This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/oeaJctM9Qtah90R6LCT4BqnOU4E.roa File: oeaJctM9Qtah90R6LCT4BqnOU4E.roa (raw, json) Hash identifier: 6Vq0BN7rnnATY8BQSA0XM6bTNiKEPoqXG+oYtacEtmI= Subject key identifier: A1:E6:89:72:D3:3D:42:D6:A1:F7:44:7A:2C:24:F8:06:A9:CE:53:81 Certificate issuer: /CN=90afdcff7de3a65947631f92c67e272767194478 Certificate serial: 019B7B363CFDE7B64B1CB3EC7018A05F86CA Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/oeaJctM9Qtah90R6LCT4BqnOU4E.roa Signing time: Thu 01 Jan 2026 20:18:30 +0000 ROA not before: Thu 01 Jan 2026 20:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199441 IP address blocks: 185.14.128.0/22 maxlen: 22 185.14.128.0/23 maxlen: 24 185.14.130.0/24 maxlen: 24 185.14.131.0/24 maxlen: 24 195.192.236.0/22 maxlen: 24 2a03:a240::/44 maxlen: 44 2a03:a240::/47 maxlen: 48 2a03:a240:2::/48 maxlen: 48 2a03:a240:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3c:fd:e7:b6:4b:1c:b3:ec:70:18:a0:5f:86:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90afdcff7de3a65947631f92c67e272767194478 Validity Not Before: Jan 1 20:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1e68972d33d42d6a1f7447a2c24f806a9ce5381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:36:98:26:cb:f2:92:81:be:ba:8c:43:d4:00: 1c:f9:95:d3:56:fb:c9:5b:15:79:58:20:69:aa:3f: 2c:ff:c4:6f:cc:4c:ee:86:71:e0:f7:b2:09:87:18: b6:a4:a3:16:0a:66:f4:4e:0e:1d:01:64:b8:cd:6e: 60:35:d8:ec:82:71:1a:a3:78:cf:bb:41:75:f9:38: 5c:c4:08:1b:6b:1a:9d:c6:e6:84:f8:05:ca:e5:e6: a2:dc:b3:5f:5e:b4:14:03:88:d7:3e:b3:5e:2b:b2: 2c:d4:d3:b0:a6:78:ee:69:a1:14:b2:80:be:66:92: 38:e7:e1:b6:21:b7:e7:db:a5:57:9a:75:10:2e:95: 79:ec:35:96:c5:2c:52:a2:9d:66:51:f1:5f:de:7e: e7:44:da:59:4b:ae:e7:7c:a3:64:ee:21:3b:83:fd: 6f:b2:36:cf:cc:75:ad:b1:75:97:d2:86:ca:b5:72: 00:c0:cf:81:0f:fb:c6:69:23:5c:78:b9:93:58:17: 0e:67:d9:f8:8e:e4:0f:a3:0c:dd:c9:ad:7c:dd:b0: b4:04:51:2b:55:c6:e2:37:ff:3d:bf:d6:ec:12:90: 86:5d:b2:42:23:7b:1e:6b:92:c4:05:d5:89:7f:5a: 0c:e6:c2:46:1b:a2:9a:21:06:bf:c0:34:94:e0:c1: fe:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E6:89:72:D3:3D:42:D6:A1:F7:44:7A:2C:24:F8:06:A9:CE:53:81 X509v3 Authority Key Identifier: keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/oeaJctM9Qtah90R6LCT4BqnOU4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.14.128.0/22 195.192.236.0/22 IPv6: 2a03:a240::/44 Signature Algorithm: sha256WithRSAEncryption 48:ac:6f:b9:b9:de:47:25:3d:79:ef:8d:e3:f3:87:bc:3c:1f: 60:aa:33:ad:e1:07:a9:21:60:b4:06:08:4f:32:99:ba:d5:75: e5:4c:38:79:6f:d0:14:e3:95:6b:79:3b:0f:67:d7:61:e8:7f: bc:1a:b6:a6:64:31:15:49:b1:1a:82:65:6b:7c:e4:e5:87:64: e5:e7:69:08:6d:44:2d:5e:fe:f0:df:3a:ec:a1:81:2b:a1:c4: 1d:c3:84:54:2e:65:82:eb:47:75:0b:8d:e7:12:73:7d:ec:71: 54:0b:eb:b5:ef:5d:be:9f:88:e0:cf:ab:d0:3e:39:99:51:ba: 0e:d8:09:37:81:7d:66:e6:be:29:b0:f4:de:d5:90:8d:b5:e2: 11:6b:bd:3c:6a:39:50:6a:49:2c:3d:02:02:81:59:22:ae:c2: 39:89:f8:50:6d:b7:cb:cc:bd:8c:24:14:23:a4:64:43:31:e5: 1d:a1:43:b4:b8:c2:ea:c6:61:07:9f:1b:dd:05:a5:a7:3b:6e: ca:9c:a3:05:b8:7d:60:89:f0:7f:49:17:60:49:f5:0e:59:40: 1e:33:f9:f6:50:0e:2a:fa:42:e2:ff:e3:cf:20:6e:80:e9:5c: 8b:b6:e3:87:1a:a8:d6:9f:b2:9a:4b:8a:02:24:4a:c4:9d:b7: 7b:40:d7:2f -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7Njz957ZLHLPscBigX4bKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYWZkY2ZmN2RlM2E2NTk0NzYzMWY5MmM2N2UyNzI3Njcx OTQ0NzgwHhcNMjYwMTAxMjAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWU2ODk3MmQzM2Q0MmQ2YTFmNzQ0N2EyYzI0ZjgwNmE5Y2U1MzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DaYJsvykoG+uoxD1AAc+ZXTVvvJ WxV5WCBpqj8s/8RvzEzuhnHg97IJhxi2pKMWCmb0Tg4dAWS4zW5gNdjsgnEao3jP u0F1+ThcxAgbaxqdxuaE+AXK5eai3LNfXrQUA4jXPrNeK7Is1NOwpnjuaaEUsoC+ ZpI45+G2Ibfn26VXmnUQLpV57DWWxSxSop1mUfFf3n7nRNpZS67nfKNk7iE7g/1v sjbPzHWtsXWX0obKtXIAwM+BD/vGaSNceLmTWBcOZ9n4juQPowzdya183bC0BFEr VcbiN/89v9bsEpCGXbJCI3sea5LEBdWJf1oM5sJGG6KaIQa/wDSU4MH+yQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFKHmiXLTPULWofdEeiwk+AapzlOBMB8GA1UdIwQY MBaAFJCv3P9946ZZR2MfksZ+JydnGUR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMDBkMWUtNGExOC00OTU2LTgyYTQt MTkwYTVjOGQ5ZDk1LzEvb2VhSmN0TTlRdGFoOTBSNkxDVDRCcW5PVTRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9lMDBkMWUtNGExOC00OTU2LTgyYTQtMTkwYTVjOGQ5ZDk1 LzEva0tfY18zM2pwbGxIWXgtU3huNG5KMmNaUkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCuQ6AAwQC w8DsMA8EAgACMAkDBwQqA6JAAAAwDQYJKoZIhvcNAQELBQADggEBAEisb7m53kcl PXnvjePzh7w8H2CqM63hB6khYLQGCE8ymbrVdeVMOHlv0BTjlWt5Ow9n12Hof7wa tqZkMRVJsRqCZWt85OWHZOXnaQhtRC1e/vDfOuyhgSuhxB3DhFQuZYLrR3ULjecS c33scVQL67XvXb6fiODPq9A+OZlRug7YCTeBfWbmvimw9N7VkI214hFrvTxqOVBq SSw9AgKBWSKuwjmJ+FBtt8vMvYwkFCOkZEMx5R2hQ7S4wurGYQefG90Fpac7bsqc owW4fWCJ8H9JF2BJ9Q5ZQB4z+fZQDir6QuL/488gboDpXIu244caqNafsppLigIk SsSdt3tA1y8= -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:40 2026 by rpki-client