This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/OZYu8TXfUk-kbxX_bRvIgQ0oovM.roa File: OZYu8TXfUk-kbxX_bRvIgQ0oovM.roa (raw, json) Hash identifier: Ny452KM+a4Sd+vTRDWLyo6c+SHTZU1CTK6tileQUJVE= Subject key identifier: 39:96:2E:F1:35:DF:52:4F:A4:6F:15:FF:6D:1B:C8:81:0D:28:A2:F3 Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a Certificate serial: 019B797F05E720062E6CEA5CDBB5B4A7082E Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/OZYu8TXfUk-kbxX_bRvIgQ0oovM.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206406 IP address blocks: 185.187.92.0/24 maxlen: 24 185.187.93.0/24 maxlen: 24 185.187.94.0/24 maxlen: 24 185.187.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:05:e7:20:06:2e:6c:ea:5c:db:b5:b4:a7:08:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39962ef135df524fa46f15ff6d1bc8810d28a2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:54:be:a1:6c:0e:aa:89:8f:61:7e:78:52:e4: 11:46:12:05:2b:0d:46:ae:09:ce:3c:4b:1f:6b:b1: 24:a8:4d:50:70:90:16:18:ef:02:43:d4:d4:b2:fc: 22:a9:84:ea:eb:e0:e0:3c:53:1a:35:31:43:c9:e3: 2e:f5:ec:a7:5a:67:2e:dd:c7:52:22:2e:97:a6:f3: b9:40:27:c5:9a:e1:b8:9f:15:9e:6f:cc:c4:96:ed: 58:4e:08:cd:47:20:bd:94:38:d2:87:59:52:7b:1d: d4:ef:49:36:72:35:cf:64:54:9a:f9:7d:a8:67:2a: d1:b6:58:82:a7:70:be:1a:d5:07:47:7e:25:83:be: ef:38:9c:01:df:c8:34:41:4f:60:1c:0f:d5:ad:43: 80:5e:03:f1:48:59:62:8c:6d:ce:3b:42:3c:44:39: c9:63:7b:a4:51:16:e3:4b:2e:f5:f3:c2:65:45:06: 47:cb:52:74:d9:ba:69:b8:18:bc:40:70:32:35:55: 7a:6b:ec:d7:5e:cc:cb:f2:0c:ac:cc:33:32:5e:7e: 54:91:8a:4c:18:6c:16:87:35:86:b4:01:35:93:ff: 87:94:38:9a:e4:9c:12:0d:77:b0:a1:2b:b5:10:08: cf:2d:01:7f:9c:d3:b3:69:1a:dc:a6:d1:cc:7e:9c: 6c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:96:2E:F1:35:DF:52:4F:A4:6F:15:FF:6D:1B:C8:81:0D:28:A2:F3 X509v3 Authority Key Identifier: keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/OZYu8TXfUk-kbxX_bRvIgQ0oovM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.92.0/22 Signature Algorithm: sha256WithRSAEncryption 77:6d:09:e0:30:01:07:0d:4c:30:e6:ed:bd:75:96:d0:65:72: c7:5b:af:e6:3d:6b:b7:6e:ae:09:01:b9:00:fb:78:d8:26:23: 08:a6:15:c5:bf:67:8a:b5:97:5e:76:45:36:76:33:ee:8d:24: 36:4c:04:d4:90:0a:21:58:5d:20:1f:6c:67:fa:a7:d3:55:f6: da:57:15:57:0a:8e:e7:ca:05:f8:c3:3c:99:17:06:c8:5b:0c: 9d:77:44:9f:93:66:75:64:2c:08:f0:06:8e:0e:57:5b:11:97: 0d:ae:3d:0b:04:a9:c9:e7:44:30:ae:9f:b8:1f:ea:02:11:b5: b6:e4:25:bf:a4:f1:7b:e8:ea:f1:0b:38:c5:cf:54:8b:1f:f7: b6:1c:cb:2c:02:11:7d:b8:42:f0:f4:75:1a:48:3f:d4:f0:6d: a4:c9:9b:81:57:d8:52:79:5b:64:f1:73:da:f8:94:2b:66:6d: 88:f0:14:aa:dc:8f:7b:9c:1d:15:a7:15:8e:ef:c0:d7:1a:e9: 81:f0:e5:2b:da:f0:a0:b2:97:7c:08:de:e8:fa:50:58:f2:84: 3d:f3:c2:45:31:eb:5a:31:f4:ef:ef:cc:d6:6e:78:2c:75:3b: 62:77:45:59:4a:5b:8d:e0:07:a5:67:1c:b1:1a:41:fa:3c:7a: c8:47:8e:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fwXnIAYubOpc27W0pwguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzRiMTg2MjcxY2NiODljNWU1OGIzMGU3MGJkNzQxMDlj YzI4NGEwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTk2MmVmMTM1ZGY1MjRmYTQ2ZjE1ZmY2ZDFiYzg4MTBkMjhhMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVS+oWwOqomPYX54UuQRRhIFKw1G rgnOPEsfa7EkqE1QcJAWGO8CQ9TUsvwiqYTq6+DgPFMaNTFDyeMu9eynWmcu3cdS Ii6XpvO5QCfFmuG4nxWeb8zElu1YTgjNRyC9lDjSh1lSex3U70k2cjXPZFSa+X2o ZyrRtliCp3C+GtUHR34lg77vOJwB38g0QU9gHA/VrUOAXgPxSFlijG3OO0I8RDnJ Y3ukURbjSy7188JlRQZHy1J02bppuBi8QHAyNVV6a+zXXszL8gyszDMyXn5UkYpM GGwWhzWGtAE1k/+HlDia5JwSDXewoSu1EAjPLQF/nNOzaRrcptHMfpxsVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDmWLvE131JPpG8V/20byIENKKLzMB8GA1UdIwQY MBaAFJ40sYYnHMuJxeWLMOcL10EJzChKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wYzM3YzMtOTk5MC00NTk2LTk5ZTkt ZGQ1ZmZkNTMxNTcxLzEvT1pZdThUWGZVay1rYnhYX2JSdklnUTBvb3ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8wYzM3YzMtOTk5MC00NTk2LTk5ZTktZGQ1ZmZkNTMxNTcx LzEvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubtcMA0G CSqGSIb3DQEBCwUAA4IBAQB3bQngMAEHDUww5u29dZbQZXLHW6/mPWu3bq4JAbkA +3jYJiMIphXFv2eKtZdedkU2djPujSQ2TATUkAohWF0gH2xn+qfTVfbaVxVXCo7n ygX4wzyZFwbIWwydd0Sfk2Z1ZCwI8AaODldbEZcNrj0LBKnJ50Qwrp+4H+oCEbW2 5CW/pPF76OrxCzjFz1SLH/e2HMssAhF9uELw9HUaSD/U8G2kyZuBV9hSeVtk8XPa +JQrZm2I8BSq3I97nB0VpxWO78DXGumB8OUr2vCgspd8CN7o+lBY8oQ988JFMeta MfTv78zWbngsdTtid0VZSluN4AelZxyxGkH6PHrIR45n -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:30 2026 by rpki-client