This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/oKbMR38c6g5Sb8f_q8_DP98D8vc.roa File: oKbMR38c6g5Sb8f_q8_DP98D8vc.roa (raw, json) Hash identifier: QbHsSOABpHInSeNj8NMGYtmUXI4ZAi0ELzxa77Y6VMM= Subject key identifier: A0:A6:CC:47:7F:1C:EA:0E:52:6F:C7:FF:AB:CF:C3:3F:DF:03:F2:F7 Certificate issuer: /CN=223087b337f7476c8d6304aeb08cee057f4bf691 Certificate serial: 019B7FF25534ACA80932399F06EA17108D00 Authority key identifier: 22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/oKbMR38c6g5Sb8f_q8_DP98D8vc.roa Signing time: Fri 02 Jan 2026 18:22:26 +0000 ROA not before: Fri 02 Jan 2026 18:22:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20633 IP address blocks: 141.2.0.0/16 maxlen: 16 185.193.228.0/22 maxlen: 22 2001:a38::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:55:34:ac:a8:09:32:39:9f:06:ea:17:10:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=223087b337f7476c8d6304aeb08cee057f4bf691 Validity Not Before: Jan 2 18:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0a6cc477f1cea0e526fc7ffabcfc33fdf03f2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:69:fd:0d:bb:46:2c:56:0a:65:ce:bd:c2: 57:a3:37:98:66:a1:5c:3e:4d:8d:df:49:ba:1b:be: dc:fd:80:3e:6b:8d:24:8d:77:c4:d0:ae:2a:62:69: 1a:4d:34:e3:3c:7e:51:9d:2a:c7:23:0f:8b:9a:10: 3d:fd:de:d5:c2:63:b7:40:38:7a:a6:65:c1:db:00: 23:b1:b1:f5:6c:2d:bf:85:8a:70:dc:2a:79:d2:38: dd:95:76:61:82:90:b9:7d:2b:46:07:16:62:78:03: fb:a0:52:5b:7e:98:6f:c5:69:98:8f:1d:41:94:ce: 70:d7:1d:5e:4d:59:d4:7c:0b:45:24:9b:9f:bf:d5: dc:40:76:ef:51:aa:e8:75:ea:a1:26:8d:5c:fd:98: 38:e3:25:3c:e6:6e:21:03:90:db:78:6e:6c:2f:a8: fa:29:1e:ac:01:87:a5:22:6b:97:d9:d1:00:25:df: f1:26:2d:f7:e6:80:da:db:0f:54:40:85:36:1e:cc: 3c:8a:d3:4b:78:74:8b:55:46:99:6e:af:e8:fa:56: c4:ff:b5:9b:b5:ea:24:6e:44:60:e6:5b:90:c7:ef: 5e:56:19:39:8c:0d:31:e7:24:98:be:fc:ce:bf:d9: a1:23:7d:65:76:09:73:af:23:b9:d7:c7:e1:5f:cd: 82:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A6:CC:47:7F:1C:EA:0E:52:6F:C7:FF:AB:CF:C3:3F:DF:03:F2:F7 X509v3 Authority Key Identifier: keyid:22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/oKbMR38c6g5Sb8f_q8_DP98D8vc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.2.0.0/16 185.193.228.0/22 IPv6: 2001:a38::/32 Signature Algorithm: sha256WithRSAEncryption 86:cf:a0:b2:34:03:b3:b9:63:bf:d4:cc:3d:f4:b5:19:cf:00: b6:fc:c7:b3:3e:6c:b7:b5:86:0e:7c:c5:68:26:5f:b0:9b:74: b4:e7:9d:d8:f2:56:02:b2:82:7b:c7:3d:5d:ba:3d:8a:19:c0: 53:d5:3c:e4:7b:74:de:01:55:13:24:1d:4f:bc:bf:ef:28:fa: b7:09:62:59:9c:36:4c:03:30:d9:6a:12:6c:52:1a:b4:12:cb: 2f:1e:6e:01:fb:1a:ae:db:0a:fc:a4:48:3d:17:f4:17:32:c4: 10:ee:5b:27:18:8b:47:ea:2f:21:2a:ae:cb:a5:f6:11:49:85: 84:bb:17:9f:24:39:d9:a9:17:d7:75:4e:ec:9b:37:ec:b5:eb: b7:98:ee:4f:ec:07:87:39:ef:8c:3a:d9:9b:63:c5:a3:25:23: 5c:8e:a8:60:1a:89:48:dc:0f:fb:ea:3e:29:5b:f5:9f:bb:1a: b6:12:6b:39:31:66:74:d7:eb:3a:be:cd:26:59:86:a5:32:9f: 02:a8:2e:68:a2:2d:db:cb:54:16:c4:6c:91:f3:0b:fd:a9:80: c5:cd:ae:e8:86:0e:83:d4:88:11:d3:99:c1:ab:31:c5:7b:63: 3e:15:36:ab:27:9e:20:66:37:41:94:9d:51:7c:f6:1f:26:bb: 89:17:b3:1d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/8lU0rKgJMjmfBuoXEI0AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzA4N2IzMzdmNzQ3NmM4ZDYzMDRhZWIwOGNlZTA1N2Y0 YmY2OTEwHhcNMjYwMTAyMTgyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGE2Y2M0NzdmMWNlYTBlNTI2ZmM3ZmZhYmNmYzMzZmRmMDNmMmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwFp/Q27RixWCmXOvcJXozeYZqFc Pk2N30m6G77c/YA+a40kjXfE0K4qYmkaTTTjPH5RnSrHIw+LmhA9/d7VwmO3QDh6 pmXB2wAjsbH1bC2/hYpw3Cp50jjdlXZhgpC5fStGBxZieAP7oFJbfphvxWmYjx1B lM5w1x1eTVnUfAtFJJufv9XcQHbvUarodeqhJo1c/Zg44yU85m4hA5DbeG5sL6j6 KR6sAYelImuX2dEAJd/xJi335oDa2w9UQIU2Hsw8itNLeHSLVUaZbq/o+lbE/7Wb teokbkRg5luQx+9eVhk5jA0x5ySYvvzOv9mhI31ldglzryO518fhX82CRQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFKCmzEd/HOoOUm/H/6vPwz/fA/L3MB8GA1UdIwQY MBaAFCIwh7M390dsjWMErrCM7gV/S/aRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYzk0ZmEtMDUxZS00OGQ1LWFjZDMt YzUxMjUxNDJhZTU4LzEvb0tiTVIzOGM2ZzVTYjhmX3E4X0RQOThEOHZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iYzk0ZmEtMDUxZS00OGQ1LWFjZDMtYzUxMjUxNDJhZTU4 LzEvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMAjQIDBAK5 weQwDQQCAAIwBwMFACABCjgwDQYJKoZIhvcNAQELBQADggEBAIbPoLI0A7O5Y7/U zD30tRnPALb8x7M+bLe1hg58xWgmX7CbdLTnndjyVgKygnvHPV26PYoZwFPVPOR7 dN4BVRMkHU+8v+8o+rcJYlmcNkwDMNlqEmxSGrQSyy8ebgH7Gq7bCvykSD0X9Bcy xBDuWycYi0fqLyEqrsul9hFJhYS7F58kOdmpF9d1TuybN+y167eY7k/sB4c574w6 2ZtjxaMlI1yOqGAaiUjcD/vqPilb9Z+7GrYSazkxZnTX6zq+zSZZhqUynwKoLmii LdvLVBbEbJHzC/2pgMXNruiGDoPUiBHTmcGrMcV7Yz4VNqsnniBmN0GUnVF89h8m u4kXsx0= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:22 2026 by rpki-client