This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/oOe43u0rDz6F_hHXzn-flvvUaKU.roa File: oOe43u0rDz6F_hHXzn-flvvUaKU.roa (raw, json) Hash identifier: w4KlXnKVNrmrMIj8p2+E6Qm85PcdsOMyZs6adtK9znE= Subject key identifier: A0:E7:B8:DE:ED:2B:0F:3E:85:FE:11:D7:CE:7F:9F:96:FB:D4:68:A5 Certificate issuer: /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba Certificate serial: 019B7DC890891A7D73FA81FB970274F87FDD Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/oOe43u0rDz6F_hHXzn-flvvUaKU.roa Signing time: Fri 02 Jan 2026 08:17:34 +0000 ROA not before: Fri 02 Jan 2026 08:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205179 IP address blocks: 185.226.232.0/22 maxlen: 22 185.226.232.0/24 maxlen: 24 185.226.233.0/24 maxlen: 24 185.226.234.0/24 maxlen: 24 185.226.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:90:89:1a:7d:73:fa:81:fb:97:02:74:f8:7f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba Validity Not Before: Jan 2 08:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0e7b8deed2b0f3e85fe11d7ce7f9f96fbd468a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:44:cb:e5:11:ab:30:67:ef:e6:89:e1:be: 74:f3:9f:5f:7c:de:c0:75:53:af:bc:6f:c5:cb:30: af:b1:f9:ed:5b:27:85:32:82:20:64:06:df:2e:9b: ab:7a:9f:f9:55:c6:62:9e:8d:6c:7b:51:db:5f:80: b7:48:5a:a7:66:fd:bb:09:36:e1:20:fe:b3:c5:14: b1:79:ab:cb:e6:c8:50:12:2b:60:30:e6:37:c8:64: 03:4f:77:fb:e0:4c:92:4d:10:ba:49:c7:b8:59:30: be:ac:76:9f:04:0a:eb:3c:7b:e6:82:78:36:5a:60: 7f:74:00:8e:7d:dc:b3:7c:92:d9:26:db:5e:68:8d: 24:7a:e2:47:65:7b:b5:5a:5a:57:c9:62:c5:70:6f: ab:b9:b6:cd:e7:26:68:72:78:62:d2:35:52:14:57: 24:e1:ea:d4:b0:4b:7c:6e:9f:42:93:ba:50:bc:f9: bb:a2:21:fe:50:d8:75:89:e2:75:cf:14:98:e9:46: e6:0b:ac:27:3d:bc:e1:a4:4f:38:73:e9:34:05:14: 64:94:99:ff:82:5f:47:04:2c:2f:3f:25:29:04:99: 93:89:d3:2e:71:06:a9:fc:c0:e1:72:62:e1:80:d8: 41:6c:51:72:a7:ed:16:38:2e:81:6b:c6:8d:bd:84: af:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E7:B8:DE:ED:2B:0F:3E:85:FE:11:D7:CE:7F:9F:96:FB:D4:68:A5 X509v3 Authority Key Identifier: keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/oOe43u0rDz6F_hHXzn-flvvUaKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.232.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:96:e3:4d:dd:8f:d6:9f:9d:79:dc:7c:ec:ed:05:96:24:39: ab:09:91:cb:87:c7:9d:18:46:e5:fc:26:72:41:e8:b4:f0:fb: de:7d:4e:d7:61:df:1f:21:3e:81:80:c5:48:ef:30:1c:22:1d: 19:08:86:ab:36:ac:9f:c9:c7:21:6f:b7:0b:01:cc:88:58:04: a2:2a:0d:38:56:24:44:a6:a4:a7:53:37:4e:ac:c1:b3:16:a3: 85:92:7d:4f:09:72:2c:b0:e5:98:3c:e1:54:ea:a7:5d:52:2b: 85:44:3b:89:1d:22:30:70:79:e1:f6:80:b2:87:c8:1a:61:08: ee:be:5f:c1:4b:d2:73:42:3c:a7:1a:76:8a:ae:1d:e1:06:12: 27:2c:9c:b6:ff:5f:80:b6:e6:9c:2e:b6:5c:b0:43:8f:be:52: 7b:6f:4d:bf:68:c0:17:79:25:ca:ad:c8:04:bb:e7:33:94:ad: 88:8b:70:5a:de:7f:25:aa:0e:65:aa:7f:a9:52:a1:d8:d5:c8: be:0b:b8:27:c0:71:e7:8b:9e:d5:e7:1b:73:6f:c2:26:2c:28: 15:2c:8c:b5:b1:e6:ac:ad:3e:37:07:4c:13:a1:b5:b5:c9:3b: 2f:d1:06:6e:2c:17:64:51:d9:96:f7:90:ed:c6:ae:69:d9:b6: 8b:62:74:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yJCJGn1z+oH7lwJ0+H/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiODlhZTYzNjQ4ZmQxYzg5ZWQ1NmEzNjFiZDhjMWUxMTk1 NmJmYmEwHhcNMjYwMTAyMDgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGU3YjhkZWVkMmIwZjNlODVmZTExZDdjZTdmOWY5NmZiZDQ2OGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuZEy+URqzBn7+aJ4b50859ffN7A dVOvvG/FyzCvsfntWyeFMoIgZAbfLpurep/5VcZino1se1HbX4C3SFqnZv27CTbh IP6zxRSxeavL5shQEitgMOY3yGQDT3f74EySTRC6Sce4WTC+rHafBArrPHvmgng2 WmB/dACOfdyzfJLZJtteaI0keuJHZXu1WlpXyWLFcG+rubbN5yZocnhi0jVSFFck 4erUsEt8bp9Ck7pQvPm7oiH+UNh1ieJ1zxSY6UbmC6wnPbzhpE84c+k0BRRklJn/ gl9HBCwvPyUpBJmTidMucQap/MDhcmLhgNhBbFFyp+0WOC6Ba8aNvYSvFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKDnuN7tKw8+hf4R185/n5b71GilMB8GA1UdIwQY MBaAFMuJrmNkj9HIntVqNhvYweEZVr+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYmE2ZGYtNTQ4Yy00NGVhLWIxZDUt ZjRlYjBmZjViYjczLzEvb09lNDN1MHJEejZGX2hIWHpuLWZsdnZVYUtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xYmE2ZGYtNTQ4Yy00NGVhLWIxZDUtZjRlYjBmZjViYjcz LzEveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueLoMA0G CSqGSIb3DQEBCwUAA4IBAQBPluNN3Y/Wn5153Hzs7QWWJDmrCZHLh8edGEbl/CZy Qei08PvefU7XYd8fIT6BgMVI7zAcIh0ZCIarNqyfycchb7cLAcyIWASiKg04ViRE pqSnUzdOrMGzFqOFkn1PCXIssOWYPOFU6qddUiuFRDuJHSIwcHnh9oCyh8gaYQju vl/BS9JzQjynGnaKrh3hBhInLJy2/1+AtuacLrZcsEOPvlJ7b02/aMAXeSXKrcgE u+czlK2Ii3Ba3n8lqg5lqn+pUqHY1ci+C7gnwHHni57V5xtzb8ImLCgVLIy1seas rT43B0wTobW1yTsv0QZuLBdkUdmW95Dtxq5p2baLYnRp -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:52 2026 by rpki-client