:b2:21: 91:ae:77:7c:78:f7:f5:3b:11:23:f0:ed:fd:a3:b5: f5:54:40:ce:81:e2:19:41:48:71:c5:67:85:42:4e: 16:af:32:84:84:51:4e:38:6a:21:2b:3d:c4:a2:9a: b8:95:e1:17:57:bb:85:ad:a3:3f:01:05:0e:68:05: 96:a5:02:a3:41:17:13:0d:d5:42:21:d1:ae:90:df: 04:c0:7e:1c:af:f2:35:d2:49:7f:5b:98:ce:ae:76: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8D:F9:5E:8C:A6:A0:1E:8C:3F:5C:94:C3:6E:97:1E:AA:05:83:A8 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/OI35XoymoB6MP1yUw26XHqoFg6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.204.0/24 Signature Algorithm: sha256WithRSAEncryption 18:a1:9b:72:76:53:0d:44:35:7f:08:b5:2b:d7:2a:a2:9f:e7: e5:7f:c4:fe:5a:c9:d4:83:97:4b:b0:fe:4c:04:64:ad:79:da: 13:8a:3c:11:96:e6:70:08:81:13:41:8e:8e:7b:59:47:69:60: f1:69:53:64:09:66:27:a5:38:9c:47:34:fe:ef:67:a8:ee:06: 0d:2b:4f:33:d2:2c:fa:85:a0:82:41:4e:80:ed:19:8a:e4:97: ae:20:71:ec:70:3c:76:d0:66:d9:db:da:7e:e5:e9:1c:5a:17: e5:09:47:1e:f5:ef:b6:aa:4b:6e:78:bc:c4:9c:b4:9d:04:23: 0c:f1:c1:a1:dc:6e:f8:bc:de:cc:c6:66:ac:93:77:30:17:7c: 60:e1:ae:b1:25:93:d9:12:22:d4:32:bd:c0:80:34:e0:f3:0e: 9a:46:34:27:2e:0e:31:bb:a5:66:55:5f:02:16:31:18:a8:b1: 7c:df:4f:a5:18:2a:77:f1:a4:99:79:9a:f1:78:5a:4b:b5:9b: c0:a0:9e:1f:0b:f4:69:59:2e:ee:a7:c3:1c:c0:ae:2c:dd:d1: 0b:c7:d1:cc:b0:ef:d1:7c:26:33:20:d9:86:2d:eb:30:d7:d1: 16:71:04:5f:d5:d1:1e:14:dc:0c:ce:ff:75:ca:8f:d8:3b:b0: 3d:09:e9:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xn+Z1RaFNxUJTlVhtwOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODhkZjk1ZThjYTZhMDFlOGMzZjVjOTRjMzZlOTcxZWFhMDU4M2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL2tM/vuGJaopQ0xVutcO3+jTvYk eaCD3wgVqo8p/Y1Ga4sUFkbTaO66X7gkr9DXRaznON1HnKfjbcm+HkaZq8CeOQer rygcsdpsEFi5YkRsBAHi4cJbtjUGDuc4Xe8zEpSWC9Hx45zz0yaxo7IjtKBBARG7 1sQYqmEr7ZsVojVtKkSb7klNiU0xkh8QfdLhzOSkzrKKisao1AH6u8cDsgv4siGR rnd8ePf1OxEj8O39o7X1VEDOgeIZQUhxxWeFQk4WrzKEhFFOOGohKz3Eopq4leEX V7uFraM/AQUOaAWWpQKjQRcTDdVCIdGukN8EwH4cr/I10kl/W5jOrnbl+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDiN+V6MpqAejD9clMNulx6qBYOoMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvT0kzNVhveW1vQjZNUDF5VXcyNlhIcW9GZzZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZbMMA0G CSqGSIb3DQEBCwUAA4IBAQAYoZtydlMNRDV/CLUr1yqin+flf8T+WsnUg5dLsP5M BGStedoTijwRluZwCIETQY6Oe1lHaWDxaVNkCWYnpTicRzT+72eo7gYNK08z0iz6 haCCQU6A7RmK5JeuIHHscDx20GbZ29p+5ekcWhflCUce9e+2qktueLzEnLSdBCMM 8cGh3G74vN7Mxmask3cwF3xg4a6xJZPZEiLUMr3AgDTg8w6aRjQnLg4xu6VmVV8C FjEYqLF830+lGCp38aSZeZrxeFpLtZvAoJ4fC/RpWS7up8McwK4s3dELx9HMsO/R fCYzINmGLesw19EWcQRf1dEeFNwMzv91yo/YO7A9CelM -----END CERTIFICATE-----Generated at Mon Jan 12 00:51:33 2026 by rpki-client