This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/ONNi8ovX0XgxVfjOlwG1ZZZL7KA.roa File: ONNi8ovX0XgxVfjOlwG1ZZZL7KA.roa (raw, json) Hash identifier: oseBqsFumaa6CAjnqsxKGT9XuEQTrrxmktu1Tv62S6I= Subject key identifier: 38:D3:62:F2:8B:D7:D1:78:31:55:F8:CE:97:01:B5:65:96:4B:EC:A0 Certificate issuer: /CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853 Certificate serial: 019B79EC13E02AE9FD27E2B22962703E3059 Authority key identifier: 62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/ONNi8ovX0XgxVfjOlwG1ZZZL7KA.roa Signing time: Thu 01 Jan 2026 14:17:53 +0000 ROA not before: Thu 01 Jan 2026 14:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47815 IP address blocks: 94.125.64.0/21 maxlen: 21 188.92.200.0/21 maxlen: 21 194.30.185.0/24 maxlen: 24 2a03:4080::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:13:e0:2a:e9:fd:27:e2:b2:29:62:70:3e:30:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853 Validity Not Before: Jan 1 14:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38d362f28bd7d1783155f8ce9701b565964beca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:35:32:26:9d:a9:2f:4e:c4:10:ca:00:4d:af: ea:53:15:77:2f:cd:d2:26:88:2d:9f:d9:ad:cf:ef: 5d:ea:75:89:55:e7:65:e0:1c:a7:21:94:e9:99:52: 12:3e:bb:de:d8:91:5e:f4:94:6d:53:40:87:3b:7c: a3:1e:cf:6f:b0:3d:b3:81:d5:55:75:08:41:db:87: 51:e1:2c:bf:5c:6f:fd:d7:d5:4c:d1:47:ea:a1:a3: 2f:3e:4d:dc:22:00:c2:6c:1b:81:f3:54:98:e5:9a: b5:61:3f:e4:4a:c3:14:d6:69:ff:8d:b4:d9:a1:b0: 63:ac:37:1c:cf:ff:2e:ba:d4:b9:d8:ea:40:2c:04: 56:53:9e:eb:f6:98:b3:4d:fd:e9:50:40:bf:ca:7f: c4:0c:bb:24:dd:3f:70:7b:9c:85:ae:e1:ab:0f:9e: c2:2c:e4:47:63:ac:4a:87:18:07:1c:b0:78:1b:b1: 70:08:21:93:ec:84:4f:6b:33:cb:65:f2:cd:57:61: 78:cb:74:f1:eb:b3:f8:27:d2:22:65:5c:cc:6e:b3: b5:8d:9f:95:51:2e:61:ea:18:ee:28:f0:9d:ab:cb: 9a:8b:15:f4:25:8c:a8:62:2d:fd:03:da:85:66:07: f3:7a:cf:8f:6c:5e:97:b3:a6:e7:00:2b:0c:a1:5c: 13:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D3:62:F2:8B:D7:D1:78:31:55:F8:CE:97:01:B5:65:96:4B:EC:A0 X509v3 Authority Key Identifier: keyid:62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/ONNi8ovX0XgxVfjOlwG1ZZZL7KA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.125.64.0/21 188.92.200.0/21 194.30.185.0/24 IPv6: 2a03:4080::/32 Signature Algorithm: sha256WithRSAEncryption b0:0d:26:47:11:39:6b:a2:d2:23:40:12:e1:3a:9b:37:76:39: 6d:6f:d2:7d:d5:8a:7b:16:ad:be:bf:e6:da:b3:0b:20:51:ab: 61:cb:5c:4a:92:02:04:0f:46:63:fb:8e:71:f9:3c:a8:57:83: 48:25:fb:95:68:77:68:6f:ad:71:23:0a:80:bc:9e:89:a6:b9: 43:6e:a2:58:80:da:57:bf:92:d3:b2:8a:8f:cf:77:ff:6c:9d: 73:d6:f0:2a:ff:68:63:00:2b:6f:a5:7e:19:b7:b6:2b:78:74: 98:da:16:ca:0b:02:3a:68:1e:32:3d:44:66:ef:ee:3e:a1:7f: 52:f4:f9:bf:5d:94:f7:10:1b:75:88:a4:c3:9f:49:8a:50:fc: 9c:e5:95:a7:31:19:78:bf:8d:be:76:f4:c9:e3:ae:7a:0e:ce: 2e:6b:25:b2:5e:79:93:c0:1d:88:a0:c1:eb:59:19:ab:5f:e0: 92:89:be:62:73:87:0f:e9:be:ef:46:58:43:8e:38:88:06:48: d9:a2:43:ea:2c:78:d6:bd:97:c2:7f:f8:79:46:5d:94:82:b6: 9d:ab:15:a1:d3:7a:11:6f:b1:36:75:c3:5d:7a:dc:55:b0:7b: f7:ed:23:db:3d:9f:ec:78:93:1b:49:ed:60:a8:9d:28:fd:66: 1d:c3:41:45 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57BPgKun9J+KyKWJwPjBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZGQ1YTQwNzU0MjhhN2ZjOWFjOTRlNmQyYTJkOWE5OTJl ZjQ4NTMwHhcNMjYwMTAxMTQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGQzNjJmMjhiZDdkMTc4MzE1NWY4Y2U5NzAxYjU2NTk2NGJlY2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TUyJp2pL07EEMoATa/qUxV3L83S Jogtn9mtz+9d6nWJVedl4BynIZTpmVISPrve2JFe9JRtU0CHO3yjHs9vsD2zgdVV dQhB24dR4Sy/XG/919VM0UfqoaMvPk3cIgDCbBuB81SY5Zq1YT/kSsMU1mn/jbTZ obBjrDccz/8uutS52OpALARWU57r9pizTf3pUEC/yn/EDLsk3T9we5yFruGrD57C LORHY6xKhxgHHLB4G7FwCCGT7IRPazPLZfLNV2F4y3Tx67P4J9IiZVzMbrO1jZ+V US5h6hjuKPCdq8uaixX0JYyoYi39A9qFZgfzes+PbF6Xs6bnACsMoVwTNQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFDjTYvKL19F4MVX4zpcBtWWWS+ygMB8GA1UdIwQY MBaAFGLdWkB1Qop/yayU5tKi2amS70hTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXQxYVFIVkNpbl9KckpUbTBxTFpxWkx2U0ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzIyYzgtMTRlMy00MDgyLTkyZDEt NjVmODkwMGU1YzgyLzEvT05OaThvdlgwWGd4VmZqT2x3RzFaWlpMN0tBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzIyYzgtMTRlMy00MDgyLTkyZDEtNjVmODkwMGU1Yzgy LzEvWXQxYVFIVkNpbl9KckpUbTBxTFpxWkx2U0ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDXn1AAwQD vFzIAwQAwh65MA0EAgACMAcDBQAqA0CAMA0GCSqGSIb3DQEBCwUAA4IBAQCwDSZH ETlrotIjQBLhOps3djltb9J91Yp7Fq2+v+baswsgUathy1xKkgIED0Zj+45x+Tyo V4NIJfuVaHdob61xIwqAvJ6JprlDbqJYgNpXv5LTsoqPz3f/bJ1z1vAq/2hjACtv pX4Zt7YreHSY2hbKCwI6aB4yPURm7+4+oX9S9Pm/XZT3EBt1iKTDn0mKUPyc5ZWn MRl4v42+dvTJ4656Ds4uayWyXnmTwB2IoMHrWRmrX+CSib5ic4cP6b7vRlhDjjiI BkjZokPqLHjWvZfCf/h5Rl2UgradqxWh03oRb7E2dcNdetxVsHv37SPbPZ/seJMb Se1gqJ0o/WYdw0FF -----END CERTIFICATE-----Generated at Mon Feb 9 23:57:05 2026 by rpki-client