This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/oXaYTtMVNJP1Fl7ZKs5QpgsqsMk.roa File: oXaYTtMVNJP1Fl7ZKs5QpgsqsMk.roa (raw, json) Hash identifier: +RNVphol1dxO7daQTUBiRS/Hm7azf02WGvxKISPu3wM= Subject key identifier: A1:76:98:4E:D3:15:34:93:F5:16:5E:D9:2A:CE:50:A6:0B:2A:B0:C9 Certificate issuer: /CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c Certificate serial: 019B7E37C0BF51EC8C842D43A251FEB96F7C Authority key identifier: 9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/oXaYTtMVNJP1Fl7ZKs5QpgsqsMk.roa Signing time: Fri 02 Jan 2026 10:19:01 +0000 ROA not before: Fri 02 Jan 2026 10:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211079 IP address blocks: 185.83.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c0:bf:51:ec:8c:84:2d:43:a2:51:fe:b9:6f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c Validity Not Before: Jan 2 10:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a176984ed3153493f5165ed92ace50a60b2ab0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e5:ac:9d:61:43:43:73:03:4d:fa:fd:30:7f: 94:82:e2:51:a0:35:76:36:c4:bd:69:a9:43:94:0b: 5f:5a:bc:56:0a:c8:cd:34:b4:48:6d:b2:4a:c0:59: 22:0e:67:55:f9:2e:9b:b7:2e:27:fc:59:5a:b9:17: 1d:36:a9:47:fe:a8:00:ef:00:55:93:59:01:1c:d8: db:32:82:2b:fd:43:25:a9:3f:f8:bb:0f:c5:5f:ce: a0:35:c2:d7:4a:ef:37:3d:6d:84:6e:f6:f4:5f:51: 20:19:fe:48:26:8c:66:4b:ee:81:b7:5b:cd:c1:af: 20:7e:bf:47:7a:ac:ad:1c:8e:c4:d5:b9:48:9d:ab: 69:a4:df:e8:04:a9:64:ff:26:b8:a5:32:52:08:5e: 2d:56:52:3a:fc:9d:e6:f6:96:bf:64:79:ca:4b:45: 2b:06:2c:75:f7:83:9f:9b:68:69:b7:65:7c:f8:79: 5d:9f:4d:99:8e:b9:33:94:60:d1:9b:fd:09:d7:5c: 51:a2:ca:45:c3:8e:4a:5f:ba:5c:b5:db:ab:8b:7c: 8a:b2:68:c8:c4:11:f4:98:c3:f0:b6:d3:18:0d:12: c3:e5:41:bb:c0:77:9f:3f:39:a1:3f:df:72:29:f9: b8:7e:0f:98:7d:4f:3e:56:ff:49:a8:e5:c1:2a:6e: ea:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:76:98:4E:D3:15:34:93:F5:16:5E:D9:2A:CE:50:A6:0B:2A:B0:C9 X509v3 Authority Key Identifier: keyid:9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/oXaYTtMVNJP1Fl7ZKs5QpgsqsMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.228.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:14:4f:69:f1:98:ef:99:e0:4d:47:03:86:b1:54:8f:d4:a1: d1:2c:dd:6b:58:0e:10:9c:ae:22:0a:83:9d:3b:c6:fc:7e:61: db:f7:79:6b:58:b3:00:c5:af:d8:20:75:aa:9d:00:2f:e4:cc: 3b:70:f1:a5:d3:70:51:f2:34:94:29:29:77:8d:33:6b:77:c5: ed:22:b0:c0:57:22:8f:d5:e4:ae:2c:2b:0c:83:e2:42:56:7a: f0:6c:57:6f:52:be:b9:b7:2e:fb:40:e5:fe:e0:32:1f:bc:3e: e5:aa:18:3b:86:cb:94:d1:6e:25:a7:bd:ab:91:81:4d:5a:f5: 46:72:b2:8f:13:9b:ef:20:65:66:65:82:64:2a:26:40:8f:c3: 4b:a0:66:04:69:60:90:04:67:25:8c:d6:05:87:02:63:83:07: d2:38:ab:e3:83:d6:5d:5b:53:05:fe:77:0f:25:9c:d5:e6:b5: d0:30:29:ed:97:47:05:59:ba:f7:2a:4a:34:e3:8d:86:a0:78: 07:0c:56:0f:62:3a:7e:36:4d:9d:72:5d:58:56:5e:29:1a:b5: a9:49:6f:7f:1c:08:02:a8:6d:2c:37:9d:5c:13:95:8e:f5:f6: ba:d2:49:4a:a1:ea:62:67:fc:3c:77:ba:d9:28:13:13:38:26: 54:b6:58:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N8C/UeyMhC1DolH+uW98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNDkyNWU5NzZhZDBiZmI3M2UwOTdkYTY5MTdlODBmNWJj ZTZjOGMwHhcNMjYwMTAyMTAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTc2OTg0ZWQzMTUzNDkzZjUxNjVlZDkyYWNlNTBhNjBiMmFiMGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneWsnWFDQ3MDTfr9MH+UguJRoDV2 NsS9aalDlAtfWrxWCsjNNLRIbbJKwFkiDmdV+S6bty4n/FlauRcdNqlH/qgA7wBV k1kBHNjbMoIr/UMlqT/4uw/FX86gNcLXSu83PW2Ebvb0X1EgGf5IJoxmS+6Bt1vN wa8gfr9HeqytHI7E1blInatppN/oBKlk/ya4pTJSCF4tVlI6/J3m9pa/ZHnKS0Ur Bix194Ofm2hpt2V8+Hldn02ZjrkzlGDRm/0J11xRospFw45KX7pctduri3yKsmjI xBH0mMPwttMYDRLD5UG7wHefPzmhP99yKfm4fg+YfU8+Vv9JqOXBKm7qPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKF2mE7TFTST9RZe2SrOUKYLKrDJMB8GA1UdIwQY MBaAFJ1JJel2rQv7c+CX2mkX6A9bzmyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblVrbDZYYXRDX3R6NEpmYWFSZm9EMXZPYkl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xZjFjYmQtZmVhNi00NTUzLThkYjYt NGUwOWY5ZTg1NzIzLzEvb1hhWVR0TVZOSlAxRmw3WktzNVFwZ3Nxc01rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xZjFjYmQtZmVhNi00NTUzLThkYjYtNGUwOWY5ZTg1NzIz LzEvblVrbDZYYXRDX3R6NEpmYWFSZm9EMXZPYkl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVPkMA0G CSqGSIb3DQEBCwUAA4IBAQBeFE9p8ZjvmeBNRwOGsVSP1KHRLN1rWA4QnK4iCoOd O8b8fmHb93lrWLMAxa/YIHWqnQAv5Mw7cPGl03BR8jSUKSl3jTNrd8XtIrDAVyKP 1eSuLCsMg+JCVnrwbFdvUr65ty77QOX+4DIfvD7lqhg7hsuU0W4lp72rkYFNWvVG crKPE5vvIGVmZYJkKiZAj8NLoGYEaWCQBGcljNYFhwJjgwfSOKvjg9ZdW1MF/ncP JZzV5rXQMCntl0cFWbr3Kko0442GoHgHDFYPYjp+Nk2dcl1YVl4pGrWpSW9/HAgC qG0sN51cE5WO9fa60klKoepiZ/w8d7rZKBMTOCZUtlhi -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:18 2026 by rpki-client