This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/isOSymizWXOcC4S89abLh_Td0W4.roa File: isOSymizWXOcC4S89abLh_Td0W4.roa (raw, json) Hash identifier: ZSx/++lxhtzVvGMFIOdk3/EWMp5zvQTOhZYOai4ono8= Subject key identifier: 8A:C3:92:CA:68:B3:59:73:9C:0B:84:BC:F5:A6:CB:87:F4:DD:D1:6E Certificate issuer: /CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8 Certificate serial: 019B79103E89FD4992B897297B19113BD2FF Authority key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/isOSymizWXOcC4S89abLh_Td0W4.roa Signing time: Thu 01 Jan 2026 10:17:46 +0000 ROA not before: Thu 01 Jan 2026 10:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41872 IP address blocks: 185.65.168.0/22 maxlen: 22 194.33.98.0/23 maxlen: 23 195.12.40.0/22 maxlen: 22 195.43.56.0/22 maxlen: 22 195.90.112.0/23 maxlen: 23 2a05:80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3e:89:fd:49:92:b8:97:29:7b:19:11:3b:d2:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ac392ca68b359739c0b84bcf5a6cb87f4ddd16e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ad:72:0e:1e:06:26:65:65:56:04:68:98:4e: 0e:8c:22:28:10:05:25:a6:0f:f9:42:06:ac:4a:13: a6:4b:61:ae:3f:09:af:ef:59:a6:4d:51:32:1c:6e: 5d:a7:8f:0e:81:35:b3:0c:40:d8:71:78:9b:22:b8: 1d:8b:bb:a3:2e:47:db:89:e7:4d:90:23:fd:51:e5: 66:e8:30:4a:b2:66:77:0f:81:c3:d2:eb:0a:75:81: 5f:bb:48:1f:d2:04:ae:62:cc:4d:66:03:9c:a0:1c: f8:7a:07:c5:b9:24:b6:21:98:22:8a:7c:a2:13:bb: e1:21:3a:de:87:46:0d:ee:77:1b:4d:ed:c8:da:9c: 73:88:c5:dd:66:3c:8d:6c:e7:ef:6c:da:03:9f:d8: 15:54:47:e9:4a:09:b9:43:5c:8a:46:68:67:af:7d: e8:3d:1e:3d:b3:85:55:1f:b1:1d:57:74:da:8a:b6: 5e:b0:ed:82:0e:6a:37:88:73:75:61:2a:d2:5f:a1: b9:61:fd:43:f8:c3:16:6c:54:e4:52:1b:dd:64:de: 39:29:ca:5c:78:58:16:0b:d9:7f:65:5d:35:6c:38: c5:04:73:e1:d8:54:9e:2a:a7:86:5a:7e:bf:11:78: 33:a6:b0:4f:f4:a3:19:0b:3f:7b:d4:b6:68:58:a9: 7b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C3:92:CA:68:B3:59:73:9C:0B:84:BC:F5:A6:CB:87:F4:DD:D1:6E X509v3 Authority Key Identifier: keyid:62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/isOSymizWXOcC4S89abLh_Td0W4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.168.0/22 194.33.98.0/23 195.12.40.0/22 195.43.56.0/22 195.90.112.0/23 IPv6: 2a05:80::/29 Signature Algorithm: sha256WithRSAEncryption 62:3c:06:c2:c3:cd:8a:63:3d:06:3b:30:4d:17:58:b8:08:20: 80:b1:dc:39:de:25:b3:86:26:60:cc:9c:dc:6d:b0:a6:ad:b7: 78:78:38:11:21:dd:86:ef:42:ac:5a:e8:4e:6d:54:32:58:41: 46:ea:4a:67:df:77:4a:49:0d:c3:06:0a:f6:1f:78:ca:17:e2: ee:5f:32:1f:cf:b4:25:0e:71:1b:74:af:bb:54:a5:0e:4f:f8: de:37:70:e2:6c:c0:d3:d7:29:04:dd:60:5b:08:a5:19:6d:68: fd:69:b9:3d:ab:b5:13:a1:56:93:6f:fe:d7:38:0e:62:bc:b8: bb:99:fc:cd:25:d1:60:e3:33:5a:6e:0b:b9:fc:e5:3d:3a:8f: 4b:71:06:fd:75:92:5d:cb:02:63:d3:de:95:d2:a5:04:8c:6a: 81:42:ad:db:3e:08:1c:0b:06:69:b5:ea:92:d6:3c:52:f5:6d: 89:50:96:fc:02:e0:7f:6c:0f:1e:51:95:81:a7:45:3f:47:56: a3:8b:88:c2:1b:c2:ae:e1:36:3f:af:29:b4:97:2b:38:e0:bf: 99:a1:1b:64:22:3d:67:d3:37:8c:d8:a9:86:d0:e3:69:7e:0f: 83:e6:1d:8d:19:d8:80:18:99:b6:9e:6a:48:47:94:a1:58:65: 44:f5:77:84 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt5ED6J/UmSuJcpexkRO9L/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyODU0ZThhNWVlMWRlYzg5ZjI1YjJhNzg1OTAyM2ZmYjEy M2I5ZjgwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWMzOTJjYTY4YjM1OTczOWMwYjg0YmNmNWE2Y2I4N2Y0ZGRkMTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K1yDh4GJmVlVgRomE4OjCIoEAUl pg/5QgasShOmS2GuPwmv71mmTVEyHG5dp48OgTWzDEDYcXibIrgdi7ujLkfbiedN kCP9UeVm6DBKsmZ3D4HD0usKdYFfu0gf0gSuYsxNZgOcoBz4egfFuSS2IZgiinyi E7vhITreh0YN7ncbTe3I2pxziMXdZjyNbOfvbNoDn9gVVEfpSgm5Q1yKRmhnr33o PR49s4VVH7EdV3TairZesO2CDmo3iHN1YSrSX6G5Yf1D+MMWbFTkUhvdZN45Kcpc eFgWC9l/ZV01bDjFBHPh2FSeKqeGWn6/EXgzprBP9KMZCz971LZoWKl7oQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFIrDkspos1lznAuEvPWmy4f03dFuMB8GA1UdIwQY MBaAFGKFTope4d7InyWyp4WQI/+xI7n4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW9WT2lsN2gzc2lmSmJLbmhaQWpfN0VqdWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNjFkM2QtODkwZC00OTI2LThmMzgt MzViMWM1YjhhZDM0LzEvaXNPU3ltaXpXWE9jQzRTODlhYkxoX1RkMFc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNjFkM2QtODkwZC00OTI2LThmMzgtMzViMWM1YjhhZDM0 LzEvWW9WT2lsN2gzc2lmSmJLbmhaQWpfN0VqdWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCuUGoAwQB wiFiAwQCwwwoAwQCwys4AwQBw1pwMA0EAgACMAcDBQMqBQCAMA0GCSqGSIb3DQEB CwUAA4IBAQBiPAbCw82KYz0GOzBNF1i4CCCAsdw53iWzhiZgzJzcbbCmrbd4eDgR Id2G70KsWuhObVQyWEFG6kpn33dKSQ3DBgr2H3jKF+LuXzIfz7QlDnEbdK+7VKUO T/jeN3DibMDT1ykE3WBbCKUZbWj9abk9q7UToVaTb/7XOA5ivLi7mfzNJdFg4zNa bgu5/OU9Oo9LcQb9dZJdywJj096V0qUEjGqBQq3bPggcCwZpteqS1jxS9W2JUJb8 AuB/bA8eUZWBp0U/R1aji4jCG8Ku4TY/rym0lys44L+ZoRtkIj1n0zeM2KmG0ONp fg+D5h2NGdiAGJm2nmpIR5ShWGVE9XeE -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:32 2026 by rpki-client