This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/OW3wBpPG1WIVv0cSYcwKkuQ-Fno.roa File: OW3wBpPG1WIVv0cSYcwKkuQ-Fno.roa (raw, json) Hash identifier: QnmK7JPv6pL3QR22Lk/KTAY4E/WF99v+IIZzgkqUKyQ= Subject key identifier: 39:6D:F0:06:93:C6:D5:62:15:BF:47:12:61:CC:0A:92:E4:3E:16:7A Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758C3AB5D275540EC5AD1319B2CC73D Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/OW3wBpPG1WIVv0cSYcwKkuQ-Fno.roa Signing time: Thu 01 Jan 2026 02:17:44 +0000 ROA not before: Thu 01 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215340 IP address blocks: 185.86.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c3:ab:5d:27:55:40:ec:5a:d1:31:9b:2c:c7:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=396df00693c6d56215bf471261cc0a92e43e167a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:20:49:00:6d:be:ba:0e:47:ca:6d:b2:e4:8d: 0c:6e:74:e7:c2:40:1a:d5:3b:7e:17:24:ad:a2:61: 5e:78:41:e8:8d:3e:79:fb:f9:20:4d:f4:78:40:c0: 1b:36:7e:0b:4b:70:43:a2:83:99:8c:0d:ef:52:15: 99:09:39:0d:5f:24:84:78:5d:b0:65:3d:b0:86:92: d6:e9:12:af:58:a5:d4:e4:08:f1:85:a8:07:a1:8f: 76:58:16:45:92:55:de:ec:58:c0:b4:35:cd:0f:14: 6f:24:81:63:52:f4:77:49:ad:5e:67:fd:ad:9a:af: 13:4b:f0:6d:da:98:bb:6d:5e:6f:e8:48:19:ae:48: fd:7d:c2:01:c6:2d:b6:d0:0a:63:f1:41:45:59:21: e9:01:d1:ea:1a:76:66:27:e8:cf:88:46:8c:27:29: b6:83:05:af:ec:03:44:7d:ba:a8:2c:cb:bd:61:81: df:fd:2d:f0:2c:eb:f0:b2:83:f3:ec:d3:a4:c8:d5: c0:f1:6a:69:1c:b3:1e:77:36:a4:f4:f8:0d:b4:88: f2:46:83:35:86:ba:26:be:c4:4a:87:a9:07:d5:b6: 5a:a3:1e:2b:9a:a2:f2:a1:a0:b5:80:41:9e:57:cd: 11:52:13:d0:2a:bd:d0:b4:c7:9e:e6:3b:92:58:8e: 77:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6D:F0:06:93:C6:D5:62:15:BF:47:12:61:CC:0A:92:E4:3E:16:7A X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/OW3wBpPG1WIVv0cSYcwKkuQ-Fno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.6.0/24 Signature Algorithm: sha256WithRSAEncryption b4:1b:d4:af:aa:e6:f3:48:d1:04:6b:f6:55:c4:2c:57:52:b9: 5b:eb:d5:7f:a5:ac:78:55:c9:ea:41:7f:47:ff:43:dd:91:d3: a8:a8:a1:5f:f9:54:5a:3f:93:d5:f6:b5:0e:5d:dd:8a:3a:87: 81:a3:dc:ac:7e:aa:f3:61:9d:15:c9:a7:62:d9:84:e2:6d:44: cb:3a:a4:46:4e:2f:60:78:b0:a9:0b:0d:4d:92:8a:47:d3:5d: f3:da:a5:30:45:ea:58:ee:0e:71:3a:21:0e:6a:07:d1:94:8a: ff:4b:f9:57:7a:98:05:f1:52:26:58:e3:3e:41:03:7f:9b:67: 23:0b:d6:b9:84:6a:9c:75:f4:f9:2d:b6:88:20:51:44:5a:1b: f0:eb:41:7b:de:ce:74:72:59:42:a5:7b:e8:b3:52:30:f9:09: 85:1c:40:29:7c:90:37:d5:05:99:ac:9d:a3:1c:32:25:82:38: df:0d:c2:75:40:6e:79:e7:55:3a:14:01:bf:a6:78:19:1d:e6: e4:99:d5:e4:3b:0d:1c:8f:12:18:ad:dd:2f:a5:df:b9:19:b2: 27:2b:9f:fe:d1:31:ac:22:d5:98:98:72:ad:a7:9d:df:05:46: ec:7c:89:67:3a:63:bb:63:3e:5a:13:7b:96:72:32:5c:b7:f5: 68:00:42:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WMOrXSdVQOxa0TGbLMc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTZkZjAwNjkzYzZkNTYyMTViZjQ3MTI2MWNjMGE5MmU0M2UxNjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SBJAG2+ug5Hym2y5I0MbnTnwkAa 1Tt+FyStomFeeEHojT55+/kgTfR4QMAbNn4LS3BDooOZjA3vUhWZCTkNXySEeF2w ZT2whpLW6RKvWKXU5AjxhagHoY92WBZFklXe7FjAtDXNDxRvJIFjUvR3Sa1eZ/2t mq8TS/Bt2pi7bV5v6EgZrkj9fcIBxi220Apj8UFFWSHpAdHqGnZmJ+jPiEaMJym2 gwWv7ANEfbqoLMu9YYHf/S3wLOvwsoPz7NOkyNXA8WppHLMedzak9PgNtIjyRoM1 hromvsRKh6kH1bZaox4rmqLyoaC1gEGeV80RUhPQKr3QtMee5juSWI53QQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDlt8AaTxtViFb9HEmHMCpLkPhZ6MB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvT1czd0JwUEcxV0lWdjBjU1ljd0trdVEtRm5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVYGMA0G CSqGSIb3DQEBCwUAA4IBAQC0G9SvqubzSNEEa/ZVxCxXUrlb69V/pax4VcnqQX9H /0PdkdOoqKFf+VRaP5PV9rUOXd2KOoeBo9ysfqrzYZ0Vyadi2YTibUTLOqRGTi9g eLCpCw1NkopH013z2qUwRepY7g5xOiEOagfRlIr/S/lXepgF8VImWOM+QQN/m2cj C9a5hGqcdfT5LbaIIFFEWhvw60F73s50cllCpXvos1Iw+QmFHEApfJA31QWZrJ2j HDIlgjjfDcJ1QG5551U6FAG/pngZHebkmdXkOw0cjxIYrd0vpd+5GbInK5/+0TGs ItWYmHKtp53fBUbsfIlnOmO7Yz5aE3uWcjJct/VoAEJM -----END CERTIFICATE-----Generated at Wed Jan 21 14:12:23 2026 by rpki-client