This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/OoyL6bjrpv7zlvqenv5ZgNB0gGE.roa File: OoyL6bjrpv7zlvqenv5ZgNB0gGE.roa (raw, json) Hash identifier: Tm9hWa2oiDIAZqLLnYyHl8n9xWir4VblcdnhJ8WlcHo= Subject key identifier: 3A:8C:8B:E9:B8:EB:A6:FE:F3:96:FA:9E:9E:FE:59:80:D0:74:80:61 Certificate issuer: /CN=03090fac3cc42f1997455a12e643064637c69dc3 Certificate serial: 019B7BA3D690F87D4ECDC4FD7E8FC4014668 Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/OoyL6bjrpv7zlvqenv5ZgNB0gGE.roa Signing time: Thu 01 Jan 2026 22:18:13 +0000 ROA not before: Thu 01 Jan 2026 22:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34593 IP address blocks: 185.96.112.0/24 maxlen: 24 185.96.113.0/24 maxlen: 24 185.96.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d6:90:f8:7d:4e:cd:c4:fd:7e:8f:c4:01:46:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3 Validity Not Before: Jan 1 22:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a8c8be9b8eba6fef396fa9e9efe5980d0748061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cd:05:a4:dc:c5:72:ff:6a:11:03:54:bf:b5: 31:15:1a:dd:0e:9f:fe:37:cd:90:8f:35:3d:2a:b5: 36:da:b7:3d:b3:2d:25:de:01:ce:a1:d5:cb:17:41: 03:9b:a3:81:09:59:2c:3c:80:d1:7a:7e:37:8d:4b: 55:d0:2f:b0:22:29:71:98:ee:25:78:0e:55:55:32: bb:67:5d:ed:0e:39:6f:fa:bc:35:f7:da:df:3b:63: 5d:25:d1:f0:d1:a1:49:b3:a5:19:90:f3:5c:20:d4: 27:24:cf:b6:d1:14:71:b9:66:bf:66:f0:8b:9e:34: b5:a5:98:f5:85:f6:b2:c7:19:17:47:18:89:3d:63: b9:15:9c:97:7f:e9:75:53:b4:6a:3b:f6:9a:62:da: 1c:f6:bc:34:57:15:72:9d:0d:d1:34:86:71:39:00: 11:c4:a4:f3:da:50:db:03:96:a2:76:4d:e7:15:34: a4:1b:e4:0b:da:33:81:10:e3:9e:49:e0:bb:85:05: c3:01:e0:94:82:82:a6:cd:de:1f:90:43:99:7f:2c: 2a:0c:b8:e4:1e:3f:73:98:e5:00:c4:3f:b6:6d:02: a8:10:ce:06:cb:a2:a6:89:fc:45:3b:60:2f:02:b9: 6a:80:d5:d3:85:c2:fe:a7:0d:66:42:7b:63:34:43: c7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8C:8B:E9:B8:EB:A6:FE:F3:96:FA:9E:9E:FE:59:80:D0:74:80:61 X509v3 Authority Key Identifier: keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/OoyL6bjrpv7zlvqenv5ZgNB0gGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.96.112.0-185.96.114.255 Signature Algorithm: sha256WithRSAEncryption 6f:04:cd:6d:6c:50:9e:d2:55:f2:f8:53:08:d8:f6:3a:61:f9: b6:e4:ab:fe:99:d0:0e:0c:47:d1:a7:a8:43:7c:db:93:b0:ac: ed:f4:2d:74:aa:8d:0e:34:cc:b1:db:34:db:05:a2:b0:8f:f9: 59:2f:27:6f:8f:a1:74:8e:60:30:22:8c:b5:3c:ec:d0:10:ad: 3c:7c:27:13:96:4a:5f:28:d1:33:06:a2:bd:8b:c0:ad:07:9d: 31:9b:02:b4:8f:56:ea:83:3d:5e:23:d2:91:e0:f3:39:a0:a0: 12:4e:13:8b:55:05:1a:bd:ba:55:a2:23:38:ca:1b:df:e8:34: 28:de:db:38:47:f3:3d:25:5f:8e:b1:23:a6:59:05:1b:20:82: 73:1c:19:41:1e:a0:02:4b:c2:dc:b3:71:0b:c2:6e:df:6e:a6: 4a:77:78:08:07:02:b6:d5:e5:f9:26:c0:d5:cd:e2:fb:7d:96: 8a:35:7c:f1:3e:9e:ac:fe:3e:31:e8:f5:a0:54:80:e5:54:88: 64:a9:be:d6:60:c3:e0:55:d6:5b:f4:6d:b7:ca:10:63:45:29: 7e:1c:74:1c:62:f6:87:54:7e:42:85:e4:75:dd:b2:cf:15:e2: c4:a8:9e:bc:bb:97:38:67:63:cb:6d:e4:96:17:a0:65:c7:9c: b9:ae:84:4a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7o9aQ+H1OzcT9fo/EAUZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMDkwZmFjM2NjNDJmMTk5NzQ1NWExMmU2NDMwNjQ2Mzdj NjlkYzMwHhcNMjYwMTAxMjIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYThjOGJlOWI4ZWJhNmZlZjM5NmZhOWU5ZWZlNTk4MGQwNzQ4MDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA180FpNzFcv9qEQNUv7UxFRrdDp/+ N82QjzU9KrU22rc9sy0l3gHOodXLF0EDm6OBCVksPIDRen43jUtV0C+wIilxmO4l eA5VVTK7Z13tDjlv+rw199rfO2NdJdHw0aFJs6UZkPNcINQnJM+20RRxuWa/ZvCL njS1pZj1hfayxxkXRxiJPWO5FZyXf+l1U7RqO/aaYtoc9rw0VxVynQ3RNIZxOQAR xKTz2lDbA5aidk3nFTSkG+QL2jOBEOOeSeC7hQXDAeCUgoKmzd4fkEOZfywqDLjk Hj9zmOUAxD+2bQKoEM4Gy6KmifxFO2AvArlqgNXThcL+pw1mQntjNEPHIwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDqMi+m466b+85b6np7+WYDQdIBhMB8GA1UdIwQY MBaAFAMJD6w8xC8Zl0VaEuZDBkY3xp3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXdrUHJEekVMeG1YUlZvUzVrTUdSamZHbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81YzI4NjgtM2EyNy00ZGY0LThmMDAt ZmRkMjNiNDNjNTJlLzEvT295TDZianJwdjd6bHZxZW52NVpnTkIwZ0dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC81YzI4NjgtM2EyNy00ZGY0LThmMDAtZmRkMjNiNDNjNTJl LzEvQXdrUHJEekVMeG1YUlZvUzVrTUdSamZHbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAS5YHAD BAC5YHIwDQYJKoZIhvcNAQELBQADggEBAG8EzW1sUJ7SVfL4UwjY9jph+bbkq/6Z 0A4MR9GnqEN825OwrO30LXSqjQ40zLHbNNsForCP+VkvJ2+PoXSOYDAijLU87NAQ rTx8JxOWSl8o0TMGor2LwK0HnTGbArSPVuqDPV4j0pHg8zmgoBJOE4tVBRq9ulWi IzjKG9/oNCje2zhH8z0lX46xI6ZZBRsggnMcGUEeoAJLwtyzcQvCbt9upkp3eAgH ArbV5fkmwNXN4vt9loo1fPE+nqz+PjHo9aBUgOVUiGSpvtZgw+BV1lv0bbfKEGNF KX4cdBxi9odUfkKF5HXdss8V4sSonry7lzhnY8tt5JYXoGXHnLmuhEo= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:03 2026 by rpki-client