This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Ocu7yhS16lIhkaz6kvNf5EjHEQk.roa File: Ocu7yhS16lIhkaz6kvNf5EjHEQk.roa (raw, json) Hash identifier: UYtrIc1zOVUnLJzMzL7BiCNr+68t1qaFHcOgeUn477k= Subject key identifier: 39:CB:BB:CA:14:B5:EA:52:21:91:AC:FA:92:F3:5F:E4:48:C7:11:09 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758BCDDAB3553C232E9BD4154850470 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Ocu7yhS16lIhkaz6kvNf5EjHEQk.roa Signing time: Thu 01 Jan 2026 02:17:42 +0000 ROA not before: Thu 01 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212301 IP address blocks: 185.86.4.0/24 maxlen: 24 185.141.33.0/24 maxlen: 24 185.184.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:bc:dd:ab:35:53:c2:32:e9:bd:41:54:85:04:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39cbbbca14b5ea522191acfa92f35fe448c71109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8c:34:87:09:7e:28:21:12:2e:43:dd:33:e2: c5:5e:89:e4:cf:0d:49:2f:88:4e:58:ba:8e:bf:20: 14:9a:1d:5d:4a:73:8b:ca:b6:0a:6e:ea:19:f1:9f: b5:b2:a0:e4:e7:c9:85:00:84:72:f2:07:df:d3:a6: 0e:dd:3d:45:e4:00:1a:53:44:a9:80:1a:ca:35:16: 45:00:cc:86:ff:ac:7e:a3:89:cd:ac:05:d4:23:d3: a2:66:4a:97:67:75:bf:53:18:1a:d4:b1:fa:26:04: 84:90:de:bc:91:21:f1:76:c9:be:96:32:5b:9b:e7: 5f:a5:7f:7a:45:2a:6f:2b:ac:11:d8:f5:77:5c:04: 8a:fd:55:ba:63:90:c3:cc:71:7e:87:84:98:5a:cf: 56:4d:c1:61:04:49:94:e6:e1:e4:79:99:e3:31:bc: 5d:47:63:30:c1:eb:e7:c3:fc:b8:67:1d:80:f1:97: b7:a5:44:4c:02:c1:77:08:ba:50:a3:7d:b2:ac:29: 67:70:a7:84:a7:75:b2:66:1b:33:99:b7:d0:f0:2d: d3:ac:c4:cf:23:da:6d:a4:33:9e:d1:93:f4:67:5f: af:85:be:16:bf:4d:b8:99:c9:f9:5b:3a:4e:96:34: f7:68:8d:f3:02:4f:21:5f:d3:bd:9f:1f:99:6d:9c: 37:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CB:BB:CA:14:B5:EA:52:21:91:AC:FA:92:F3:5F:E4:48:C7:11:09 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Ocu7yhS16lIhkaz6kvNf5EjHEQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.4.0/24 185.141.33.0/24 185.184.27.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:13:30:c5:3b:0d:1e:a7:11:c9:60:8a:fe:d3:a8:ce:27:c9: 5d:40:01:d0:b8:da:4b:a5:d2:2f:25:99:1d:5f:dd:cf:83:04: 49:d7:19:17:b4:69:bb:10:ad:28:08:26:d6:99:a0:3d:6b:84: e9:f0:b1:cc:be:cc:14:58:97:29:d8:72:a2:9b:d4:21:e4:00: fe:30:05:c5:97:21:18:e9:1c:d7:9b:96:74:af:e9:6d:e8:84: 79:58:da:43:f4:49:3e:ce:34:b2:20:ce:77:87:b7:20:7a:42: 6b:aa:46:4d:91:5d:79:5e:04:62:95:0f:00:22:97:70:28:46: 6e:6e:a7:f7:13:17:fe:bb:3e:f9:d0:d3:d0:94:6c:f6:34:95: 7f:1c:de:e7:8b:54:d3:4d:7b:b4:39:1f:a8:8c:47:4f:dd:70: 45:5d:76:c4:3c:8d:5d:94:d4:2a:65:a7:68:0e:ee:dd:9b:71: 70:d0:75:25:e0:6f:bc:42:3b:c2:56:c8:87:f8:7a:12:e3:07: 1a:f6:98:cf:2d:80:26:e0:70:b4:31:8a:c5:b3:b4:ab:6f:0b: 47:8b:7e:c2:83:11:6c:74:cf:c4:2e:99:90:e5:4e:c6:2a:2a: b8:22:3c:b9:51:aa:a0:7e:b1:32:b1:ea:e2:95:01:c0:5c:1e: 46:6d:92:8f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WLzdqzVTwjLpvUFUhQRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWNiYmJjYTE0YjVlYTUyMjE5MWFjZmE5MmYzNWZlNDQ4YzcxMTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiow0hwl+KCESLkPdM+LFXonkzw1J L4hOWLqOvyAUmh1dSnOLyrYKbuoZ8Z+1sqDk58mFAIRy8gff06YO3T1F5AAaU0Sp gBrKNRZFAMyG/6x+o4nNrAXUI9OiZkqXZ3W/Uxga1LH6JgSEkN68kSHxdsm+ljJb m+dfpX96RSpvK6wR2PV3XASK/VW6Y5DDzHF+h4SYWs9WTcFhBEmU5uHkeZnjMbxd R2Mwwevnw/y4Zx2A8Ze3pURMAsF3CLpQo32yrClncKeEp3WyZhszmbfQ8C3TrMTP I9ptpDOe0ZP0Z1+vhb4Wv024mcn5WzpOljT3aI3zAk8hX9O9nx+ZbZw3pwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDnLu8oUtepSIZGs+pLzX+RIxxEJMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvT2N1N3loUzE2bEloa2F6Nmt2TmY1RWpIRVFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuVYEAwQA uY0hAwQAubgbMA0GCSqGSIb3DQEBCwUAA4IBAQCcEzDFOw0epxHJYIr+06jOJ8ld QAHQuNpLpdIvJZkdX93PgwRJ1xkXtGm7EK0oCCbWmaA9a4Tp8LHMvswUWJcp2HKi m9Qh5AD+MAXFlyEY6RzXm5Z0r+lt6IR5WNpD9Ek+zjSyIM53h7cgekJrqkZNkV15 XgRilQ8AIpdwKEZubqf3Exf+uz750NPQlGz2NJV/HN7ni1TTTXu0OR+ojEdP3XBF XXbEPI1dlNQqZadoDu7dm3Fw0HUl4G+8QjvCVsiH+HoS4wca9pjPLYAm4HC0MYrF s7SrbwtHi37CgxFsdM/ELpmQ5U7GKiq4Ijy5UaqgfrEyserilQHAXB5GbZKP -----END CERTIFICATE-----Generated at Wed Jan 21 14:12:42 2026 by rpki-client