This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/oBg9GLd04rSGrEFacgZRWrxKe2o.roa File: oBg9GLd04rSGrEFacgZRWrxKe2o.roa (raw, json) Hash identifier: qgYYBQiy/vwO/EgGIM4ixoYVfm4vaImrqtxG63hASRU= Subject key identifier: A0:18:3D:18:B7:74:E2:B4:86:AC:41:5A:72:06:51:5A:BC:4A:7B:6A Certificate issuer: /CN=8b423e1d72b103070bed579c40597ed20b84c16e Certificate serial: 019B7910D9598A58A9427D5B3F94EE3AEE17 Authority key identifier: 8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/oBg9GLd04rSGrEFacgZRWrxKe2o.roa Signing time: Thu 01 Jan 2026 10:18:25 +0000 ROA not before: Thu 01 Jan 2026 10:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214904 IP address blocks: 185.116.148.0/22 maxlen: 22 2a06:7f00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d9:59:8a:58:a9:42:7d:5b:3f:94:ee:3a:ee:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b423e1d72b103070bed579c40597ed20b84c16e Validity Not Before: Jan 1 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0183d18b774e2b486ac415a7206515abc4a7b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:41:45:36:67:07:0a:40:f3:6c:d6:31:d1: 3a:4c:8e:0e:0d:d2:5f:ce:14:c4:a1:b2:e0:97:92: d3:d4:21:5a:dd:25:f7:a3:a7:ec:3f:ee:11:d7:ee: 6e:7f:e5:9f:8d:a4:9a:cb:b6:6e:c5:0f:68:87:a3: ee:78:94:5e:78:c9:51:69:d0:95:58:ac:c2:1b:f7: 6d:85:5f:e1:7f:7f:c3:83:fc:02:ae:81:f7:eb:2d: bb:fa:fb:b3:d0:21:cd:44:87:b8:d3:94:1f:46:a3: 2c:e9:9d:f0:2c:27:c5:a5:99:a0:91:4b:15:d2:9b: ee:6a:55:b3:e0:a7:13:4d:4a:19:8b:54:9d:15:6e: cb:ff:64:66:97:e5:a1:25:db:c4:86:b0:90:c0:c4: c8:a4:06:32:be:d5:a4:df:9c:c4:89:bf:ac:6e:23: fc:4e:8a:57:67:ba:80:4b:cb:29:db:e2:a3:a1:6a: c2:17:31:3e:fd:7e:df:40:c4:e8:2a:56:f2:81:fa: 3d:f8:e7:ff:c5:a3:0a:83:d2:b9:44:db:46:1c:82: 44:0a:94:80:e7:c3:9a:b2:38:8c:ec:92:7a:14:f5: 32:1b:d2:83:68:a4:96:f1:0f:e5:ac:45:17:87:09: 48:e2:f8:04:be:98:aa:93:ce:d2:bc:0e:8a:f7:44: e6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:18:3D:18:B7:74:E2:B4:86:AC:41:5A:72:06:51:5A:BC:4A:7B:6A X509v3 Authority Key Identifier: keyid:8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/oBg9GLd04rSGrEFacgZRWrxKe2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.148.0/22 IPv6: 2a06:7f00::/29 Signature Algorithm: sha256WithRSAEncryption 3e:dd:f9:e3:f0:63:ee:e2:b5:9b:ff:19:59:0a:01:67:c6:92: cd:b8:e2:33:e7:2a:17:98:62:73:e7:a7:9c:a9:a9:ae:f6:6d: 04:03:da:2f:9e:81:78:d4:e8:15:cd:04:91:54:a7:19:38:8c: 32:18:7f:fb:11:44:1e:84:df:f0:b0:c6:49:13:73:d6:39:fe: 4a:89:ac:a9:9c:9b:d5:5b:7f:93:9d:20:5c:50:08:87:15:72: 19:68:2b:6c:cf:5e:5f:20:22:fc:ea:f5:0e:cc:07:30:32:87: ef:e2:60:51:15:4c:ad:fb:5b:16:a0:a6:8e:bd:24:44:02:7a: 36:9a:c2:ca:fc:e6:1f:45:ef:ce:ec:49:cb:fe:92:0d:09:dd: b3:e7:1e:87:f4:34:85:37:83:3a:12:0a:93:be:a7:17:ff:0d: be:16:20:96:5f:58:0b:54:f6:19:22:9f:e4:bc:df:4b:07:21: a6:62:6d:89:6a:6b:95:26:29:58:a4:5c:7b:f1:31:9a:2d:11: 2c:ed:1f:b9:2a:80:34:12:3f:2f:59:91:14:d2:49:e7:0f:81: 64:8c:08:76:1f:6a:e9:01:4d:f8:83:e7:cf:96:86:89:cf:85: 29:2d:0a:b9:f8:a8:aa:6e:f4:ec:48:c1:6c:88:10:05:da:da: a1:b7:96:8f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ENlZilipQn1bP5TuOu4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDIzZTFkNzJiMTAzMDcwYmVkNTc5YzQwNTk3ZWQyMGI4 NGMxNmUwHhcNMjYwMTAxMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDE4M2QxOGI3NzRlMmI0ODZhYzQxNWE3MjA2NTE1YWJjNGE3YjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmFBRTZnBwpA82zWMdE6TI4ODdJf zhTEobLgl5LT1CFa3SX3o6fsP+4R1+5uf+WfjaSay7ZuxQ9oh6PueJReeMlRadCV WKzCG/dthV/hf3/Dg/wCroH36y27+vuz0CHNRIe405QfRqMs6Z3wLCfFpZmgkUsV 0pvualWz4KcTTUoZi1SdFW7L/2Rml+WhJdvEhrCQwMTIpAYyvtWk35zEib+sbiP8 TopXZ7qAS8sp2+KjoWrCFzE+/X7fQMToKlbygfo9+Of/xaMKg9K5RNtGHIJECpSA 58OasjiM7JJ6FPUyG9KDaKSW8Q/lrEUXhwlI4vgEvpiqk87SvA6K90Tm0QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKAYPRi3dOK0hqxBWnIGUVq8SntqMB8GA1UdIwQY MBaAFItCPh1ysQMHC+1XnEBZftILhMFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBJLUhYS3hBd2NMN1ZlY1FGbC0wZ3VFd1c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82NzU4YTAtM2JiMi00NzVlLWE5Yjgt YjkwOWVkMjAyYjY0LzEvb0JnOUdMZDA0clNHckVGYWNnWlJXcnhLZTJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC82NzU4YTAtM2JiMi00NzVlLWE5YjgtYjkwOWVkMjAyYjY0 LzEvaTBJLUhYS3hBd2NMN1ZlY1FGbC0wZ3VFd1c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXSUMA0E AgACMAcDBQMqBn8AMA0GCSqGSIb3DQEBCwUAA4IBAQA+3fnj8GPu4rWb/xlZCgFn xpLNuOIz5yoXmGJz56ecqamu9m0EA9ovnoF41OgVzQSRVKcZOIwyGH/7EUQehN/w sMZJE3PWOf5KiaypnJvVW3+TnSBcUAiHFXIZaCtsz15fICL86vUOzAcwMofv4mBR FUyt+1sWoKaOvSREAno2msLK/OYfRe/O7EnL/pINCd2z5x6H9DSFN4M6EgqTvqcX /w2+FiCWX1gLVPYZIp/kvN9LByGmYm2JamuVJilYpFx78TGaLREs7R+5KoA0Ej8v WZEU0knnD4FkjAh2H2rpAU34g+fPloaJz4UpLQq5+KiqbvTsSMFsiBAF2tqht5aP -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:08 2026 by rpki-client