This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/O7voTXfNHlJYLDFfFhD0IyP6RWQ.roa File: O7voTXfNHlJYLDFfFhD0IyP6RWQ.roa (raw, json) Hash identifier: LffxuYhlhgmo9uurPfnZvk9c5Vb5QUT4U1yEBcpzUI0= Subject key identifier: 3B:BB:E8:4D:77:CD:1E:52:58:2C:31:5F:16:10:F4:23:23:FA:45:64 Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81 Certificate serial: 019B7BA4F15A782167628A60E9B6D04C7FC0 Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/O7voTXfNHlJYLDFfFhD0IyP6RWQ.roa Signing time: Thu 01 Jan 2026 22:19:25 +0000 ROA not before: Thu 01 Jan 2026 22:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207242 IP address blocks: 185.162.24.0/22 maxlen: 22 185.194.44.0/22 maxlen: 22 185.195.84.0/22 maxlen: 22 185.195.224.0/22 maxlen: 22 185.242.72.0/22 maxlen: 22 2a07:ca40::/29 maxlen: 29 2a0a:4440::/32 maxlen: 32 2a0a:5640::/32 maxlen: 32 2a0a:5f40::/32 maxlen: 32 2a0c:c380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f1:5a:78:21:67:62:8a:60:e9:b6:d0:4c:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81 Validity Not Before: Jan 1 22:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bbbe84d77cd1e52582c315f1610f42323fa4564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:d7:eb:9d:7f:9b:65:66:1e:89:e8:23:45: 60:b9:c9:b2:36:0d:19:a4:f6:d0:ca:3c:0c:51:e0: d9:63:4d:24:ad:bc:ea:f2:6a:b3:a2:d9:d9:61:6c: fe:5e:b6:0c:50:dd:74:89:8e:33:ff:08:6d:a9:f5: e7:37:f8:be:da:0c:11:3e:73:b8:2b:63:cd:c8:16: 13:c6:11:e8:9f:ad:17:fe:21:e3:d5:22:63:b3:9d: a7:54:be:53:0f:48:85:5b:1c:47:e2:fb:37:b6:85: e7:98:dd:4e:e1:01:bc:dd:f8:f2:fe:fb:19:09:f4: 60:7e:05:39:e7:34:f2:f9:e6:42:65:a9:fb:8a:3d: 44:19:13:ae:30:71:5d:6b:8b:a0:63:34:c4:06:12: d3:c0:1d:ea:21:40:33:4d:92:91:aa:1c:6e:29:a7: 4f:dc:fe:8d:c1:8b:95:a7:8f:15:0f:9d:05:45:9c: a0:56:d8:a9:48:65:ae:68:39:a0:6f:d1:f1:52:49: 49:4b:86:56:76:a1:94:8b:fd:3b:b1:e5:fc:1e:1b: 88:47:46:49:a8:31:ed:39:97:4b:d5:b9:32:91:a2: 30:70:23:36:3c:66:d5:07:d3:93:94:27:5a:3b:4f: 4e:39:03:dc:5f:b3:31:65:24:79:0f:13:d2:22:c3: 6d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BB:E8:4D:77:CD:1E:52:58:2C:31:5F:16:10:F4:23:23:FA:45:64 X509v3 Authority Key Identifier: keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/O7voTXfNHlJYLDFfFhD0IyP6RWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.24.0/22 185.194.44.0/22 185.195.84.0/22 185.195.224.0/22 185.242.72.0/22 IPv6: 2a07:ca40::/29 2a0a:4440::/32 2a0a:5640::/32 2a0a:5f40::/32 2a0c:c380::/32 Signature Algorithm: sha256WithRSAEncryption 87:29:24:46:5c:21:2d:9d:af:46:ca:12:ae:fb:d0:bf:63:e6: ed:cd:48:6f:8c:ed:eb:25:d1:cf:6c:3e:ee:13:6d:5c:8e:ae: 21:cf:8a:3c:23:08:e8:a7:6a:8e:8a:6c:0d:8a:56:18:5b:7e: ce:71:24:5b:bb:d6:08:43:81:4d:3d:f3:04:b0:66:18:b2:61: 19:c1:f0:f0:92:5b:f9:d9:8e:5a:94:23:16:26:a5:9a:70:6d: 56:e7:f7:64:4e:b5:0b:a5:53:37:eb:2f:31:f5:b5:37:ce:68: 32:cc:8f:0b:56:6e:6d:e3:62:23:15:54:c8:44:a7:4c:1c:23: 9b:1d:d0:f7:e2:63:72:d2:dd:02:9b:3d:bb:cf:d8:f5:3d:25: ec:fe:e8:e4:f8:4b:b1:e8:3b:51:30:56:ac:f2:84:df:d5:c5: 32:b3:a7:0e:62:92:5e:71:32:7f:31:ef:46:d8:88:6e:77:89: de:ef:ae:b3:d8:cd:d4:b3:29:1b:01:6a:2c:6c:45:40:44:78: c9:a8:3e:c6:67:42:21:59:86:ae:6a:b1:64:05:96:3e:2a:40: d1:d9:6d:17:c7:0c:e9:bb:be:c2:b8:29:3e:48:dd:35:ee:b8: 5c:74:7a:8e:71:13:3f:45:83:d6:17:7e:68:04:15:c0:4f:7e: 6d:f7:25:8b -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgISAZt7pPFaeCFnYopg6bbQTH/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkM2IyYzMzM2I3Mjk1NTdhYzBiZTAyNzQwYjIyMjk2ZDgw MmJmODEwHhcNMjYwMTAxMjIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmJiZTg0ZDc3Y2QxZTUyNTgyYzMxNWYxNjEwZjQyMzIzZmE0NTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx7X651/m2VmHonoI0VgucmyNg0Z pPbQyjwMUeDZY00krbzq8mqzotnZYWz+XrYMUN10iY4z/whtqfXnN/i+2gwRPnO4 K2PNyBYTxhHon60X/iHj1SJjs52nVL5TD0iFWxxH4vs3toXnmN1O4QG83fjy/vsZ CfRgfgU55zTy+eZCZan7ij1EGROuMHFda4ugYzTEBhLTwB3qIUAzTZKRqhxuKadP 3P6NwYuVp48VD50FRZygVtipSGWuaDmgb9HxUklJS4ZWdqGUi/07seX8HhuIR0ZJ qDHtOZdL1bkykaIwcCM2PGbVB9OTlCdaO09OOQPcX7MxZSR5DxPSIsNtewIDAQAB o4ICTDCCAkgwHQYDVR0OBBYEFDu76E13zR5SWCwxXxYQ9CMj+kVkMB8GA1UdIwQY MBaAFH07LDM7cpVXrAvgJ0CyIpbYAr+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEt NTI4MzVkYjY1MTJjLzEvTzd2b1RYZk5IbEpZTERGZkZoRDBJeVA2UldRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEtNTI4MzVkYjY1MTJj LzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTAkBAIAATAeAwQCuaIYAwQC ucIsAwQCucNUAwQCucPgAwQCufJIMCkEAgACMCMDBQMqB8pAAwUAKgpEQAMFACoK VkADBQAqCl9AAwUAKgzDgDANBgkqhkiG9w0BAQsFAAOCAQEAhykkRlwhLZ2vRsoS rvvQv2Pm7c1Ib4zt6yXRz2w+7hNtXI6uIc+KPCMI6KdqjopsDYpWGFt+znEkW7vW CEOBTT3zBLBmGLJhGcHw8JJb+dmOWpQjFialmnBtVuf3ZE61C6VTN+svMfW1N85o MsyPC1ZubeNiIxVUyESnTBwjmx3Q9+JjctLdAps9u8/Y9T0l7P7o5PhLseg7UTBW rPKE39XFMrOnDmKSXnEyfzHvRtiIbneJ3u+us9jN1LMpGwFqLGxFQER4yag+xmdC IVmGrmqxZAWWPipA0dltF8cM6bu+wrgpPkjdNe64XHR6jnETP0WD1hd+aAQVwE9+ bfcliw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:56 2026 by rpki-client