This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/of1ZOsMHp_mh7IEEJP4_o4HLJfM.roa File: of1ZOsMHp_mh7IEEJP4_o4HLJfM.roa (raw, json) Hash identifier: 1EXbUVtSBjioTg80JwxjnFqS0TnS0UjDFk3emb+9E38= Subject key identifier: A1:FD:59:3A:C3:07:A7:F9:A1:EC:81:04:24:FE:3F:A3:81:CB:25:F3 Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698 Certificate serial: 019B78350BEC8F4EC72630E6EEFCABDE5CF8 Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/of1ZOsMHp_mh7IEEJP4_o4HLJfM.roa Signing time: Thu 01 Jan 2026 06:18:20 +0000 ROA not before: Thu 01 Jan 2026 06:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204504 IP address blocks: 185.134.168.0/22 maxlen: 22 185.134.168.0/24 maxlen: 24 185.134.169.0/24 maxlen: 24 185.134.170.0/24 maxlen: 24 185.134.171.0/24 maxlen: 24 2a0e:3e80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:0b:ec:8f:4e:c7:26:30:e6:ee:fc:ab:de:5c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698 Validity Not Before: Jan 1 06:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1fd593ac307a7f9a1ec810424fe3fa381cb25f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:26:7a:70:2f:58:f9:d6:6c:13:df:06:87:80: 3d:a8:14:fd:d5:ad:b5:2a:83:df:1c:fb:f4:be:81: cc:b2:d1:b7:e4:71:a9:44:e0:d2:96:ab:6b:d9:9d: b1:7d:34:9d:fd:fb:92:2d:0f:9e:c4:e4:cc:b5:17: a3:4f:32:c2:84:6c:44:78:e6:7d:3b:6b:97:64:b7: 8d:61:27:69:3c:5e:3b:80:6b:4c:9b:cc:51:72:c1: 7b:23:f6:04:12:ac:25:a3:ba:6e:75:7a:90:a6:41: 8c:6e:c4:9a:81:bc:e1:e7:aa:38:48:b6:f9:ea:e2: 3a:ec:f9:3b:a0:00:a8:8a:d6:f9:99:1f:f1:2d:5c: 4a:3f:f0:1a:0b:42:3f:c6:c5:c5:8b:10:37:2f:fd: 35:96:5d:d1:2c:5f:b2:2f:29:eb:f4:ac:5c:09:71: 39:b2:45:65:59:16:d0:06:0d:d5:34:24:ea:24:15: b4:99:ee:91:63:f4:33:f9:02:b9:64:72:69:7c:cc: 49:e2:38:a5:5f:61:0c:97:e3:55:45:72:ad:fe:6a: 54:63:8d:66:76:b8:1d:06:7a:2d:d8:dc:91:46:7a: fb:e2:dc:cf:c5:50:cc:0d:b2:f1:40:13:6a:9c:e3: 93:22:e0:46:c8:26:4b:7d:94:1a:d0:56:25:36:b9: 5c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FD:59:3A:C3:07:A7:F9:A1:EC:81:04:24:FE:3F:A3:81:CB:25:F3 X509v3 Authority Key Identifier: keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/of1ZOsMHp_mh7IEEJP4_o4HLJfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.168.0/22 IPv6: 2a0e:3e80::/29 Signature Algorithm: sha256WithRSAEncryption 13:26:43:d0:88:f4:46:7b:17:c0:a5:bd:c2:a8:d0:5f:19:19: 0e:e2:c1:61:ab:90:a2:29:b4:90:ac:ad:14:ba:1c:72:68:da: b7:e5:e5:a3:ab:75:35:61:69:a1:e0:8f:c1:10:75:c8:19:5d: ec:86:a0:33:57:ee:79:ae:5c:ae:0c:57:56:e1:95:a2:79:02: 88:c6:0f:79:15:64:18:bd:a6:11:04:16:78:94:a9:5f:da:bf: 1a:3d:10:3d:49:1a:5c:e9:73:ea:58:81:26:0e:05:d8:43:ae: 89:f0:d8:81:83:b0:e9:2b:3a:03:2b:fc:d9:aa:d5:ea:dd:d2: 5c:25:70:42:95:5b:f4:b0:4a:1a:a7:d3:fb:06:8e:1d:55:41: d9:18:b8:49:a7:59:67:f1:03:9e:5b:11:ab:17:61:3a:bb:d6: 35:5b:26:52:91:80:91:d8:9f:89:1c:c1:4a:39:51:70:4d:1b: 52:57:e8:68:9e:f2:02:20:1a:82:ca:ef:8c:f4:39:19:d3:c8: 65:d1:29:bd:9a:a0:d9:7c:1d:05:9d:2d:89:1d:88:f7:fb:e7: 15:e3:f8:9f:ea:73:43:18:54:55:59:19:c5:f5:ec:1b:a4:13: 7c:9f:7c:50:b4:e2:2d:8a:2e:30:61:e7:58:2b:61:de:23:79: 4b:6c:4e:1c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NQvsj07HJjDm7vyr3lz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDliYjA1MzBkZmUzMjI4ZjgzYjA4NjEzOTJlMjg0NTkz NGI2OTgwHhcNMjYwMTAxMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWZkNTkzYWMzMDdhN2Y5YTFlYzgxMDQyNGZlM2ZhMzgxY2IyNWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiZ6cC9Y+dZsE98Gh4A9qBT91a21 KoPfHPv0voHMstG35HGpRODSlqtr2Z2xfTSd/fuSLQ+exOTMtRejTzLChGxEeOZ9 O2uXZLeNYSdpPF47gGtMm8xRcsF7I/YEEqwlo7pudXqQpkGMbsSagbzh56o4SLb5 6uI67Pk7oACoitb5mR/xLVxKP/AaC0I/xsXFixA3L/01ll3RLF+yLynr9KxcCXE5 skVlWRbQBg3VNCTqJBW0me6RY/Qz+QK5ZHJpfMxJ4jilX2EMl+NVRXKt/mpUY41m drgdBnot2NyRRnr74tzPxVDMDbLxQBNqnOOTIuBGyCZLfZQa0FYlNrlcqwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKH9WTrDB6f5oeyBBCT+P6OByyXzMB8GA1UdIwQY MBaAFCTZuwUw3+Mij4OwhhOS4oRZNLaYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOTk3OWMtZDk4OS00NmZmLWI5MWUt NGVhMzAxMWRhYjZjLzEvb2YxWk9zTUhwX21oN0lFRUpQNF9vNEhMSmZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9hOTk3OWMtZDk4OS00NmZmLWI5MWUtNGVhMzAxMWRhYjZj LzEvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYaoMA0E AgACMAcDBQMqDj6AMA0GCSqGSIb3DQEBCwUAA4IBAQATJkPQiPRGexfApb3CqNBf GRkO4sFhq5CiKbSQrK0UuhxyaNq35eWjq3U1YWmh4I/BEHXIGV3shqAzV+55rlyu DFdW4ZWieQKIxg95FWQYvaYRBBZ4lKlf2r8aPRA9SRpc6XPqWIEmDgXYQ66J8NiB g7DpKzoDK/zZqtXq3dJcJXBClVv0sEoap9P7Bo4dVUHZGLhJp1ln8QOeWxGrF2E6 u9Y1WyZSkYCR2J+JHMFKOVFwTRtSV+honvICIBqCyu+M9DkZ08hl0Sm9mqDZfB0F nS2JHYj3++cV4/if6nNDGFRVWRnF9ewbpBN8n3xQtOItii4wYedYK2HeI3lLbE4c -----END CERTIFICATE-----Generated at Tue Jan 27 17:56:54 2026 by rpki-client