This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/vOnxOMMrfpwbYLXufIu9cPksSy4.roa File: vOnxOMMrfpwbYLXufIu9cPksSy4.roa (raw, json) Hash identifier: IsBbUWUF1mmSkEzKlpo4wlrGY8DDapfkAU0NxfyEIwk= Subject key identifier: BC:E9:F1:38:C3:2B:7E:9C:1B:60:B5:EE:7C:8B:BD:70:F9:2C:4B:2E Certificate issuer: /CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7 Certificate serial: 019B7FF2718A1D467449581292E97469AC43 Authority key identifier: 2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/vOnxOMMrfpwbYLXufIu9cPksSy4.roa Signing time: Fri 02 Jan 2026 18:22:33 +0000 ROA not before: Fri 02 Jan 2026 18:22:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201649 IP address blocks: 185.68.48.0/22 maxlen: 22 185.68.48.0/24 maxlen: 24 185.68.49.0/24 maxlen: 24 185.68.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:71:8a:1d:46:74:49:58:12:92:e9:74:69:ac:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7 Validity Not Before: Jan 2 18:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bce9f138c32b7e9c1b60b5ee7c8bbd70f92c4b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:0d:c6:63:db:8a:0a:8a:1b:fd:b0:82:1c: 8c:8a:73:03:17:3b:73:04:66:07:3c:6f:90:2d:5d: bd:74:64:4f:50:bb:96:68:5f:70:55:35:d2:8d:97: b5:d3:9a:2a:73:80:aa:99:19:e5:5a:c1:92:e4:7a: 50:24:47:41:19:8a:61:fb:e5:31:fa:e9:65:9a:e0: d6:20:9a:0b:00:73:dc:2a:7f:c3:85:c3:34:ad:14: bb:62:9e:16:fa:b9:74:09:ff:ab:fa:77:41:e6:c6: ec:93:d7:e7:1e:1b:57:ed:46:cc:52:ca:ca:03:9d: 4c:ec:97:71:83:e4:a5:3a:0e:da:f1:0e:27:86:55: 88:e6:18:4f:b9:88:bc:4c:ae:9c:4d:91:0d:58:25: 55:72:a3:d8:34:e5:34:f6:f7:8a:5a:20:7c:0e:45: 1a:f2:67:75:78:7d:f4:e0:9b:2e:86:df:92:fb:f7: 64:b8:5f:48:61:d6:52:6d:9c:94:43:fa:82:81:2b: 66:00:76:45:4e:93:86:0f:93:57:8c:6a:c2:12:88: db:69:4c:da:d9:3c:ef:2c:0d:5b:c7:e7:35:66:71: 0f:3f:c9:cc:7b:0a:bf:85:f2:8b:67:21:db:1d:8f: 5d:21:03:a7:01:e3:42:88:3b:41:a1:5e:fc:89:5b: b7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E9:F1:38:C3:2B:7E:9C:1B:60:B5:EE:7C:8B:BD:70:F9:2C:4B:2E X509v3 Authority Key Identifier: keyid:2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/vOnxOMMrfpwbYLXufIu9cPksSy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.48.0/22 Signature Algorithm: sha256WithRSAEncryption 69:fd:84:a9:13:73:90:75:96:94:25:49:cc:d5:b6:e5:79:aa: 21:56:4a:6c:26:2c:2e:e4:95:06:f4:2b:ef:de:7d:d4:b7:09: 90:2c:79:53:f6:d4:00:b5:46:2a:52:a9:13:45:d3:0c:37:28: 14:05:8b:cf:b9:a9:72:7e:8d:4e:1d:c1:78:ca:5b:35:da:89: 02:77:08:86:23:5a:ff:2e:c1:aa:6e:cf:0b:36:e1:b1:72:2d: 82:e2:c5:71:57:5d:2a:53:82:c3:0b:92:da:ef:4f:ec:7d:6c: f2:b7:f1:59:1c:de:9d:05:7c:27:17:8a:29:22:f9:05:60:68: 09:e7:f3:e7:4e:69:fd:b7:82:e8:71:d3:ea:49:39:c1:05:6f: e0:d3:46:8e:b8:57:ba:06:c4:04:34:4f:eb:43:21:d2:6b:a5: 9d:56:e4:b0:14:73:25:80:45:e5:30:70:41:83:af:b8:1b:57: 11:e2:37:1a:52:b9:12:ab:f8:16:81:95:27:b0:e2:6e:a7:98: 82:c4:4e:2c:cc:ea:5d:8d:12:e7:93:33:c9:ee:cb:a8:6a:90: f6:96:8d:14:1d:d5:34:ee:b7:66:b1:68:f1:65:66:ad:6d:7f: 8e:cd:ad:1b:7c:ae:2d:01:14:61:5e:f9:57:8a:cb:91:37:38: 45:ad:51:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8nGKHUZ0SVgSkul0aaxDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODdjM2Q1ZjQ1ZmVmMzhjMTA1YjkzZGQ0NGRkMjRmNWJl ZTYwZTcwHhcNMjYwMTAyMTgyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2U5ZjEzOGMzMmI3ZTljMWI2MGI1ZWU3YzhiYmQ3MGY5MmM0YjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY0NxmPbigqKG/2wghyMinMDFztz BGYHPG+QLV29dGRPULuWaF9wVTXSjZe105oqc4CqmRnlWsGS5HpQJEdBGYph++Ux +ullmuDWIJoLAHPcKn/DhcM0rRS7Yp4W+rl0Cf+r+ndB5sbsk9fnHhtX7UbMUsrK A51M7Jdxg+SlOg7a8Q4nhlWI5hhPuYi8TK6cTZENWCVVcqPYNOU09veKWiB8DkUa 8md1eH304Jsuht+S+/dkuF9IYdZSbZyUQ/qCgStmAHZFTpOGD5NXjGrCEojbaUza 2TzvLA1bx+c1ZnEPP8nMewq/hfKLZyHbHY9dIQOnAeNCiDtBoV78iVu33QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLzp8TjDK36cG2C17nyLvXD5LEsuMB8GA1UdIwQY MBaAFC6Hw9X0X+84wQW5PdRN0k9b7mDnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9mRDFmUmY3empCQmJrOTFFM1NUMXZ1WU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zYjU4ZDgtNmQ5NC00MzAyLWFhOTEt N2MyYmQ5ODRkNzM1LzEvdk9ueE9NTXJmcHdiWUxYdWZJdTljUGtzU3k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zYjU4ZDgtNmQ5NC00MzAyLWFhOTEtN2MyYmQ5ODRkNzM1 LzEvTG9mRDFmUmY3empCQmJrOTFFM1NUMXZ1WU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUQwMA0G CSqGSIb3DQEBCwUAA4IBAQBp/YSpE3OQdZaUJUnM1bbleaohVkpsJiwu5JUG9Cvv 3n3UtwmQLHlT9tQAtUYqUqkTRdMMNygUBYvPualyfo1OHcF4yls12okCdwiGI1r/ LsGqbs8LNuGxci2C4sVxV10qU4LDC5La70/sfWzyt/FZHN6dBXwnF4opIvkFYGgJ 5/PnTmn9t4LocdPqSTnBBW/g00aOuFe6BsQENE/rQyHSa6WdVuSwFHMlgEXlMHBB g6+4G1cR4jcaUrkSq/gWgZUnsOJup5iCxE4szOpdjRLnkzPJ7suoapD2lo0UHdU0 7rdmsWjxZWatbX+Oza0bfK4tARRhXvlXisuRNzhFrVEr -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:52 2026 by rpki-client