This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/ovYaAbe26D-xe8lCheafK_LrtWY.roa File: ovYaAbe26D-xe8lCheafK_LrtWY.roa (raw, json) Hash identifier: 6eO0/Dtd7168WHT10a4JQBuUdq1q7SgJYtnU/qwqLfc= Subject key identifier: A2:F6:1A:01:B7:B6:E8:3F:B1:7B:C9:42:85:E6:9F:2B:F2:EB:B5:66 Certificate issuer: /CN=623f344fd4a91bfad138308d527155bbce52af6e Certificate serial: 019B7DC939E9DF5D096A69F2369E2A190A1D Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/ovYaAbe26D-xe8lCheafK_LrtWY.roa Signing time: Fri 02 Jan 2026 08:18:18 +0000 ROA not before: Fri 02 Jan 2026 08:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8819 IP address blocks: 46.227.104.0/21 maxlen: 21 83.142.192.0/21 maxlen: 21 91.189.24.0/21 maxlen: 21 185.188.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:39:e9:df:5d:09:6a:69:f2:36:9e:2a:19:0a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e Validity Not Before: Jan 2 08:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2f61a01b7b6e83fb17bc94285e69f2bf2ebb566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:e6:04:55:c6:f6:08:27:33:93:43:b0:2e: ca:9e:79:e1:21:78:ee:af:84:a0:3d:c6:dc:4a:8a: 9b:22:ce:f4:d6:de:6e:2b:fd:2a:69:0f:fa:57:41: c9:ff:c9:86:ec:e9:d4:67:15:1b:1a:f5:74:01:ce: e0:7a:4c:f5:08:a0:14:16:1e:56:9b:9d:a2:fa:bb: e8:64:60:ca:4f:d2:e6:9f:a5:6e:00:49:8c:32:6e: 33:13:a4:b7:c8:ae:d6:87:69:3a:72:13:e0:19:16: 1a:f1:e7:0f:8d:23:21:bd:bd:06:be:91:eb:c4:94: 29:ac:d1:89:58:9d:73:5b:a9:96:e3:06:0a:98:c7: 75:9e:f0:96:21:e7:28:f3:94:31:86:f6:81:fe:b4: 8f:93:79:d4:ec:70:65:05:1b:95:19:2e:5c:b5:63: 48:3d:ad:dd:39:cc:76:66:87:4b:54:a5:50:da:d6: 06:2d:17:93:83:95:e2:44:d3:ac:64:09:ca:af:b7: 8a:8c:9c:8f:28:58:f5:f3:6c:78:43:1d:50:19:32: b9:a8:f6:47:69:5e:a9:6d:39:5f:78:56:4e:fd:eb: 77:2b:fb:ba:cd:cb:42:f9:5c:97:c3:4f:17:c4:a8: 77:5b:09:a0:6f:f2:ac:7d:65:7d:23:6f:d4:5e:6f: 58:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F6:1A:01:B7:B6:E8:3F:B1:7B:C9:42:85:E6:9F:2B:F2:EB:B5:66 X509v3 Authority Key Identifier: keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/ovYaAbe26D-xe8lCheafK_LrtWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.104.0/21 83.142.192.0/21 91.189.24.0/21 185.188.68.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:28:23:ba:4d:5a:34:cb:4f:09:b8:02:60:0d:0b:fb:bd:2d: a4:43:7d:75:ba:14:38:ac:f3:d7:43:c7:c6:02:b3:18:b4:30: 3f:cc:8b:1f:c2:34:7b:93:a3:77:cc:ba:b2:72:20:0a:91:8c: 80:b0:a7:b9:cb:70:51:f0:41:7d:57:9a:01:78:5a:a0:86:d2: a3:1d:fe:d6:fd:7d:f2:8e:3a:6d:ae:e9:ec:a1:6c:e2:37:e7: a9:c1:6e:ee:41:d2:b7:cc:80:c6:51:67:25:65:cd:62:e5:49: 25:f7:0d:f3:63:5f:12:94:49:04:0c:2e:d8:e8:c5:e7:ed:02: a9:ad:ef:87:c4:29:f7:69:c1:66:42:04:46:89:38:e7:4b:3c: 05:d2:6e:53:df:2d:0f:6c:67:33:41:5c:ca:61:1f:ef:64:63: a0:d8:be:ec:83:93:ec:2e:9b:14:ed:04:f1:82:92:25:f6:c6: d1:4c:f2:1b:3d:00:a5:96:42:32:bf:95:80:38:d0:29:c3:fe: 02:c7:e1:06:92:e8:07:9f:9d:31:bc:1f:14:68:2f:8b:7c:7b: 29:df:a2:bc:79:0f:5b:50:02:81:fe:49:db:6c:c0:39:2d:96: a8:3b:c3:58:9a:10:29:0a:ae:17:c2:e0:ed:b7:2c:d4:f1:40: b1:51:b3:02 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9yTnp310JamnyNp4qGQodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyM2YzNDRmZDRhOTFiZmFkMTM4MzA4ZDUyNzE1NWJiY2U1 MmFmNmUwHhcNMjYwMTAyMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmY2MWEwMWI3YjZlODNmYjE3YmM5NDI4NWU2OWYyYmYyZWJiNTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkbmBFXG9ggnM5NDsC7KnnnhIXju r4SgPcbcSoqbIs701t5uK/0qaQ/6V0HJ/8mG7OnUZxUbGvV0Ac7gekz1CKAUFh5W m52i+rvoZGDKT9Lmn6VuAEmMMm4zE6S3yK7Wh2k6chPgGRYa8ecPjSMhvb0GvpHr xJQprNGJWJ1zW6mW4wYKmMd1nvCWIeco85QxhvaB/rSPk3nU7HBlBRuVGS5ctWNI Pa3dOcx2ZodLVKVQ2tYGLReTg5XiRNOsZAnKr7eKjJyPKFj182x4Qx1QGTK5qPZH aV6pbTlfeFZO/et3K/u6zctC+VyXw08XxKh3Wwmgb/KsfWV9I2/UXm9YowIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKL2GgG3tug/sXvJQoXmnyvy67VmMB8GA1UdIwQY MBaAFGI/NE/UqRv60TgwjVJxVbvOUq9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWo4MFQ5U3BHX3JST0RDTlVuRlZ1ODVTcjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xMDVkYTAtMGM3ZC00MTVkLThkMDAt YTM0ZTg2NzlmMzc0LzEvb3ZZYUFiZTI2RC14ZThsQ2hlYWZLX0xydFdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xMDVkYTAtMGM3ZC00MTVkLThkMDAtYTM0ZTg2NzlmMzc0 LzEvWWo4MFQ5U3BHX3JST0RDTlVuRlZ1ODVTcjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDLuNoAwQD U47AAwQDW70YAwQCubxEMA0GCSqGSIb3DQEBCwUAA4IBAQCOKCO6TVo0y08JuAJg DQv7vS2kQ311uhQ4rPPXQ8fGArMYtDA/zIsfwjR7k6N3zLqyciAKkYyAsKe5y3BR 8EF9V5oBeFqghtKjHf7W/X3yjjptrunsoWziN+epwW7uQdK3zIDGUWclZc1i5Ukl 9w3zY18SlEkEDC7Y6MXn7QKpre+HxCn3acFmQgRGiTjnSzwF0m5T3y0PbGczQVzK YR/vZGOg2L7sg5PsLpsU7QTxgpIl9sbRTPIbPQCllkIyv5WAONApw/4Cx+EGkugH n50xvB8UaC+LfHsp36K8eQ9bUAKB/knbbMA5LZaoO8NYmhApCq4XwuDttyzU8UCx UbMC -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:41 2026 by rpki-client