This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/ovrf878QfyGREV5ySXZAKG2wEj0.roa File: ovrf878QfyGREV5ySXZAKG2wEj0.roa (raw, json) Hash identifier: 8FVx6K1N+lYlmVzhGRofLmSyeuuSSiLMjYmgLA57T9M= Subject key identifier: A2:FA:DF:F3:BF:10:7F:21:91:11:5E:72:49:76:40:28:6D:B0:12:3D Certificate issuer: /CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e Certificate serial: 019B77593451F3A9795F7B0110CB677FA15C Authority key identifier: D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/ovrf878QfyGREV5ySXZAKG2wEj0.roa Signing time: Thu 01 Jan 2026 02:18:13 +0000 ROA not before: Thu 01 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205797 IP address blocks: 185.205.88.0/22 maxlen: 22 185.205.88.0/24 maxlen: 24 185.205.89.0/24 maxlen: 24 185.205.90.0/24 maxlen: 24 185.205.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:34:51:f3:a9:79:5f:7b:01:10:cb:67:7f:a1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2fadff3bf107f2191115e72497640286db0123d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:48:6e:7f:88:69:75:ae:02:ca:77:49:6c:e2: 8a:20:1e:77:c2:54:13:2b:0a:f1:c5:a2:4f:7b:f4: 1d:cb:1f:26:a8:0e:9b:ea:af:f9:76:1f:6e:b9:49: 02:de:db:ec:1a:d1:89:c2:b4:ec:37:e2:10:e4:90: 82:80:fa:b7:b5:17:be:bd:ee:41:b1:53:1c:78:4c: ed:9e:28:4e:5b:f8:ef:2b:9c:09:85:b0:d1:f0:51: cb:93:aa:16:b7:bb:31:b0:4e:b5:7d:ba:0e:bf:c2: 62:b0:77:7a:7b:1e:a4:56:47:dc:2e:98:55:d6:d0: 9e:36:65:e5:8a:a9:ac:0f:a6:89:ec:ca:d5:fb:4d: e8:1f:00:20:a6:84:92:b8:d8:12:5b:2a:6c:c6:1b: 44:46:b5:a3:fb:4b:5f:49:c4:3e:93:b5:15:17:9d: cb:8d:0c:9a:34:a9:88:e6:0a:01:b6:08:8a:70:08: 12:e7:40:b6:86:c8:bf:80:83:8e:1b:1e:19:93:e2: 68:be:15:b8:48:34:54:f9:84:06:cc:3b:ad:fe:63: 4b:6a:5b:09:05:3e:5e:56:d8:5e:be:49:fe:5c:d8: d5:2b:c1:2b:ad:ea:f8:47:db:9a:0e:35:60:b1:4f: cf:a0:bb:f9:a9:d2:5a:cc:82:bb:a9:04:f4:ca:b2: 91:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FA:DF:F3:BF:10:7F:21:91:11:5E:72:49:76:40:28:6D:B0:12:3D X509v3 Authority Key Identifier: keyid:D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/ovrf878QfyGREV5ySXZAKG2wEj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.88.0/22 Signature Algorithm: sha256WithRSAEncryption a2:50:4c:2f:ba:aa:a1:12:23:0e:c9:9a:1e:14:5b:e3:23:7b: da:d6:25:ce:df:96:67:5d:01:df:b1:3c:45:76:25:e4:45:fc: bb:36:ed:d1:40:77:55:0e:42:9e:98:a6:b9:a8:ec:91:06:cb: fb:71:8a:7a:df:e5:55:0f:31:f9:31:5a:e7:e1:15:e0:ea:37: 6d:3a:be:3b:94:69:6a:9d:82:16:e3:07:51:42:12:c8:75:de: 60:dd:73:55:b5:54:27:b2:e8:8e:9a:d4:b7:3e:56:ae:6c:98: b1:02:9d:c8:1b:8b:f3:68:1b:38:6e:06:99:9e:73:d1:7e:8e: fe:bc:c2:55:a2:03:ca:e1:a0:55:c9:13:9a:95:19:a3:95:d2: c0:05:18:ea:f3:3a:67:e2:04:72:38:7d:b4:7b:25:18:4a:82: 8a:a5:75:a0:ae:8d:fa:4f:2b:00:45:d7:85:26:de:10:2d:6f: f4:06:da:31:46:a3:fd:c6:b4:fc:1b:66:59:59:cc:45:60:a8: 8c:4d:22:33:60:87:20:9d:15:33:de:2e:c0:50:35:ff:fb:9f: 76:d5:74:18:45:e9:dc:44:9a:ce:9d:52:c5:60:51:39:d8:82: 6d:bc:8c:0d:61:a7:bb:74:11:24:af:ce:96:10:f9:86:8c:09: 6c:d0:30:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WTRR86l5X3sBEMtnf6FcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZTRlMDE1ZWMwMWRhNmFlN2Q4NDkxNmZkMWFkNGNhYTkw NGRjNGUwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmZhZGZmM2JmMTA3ZjIxOTExMTVlNzI0OTc2NDAyODZkYjAxMjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUhuf4hpda4CyndJbOKKIB53wlQT KwrxxaJPe/Qdyx8mqA6b6q/5dh9uuUkC3tvsGtGJwrTsN+IQ5JCCgPq3tRe+ve5B sVMceEztnihOW/jvK5wJhbDR8FHLk6oWt7sxsE61fboOv8JisHd6ex6kVkfcLphV 1tCeNmXliqmsD6aJ7MrV+03oHwAgpoSSuNgSWypsxhtERrWj+0tfScQ+k7UVF53L jQyaNKmI5goBtgiKcAgS50C2hsi/gIOOGx4Zk+JovhW4SDRU+YQGzDut/mNLalsJ BT5eVthevkn+XNjVK8Errer4R9uaDjVgsU/PoLv5qdJazIK7qQT0yrKRcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKL63/O/EH8hkRFeckl2QChtsBI9MB8GA1UdIwQY MBaAFNTk4BXsAdpq59hJFv0a1MqpBNxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iZGQ4N2MtYTZkOS00YmMyLTlkODct MGE4MTJiYjE4ZjM1LzEvb3ZyZjg3OFFmeUdSRVY1eVNYWkFLRzJ3RWowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iZGQ4N2MtYTZkOS00YmMyLTlkODctMGE4MTJiYjE4ZjM1 LzEvMU9UZ0Zld0IybXJuMkVrV19SclV5cWtFM0U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc1YMA0G CSqGSIb3DQEBCwUAA4IBAQCiUEwvuqqhEiMOyZoeFFvjI3va1iXO35ZnXQHfsTxF diXkRfy7Nu3RQHdVDkKemKa5qOyRBsv7cYp63+VVDzH5MVrn4RXg6jdtOr47lGlq nYIW4wdRQhLIdd5g3XNVtVQnsuiOmtS3PlaubJixAp3IG4vzaBs4bgaZnnPRfo7+ vMJVogPK4aBVyROalRmjldLABRjq8zpn4gRyOH20eyUYSoKKpXWgro36TysARdeF Jt4QLW/0BtoxRqP9xrT8G2ZZWcxFYKiMTSIzYIcgnRUz3i7AUDX/+5921XQYRenc RJrOnVLFYFE52IJtvIwNYae7dBEkr86WEPmGjAls0DCr -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:15 2026 by rpki-client