This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/DnIOOoGWRavp5IqwW9ySIPh79lk.roa File: DnIOOoGWRavp5IqwW9ySIPh79lk.roa (raw, json) Hash identifier: rq7BHpoO+/BSPP6hcjEqbUgUHas+lRS8Sfpjq0LOIgU= Subject key identifier: 0E:72:0E:3A:81:96:45:AB:E9:E4:8A:B0:5B:DC:92:20:F8:7B:F6:59 Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd Certificate serial: 019B7B3620507904C02C61A337AD1691B73F Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/DnIOOoGWRavp5IqwW9ySIPh79lk.roa Signing time: Thu 01 Jan 2026 20:18:23 +0000 ROA not before: Thu 01 Jan 2026 20:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.87.218.0/24 maxlen: 28 185.87.219.0/24 maxlen: 24 2a13:85c0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:20:50:79:04:c0:2c:61:a3:37:ad:16:91:b7:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd Validity Not Before: Jan 1 20:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e720e3a819645abe9e48ab05bdc9220f87bf659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:dc:40:11:83:1e:c3:d4:ed:de:36:82:0b:76: 4d:3c:70:41:38:11:13:c8:f9:f7:c8:34:ed:11:40: bd:ec:75:11:3d:7a:2f:b6:ed:87:af:3f:56:31:c3: 56:9c:41:a9:bd:73:a8:f1:3f:07:36:d2:f4:38:c9: ea:81:40:0e:bb:56:2e:1e:ac:09:1d:87:71:12:e0: 17:4d:3e:09:54:d6:1b:59:bc:c8:90:67:08:37:a2: 49:48:5b:ee:85:ed:7f:8a:e0:f8:23:82:d9:f4:4e: 15:74:8b:c5:33:20:f4:50:a1:87:a3:3a:af:1e:c5: 3b:ee:cc:08:56:35:94:62:5f:dd:3b:f8:d3:fd:07: fe:6d:24:24:8e:9b:93:e4:55:8e:76:e0:b0:e9:fc: b5:17:46:9e:ee:7f:f6:a5:b8:08:c8:3c:6a:27:54: ba:92:2d:cc:ec:6e:c9:5c:85:fb:d7:e1:a9:4c:4d: 61:6c:1e:1c:b3:87:19:fb:99:b3:bb:eb:b6:16:93: 1c:73:0e:46:f1:81:d9:8d:7d:13:46:65:ab:88:45: 3d:2c:2f:b5:9b:48:99:b5:69:3c:3c:79:bc:d1:3d: d0:b1:08:5a:37:91:01:8e:45:56:6c:53:79:4f:d0: 3b:d0:17:73:80:e2:f3:9a:9d:bd:e1:76:3a:f9:fd: eb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:72:0E:3A:81:96:45:AB:E9:E4:8A:B0:5B:DC:92:20:F8:7B:F6:59 X509v3 Authority Key Identifier: keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/DnIOOoGWRavp5IqwW9ySIPh79lk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.218.0/23 IPv6: 2a13:85c0::/40 Signature Algorithm: sha256WithRSAEncryption 9a:c3:6f:77:ca:03:8b:9d:07:ee:98:8b:6f:43:85:62:88:87: e5:62:5a:e7:e7:26:8c:23:8d:79:b0:a9:fb:27:92:1e:d7:5a: f5:be:6b:4d:d5:9e:97:e0:09:32:21:ff:20:e5:f6:15:d6:6f: c0:28:6c:7c:15:79:f0:65:64:b7:d4:ed:03:60:b6:df:7f:ea: a2:1a:6d:58:a0:24:8c:86:bd:34:b5:ab:1f:97:de:91:e8:26: 3b:5f:d1:62:d7:a6:9c:52:ae:bf:03:bd:c5:f0:6e:74:01:4e: 73:30:91:8f:24:8f:c2:a0:73:0b:10:a8:8e:46:39:9e:89:7d: fc:bd:e3:e4:c0:1c:f0:bd:47:92:77:92:27:01:df:6b:5b:57: 90:7a:a9:fb:af:52:a8:7a:0a:1a:c9:80:33:1e:f0:7c:59:3e: 1b:88:6a:68:0f:75:d6:f7:07:ce:74:a8:7c:3d:d8:c7:28:30: 86:7d:92:cc:2b:7f:76:83:a9:43:f4:27:7d:cd:5d:74:f0:c5: 35:6f:6e:d1:93:24:72:17:10:1d:a4:c9:d1:5a:c0:0a:52:f8: 7d:34:59:5c:78:7b:24:21:91:43:b7:96:58:43:4d:63:07:4f: fc:d5:b2:11:8e:77:d0:b3:cc:96:f7:d9:4b:d1:5a:3c:27:de: 14:b9:43:21 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt7NiBQeQTALGGjN60Wkbc/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODEyNzNkY2IwM2MzNDU3Yjc5MjUwYmUxMDllMTlhNWU3 NGYwZmQwHhcNMjYwMTAxMjAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTcyMGUzYTgxOTY0NWFiZTllNDhhYjA1YmRjOTIyMGY4N2JmNjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NxAEYMew9Tt3jaCC3ZNPHBBOBET yPn3yDTtEUC97HURPXovtu2Hrz9WMcNWnEGpvXOo8T8HNtL0OMnqgUAOu1YuHqwJ HYdxEuAXTT4JVNYbWbzIkGcIN6JJSFvuhe1/iuD4I4LZ9E4VdIvFMyD0UKGHozqv HsU77swIVjWUYl/dO/jT/Qf+bSQkjpuT5FWOduCw6fy1F0ae7n/2pbgIyDxqJ1S6 ki3M7G7JXIX71+GpTE1hbB4cs4cZ+5mzu+u2FpMccw5G8YHZjX0TRmWriEU9LC+1 m0iZtWk8PHm80T3QsQhaN5EBjkVWbFN5T9A70BdzgOLzmp294XY6+f3rpQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFA5yDjqBlkWr6eSKsFvckiD4e/ZZMB8GA1UdIwQY MBaAFEyBJz3LA8NFe3klC+EJ4ZpedPD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYt Nzc3OTRmYmZkMmU0LzEvRG5JT09vR1dSYXZwNUlxd1c5eVNJUGg3OWxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYtNzc3OTRmYmZkMmU0 LzEvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBuVfaMA4E AgACMAgDBgAqE4XAADANBgkqhkiG9w0BAQsFAAOCAQEAmsNvd8oDi50H7piLb0OF YoiH5WJa5+cmjCONebCp+yeSHtda9b5rTdWel+AJMiH/IOX2FdZvwChsfBV58GVk t9TtA2C233/qohptWKAkjIa9NLWrH5fekegmO1/RYtemnFKuvwO9xfBudAFOczCR jySPwqBzCxCojkY5nol9/L3j5MAc8L1HkneSJwHfa1tXkHqp+69SqHoKGsmAMx7w fFk+G4hqaA911vcHznSofD3Yxygwhn2SzCt/doOpQ/Qnfc1ddPDFNW9u0ZMkchcQ HaTJ0VrAClL4fTRZXHh7JCGRQ7eWWENNYwdP/NWyEY530LPMlvfZS9FaPCfeFLlD IQ== -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:24 2026 by rpki-client