This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/OFdl_cuhSwuBw7xKFieEcaN3MhI.roa File: OFdl_cuhSwuBw7xKFieEcaN3MhI.roa (raw, json) Hash identifier: q+LaeqOCOXpKvhpcTZ+QlpboyUW23NYoGkwiOYiXYDA= Subject key identifier: 38:57:65:FD:CB:A1:4B:0B:81:C3:BC:4A:16:27:84:71:A3:77:32:12 Certificate issuer: /CN=554adb72b82ecfafc5705e25febcab5c82d76ee6 Certificate serial: 019BC1E574AC94EF9DD037BED478A7EB5F41 Authority key identifier: 55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/OFdl_cuhSwuBw7xKFieEcaN3MhI.roa Signing time: Thu 15 Jan 2026 13:43:18 +0000 ROA not before: Thu 15 Jan 2026 13:43:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16297 IP address blocks: 185.100.236.0/22 maxlen: 22 217.18.96.0/19 maxlen: 19 217.118.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:e5:74:ac:94:ef:9d:d0:37:be:d4:78:a7:eb:5f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6 Validity Not Before: Jan 15 13:43:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=385765fdcba14b0b81c3bc4a16278471a3773212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:41:10:91:ac:d7:36:ae:9c:52:a5:1e:b7: 5c:03:54:4b:c9:b7:23:b2:07:3a:0d:fe:cb:d7:a3: 7c:89:78:02:23:05:7b:b5:7a:87:c1:4c:fe:2d:3c: d4:2b:02:04:1e:30:e5:aa:46:df:7a:5d:10:c4:69: 1f:07:c8:9b:37:7b:63:5a:26:e8:7c:61:0f:00:2d: 47:21:20:ac:98:52:54:ae:0b:0c:3e:bb:7b:33:f8: 6d:ae:b5:89:9c:34:2f:6e:14:3c:f0:96:b2:83:78: c7:a8:45:00:66:b1:e8:05:67:67:38:74:c6:d3:6c: 1c:7d:cb:c2:2d:3c:88:5c:3e:09:60:21:90:c1:75: 2e:a0:a9:3e:01:cf:67:98:42:62:50:fa:72:5a:71: 3c:5c:4d:ef:ed:3f:7f:08:bb:20:be:63:7f:61:4f: f1:73:a8:03:62:b4:74:a7:8c:7c:72:a8:fd:31:78: 02:f9:66:c1:3d:da:0b:26:61:ed:6c:52:98:d5:91: 2f:19:ab:73:f9:d6:cc:05:d7:7e:57:16:9f:5c:8f: 2a:bf:52:89:7a:01:a0:5e:e6:b1:41:53:ee:36:32: 30:f2:f9:e2:ad:ae:34:81:b2:d4:44:9f:77:51:d3: e7:de:8e:26:10:dc:16:c2:ff:63:02:c5:15:96:11: 0f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:57:65:FD:CB:A1:4B:0B:81:C3:BC:4A:16:27:84:71:A3:77:32:12 X509v3 Authority Key Identifier: keyid:55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/OFdl_cuhSwuBw7xKFieEcaN3MhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.236.0/22 217.18.96.0/19 217.118.0.0/20 Signature Algorithm: sha256WithRSAEncryption 6e:e7:1b:af:96:e2:fe:47:8d:b6:76:c3:31:ab:2b:87:a1:40: 90:66:b2:b4:a2:d1:aa:05:6f:e4:70:f8:dc:84:e5:79:71:27: fc:2b:37:20:8c:15:33:2f:c2:fc:1e:80:ed:a3:b8:25:92:4a: e9:75:91:b6:14:ff:70:00:1b:e2:8b:d8:6c:18:b0:49:74:09: b0:91:38:3c:56:2a:20:99:27:34:2d:a3:92:73:00:34:1f:6e: 79:06:35:b9:e6:7c:57:ad:a0:9f:df:58:9a:59:0f:2c:b6:d0: 34:16:9b:1d:6b:53:58:62:0e:19:d2:73:65:20:0d:a0:f1:b0: b3:e7:9b:54:1e:15:0d:a5:92:9b:ee:b8:9f:ab:4e:f5:b3:79: 42:fe:57:99:ad:2d:06:51:d4:06:5e:79:1b:0c:b3:1b:11:46: d3:18:a9:7d:84:b1:95:2b:54:85:9b:53:32:05:b0:be:06:bd: ec:0f:e5:9a:24:15:0b:94:b3:f7:b5:bd:96:e2:2d:07:5e:86: f4:fc:40:bc:22:1c:92:f1:fd:f8:b8:67:1f:a0:f1:c3:eb:49: 6a:83:a5:61:8d:2f:0f:23:20:ee:f8:f7:20:06:0f:b0:b1:36: 15:b0:f1:27:f4:5a:81:7b:40:8a:93:8b:36:70:9b:5c:c6:25: e0:c2:c0:01 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvB5XSslO+d0De+1Hin619BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NGFkYjcyYjgyZWNmYWZjNTcwNWUyNWZlYmNhYjVjODJk NzZlZTYwHhcNMjYwMTE1MTM0MzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODU3NjVmZGNiYTE0YjBiODFjM2JjNGExNjI3ODQ3MWEzNzczMjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx9BEJGs1zaunFKlHrdcA1RLybcj sgc6Df7L16N8iXgCIwV7tXqHwUz+LTzUKwIEHjDlqkbfel0QxGkfB8ibN3tjWibo fGEPAC1HISCsmFJUrgsMPrt7M/htrrWJnDQvbhQ88Jayg3jHqEUAZrHoBWdnOHTG 02wcfcvCLTyIXD4JYCGQwXUuoKk+Ac9nmEJiUPpyWnE8XE3v7T9/CLsgvmN/YU/x c6gDYrR0p4x8cqj9MXgC+WbBPdoLJmHtbFKY1ZEvGatz+dbMBdd+VxafXI8qv1KJ egGgXuaxQVPuNjIw8vnira40gbLURJ93UdPn3o4mENwWwv9jAsUVlhEPywIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDhXZf3LoUsLgcO8ShYnhHGjdzISMB8GA1UdIwQY MBaAFFVK23K4Ls+vxXBeJf68q1yC127mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlVyYmNyZ3V6Nl9GY0Y0bF9yeXJYSUxYYnVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi81ZTM4OTUtYWU5NS00M2UyLWI3YTEt NzU4NjNmNDM0NzZhLzEvT0ZkbF9jdWhTd3VCdzd4S0ZpZUVjYU4zTWhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi81ZTM4OTUtYWU5NS00M2UyLWI3YTEtNzU4NjNmNDM0NzZh LzEvVlVyYmNyZ3V6Nl9GY0Y0bF9yeXJYSUxYYnVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuWTsAwQF 2RJgAwQE2XYAMA0GCSqGSIb3DQEBCwUAA4IBAQBu5xuvluL+R422dsMxqyuHoUCQ ZrK0otGqBW/kcPjchOV5cSf8KzcgjBUzL8L8HoDto7glkkrpdZG2FP9wABvii9hs GLBJdAmwkTg8ViogmSc0LaOScwA0H255BjW55nxXraCf31iaWQ8sttA0Fpsda1NY Yg4Z0nNlIA2g8bCz55tUHhUNpZKb7rifq071s3lC/leZrS0GUdQGXnkbDLMbEUbT GKl9hLGVK1SFm1MyBbC+Br3sD+WaJBULlLP3tb2W4i0HXob0/EC8IhyS8f34uGcf oPHD60lqg6VhjS8PIyDu+PcgBg+wsTYVsPEn9FqBe0CKk4s2cJtcxiXgwsAB -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:01 2026 by rpki-client