This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/OEKZs0V1OvPJXM--EEoOQzvnjxU.roa File: OEKZs0V1OvPJXM--EEoOQzvnjxU.roa (raw, json) Hash identifier: IA4xXF3SM3MMssScw4atGZl6MKvdjLCpQTou+Su+nF0= Subject key identifier: 38:42:99:B3:45:75:3A:F3:C9:5C:CF:BE:10:4A:0E:43:3B:E7:8F:15 Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696 Certificate serial: 019B7CED7CAEDC5F1DEA5587A62223C4DFAC Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/OEKZs0V1OvPJXM--EEoOQzvnjxU.roa Signing time: Fri 02 Jan 2026 04:18:17 +0000 ROA not before: Fri 02 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201876 IP address blocks: 185.50.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:7c:ae:dc:5f:1d:ea:55:87:a6:22:23:c4:df:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696 Validity Not Before: Jan 2 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=384299b345753af3c95ccfbe104a0e433be78f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:54:3a:9d:e4:25:2f:49:e8:cc:62:3a:3c:93: 2b:4a:11:8d:ef:66:1a:5a:94:ef:df:fe:a5:ce:47: 16:54:f3:a6:2d:a0:04:e9:b2:31:e1:44:ba:f1:8c: 88:a5:45:e1:be:12:1b:f1:9f:a3:e3:e2:ca:f8:19: 69:e4:16:5d:3a:27:82:ce:aa:f6:a1:c0:19:0b:18: df:d1:53:9c:e9:55:a9:11:c8:c6:22:49:9c:f6:13: 7b:23:a4:c1:f9:cc:62:9f:a9:39:80:4a:e7:0f:4f: dd:88:f8:1c:f5:54:33:0a:95:66:02:73:66:30:97: ed:66:5e:e0:9e:27:c0:53:af:71:da:29:88:24:be: 0b:e4:91:1b:0a:cd:50:96:7b:53:43:ab:ab:c0:15: 63:58:19:78:09:87:41:f4:db:75:14:e6:fe:6d:06: 58:3c:49:96:5e:af:65:e5:5f:76:5b:c4:8f:48:6e: b3:3d:4d:27:37:a5:50:39:47:b3:3a:e7:f8:77:fc: 1e:82:71:0a:9e:55:63:a1:38:49:14:61:c0:49:2f: 2d:9a:11:e8:d9:be:7b:7f:59:36:82:30:28:f7:5b: 21:e3:9c:30:5c:38:e5:f7:21:80:b8:5b:14:25:88: da:57:c0:be:aa:80:8b:e5:c8:12:8f:60:71:d7:dc: 64:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:42:99:B3:45:75:3A:F3:C9:5C:CF:BE:10:4A:0E:43:3B:E7:8F:15 X509v3 Authority Key Identifier: keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/OEKZs0V1OvPJXM--EEoOQzvnjxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.50.112.0/22 Signature Algorithm: sha256WithRSAEncryption 58:85:06:01:37:8f:5b:6d:f8:ad:f9:65:f7:29:03:8b:b7:35: 66:66:15:ed:da:d5:e9:94:91:8e:0d:12:6d:dc:a1:b2:84:f1: 21:59:d9:45:0d:7b:de:69:c2:66:9b:e3:e9:6a:76:e8:29:58: d3:bb:ae:72:e2:1f:ad:29:8a:68:ed:4b:60:a1:6f:4c:77:78: c3:c9:b5:2e:7a:da:f1:ae:80:89:53:42:9d:59:23:20:f1:6b: 7e:80:e1:fb:31:46:59:23:7c:ee:44:05:3e:04:e0:6d:dc:94: 88:1b:e4:a9:64:41:8c:c8:e0:d9:26:92:ed:1e:98:47:6e:4b: c0:82:80:02:51:c7:54:02:bd:6b:4b:2b:28:4c:d9:16:5b:c9: dc:82:35:70:c2:e2:8e:7f:df:2b:1e:db:a6:3d:91:b6:45:25: 3f:3a:41:05:bc:f9:2d:2b:d0:3c:06:1b:23:59:95:54:5b:38: 8d:c3:74:e1:5c:f0:7e:c2:67:e2:be:33:00:af:2a:f0:99:fe: 35:04:7c:37:4e:d7:de:c5:6c:d7:b0:27:42:20:82:06:1b:9b: 9d:28:da:57:00:fd:3e:17:b7:35:fc:18:1a:0c:74:5e:e2:27: 59:3b:23:74:ce:67:f4:6a:28:d8:ed:e7:30:22:48:5d:89:ee: 66:44:db:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Xyu3F8d6lWHpiIjxN+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWRkMWNlYWUwZjY1ZDYyYTJlYjdjNjdjNDhkZDQzMGU3 ZGE2OTYwHhcNMjYwMTAyMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODQyOTliMzQ1NzUzYWYzYzk1Y2NmYmUxMDRhMGU0MzNiZTc4ZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lQ6neQlL0nozGI6PJMrShGN72Ya WpTv3/6lzkcWVPOmLaAE6bIx4US68YyIpUXhvhIb8Z+j4+LK+Blp5BZdOieCzqr2 ocAZCxjf0VOc6VWpEcjGIkmc9hN7I6TB+cxin6k5gErnD0/diPgc9VQzCpVmAnNm MJftZl7gnifAU69x2imIJL4L5JEbCs1QlntTQ6urwBVjWBl4CYdB9Nt1FOb+bQZY PEmWXq9l5V92W8SPSG6zPU0nN6VQOUezOuf4d/wegnEKnlVjoThJFGHASS8tmhHo 2b57f1k2gjAo91sh45wwXDjl9yGAuFsUJYjaV8C+qoCL5cgSj2Bx19xkTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDhCmbNFdTrzyVzPvhBKDkM7548VMB8GA1UdIwQY MBaAFEOd0c6uD2XWKi63xnxI3UMOfaaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTUzUnpxNFBaZFlxTHJmR2ZFamRRdzU5cHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9iMzdhNTYtN2JiMS00ZjgzLWExN2Ut NjQxN2JkOGZlMjljLzEvT0VLWnMwVjFPdlBKWE0tLUVFb09RenZuanhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9iMzdhNTYtN2JiMS00ZjgzLWExN2UtNjQxN2JkOGZlMjlj LzEvUTUzUnpxNFBaZFlxTHJmR2ZFamRRdzU5cHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTJwMA0G CSqGSIb3DQEBCwUAA4IBAQBYhQYBN49bbfit+WX3KQOLtzVmZhXt2tXplJGODRJt 3KGyhPEhWdlFDXveacJmm+PpanboKVjTu65y4h+tKYpo7UtgoW9Md3jDybUuetrx roCJU0KdWSMg8Wt+gOH7MUZZI3zuRAU+BOBt3JSIG+SpZEGMyODZJpLtHphHbkvA goACUcdUAr1rSysoTNkWW8ncgjVwwuKOf98rHtumPZG2RSU/OkEFvPktK9A8Bhsj WZVUWziNw3ThXPB+wmfivjMAryrwmf41BHw3TtfexWzXsCdCIIIGG5udKNpXAP0+ F7c1/BgaDHRe4idZOyN0zmf0aijY7ecwIkhdie5mRNta -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:15 2026 by rpki-client