This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/OL0stDkX2i4iSRwxjMZs3BrE1SE.roa File: OL0stDkX2i4iSRwxjMZs3BrE1SE.roa (raw, json) Hash identifier: vvxqzVvoF7+NWvZaa2Ph3MfeFjAEA8fO1sH/RieX6t4= Subject key identifier: 38:BD:2C:B4:39:17:DA:2E:22:49:1C:31:8C:C6:6C:DC:1A:C4:D5:21 Certificate issuer: /CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee Certificate serial: 019B7A5ABD47F3F04135B1CB223495D73EC0 Authority key identifier: CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/OL0stDkX2i4iSRwxjMZs3BrE1SE.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205784 IP address blocks: 88.210.29.0/24 maxlen: 24 88.210.49.0/24 maxlen: 24 94.142.248.0/24 maxlen: 24 213.109.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bd:47:f3:f0:41:35:b1:cb:22:34:95:d7:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38bd2cb43917da2e22491c318cc66cdc1ac4d521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ba:56:b3:c1:4b:29:db:53:80:ae:6b:8a:d4: e5:d3:a0:1a:76:60:40:58:9a:82:eb:4c:b6:de:e1: d0:d4:fc:ef:99:67:ff:62:13:61:4b:ec:6c:f5:82: 42:0f:23:ab:90:1d:31:98:bc:e5:1c:e5:94:07:f8: fb:eb:9e:3f:b1:24:c0:7a:38:b3:a4:d7:91:db:07: f3:44:73:fd:e3:d2:4a:24:1c:81:2b:e5:17:45:7f: 3c:e1:b0:87:36:95:67:1f:90:5e:6a:08:e2:14:f9: f3:8d:3f:2d:88:c6:e3:66:52:22:8a:95:e2:49:1d: ba:51:05:7b:37:75:03:61:1b:4a:8c:6e:de:07:f5: 9c:59:1c:99:c9:72:69:24:9d:52:2c:46:03:84:69: dd:a6:34:67:fb:80:cd:83:e9:c2:64:42:57:27:4e: 92:d1:61:73:2b:57:78:9f:bc:ce:c0:13:4f:b6:02: 25:47:43:b8:f2:04:90:8f:62:9f:ba:b3:7a:e8:dc: c4:42:02:5a:a7:1c:b8:50:80:fd:26:6f:bc:29:ab: 43:e2:1c:6f:8a:0c:ac:31:db:f5:7e:19:4a:40:e5: 26:06:68:3b:71:3c:07:a7:b9:ac:26:07:f3:8e:cb: a6:86:4d:98:80:06:3b:c4:4c:e4:5c:72:2d:2b:a1: 2e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BD:2C:B4:39:17:DA:2E:22:49:1C:31:8C:C6:6C:DC:1A:C4:D5:21 X509v3 Authority Key Identifier: keyid:CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/OL0stDkX2i4iSRwxjMZs3BrE1SE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.210.29.0/24 88.210.49.0/24 94.142.248.0/24 213.109.145.0/24 Signature Algorithm: sha256WithRSAEncryption 86:ce:92:b6:cc:50:32:ae:88:df:1a:d9:fd:da:3d:83:0a:94: 87:ee:98:93:32:ed:cf:ad:c5:2b:b7:0a:5a:2b:b3:24:c2:9d: af:96:8d:dc:89:de:94:ab:09:ed:8b:8f:d0:2c:f6:17:b5:16: fd:5c:7a:e3:29:06:ea:e1:3b:0d:80:0c:92:b2:6c:31:cf:a0: b1:d0:f2:9b:3d:3d:cf:dc:b1:5b:8c:bc:f4:55:35:d0:5e:5b: 92:f0:88:bb:75:10:4b:90:e1:fc:03:5c:c5:43:74:80:41:39: 43:93:2d:47:48:ac:22:ba:3d:79:a8:08:84:da:3a:4a:3c:2b: 9c:38:31:80:87:5f:5f:c7:55:74:e5:b2:92:25:80:91:d6:36: ed:17:0d:f8:58:6d:98:43:32:6b:9c:be:fa:7c:6e:e9:7d:40: d1:5c:7d:d4:67:d3:53:f4:57:50:7e:31:81:2e:c2:45:93:9e: be:71:5c:b0:a0:e6:d2:7b:4a:49:b5:b2:ba:dd:9c:5b:b0:d0: 3d:9e:a8:59:60:ea:ff:a6:37:d3:45:bb:ec:a8:c2:29:9a:ed: 7f:0c:ee:d3:b9:ce:b2:a2:73:1b:68:a1:67:a2:33:4f:99:41: 76:10:ee:44:ae:b4:66:fc:2e:ad:8e:94:ea:b8:06:50:67:70: 1e:3d:d9:4b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6Wr1H8/BBNbHLIjSV1z7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOGRmNTJhZGZlMmZjZTZhZTk2ZjZmZTA1ZDE0MDg5ZTAy NDdjZWUwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGJkMmNiNDM5MTdkYTJlMjI0OTFjMzE4Y2M2NmNkYzFhYzRkNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27pWs8FLKdtTgK5ritTl06AadmBA WJqC60y23uHQ1PzvmWf/YhNhS+xs9YJCDyOrkB0xmLzlHOWUB/j7654/sSTAejiz pNeR2wfzRHP949JKJByBK+UXRX884bCHNpVnH5BeagjiFPnzjT8tiMbjZlIiipXi SR26UQV7N3UDYRtKjG7eB/WcWRyZyXJpJJ1SLEYDhGndpjRn+4DNg+nCZEJXJ06S 0WFzK1d4n7zOwBNPtgIlR0O48gSQj2KfurN66NzEQgJapxy4UID9Jm+8KatD4hxv igysMdv1fhlKQOUmBmg7cTwHp7msJgfzjsumhk2YgAY7xEzkXHItK6EuyQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDi9LLQ5F9ouIkkcMYzGbNwaxNUhMB8GA1UdIwQY MBaAFM+N9Srf4vzmrpb2/gXRQIngJHzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejQzMUt0X2lfT2F1bHZiLUJkRkFpZUFrZk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mMjI3NDMtMTg5OC00N2U1LTk2ZTIt Zjc5N2UxZjU0NGQ5LzEvT0wwc3REa1gyaTRpU1J3eGpNWnMzQnJFMVNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9mMjI3NDMtMTg5OC00N2U1LTk2ZTItZjc5N2UxZjU0NGQ5 LzEvejQzMUt0X2lfT2F1bHZiLUJkRkFpZUFrZk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWNIdAwQA WNIxAwQAXo74AwQA1W2RMA0GCSqGSIb3DQEBCwUAA4IBAQCGzpK2zFAyrojfGtn9 2j2DCpSH7piTMu3PrcUrtwpaK7Mkwp2vlo3cid6Uqwnti4/QLPYXtRb9XHrjKQbq 4TsNgAySsmwxz6Cx0PKbPT3P3LFbjLz0VTXQXluS8Ii7dRBLkOH8A1zFQ3SAQTlD ky1HSKwiuj15qAiE2jpKPCucODGAh19fx1V05bKSJYCR1jbtFw34WG2YQzJrnL76 fG7pfUDRXH3UZ9NT9FdQfjGBLsJFk56+cVywoObSe0pJtbK63ZxbsNA9nqhZYOr/ pjfTRbvsqMIpmu1/DO7Tuc6yonMbaKFnojNPmUF2EO5ErrRm/C6tjpTquAZQZ3Ae PdlL -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:23 2026 by rpki-client