This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/OBdFDRVC595sAnyB_0VmTmVJFWo.roa File: OBdFDRVC595sAnyB_0VmTmVJFWo.roa (raw, json) Hash identifier: 28ttAFOYw0/3k0gD+y/7PAKtDPtrhHQLrlbHUNtynS0= Subject key identifier: 38:17:45:0D:15:42:E7:DE:6C:02:7C:81:FF:45:66:4E:65:49:15:6A Certificate issuer: /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1 Certificate serial: 019B7AC95B8D76DA1202948E4AF07DCAC895 Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/OBdFDRVC595sAnyB_0VmTmVJFWo.roa Signing time: Thu 01 Jan 2026 18:19:35 +0000 ROA not before: Thu 01 Jan 2026 18:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34554 IP address blocks: 80.75.112.0/20 maxlen: 20 185.196.128.0/22 maxlen: 22 2a01:6a8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:5b:8d:76:da:12:02:94:8e:4a:f0:7d:ca:c8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1 Validity Not Before: Jan 1 18:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3817450d1542e7de6c027c81ff45664e6549156a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8a:bd:a4:2b:00:bc:98:97:a2:f1:f3:8f:38: fe:08:b7:5f:b9:0d:36:1a:e2:86:30:54:29:e4:c0: 5e:01:e7:da:48:e3:16:95:fe:49:f8:0e:cb:71:46: 27:5d:8b:50:75:0f:17:0c:56:ec:98:f8:7c:73:18: fb:fc:0b:20:c3:66:89:90:4f:06:fb:97:c3:b6:35: 6b:66:ce:89:ee:11:e4:10:fe:3b:8e:d1:89:76:47: 01:85:39:25:19:c5:a4:c9:1d:47:53:3f:ff:65:ad: 18:06:f0:64:89:1c:50:a9:3d:84:09:02:1f:f3:16: 2b:1f:1e:32:bc:76:fe:a3:ed:8f:0a:29:dd:46:d4: 09:05:4d:da:b0:2f:a2:a0:31:73:d9:37:24:1b:34: 57:63:ba:eb:46:cd:6a:15:a3:a0:3d:b5:ab:b3:28: ac:30:7f:58:16:6b:b8:50:2a:d7:4b:ce:61:32:4b: 11:ea:b1:c2:e2:59:00:6d:0d:64:6a:03:0d:44:ca: b1:70:e5:4a:38:42:27:d4:57:61:c5:02:4a:3e:b2: 33:91:c3:5f:7a:8b:aa:ae:2f:84:37:9e:3f:83:74: fe:ec:20:08:1c:24:89:07:96:21:67:b3:4a:4f:f4: f8:c0:ee:c7:67:28:00:19:ea:02:16:bf:bb:c6:f0: 08:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:17:45:0D:15:42:E7:DE:6C:02:7C:81:FF:45:66:4E:65:49:15:6A X509v3 Authority Key Identifier: keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/OBdFDRVC595sAnyB_0VmTmVJFWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.75.112.0/20 185.196.128.0/22 IPv6: 2a01:6a8::/32 Signature Algorithm: sha256WithRSAEncryption cf:e1:5f:2d:01:fb:3b:55:5b:ae:8a:cf:0a:76:38:50:7a:fd: 46:19:90:6c:3f:44:d5:70:c7:9e:10:7d:84:ba:ff:bb:10:29: 39:b3:82:f0:58:b4:82:8b:36:01:3b:98:96:92:11:6b:3e:1b: 36:0c:8f:5a:79:5e:1d:d1:b1:aa:a7:b2:0e:1b:e9:dc:95:af: 93:db:48:2d:45:b3:43:e7:a5:59:f6:32:4b:e8:21:32:b4:22: e6:88:be:98:ce:38:db:de:9f:3d:1f:13:3d:a7:b2:8d:f9:62: 81:79:76:ca:a1:ef:4f:e5:98:ab:84:a7:61:b1:c8:d2:0c:dd: 8c:47:1e:4f:89:9f:90:1e:f5:13:5d:09:0d:1d:e8:f5:3a:60: 09:8f:49:65:8e:5a:8a:2c:64:fd:e5:42:00:d7:24:4e:d7:0e: f5:d4:e1:11:f1:45:2f:74:2c:aa:60:99:59:69:45:0f:15:84: bc:a7:df:cf:f7:ab:c5:3d:0d:a5:47:38:b4:c7:50:ad:21:c9: ca:e1:a6:77:f6:f1:9e:ac:e5:f0:b9:34:30:80:96:6d:b8:64: 1c:2a:cf:2f:d8:0f:54:26:a6:eb:e5:ce:19:95:70:64:2f:7f: 42:4e:10:c0:a1:d8:59:bd:50:44:44:ae:57:7e:ba:aa:d4:28: 2e:96:51:fc -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6yVuNdtoSApSOSvB9ysiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMjliZDhiYjQ5YTgwOTk2YjQ2MGY1MDI4ZWQ1MmE4ZTA1 N2MwYjEwHhcNMjYwMTAxMTgxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODE3NDUwZDE1NDJlN2RlNmMwMjdjODFmZjQ1NjY0ZTY1NDkxNTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Yq9pCsAvJiXovHzjzj+CLdfuQ02 GuKGMFQp5MBeAefaSOMWlf5J+A7LcUYnXYtQdQ8XDFbsmPh8cxj7/Asgw2aJkE8G +5fDtjVrZs6J7hHkEP47jtGJdkcBhTklGcWkyR1HUz//Za0YBvBkiRxQqT2ECQIf 8xYrHx4yvHb+o+2PCindRtQJBU3asC+ioDFz2TckGzRXY7rrRs1qFaOgPbWrsyis MH9YFmu4UCrXS85hMksR6rHC4lkAbQ1kagMNRMqxcOVKOEIn1FdhxQJKPrIzkcNf eouqri+EN54/g3T+7CAIHCSJB5YhZ7NKT/T4wO7HZygAGeoCFr+7xvAIgQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDgXRQ0VQufebAJ8gf9FZk5lSRVqMB8GA1UdIwQY MBaAFP4pvYu0moCZa0YPUCjtUqjgV8CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2ltOWk3U2FnSmxyUmc5UUtPMVNxT0JYd0xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82ZjQyMzAtMDVlNi00YzAwLWE0YWIt MDZiOGRmZTQ5OGJkLzEvT0JkRkRSVkM1OTVzQW55Ql8wVm1UbVZKRldvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82ZjQyMzAtMDVlNi00YzAwLWE0YWItMDZiOGRmZTQ5OGJk LzEvX2ltOWk3U2FnSmxyUmc5UUtPMVNxT0JYd0xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUEtwAwQC ucSAMA0EAgACMAcDBQAqAQaoMA0GCSqGSIb3DQEBCwUAA4IBAQDP4V8tAfs7VVuu is8KdjhQev1GGZBsP0TVcMeeEH2Euv+7ECk5s4LwWLSCizYBO5iWkhFrPhs2DI9a eV4d0bGqp7IOG+ncla+T20gtRbND56VZ9jJL6CEytCLmiL6Yzjjb3p89HxM9p7KN +WKBeXbKoe9P5ZirhKdhscjSDN2MRx5PiZ+QHvUTXQkNHej1OmAJj0lljlqKLGT9 5UIA1yRO1w711OER8UUvdCyqYJlZaUUPFYS8p9/P96vFPQ2lRzi0x1CtIcnK4aZ3 9vGerOXwuTQwgJZtuGQcKs8v2A9UJqbr5c4ZlXBkL39CThDAodhZvVBERK5Xfrqq 1CgullH8 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:42 2026 by rpki-client