This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/OQ9Hd0aNbo2NqKQaJbOywBhZIsI.roa File: OQ9Hd0aNbo2NqKQaJbOywBhZIsI.roa (raw, json) Hash identifier: 2qz4jxI2YE3EpG4tgKD3UnEwvItdboMyeyLo8EjTciU= Subject key identifier: 39:0F:47:77:46:8D:6E:8D:8D:A8:A4:1A:25:B3:B2:C0:18:59:22:C2 Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1 Certificate serial: 019B7D5B3BF1B3F7E268CE984072858B7919 Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/OQ9Hd0aNbo2NqKQaJbOywBhZIsI.roa Signing time: Fri 02 Jan 2026 06:18:09 +0000 ROA not before: Fri 02 Jan 2026 06:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203739 IP address blocks: 185.255.68.0/24 maxlen: 24 185.255.69.0/24 maxlen: 24 185.255.70.0/24 maxlen: 24 185.255.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:3b:f1:b3:f7:e2:68:ce:98:40:72:85:8b:79:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1 Validity Not Before: Jan 2 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=390f4777468d6e8d8da8a41a25b3b2c0185922c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:a5:9e:9a:27:79:f8:e7:8f:ba:a2:31:15: 12:d2:83:ab:f4:6d:8f:34:87:7f:97:36:e5:f5:4e: f5:e8:ea:2a:f2:ff:a4:d7:f7:ee:e9:a2:38:ca:31: e0:dd:3d:8e:9f:58:d2:c2:40:c7:a5:1b:b6:1e:5e: d6:04:cd:1b:00:51:b2:c8:83:47:e2:d8:ad:e2:22: bc:3a:75:3e:ab:7b:f0:c0:fa:16:f5:83:f2:88:d7: be:97:6f:c6:54:48:32:42:18:67:ec:9a:7f:09:ef: cc:5f:5f:e2:19:18:5d:81:79:82:44:1a:13:a7:d3: 51:93:91:48:ce:d6:8f:73:ed:c9:8b:01:88:fa:0c: d6:0c:c9:82:66:99:e2:04:d2:3d:93:ec:3d:42:06: 4d:26:1d:34:ca:ba:22:53:48:1d:62:28:e8:6a:f7: e3:74:a7:07:a4:84:ca:22:3b:96:9a:07:d5:d1:18: 2e:cc:64:8f:13:3e:c3:7f:1c:c5:3d:ec:88:96:c6: 7a:46:7f:8c:05:51:b2:13:7c:26:47:00:bc:38:d2: 11:67:b7:39:a7:8f:eb:6d:5c:d3:24:8a:e9:91:06: a2:c5:a8:50:f9:6f:a9:b3:38:06:8e:8c:07:93:52: 03:cd:1a:64:84:c1:38:0d:b3:13:3d:99:83:9a:95: 0c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0F:47:77:46:8D:6E:8D:8D:A8:A4:1A:25:B3:B2:C0:18:59:22:C2 X509v3 Authority Key Identifier: keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/OQ9Hd0aNbo2NqKQaJbOywBhZIsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.68.0/22 Signature Algorithm: sha256WithRSAEncryption 77:74:b9:97:0f:5b:72:4f:03:f3:12:ed:ca:c6:99:1e:03:8d: 79:43:6f:2b:0b:f5:da:7c:98:f4:80:bf:c0:9d:61:82:71:b3: 91:cc:0d:23:6a:1f:41:e7:8e:f4:25:b8:c6:78:3b:e2:af:d8: d2:0f:dc:b2:15:99:8c:b7:ce:99:cb:31:9e:65:2f:88:4c:3f: 2b:99:6a:a1:bd:0b:4e:ef:dc:1b:8b:a4:97:a6:c1:7e:8b:fb: 8f:1f:28:2d:80:be:fb:ee:e3:8c:85:3b:02:3b:ad:14:87:23: 38:75:a5:7a:4b:38:90:c5:15:1e:6d:e8:fb:12:ac:e5:43:50: cd:df:c9:1c:5d:17:bb:0c:b4:50:12:96:a3:5f:63:79:e1:37: 11:80:5b:13:42:98:7f:af:65:07:bf:47:03:b2:f8:ac:67:98: 16:a9:b9:e7:dd:87:16:34:55:0e:f2:3a:71:ea:75:14:13:9f: 03:3b:f4:ea:02:62:6e:69:3c:2e:70:40:ec:76:5e:05:1d:2d: ec:ac:f9:c3:27:72:ba:53:bd:c3:5b:6d:d2:fd:78:19:c5:ed: a5:f3:5e:17:5e:5c:d8:5e:cd:88:15:91:07:0b:54:e2:58:16: 92:d9:8e:29:64:5e:1b:a8:eb:c6:80:72:e5:de:6d:11:81:c0: 0b:23:a3:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wzvxs/fiaM6YQHKFi3kZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYzMzYjhlMTM1NmZjY2ZjODM0NjZlZWQ4YTg2NTUxMmE3 ZDAwZjEwHhcNMjYwMTAyMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTBmNDc3NzQ2OGQ2ZThkOGRhOGE0MWEyNWIzYjJjMDE4NTkyMmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwalnponefjnj7qiMRUS0oOr9G2P NId/lzbl9U716Ooq8v+k1/fu6aI4yjHg3T2On1jSwkDHpRu2Hl7WBM0bAFGyyINH 4tit4iK8OnU+q3vwwPoW9YPyiNe+l2/GVEgyQhhn7Jp/Ce/MX1/iGRhdgXmCRBoT p9NRk5FIztaPc+3JiwGI+gzWDMmCZpniBNI9k+w9QgZNJh00yroiU0gdYijoavfj dKcHpITKIjuWmgfV0RguzGSPEz7DfxzFPeyIlsZ6Rn+MBVGyE3wmRwC8ONIRZ7c5 p4/rbVzTJIrpkQaixahQ+W+pszgGjowHk1IDzRpkhME4DbMTPZmDmpUMiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDkPR3dGjW6NjaikGiWzssAYWSLCMB8GA1UdIwQY MBaAFI7DO44TVvzPyDRm7tioZVEqfQDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNzI4MDYtNDllOC00MTEyLWEyMzUt MWMxZTg1MzJkNWIwLzEvT1E5SGQwYU5ibzJOcUtRYUpiT3l3QmhaSXNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9iNzI4MDYtNDllOC00MTEyLWEyMzUtMWMxZTg1MzJkNWIw LzEvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuf9EMA0G CSqGSIb3DQEBCwUAA4IBAQB3dLmXD1tyTwPzEu3KxpkeA415Q28rC/XafJj0gL/A nWGCcbORzA0jah9B5470JbjGeDvir9jSD9yyFZmMt86ZyzGeZS+ITD8rmWqhvQtO 79wbi6SXpsF+i/uPHygtgL777uOMhTsCO60UhyM4daV6SziQxRUebej7EqzlQ1DN 38kcXRe7DLRQEpajX2N54TcRgFsTQph/r2UHv0cDsvisZ5gWqbnn3YcWNFUO8jpx 6nUUE58DO/TqAmJuaTwucEDsdl4FHS3srPnDJ3K6U73DW23S/XgZxe2l814XXlzY Xs2IFZEHC1TiWBaS2Y4pZF4bqOvGgHLl3m0RgcALI6PX -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:25 2026 by rpki-client