This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/1-oq4TG_7HWiqOVy_FENVUEkGtDI.roa File: 1-oq4TG_7HWiqOVy_FENVUEkGtDI.roa (raw, json) Hash identifier: WkyuSbuUrQsBUNZKIgd/RxLYyL6Wt7Nlixkah71KQxI= Subject key identifier: FA:8A:B8:4C:6F:FB:1D:68:AA:39:5C:BF:14:43:55:50:49:06:B4:32 Certificate issuer: /CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b Certificate serial: 019B7EA5B0FD0D6CC9E280492EEF3EDBAB8F Authority key identifier: 99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/1-oq4TG_7HWiqOVy_FENVUEkGtDI.roa Signing time: Fri 02 Jan 2026 12:19:06 +0000 ROA not before: Fri 02 Jan 2026 12:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59866 IP address blocks: 185.68.134.0/23 maxlen: 23 185.68.134.0/24 maxlen: 24 185.68.135.0/24 maxlen: 24 2a05:1840::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.mft rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:b0:fd:0d:6c:c9:e2:80:49:2e:ef:3e:db:ab:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=998e9cb27f3d1abcc4cc61c3c1bbfdc72628e57b Validity Not Before: Jan 2 12:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa8ab84c6ffb1d68aa395cbf144355504906b432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:46:82:ec:cc:83:87:72:e3:3c:2d:2d:d0:99: 67:c2:f0:07:ae:c8:90:d9:1a:9e:2f:c4:f3:57:9a: fd:93:39:e3:55:17:f4:8f:24:46:f5:77:c3:de:ef: e0:5a:0f:3b:41:6c:6b:eb:e7:dc:80:a1:42:dd:88: 79:42:30:12:e8:99:17:a9:2d:6a:c3:61:8f:2d:4b: 14:56:f1:e0:d3:a4:e3:ce:41:37:76:7f:a9:d4:e6: fc:14:c9:de:5f:36:1e:b9:a0:98:1e:db:d1:13:17: 94:e4:62:ef:70:bc:5f:84:15:d0:83:ef:d4:dc:16: 0f:56:2f:11:bc:6f:34:3a:fe:bb:5a:25:0a:a3:65: 3d:2b:83:de:99:62:19:d1:a5:ca:3d:39:e3:43:71: 98:ca:53:dc:42:11:8d:0f:59:63:8a:52:bb:a2:6c: 7c:f3:4c:74:74:b9:62:5f:86:4c:84:2f:c5:af:01: ce:d4:12:15:24:e3:ab:47:10:64:4d:57:5c:88:99: 0f:aa:28:30:f3:2e:a7:67:8d:16:d3:59:5f:54:48: 73:7b:4a:19:f4:79:cb:c0:51:07:b4:5e:b1:c4:1c: 38:3e:5d:c8:14:2e:27:d1:b1:2f:9f:f9:ed:90:22: 52:8b:00:d7:19:47:e1:3a:bf:8b:b7:66:9f:9c:10: ba:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8A:B8:4C:6F:FB:1D:68:AA:39:5C:BF:14:43:55:50:49:06:B4:32 X509v3 Authority Key Identifier: keyid:99:8E:9C:B2:7F:3D:1A:BC:C4:CC:61:C3:C1:BB:FD:C7:26:28:E5:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY6csn89GrzEzGHDwbv9xyYo5Xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/1-oq4TG_7HWiqOVy_FENVUEkGtDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3c9f4a-4456-4581-b287-52d6b3e4789f/1/mY6csn89GrzEzGHDwbv9xyYo5Xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.134.0/23 IPv6: 2a05:1840::/29 Signature Algorithm: sha256WithRSAEncryption 59:dd:d5:ee:a1:a0:1b:51:c6:11:34:82:9d:05:82:2a:8f:f6: b3:36:99:08:ec:59:51:51:a3:7e:fe:32:52:55:e1:8b:5e:a1: 00:84:73:17:d0:84:63:99:eb:58:d3:05:07:9c:5c:a4:a2:cf: e0:24:02:7d:6c:8e:16:c6:9c:ce:d6:65:97:5d:9e:10:f5:2a: 29:13:08:a7:1c:a3:6a:bf:5e:02:14:06:6c:b1:df:12:05:89: 1c:21:04:69:6e:f7:a7:26:ac:fd:52:8c:7a:37:11:21:b5:82: 35:fe:47:d2:3e:9b:57:8d:ee:01:b7:22:af:85:d5:e8:b4:7f: fb:70:78:62:d6:2c:72:c8:2a:b3:7a:10:98:b4:08:44:a1:7a: 35:25:33:a6:8c:bb:29:89:40:d1:aa:a1:72:e6:3e:0d:d9:15: f9:4a:a8:ae:8f:52:e8:1e:37:84:0e:2b:f1:72:88:59:3c:88: 29:ec:97:50:05:43:e6:4f:12:1e:df:2c:5b:2c:21:37:41:b5: 7f:aa:48:0f:ce:27:5b:a2:47:33:02:ef:43:da:9d:d8:e6:0e: d6:ca:18:ab:46:bf:ba:f3:c4:31:86:ec:6b:ff:f5:8c:59:05: c7:67:07:59:b7:e6:20:f2:64:52:59:03:fd:2d:08:1d:af:47: df:da:bf:1a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt+pbD9DWzJ4oBJLu8+26uPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OGU5Y2IyN2YzZDFhYmNjNGNjNjFjM2MxYmJmZGM3MjYy OGU1N2IwHhcNMjYwMTAyMTIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYThhYjg0YzZmZmIxZDY4YWEzOTVjYmYxNDQzNTU1MDQ5MDZiNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUaC7MyDh3LjPC0t0JlnwvAHrsiQ 2RqeL8TzV5r9kznjVRf0jyRG9XfD3u/gWg87QWxr6+fcgKFC3Yh5QjAS6JkXqS1q w2GPLUsUVvHg06TjzkE3dn+p1Ob8FMneXzYeuaCYHtvRExeU5GLvcLxfhBXQg+/U 3BYPVi8RvG80Ov67WiUKo2U9K4PemWIZ0aXKPTnjQ3GYylPcQhGND1ljilK7omx8 80x0dLliX4ZMhC/FrwHO1BIVJOOrRxBkTVdciJkPqigw8y6nZ40W01lfVEhze0oZ 9HnLwFEHtF6xxBw4Pl3IFC4n0bEvn/ntkCJSiwDXGUfhOr+Lt2afnBC6VwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPqKuExv+x1oqjlcvxRDVVBJBrQyMB8GA1UdIwQY MBaAFJmOnLJ/PRq8xMxhw8G7/ccmKOV7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVk2Y3NuODlHcnpFekdIRHdidjl4eVlvNVhzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zYzlmNGEtNDQ1Ni00NTgxLWIyODct NTJkNmIzZTQ3ODlmLzEvMS1vcTRUR183SFdpcU9WeV9GRU5WVUVrR3RESS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDMvM2M5ZjRhLTQ0NTYtNDU4MS1iMjg3LTUyZDZiM2U0Nzg5 Zi8xL21ZNmNzbjg5R3J6RXpHSER3YnY5eHlZbzVYcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAblEhjAN BAIAAjAHAwUDKgUYQDANBgkqhkiG9w0BAQsFAAOCAQEAWd3V7qGgG1HGETSCnQWC Ko/2szaZCOxZUVGjfv4yUlXhi16hAIRzF9CEY5nrWNMFB5xcpKLP4CQCfWyOFsac ztZll12eEPUqKRMIpxyjar9eAhQGbLHfEgWJHCEEaW73pyas/VKMejcRIbWCNf5H 0j6bV43uAbcir4XV6LR/+3B4YtYscsgqs3oQmLQIRKF6NSUzpoy7KYlA0aqhcuY+ DdkV+Uqoro9S6B43hA4r8XKIWTyIKeyXUAVD5k8SHt8sWywhN0G1f6pID84nW6JH MwLvQ9qd2OYO1soYq0a/uvPEMYbsa//1jFkFx2cHWbfmIPJkUlkD/S0IHa9H39q/ Gg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:15 2026 by rpki-client