This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/OEhJas96pDHXZgaMA_s5Lgp04cY.roa File: OEhJas96pDHXZgaMA_s5Lgp04cY.roa (raw, json) Hash identifier: jxsNaFig0GGgXoj7CMTehSb9YCJBvykYHf4DMMEwiVs= Subject key identifier: 38:48:49:6A:CF:7A:A4:31:D7:66:06:8C:03:FB:39:2E:0A:74:E1:C6 Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e Certificate serial: 019B78A2530C7454ECC1CB883E2847B7DED8 Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/OEhJas96pDHXZgaMA_s5Lgp04cY.roa Signing time: Thu 01 Jan 2026 08:17:42 +0000 ROA not before: Thu 01 Jan 2026 08:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31638 IP address blocks: 5.144.184.0/21 maxlen: 24 5.144.184.0/22 maxlen: 22 5.144.188.0/22 maxlen: 22 5.144.188.0/24 maxlen: 24 5.144.190.0/24 maxlen: 24 37.156.96.0/22 maxlen: 23 37.156.96.0/23 maxlen: 23 37.156.98.0/23 maxlen: 23 37.156.148.0/22 maxlen: 24 37.156.148.0/23 maxlen: 23 37.156.150.0/23 maxlen: 23 37.156.168.0/22 maxlen: 24 37.156.168.0/23 maxlen: 23 37.156.170.0/23 maxlen: 23 37.156.208.0/22 maxlen: 24 37.156.208.0/23 maxlen: 23 37.156.210.0/23 maxlen: 23 46.255.80.0/21 maxlen: 24 46.255.80.0/22 maxlen: 22 46.255.80.0/24 maxlen: 24 46.255.83.0/24 maxlen: 24 46.255.84.0/22 maxlen: 22 46.255.85.0/24 maxlen: 24 86.104.6.0/24 maxlen: 24 86.104.229.0/24 maxlen: 24 86.105.8.0/24 maxlen: 24 86.105.179.0/24 maxlen: 24 89.33.232.0/24 maxlen: 24 89.34.6.0/24 maxlen: 24 89.39.92.0/24 maxlen: 24 89.39.224.0/20 maxlen: 21 89.39.224.0/21 maxlen: 21 89.39.232.0/21 maxlen: 21 89.42.230.0/24 maxlen: 24 89.44.206.0/24 maxlen: 24 89.45.24.0/21 maxlen: 24 89.45.24.0/24 maxlen: 24 89.45.25.0/24 maxlen: 24 89.45.26.0/24 maxlen: 24 89.45.27.0/24 maxlen: 24 89.45.95.0/24 maxlen: 24 89.45.216.0/22 maxlen: 23 89.47.32.0/23 maxlen: 24 93.113.89.0/24 maxlen: 24 93.115.170.0/23 maxlen: 23 93.118.37.0/24 maxlen: 24 94.177.18.0/23 maxlen: 23 94.177.151.0/24 maxlen: 24 176.223.164.0/24 maxlen: 24 185.82.168.0/22 maxlen: 23 185.82.168.0/23 maxlen: 23 185.82.169.0/24 maxlen: 24 185.82.170.0/23 maxlen: 23 185.82.170.0/24 maxlen: 24 185.82.171.0/24 maxlen: 24 188.209.80.0/20 maxlen: 24 188.209.80.0/21 maxlen: 21 188.209.80.0/24 maxlen: 24 188.209.81.0/24 maxlen: 24 188.209.82.0/24 maxlen: 24 188.209.83.0/24 maxlen: 24 188.209.86.0/24 maxlen: 24 188.209.87.0/24 maxlen: 24 188.209.88.0/21 maxlen: 21 188.209.88.0/24 maxlen: 24 188.209.89.0/24 maxlen: 24 188.210.239.0/24 maxlen: 24 188.212.153.0/24 maxlen: 24 188.215.44.0/22 maxlen: 24 188.215.45.0/24 maxlen: 24 188.215.65.0/24 maxlen: 24 188.215.247.0/24 maxlen: 24 188.215.248.0/24 maxlen: 24 188.241.4.0/23 maxlen: 24 188.241.190.0/23 maxlen: 24 195.62.160.0/19 maxlen: 20 195.62.160.0/20 maxlen: 20 195.62.176.0/20 maxlen: 20 2a02:20d8::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:53:0c:74:54:ec:c1:cb:88:3e:28:47:b7:de:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e Validity Not Before: Jan 1 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3848496acf7aa431d766068c03fb392e0a74e1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1e:df:ad:ea:2a:aa:24:73:29:88:07:ca:bc: 05:60:d7:90:e7:55:bc:38:02:07:80:8d:c9:79:51: f0:be:91:18:01:ea:a1:de:ce:98:4b:8f:6d:ed:4c: ff:af:dc:4a:6e:1c:45:25:bf:90:4c:e3:1d:09:40: 1c:43:c9:58:5f:0f:3b:0b:ff:fe:2e:ec:df:d2:51: 07:63:9e:fe:b0:59:8d:f8:f3:81:a6:8d:b6:93:06: 2a:0e:d4:41:52:d3:01:b9:fe:8e:c1:76:10:de:04: 87:a7:e1:7b:ac:0e:c1:a2:56:2e:c5:bc:05:88:72: 25:cd:65:90:ee:89:94:f9:2e:af:90:69:a5:4f:7b: 93:c7:dc:c4:23:ac:dd:d2:d4:c3:d7:85:9e:ec:74: 48:e7:fd:d3:b1:d1:19:f3:5d:b3:2c:8a:56:1b:50: 17:62:6d:2f:8e:6e:7c:5b:2f:8e:86:f9:81:57:19: c3:c4:e3:c8:49:45:18:d9:1b:ee:f6:96:a4:6c:87: 78:e1:8a:df:0f:2a:ae:c5:37:32:dc:50:19:b1:96: a0:b7:5e:09:30:3a:39:eb:28:41:96:27:4f:93:9c: c1:9d:b9:0e:6e:46:4d:0c:2a:44:45:35:90:62:c7: b9:17:7f:85:c5:cf:08:c1:c6:15:0e:39:8b:e5:35: 7c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:48:49:6A:CF:7A:A4:31:D7:66:06:8C:03:FB:39:2E:0A:74:E1:C6 X509v3 Authority Key Identifier: keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/OEhJas96pDHXZgaMA_s5Lgp04cY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.184.0/21 37.156.96.0/22 37.156.148.0/22 37.156.168.0/22 37.156.208.0/22 46.255.80.0/21 86.104.6.0/24 86.104.229.0/24 86.105.8.0/24 86.105.179.0/24 89.33.232.0/24 89.34.6.0/24 89.39.92.0/24 89.39.224.0/20 89.42.230.0/24 89.44.206.0/24 89.45.24.0/21 89.45.95.0/24 89.45.216.0/22 89.47.32.0/23 93.113.89.0/24 93.115.170.0/23 93.118.37.0/24 94.177.18.0/23 94.177.151.0/24 176.223.164.0/24 185.82.168.0/22 188.209.80.0/20 188.210.239.0/24 188.212.153.0/24 188.215.44.0/22 188.215.65.0/24 188.215.247.0-188.215.248.255 188.241.4.0/23 188.241.190.0/23 195.62.160.0/19 IPv6: 2a02:20d8::/29 Signature Algorithm: sha256WithRSAEncryption 5c:0a:58:44:d8:ef:42:42:71:d4:7f:56:e0:55:8e:77:7c:25: 12:eb:fe:4e:14:bc:e3:38:ea:08:0d:05:b4:58:d7:34:99:c1: 2e:0b:ca:a1:7d:3a:35:17:d9:e0:77:69:3d:47:23:ac:7e:b3: 6c:28:fc:5c:16:ff:a7:ad:69:ff:8b:13:6b:51:fa:19:d7:03: 62:2e:bd:f7:c8:8a:07:26:7a:2b:af:2d:6d:3e:83:d1:b3:f9: a2:e1:9c:f9:51:ca:80:3f:8e:af:dc:5f:0a:34:12:9c:55:8c: 8a:d3:02:5c:05:25:45:ef:25:1b:62:58:82:93:03:02:65:ef: 60:24:40:b9:d1:a7:b2:60:c2:2b:00:ff:5a:c6:17:57:96:41: 08:da:14:f8:50:42:d5:f3:c0:5f:3f:7c:1f:38:1d:2e:cc:04: 2e:68:7a:75:ee:f6:a9:e8:1e:4a:0c:13:82:a2:dc:52:4f:cf: 3e:b2:38:68:7e:e6:68:e7:38:f5:f3:46:21:be:84:a3:d0:35: 48:d7:29:76:c8:20:22:90:a7:ef:c8:64:ac:1d:6a:74:2e:b6: b0:9d:0f:73:39:38:c5:e4:65:a8:e1:45:d0:59:fb:bc:95:00: 30:e7:2d:42:bd:b1:bd:2e:61:c6:bf:72:41:44:e1:51:c8:fa: e5:8b:c0:3c -----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgISAZt4olMMdFTswcuIPihHt97YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMjAwZDBlN2FkM2NlZjcyMjM4YjUxNjRjNGIyY2RkZTIz YTZhMWUwHhcNMjYwMTAxMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODQ4NDk2YWNmN2FhNDMxZDc2NjA2OGMwM2ZiMzkyZTBhNzRlMWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx7freoqqiRzKYgHyrwFYNeQ51W8 OAIHgI3JeVHwvpEYAeqh3s6YS49t7Uz/r9xKbhxFJb+QTOMdCUAcQ8lYXw87C//+ Luzf0lEHY57+sFmN+POBpo22kwYqDtRBUtMBuf6OwXYQ3gSHp+F7rA7BolYuxbwF iHIlzWWQ7omU+S6vkGmlT3uTx9zEI6zd0tTD14We7HRI5/3TsdEZ812zLIpWG1AX Ym0vjm58Wy+OhvmBVxnDxOPISUUY2Rvu9pakbId44YrfDyquxTcy3FAZsZagt14J MDo56yhBlidPk5zBnbkObkZNDCpERTWQYse5F3+Fxc8IwcYVDjmL5TV8+wIDAQAB o4IC+DCCAvQwHQYDVR0OBBYEFDhISWrPeqQx12YGjAP7OS4KdOHGMB8GA1UdIwQY MBaAFJsgDQ560873Iji1FkxLLN3iOmoeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mY2JjYzYtNzM5Yi00ZjVjLWFlM2Mt YTRmMDhkYmI4NWE1LzEvT0VoSmFzOTZwREhYWmdhTUFfczVMZ3AwNGNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9mY2JjYzYtNzM5Yi00ZjVjLWFlM2MtYTRmMDhkYmI4NWE1 LzEvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBDAYIKwYBBQUHAQcBAf8EgfwwgfkwgecEAgABMIHgAwQD BZC4AwQCJZxgAwQCJZyUAwQCJZyoAwQCJZzQAwQDLv9QAwQAVmgGAwQAVmjlAwQA VmkIAwQAVmmzAwQAWSHoAwQAWSIGAwQAWSdcAwQEWSfgAwQAWSrmAwQAWSzOAwQD WS0YAwQAWS1fAwQCWS3YAwQBWS8gAwQAXXFZAwQBXXOqAwQAXXYlAwQBXrESAwQA XrGXAwQAsN+kAwQCuVKoAwQEvNFQAwQAvNLvAwQAvNSZAwQCvNcsAwQAvNdBMAwD BAC81/cDBAC81/gDBAG88QQDBAG88b4DBAXDPqAwDQQCAAIwBwMFAyoCINgwDQYJ KoZIhvcNAQELBQADggEBAFwKWETY70JCcdR/VuBVjnd8JRLr/k4UvOM46ggNBbRY 1zSZwS4LyqF9OjUX2eB3aT1HI6x+s2wo/FwW/6etaf+LE2tR+hnXA2IuvffIigcm eiuvLW0+g9Gz+aLhnPlRyoA/jq/cXwo0EpxVjIrTAlwFJUXvJRtiWIKTAwJl72Ak QLnRp7JgwisA/1rGF1eWQQjaFPhQQtXzwF8/fB84HS7MBC5oenXu9qnoHkoME4Ki 3FJPzz6yOGh+5mjnOPXzRiG+hKPQNUjXKXbIICKQp+/IZKwdanQutrCdD3M5OMXk ZajhRdBZ+7yVADDnLUK9sb0uYca/ckFE4VHI+uWLwDw= -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:06 2026 by rpki-client