This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/Oii3V-7piYCPzs0_dSiKYPboBMk.roa File: Oii3V-7piYCPzs0_dSiKYPboBMk.roa (raw, json) Hash identifier: Ilo1v9IIMxIQYILX+1PmPseCaQDDpP2GLZh2OKOVwAU= Subject key identifier: 3A:28:B7:57:EE:E9:89:80:8F:CE:CD:3F:75:28:8A:60:F6:E8:04:C9 Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e Certificate serial: 019B78A22EA147D4CAA2FFCBDBCA0A6BB42C Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/Oii3V-7piYCPzs0_dSiKYPboBMk.roa Signing time: Thu 01 Jan 2026 08:17:33 +0000 ROA not before: Thu 01 Jan 2026 08:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133757 IP address blocks: 185.100.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2e:a1:47:d4:ca:a2:ff:cb:db:ca:0a:6b:b4:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e Validity Not Before: Jan 1 08:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a28b757eee989808fcecd3f75288a60f6e804c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:14:28:4b:3a:30:cd:d4:42:37:7d:71:65: 77:35:8e:10:39:ff:02:4b:1d:63:dc:fb:cd:fb:26: a2:89:88:41:a1:6b:dd:f0:e4:75:f4:e4:6b:69:93: eb:dc:f5:46:40:f2:23:86:cb:30:29:e6:e9:23:da: b3:33:dc:77:33:67:bb:5a:d9:6c:a1:1f:05:87:f9: c3:45:ad:04:02:b8:10:12:0c:9a:d9:6a:00:a4:db: 2e:90:07:bc:af:9c:3a:d0:16:47:97:f1:67:33:17: 37:24:2b:0f:d2:66:04:a9:64:f4:e2:5a:05:e6:98: 59:ac:2a:37:e6:df:2a:20:70:ab:d8:cf:de:38:a8: df:81:b7:f7:c4:7e:f7:a5:0a:66:fe:2a:cd:97:9c: cd:92:cd:33:9d:d9:62:6f:de:ff:b6:36:35:46:9c: f8:44:64:40:56:fa:f5:7d:28:9c:fb:ce:4b:0f:8f: 62:70:51:ba:2e:33:d6:24:45:ed:06:11:50:28:ec: 81:a6:2d:63:3f:a9:49:c5:33:8d:be:65:60:f3:ce: 97:0e:45:f9:48:25:68:2c:e3:67:30:e3:e0:65:55: 7d:49:bd:2e:b5:3c:3e:6c:be:84:ef:d5:8a:56:4b: 68:71:a6:f7:f9:66:ac:ba:74:3c:23:d9:b3:02:ce: 2b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:28:B7:57:EE:E9:89:80:8F:CE:CD:3F:75:28:8A:60:F6:E8:04:C9 X509v3 Authority Key Identifier: keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/Oii3V-7piYCPzs0_dSiKYPboBMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.115.0/24 Signature Algorithm: sha256WithRSAEncryption 11:7b:61:53:85:4e:05:08:d8:27:aa:8a:d4:6d:6b:08:a6:1c: ee:5a:dd:9f:36:d1:44:91:77:a6:dd:dd:f3:1c:23:89:62:38: ba:8e:f8:e6:63:91:ec:53:62:44:ac:b7:57:6b:52:f8:9c:75: d3:6e:0f:fa:fc:96:d8:5d:49:34:60:b7:9b:aa:f5:ad:ca:d1: 10:44:98:1a:e3:21:01:18:6a:0a:b0:d2:51:58:34:04:37:9d: 3d:29:18:39:d7:31:ce:fb:7a:1e:b3:3c:11:0b:c8:94:36:b4: 37:26:0b:04:51:e4:ea:09:6b:f8:85:c3:2a:0f:14:ae:0e:fc: 73:8f:81:75:3c:b7:bc:87:01:5f:23:93:78:ed:06:85:81:5d: 4c:7d:cd:e1:99:e5:fc:f1:b2:a9:93:5f:1d:5b:3d:73:8b:bc: 7d:46:45:9c:11:49:37:5e:2a:b1:d7:e1:d9:b1:eb:8e:15:6f: 24:70:e8:1d:95:e9:15:c2:30:fd:dd:46:04:8d:5e:75:ea:e8: 41:f7:c8:90:b4:af:41:9d:8a:2e:61:f2:f1:b5:eb:47:34:6e: 02:35:7c:72:81:22:82:41:19:59:5e:53:26:2e:5c:ef:e6:f2: 1d:97:99:3c:da:94:1f:5c:60:1b:9a:15:9f:4f:ce:d3:c4:71: 80:e8:da:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oi6hR9TKov/L28oKa7QsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MGJlYTNmY2MzY2JjZWRjODI5MTljZjU3Yzc0MTA4YmFl YTM2OWUwHhcNMjYwMTAxMDgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTI4Yjc1N2VlZTk4OTgwOGZjZWNkM2Y3NTI4OGE2MGY2ZTgwNGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/kUKEs6MM3UQjd9cWV3NY4QOf8C Sx1j3PvN+yaiiYhBoWvd8OR19ORraZPr3PVGQPIjhsswKebpI9qzM9x3M2e7Wtls oR8Fh/nDRa0EArgQEgya2WoApNsukAe8r5w60BZHl/FnMxc3JCsP0mYEqWT04loF 5phZrCo35t8qIHCr2M/eOKjfgbf3xH73pQpm/irNl5zNks0zndlib97/tjY1Rpz4 RGRAVvr1fSic+85LD49icFG6LjPWJEXtBhFQKOyBpi1jP6lJxTONvmVg886XDkX5 SCVoLONnMOPgZVV9Sb0utTw+bL6E79WKVktocab3+WasunQ8I9mzAs4roQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDoot1fu6YmAj87NP3UoimD26ATJMB8GA1UdIwQY MBaAFDQL6j/MPLztyCkZz1fHQQi66jaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYt MTExMDU2MzY5YTIzLzEvT2lpM1YtN3BpWUNQenMwX2RTaUtZUGJvQk1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYtMTExMDU2MzY5YTIz LzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWRzMA0G CSqGSIb3DQEBCwUAA4IBAQARe2FThU4FCNgnqorUbWsIphzuWt2fNtFEkXem3d3z HCOJYji6jvjmY5HsU2JErLdXa1L4nHXTbg/6/JbYXUk0YLebqvWtytEQRJga4yEB GGoKsNJRWDQEN509KRg51zHO+3oeszwRC8iUNrQ3JgsEUeTqCWv4hcMqDxSuDvxz j4F1PLe8hwFfI5N47QaFgV1Mfc3hmeX88bKpk18dWz1zi7x9RkWcEUk3Xiqx1+HZ seuOFW8kcOgdlekVwjD93UYEjV516uhB98iQtK9BnYouYfLxtetHNG4CNXxygSKC QRlZXlMmLlzv5vIdl5k82pQfXGAbmhWfT87TxHGA6Nqx -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:49 2026 by rpki-client