This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/O_6FFbhc4JZemzwdUopF30jTO70.roa File: O_6FFbhc4JZemzwdUopF30jTO70.roa (raw, json) Hash identifier: YpXPwTYN0lUePsEcimr/XTryk56n06KBrcCoSPFO4DM= Subject key identifier: 3B:FE:85:15:B8:5C:E0:96:5E:9B:3C:1D:52:8A:45:DF:48:D3:3B:BD Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4 Certificate serial: 019B7F856793A8DE8EFD73ECA62216AE37CC Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/O_6FFbhc4JZemzwdUopF30jTO70.roa Signing time: Fri 02 Jan 2026 16:23:27 +0000 ROA not before: Fri 02 Jan 2026 16:23:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 45.132.208.0/22 maxlen: 24 83.139.202.0/23 maxlen: 24 83.139.212.0/22 maxlen: 24 83.139.216.0/22 maxlen: 24 83.139.220.0/23 maxlen: 24 83.139.224.0/20 maxlen: 24 83.139.242.0/23 maxlen: 24 83.139.244.0/23 maxlen: 24 85.31.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:67:93:a8:de:8e:fd:73:ec:a6:22:16:ae:37:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4 Validity Not Before: Jan 2 16:23:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bfe8515b85ce0965e9b3c1d528a45df48d33bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ef:d0:48:aa:e4:7c:b2:42:ec:88:fb:cd:e8: 79:5d:72:04:a7:e9:7c:75:85:21:f5:e9:7c:6e:48: 0c:c1:30:11:3f:c4:e0:45:81:da:cf:61:23:54:3b: bc:75:58:57:89:4e:e4:14:94:7a:f9:c4:30:30:e7: 4d:e5:a2:05:21:8a:7f:40:cf:b0:10:67:84:e5:6b: 1e:bc:f4:e6:7d:93:d2:a9:10:05:3f:26:f2:92:08: dc:3c:0f:20:e6:1b:c0:e2:8a:f7:de:90:02:27:e1: 3c:c1:0b:01:17:89:3a:9b:77:db:c8:87:b2:44:e5: 43:7c:c9:d1:b4:18:70:e0:0b:6d:57:a1:65:2c:b6: 11:b1:c9:25:8f:40:d9:06:68:1b:b2:90:6b:44:71: fc:6e:1c:2f:10:a0:84:e0:d9:e2:6e:22:28:2a:85: 33:22:47:05:71:95:50:11:ef:4d:e4:f3:45:08:bc: 92:fc:3a:2f:e8:64:a1:fe:a2:48:14:81:84:92:71: 4a:7b:b1:18:00:01:69:99:14:61:64:b9:89:52:58: cd:7e:df:f3:a7:79:cb:88:6a:b2:6e:14:20:3b:5c: 29:22:0b:b7:d1:ef:59:49:a0:18:93:b5:89:68:a7: ac:73:76:a2:0c:da:13:bf:70:1d:7b:1c:83:8e:bd: 81:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FE:85:15:B8:5C:E0:96:5E:9B:3C:1D:52:8A:45:DF:48:D3:3B:BD X509v3 Authority Key Identifier: keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/O_6FFbhc4JZemzwdUopF30jTO70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.208.0/22 83.139.202.0/23 83.139.212.0-83.139.221.255 83.139.224.0/20 83.139.242.0-83.139.245.255 85.31.160.0/21 Signature Algorithm: sha256WithRSAEncryption 65:d5:d4:48:00:c5:7d:39:a0:41:9e:cd:ec:52:d4:5c:23:ea: 1c:5e:bb:c6:6e:3e:1d:8b:7f:dc:ac:7d:2b:4a:83:05:91:27: d6:33:5b:da:71:b5:8f:08:f9:d9:ae:d1:dd:c1:01:47:f2:8f: be:e9:58:c0:12:66:6b:28:ef:58:f2:ba:31:35:2b:91:61:11: 7f:b2:be:bc:be:8f:4e:0a:74:51:b9:38:f4:c8:1d:aa:c1:34: 17:d6:75:23:69:1a:f8:70:b6:c2:c7:c0:0f:a2:5d:f5:b5:9e: 44:09:51:d3:25:aa:0d:48:cf:36:b7:ed:7d:58:9e:b1:7d:9d: 62:08:e7:7a:19:0e:10:14:72:76:12:c7:4c:a9:15:07:76:65: 9b:e4:f0:80:b9:2a:bd:6d:2e:e3:8b:87:b6:32:48:37:9c:fc: e4:c2:c3:28:75:67:5d:26:6a:b0:2f:c9:38:17:f9:18:b4:0f: 9e:c1:60:9f:e7:88:09:85:83:ad:7e:d4:33:63:ad:31:cc:c6: 85:4f:e0:b8:fe:a6:03:5e:cf:c9:8f:06:06:77:95:6b:fa:16: fa:64:4b:8e:90:c8:04:71:ab:70:46:ca:86:e4:fc:e3:4f:90: a8:99:a3:d9:e5:2e:55:fa:e6:6c:1e:c6:d4:d2:8c:b8:66:82: d2:c5:19:ce -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt/hWeTqN6O/XPspiIWrjfMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl YWNlYjQwHhcNMjYwMTAyMTYyMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmZlODUxNWI4NWNlMDk2NWU5YjNjMWQ1MjhhNDVkZjQ4ZDMzYmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO/QSKrkfLJC7Ij7zeh5XXIEp+l8 dYUh9el8bkgMwTARP8TgRYHaz2EjVDu8dVhXiU7kFJR6+cQwMOdN5aIFIYp/QM+w EGeE5WsevPTmfZPSqRAFPybykgjcPA8g5hvA4or33pACJ+E8wQsBF4k6m3fbyIey ROVDfMnRtBhw4AttV6FlLLYRscklj0DZBmgbspBrRHH8bhwvEKCE4NnibiIoKoUz IkcFcZVQEe9N5PNFCLyS/Dov6GSh/qJIFIGEknFKe7EYAAFpmRRhZLmJUljNft/z p3nLiGqybhQgO1wpIgu30e9ZSaAYk7WJaKesc3aiDNoTv3AdexyDjr2BWQIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFDv+hRW4XOCWXps8HVKKRd9I0zu9MB8GA1UdIwQY MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt MWU0MzZkY2I4NWM1LzEvT182RkZiaGM0SlplbXp3ZFVvcEYzMGpUTzcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1 LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQCLYTQAwQB U4vKMAwDBAJTi9QDBAFTi9wDBARTi+AwDAMEAVOL8gMEAVOL9AMEA1UfoDANBgkq hkiG9w0BAQsFAAOCAQEAZdXUSADFfTmgQZ7N7FLUXCPqHF67xm4+HYt/3Kx9K0qD BZEn1jNb2nG1jwj52a7R3cEBR/KPvulYwBJmayjvWPK6MTUrkWERf7K+vL6PTgp0 Ubk49MgdqsE0F9Z1I2ka+HC2wsfAD6Jd9bWeRAlR0yWqDUjPNrftfViesX2dYgjn ehkOEBRydhLHTKkVB3Zlm+TwgLkqvW0u44uHtjJIN5z85MLDKHVnXSZqsC/JOBf5 GLQPnsFgn+eICYWDrX7UM2OtMczGhU/guP6mA17PyY8GBneVa/oW+mRLjpDIBHGr cEbKhuT840+QqJmj2eUuVfrmbB7G1NKMuGaC0sUZzg== -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:40 2026 by rpki-client