This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/owXJBHpnE_pu52wzEvYbFXAGAAM.roa File: owXJBHpnE_pu52wzEvYbFXAGAAM.roa (raw, json) Hash identifier: wFpSi4A2S+i91fC051hXq5mn24CHrss9+Y9bNRQMfGc= Subject key identifier: A3:05:C9:04:7A:67:13:FA:6E:E7:6C:33:12:F6:1B:15:70:06:00:03 Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72 Certificate serial: 019B7EA57433D0809FE70EC06B021EF562A2 Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/owXJBHpnE_pu52wzEvYbFXAGAAM.roa Signing time: Fri 02 Jan 2026 12:18:51 +0000 ROA not before: Fri 02 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 185.250.240.0/24 maxlen: 24 185.250.242.0/24 maxlen: 24 185.250.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:74:33:d0:80:9f:e7:0e:c0:6b:02:1e:f5:62:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72 Validity Not Before: Jan 2 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a305c9047a6713fa6ee76c3312f61b1570060003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:2e:5b:2c:f8:8d:d2:32:38:f9:2c:68:19: 4d:6a:94:81:22:44:27:4e:0c:02:3c:f4:c9:3f:e1: ec:45:5c:86:c5:e3:71:49:34:63:09:8b:be:69:3b: 5c:b1:3c:8a:d1:bd:0f:ca:e9:3c:b7:79:1c:3b:b2: 3b:0b:30:e8:40:cd:43:23:ec:9b:a6:77:b3:fd:ed: a3:2a:8c:62:7e:f7:02:be:15:45:3d:bd:fd:65:37: 56:7c:55:2c:f1:71:f6:09:73:55:92:e4:3c:fd:40: 9c:26:e6:7a:19:63:4c:5e:0a:f7:e7:80:5f:0d:78: 95:36:87:49:52:f1:45:4e:f9:38:18:1f:8d:19:ed: 6a:e0:11:a4:2b:56:82:31:35:6d:53:bf:e8:c6:ac: 1e:f7:91:ab:c1:23:db:12:f8:81:a2:f5:66:ce:3e: 17:b1:66:ce:6b:a9:f2:cb:51:31:7b:2a:5c:03:17: c7:2d:4d:c9:e5:cc:2f:d8:48:84:f8:72:ee:ae:a7: fc:3b:bd:e6:b9:5d:36:f6:c3:ae:c3:69:bc:d7:2b: dc:00:ba:a4:8c:77:09:ab:51:ec:90:a5:e6:52:e7: 37:20:7a:3f:12:30:15:b6:44:73:70:40:df:88:23: de:e3:60:3e:a2:94:bb:83:71:5e:ef:78:d4:ae:fd: 74:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:05:C9:04:7A:67:13:FA:6E:E7:6C:33:12:F6:1B:15:70:06:00:03 X509v3 Authority Key Identifier: keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/owXJBHpnE_pu52wzEvYbFXAGAAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.240.0/24 185.250.242.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:39:28:66:49:f2:05:4b:5a:80:cd:b7:3e:15:88:84:19:d3: bd:d2:32:81:d6:3f:34:37:33:8b:9c:37:5d:8f:0e:9a:fb:b1: 7f:2c:46:2f:b1:c0:57:bd:74:0f:c4:6a:98:d2:ae:d1:c4:5d: 4e:70:44:b4:9a:e8:13:44:60:5d:01:bc:80:37:10:83:6e:1c: d8:90:e6:51:d5:67:ad:85:60:5a:82:d2:52:56:14:f4:d9:3a: e3:e7:6c:bc:e6:6c:35:c7:40:31:28:a1:19:3a:93:93:54:a0: ec:ce:32:71:2d:81:96:dd:08:b6:44:2f:28:85:2c:f7:57:7a: 57:25:20:a9:93:0e:e0:fb:6b:27:86:fe:4a:a5:ed:30:d6:84: 4e:20:29:69:be:a9:be:e6:2a:ad:64:6b:a6:d2:a3:c0:f0:8a: ef:64:8b:8e:ce:d1:e8:74:28:39:23:d5:24:b0:10:9f:4f:bf: 23:a4:ca:ad:90:3a:32:62:25:e4:ea:0d:5c:78:bd:1b:d0:4c: 5f:31:9d:46:c0:c1:55:18:c5:09:c0:45:90:ef:a8:ae:cb:8b: 4a:fc:00:8b:fd:48:39:7d:ed:c6:70:1a:82:34:49:19:d5:4d: b2:9f:a4:f3:b6:64:18:33:02:e3:c7:a3:9b:dc:74:1a:a0:fe: 93:c8:00:3b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pXQz0ICf5w7AawIe9WKiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDJhYzFkN2M5ZWNjZjU2NThiODhmMTZmNjEzZDdiM2U4 ZThjNzIwHhcNMjYwMTAyMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzA1YzkwNDdhNjcxM2ZhNmVlNzZjMzMxMmY2MWIxNTcwMDYwMDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzUuWyz4jdIyOPksaBlNapSBIkQn TgwCPPTJP+HsRVyGxeNxSTRjCYu+aTtcsTyK0b0Pyuk8t3kcO7I7CzDoQM1DI+yb pnez/e2jKoxifvcCvhVFPb39ZTdWfFUs8XH2CXNVkuQ8/UCcJuZ6GWNMXgr354Bf DXiVNodJUvFFTvk4GB+NGe1q4BGkK1aCMTVtU7/oxqwe95GrwSPbEviBovVmzj4X sWbOa6nyy1ExeypcAxfHLU3J5cwv2EiE+HLurqf8O73muV029sOuw2m81yvcALqk jHcJq1HskKXmUuc3IHo/EjAVtkRzcEDfiCPe42A+opS7g3Fe73jUrv10CwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKMFyQR6ZxP6budsMxL2GxVwBgADMB8GA1UdIwQY MBaAFMLSrB18nsz1ZYuI8W9hPXs+joxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YjFiYzItNTkyNi00YWNlLWIxNmYt MTk3ZmU4MzY1NjQzLzEvb3dYSkJIcG5FX3B1NTJ3ekV2WWJGWEFHQUFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC84YjFiYzItNTkyNi00YWNlLWIxNmYtMTk3ZmU4MzY1NjQz LzEvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAufrwAwQB ufryMA0GCSqGSIb3DQEBCwUAA4IBAQA9OShmSfIFS1qAzbc+FYiEGdO90jKB1j80 NzOLnDddjw6a+7F/LEYvscBXvXQPxGqY0q7RxF1OcES0mugTRGBdAbyANxCDbhzY kOZR1WethWBagtJSVhT02Trj52y85mw1x0AxKKEZOpOTVKDszjJxLYGW3Qi2RC8o hSz3V3pXJSCpkw7g+2snhv5Kpe0w1oROIClpvqm+5iqtZGum0qPA8IrvZIuOztHo dCg5I9UksBCfT78jpMqtkDoyYiXk6g1ceL0b0ExfMZ1GwMFVGMUJwEWQ76iuy4tK /ACL/Ug5fe3GcBqCNEkZ1U2yn6TztmQYMwLjx6Ob3HQaoP6TyAA7 -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:34 2026 by rpki-client