This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O8JzAwzV5N6fXMSQnyZkLaMlDmY.roa File: O8JzAwzV5N6fXMSQnyZkLaMlDmY.roa (raw, json) Hash identifier: ESdEB6eneFWBR8KDh0YmvZfb0oPcjC1iiysFxG+eDfU= Subject key identifier: 3B:C2:73:03:0C:D5:E4:DE:9F:5C:C4:90:9F:26:64:2D:A3:25:0E:66 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F850322832F371D129FF9E0AE55A504 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O8JzAwzV5N6fXMSQnyZkLaMlDmY.roa Signing time: Fri 02 Jan 2026 16:23:02 +0000 ROA not before: Fri 02 Jan 2026 16:23:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208538 IP address blocks: 93.171.245.0/24 maxlen: 24 146.120.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:03:22:83:2f:37:1d:12:9f:f9:e0:ae:55:a5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bc273030cd5e4de9f5cc4909f26642da3250e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:63:0e:dd:c7:a1:5e:6a:eb:ba:0d:9f:00: b3:79:a1:a2:e1:ad:dc:31:e8:f0:00:bc:e6:a7:f4: f5:ce:f4:db:19:00:18:d8:ce:b3:44:f7:9f:bd:41: df:8d:dc:ac:14:7a:aa:70:5e:6b:c7:8c:e6:ad:28: f4:da:29:9c:37:65:a7:52:b4:cf:2b:87:05:e5:6b: 92:c4:d2:7d:99:e2:1b:e1:5d:c1:5b:a3:6b:61:5d: 20:d6:03:74:94:f1:6e:9b:48:09:66:34:b3:43:7b: ce:b1:8c:da:6f:e9:23:62:36:79:92:f4:9d:26:e7: 22:64:cd:ac:42:d6:53:63:54:38:d2:cb:40:65:0b: 0d:f0:76:c3:dc:f0:0c:87:23:dd:f4:95:13:94:38: c5:d0:02:0b:6e:97:17:bc:9f:9d:90:41:b5:e1:f9: dc:15:f6:04:31:f2:f2:88:d6:2e:66:c6:99:07:25: b9:bd:2d:ad:4f:db:c4:32:53:e9:f0:e9:0c:69:5f: b7:d6:4a:f2:f0:bb:fc:a3:1a:9e:96:53:2b:69:8b: a4:d0:b7:f4:a7:9d:23:9b:ba:e0:a9:79:6e:7a:51: d8:6a:d8:89:f5:cd:3f:20:f6:cb:09:49:88:81:45: 5f:22:a0:72:f6:6a:84:e3:9e:8b:4b:60:2f:9e:86: df:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C2:73:03:0C:D5:E4:DE:9F:5C:C4:90:9F:26:64:2D:A3:25:0E:66 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O8JzAwzV5N6fXMSQnyZkLaMlDmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.245.0/24 146.120.227.0/24 Signature Algorithm: sha256WithRSAEncryption 04:75:60:89:b6:be:b9:fe:7f:9f:05:14:a8:28:4f:e6:6e:75: bd:9b:ca:cf:85:f6:17:85:71:e4:66:96:82:4d:92:f1:c1:58: 20:d2:f7:16:ac:5e:b3:b6:f2:a2:44:5a:33:77:a9:61:47:4f: d7:28:9b:f4:19:0d:a0:d7:40:60:b8:a5:df:22:a6:29:44:db: 27:4f:85:10:ea:d9:fc:6b:15:39:95:ae:0d:3d:1b:dc:6f:df: ef:08:66:4f:2c:9a:9d:36:98:b5:74:31:7b:cb:82:b5:d4:5f: a3:4f:85:d2:ad:33:14:d5:db:6a:bf:70:e3:f4:c8:13:77:f7: 4e:4d:3b:f1:22:4f:0e:1b:93:0a:88:46:14:f9:47:37:43:83: 09:dc:a1:fb:d5:eb:b2:9a:8d:1e:30:a7:16:74:0f:87:da:75: c6:20:93:de:1b:26:66:6e:8b:c8:05:ba:01:5d:d0:8d:10:55: 3d:d4:b2:cc:8d:c4:e2:00:d0:89:31:38:8f:45:49:9a:93:e5: f6:da:c6:71:86:58:04:95:c3:49:47:ac:09:16:9b:7f:ec:fb: d6:9f:03:8f:dc:18:a1:c7:37:31:7a:33:6c:bf:7c:6b:a5:4f: 68:84:a3:55:fe:eb:9e:3d:b3:c6:8b:6d:47:cd:ab:0a:7b:96: 98:41:bd:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hQMigy83HRKf+eCuVaUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmMyNzMwMzBjZDVlNGRlOWY1Y2M0OTA5ZjI2NjQyZGEzMjUwZTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi5jDt3HoV5q67oNnwCzeaGi4a3c MejwALzmp/T1zvTbGQAY2M6zRPefvUHfjdysFHqqcF5rx4zmrSj02imcN2WnUrTP K4cF5WuSxNJ9meIb4V3BW6NrYV0g1gN0lPFum0gJZjSzQ3vOsYzab+kjYjZ5kvSd JuciZM2sQtZTY1Q40stAZQsN8HbD3PAMhyPd9JUTlDjF0AILbpcXvJ+dkEG14fnc FfYEMfLyiNYuZsaZByW5vS2tT9vEMlPp8OkMaV+31kry8Lv8oxqellMraYuk0Lf0 p50jm7rgqXluelHYatiJ9c0/IPbLCUmIgUVfIqBy9mqE456LS2AvnobfqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDvCcwMM1eTen1zEkJ8mZC2jJQ5mMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvTzhKekF3elY1TjZmWE1TUW55WmtMYU1sRG1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXav1AwQA knjjMA0GCSqGSIb3DQEBCwUAA4IBAQAEdWCJtr65/n+fBRSoKE/mbnW9m8rPhfYX hXHkZpaCTZLxwVgg0vcWrF6ztvKiRFozd6lhR0/XKJv0GQ2g10BguKXfIqYpRNsn T4UQ6tn8axU5la4NPRvcb9/vCGZPLJqdNpi1dDF7y4K11F+jT4XSrTMU1dtqv3Dj 9MgTd/dOTTvxIk8OG5MKiEYU+Uc3Q4MJ3KH71euymo0eMKcWdA+H2nXGIJPeGyZm bovIBboBXdCNEFU91LLMjcTiANCJMTiPRUmak+X22sZxhlgElcNJR6wJFpt/7PvW nwOP3BihxzcxejNsv3xrpU9ohKNV/uuePbPGi21HzasKe5aYQb34 -----END CERTIFICATE-----Generated at Mon Jan 26 08:03:33 2026 by rpki-client