This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/OLEHUxF6oS2GH_zZGLZ59cbd0UM.roa File: OLEHUxF6oS2GH_zZGLZ59cbd0UM.roa (raw, json) Hash identifier: iXyMvC2zcRw1kQk9NMVDBWBfZ7cLWCvnkd2tBslhHyk= Subject key identifier: 38:B1:07:53:11:7A:A1:2D:86:1F:FC:D9:18:B6:79:F5:C6:DD:D1:43 Certificate issuer: /CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c Certificate serial: 019B7FF29505D714CB67F986B158EE7E5988 Authority key identifier: 58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/OLEHUxF6oS2GH_zZGLZ59cbd0UM.roa Signing time: Fri 02 Jan 2026 18:22:42 +0000 ROA not before: Fri 02 Jan 2026 18:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59871 IP address blocks: 185.68.68.0/22 maxlen: 22 2a03:2a60:dc::/48 maxlen: 48 2a03:2a60:8000::/48 maxlen: 48 2a03:2a60:8001::/48 maxlen: 48 2a03:2a60:8100::/48 maxlen: 48 2a03:2a60:8101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:95:05:d7:14:cb:67:f9:86:b1:58:ee:7e:59:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c Validity Not Before: Jan 2 18:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38b10753117aa12d861ffcd918b679f5c6ddd143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:f4:e2:43:e0:57:71:84:64:bf:6f:08:aa:8c: 61:68:43:d1:4a:56:e1:2e:11:16:eb:c8:30:01:41: 4e:ef:57:7b:e1:b7:88:4a:8d:98:bf:ca:3e:93:24: 5b:5d:87:24:2f:4e:30:e3:05:bd:11:f5:12:9f:46: 10:31:29:45:3b:8f:cd:04:81:48:44:ce:c0:59:49: d0:2b:f2:ca:5d:67:91:67:3a:df:c5:29:d0:3e:d2: d7:d9:d8:0c:f6:79:5c:3c:6d:fe:70:6d:b8:f7:12: ce:6e:f7:f8:8c:ae:0f:6b:fe:89:f5:69:91:77:16: b4:d3:16:61:62:91:10:8c:f6:e9:2a:52:0e:28:6e: 78:cd:8f:3c:8d:05:e9:79:35:62:0a:73:b9:e1:e1: c8:5b:04:47:ce:d2:0d:43:62:b0:6d:0e:2a:c0:f1: c4:1f:f1:d4:98:1d:34:7b:6f:5d:6f:3e:49:05:7a: c0:52:e0:06:22:9d:fb:09:c6:26:c3:c8:7f:aa:f0: 8e:54:c7:14:6a:30:2c:1e:7a:13:14:ad:b4:1c:58: eb:76:a8:bf:0f:e0:da:c5:b5:b3:8e:9e:f2:19:b6: fa:12:6e:0b:bc:bf:36:07:78:1a:76:70:45:51:ed: 88:60:49:4a:8c:6c:7f:24:82:34:6d:1b:e1:58:63: 46:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B1:07:53:11:7A:A1:2D:86:1F:FC:D9:18:B6:79:F5:C6:DD:D1:43 X509v3 Authority Key Identifier: keyid:58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/OLEHUxF6oS2GH_zZGLZ59cbd0UM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.68.0/22 IPv6: 2a03:2a60:dc::/48 2a03:2a60:8000::/47 2a03:2a60:8100::/47 Signature Algorithm: sha256WithRSAEncryption 13:58:20:9a:7e:47:0d:ba:b9:da:7a:f5:e9:44:ef:12:c1:51: 5a:1e:5d:5e:0f:4a:55:d2:4e:06:cf:2a:e7:d0:da:bf:84:08: 93:12:3d:00:21:6e:3e:ac:57:3c:41:a9:dd:79:d7:cb:5c:48: 63:41:ef:83:42:a8:42:fc:fb:63:28:ae:ad:d5:4f:c4:83:c3: aa:9f:72:3e:cc:97:10:b6:87:c9:07:62:6d:42:6d:7e:be:87: 37:ff:64:d9:8f:e6:6e:d8:d7:dd:d9:d8:ff:51:3f:6f:6d:85: 0b:73:6d:40:99:26:26:48:e6:f5:70:8e:be:cc:7a:3d:bb:53: d3:25:cb:db:73:bb:c6:3d:0b:3d:e5:5e:a9:32:1b:78:45:e0: e0:7b:5f:d6:8c:49:ea:d0:bd:4b:2c:ed:04:75:e1:6e:f5:fb: 4d:ee:2e:07:3c:15:35:17:8f:27:ed:ff:e7:53:22:b6:1f:c6: 42:24:b7:e3:87:ad:be:07:66:1d:36:7b:28:fc:51:1d:56:cd: a3:cf:f0:38:64:a0:2f:de:f9:a5:83:c5:bf:18:66:11:15:94: 80:3c:19:cc:99:84:63:01:0b:fc:72:f7:1c:58:06:d1:fb:bb: 9c:08:c7:f7:de:c2:ad:9a:e1:4d:05:3d:33:0e:f5:05:33:0b: f2:be:32:dc -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt/8pUF1xTLZ/mGsVjuflmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YmI1NDk4NzYzOWJhMGM2Y2ZiY2FkNTk4YzNmNWUzOWZj YTk0NWMwHhcNMjYwMTAyMTgyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGIxMDc1MzExN2FhMTJkODYxZmZjZDkxOGI2NzlmNWM2ZGRkMTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/vTiQ+BXcYRkv28IqoxhaEPRSlbh LhEW68gwAUFO71d74beISo2Yv8o+kyRbXYckL04w4wW9EfUSn0YQMSlFO4/NBIFI RM7AWUnQK/LKXWeRZzrfxSnQPtLX2dgM9nlcPG3+cG249xLObvf4jK4Pa/6J9WmR dxa00xZhYpEQjPbpKlIOKG54zY88jQXpeTViCnO54eHIWwRHztINQ2KwbQ4qwPHE H/HUmB00e29dbz5JBXrAUuAGIp37CcYmw8h/qvCOVMcUajAsHnoTFK20HFjrdqi/ D+DaxbWzjp7yGbb6Em4LvL82B3gadnBFUe2IYElKjGx/JII0bRvhWGNGUQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFDixB1MReqEthh/82Ri2efXG3dFDMB8GA1UdIwQY MBaAFFi7VJh2OboMbPvK1ZjD9eOfypRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0x0VW1IWTV1Z3hzLThyVm1NUDE0NV9LbEZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yM2EyYjItNjliYi00OTMzLWFlNmYt OGM5ZjJkNzA1OTQ4LzEvT0xFSFV4RjZvUzJHSF96WkdMWjU5Y2JkMFVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8yM2EyYjItNjliYi00OTMzLWFlNmYtOGM5ZjJkNzA1OTQ4 LzEvV0x0VW1IWTV1Z3hzLThyVm1NUDE0NV9LbEZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQCuUREMCEE AgACMBsDBwAqAypgANwDBwEqAypggAADBwEqAypggQAwDQYJKoZIhvcNAQELBQAD ggEBABNYIJp+Rw26udp69elE7xLBUVoeXV4PSlXSTgbPKufQ2r+ECJMSPQAhbj6s VzxBqd1518tcSGNB74NCqEL8+2Morq3VT8SDw6qfcj7MlxC2h8kHYm1CbX6+hzf/ ZNmP5m7Y193Z2P9RP29thQtzbUCZJiZI5vVwjr7Mej27U9Mly9tzu8Y9Cz3lXqky G3hF4OB7X9aMSerQvUss7QR14W71+03uLgc8FTUXjyft/+dTIrYfxkIkt+OHrb4H Zh02eyj8UR1WzaPP8DhkoC/e+aWDxb8YZhEVlIA8GcyZhGMBC/xy9xxYBtH7u5wI x/fewq2a4U0FPTMO9QUzC/K+Mtw= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:17 2026 by rpki-client