This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/oxAaTJm6w19ZYAezwM2Bse1zk-k.roa File: oxAaTJm6w19ZYAezwM2Bse1zk-k.roa (raw, json) Hash identifier: UmiPLqYirI4eFKMHzTXAkfjhckK4NXBAKqDlpgaTmlg= Subject key identifier: A3:10:1A:4C:99:BA:C3:5F:59:60:07:B3:C0:CD:81:B1:ED:73:93:E9 Certificate issuer: /CN=7ac623efbfc124712162240cba02a4da1d4dcea3 Certificate serial: 019B7E387ACBA2677B5AD76AB5CAFE41B566 Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/oxAaTJm6w19ZYAezwM2Bse1zk-k.roa Signing time: Fri 02 Jan 2026 10:19:49 +0000 ROA not before: Fri 02 Jan 2026 10:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212661 IP address blocks: 185.123.148.0/24 maxlen: 24 193.3.37.0/24 maxlen: 24 212.146.160.0/22 maxlen: 22 212.146.160.0/24 maxlen: 24 212.146.161.0/24 maxlen: 24 212.146.164.0/22 maxlen: 22 212.146.164.0/23 maxlen: 23 212.146.166.0/23 maxlen: 23 212.146.172.0/24 maxlen: 24 212.146.175.0/24 maxlen: 24 212.146.176.0/22 maxlen: 22 212.146.180.0/22 maxlen: 22 212.146.180.0/23 maxlen: 23 212.146.182.0/23 maxlen: 23 212.146.188.0/24 maxlen: 24 212.146.190.0/24 maxlen: 24 2a06:dac0::/44 maxlen: 44 2a06:dac0:100::/44 maxlen: 44 2a06:dac0:200::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7a:cb:a2:67:7b:5a:d7:6a:b5:ca:fe:41:b5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3 Validity Not Before: Jan 2 10:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3101a4c99bac35f596007b3c0cd81b1ed7393e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:b3:08:5c:cd:ca:9c:32:8e:78:c8:64:eb: 16:54:fc:40:eb:7c:4f:c6:0e:00:7e:1b:74:e5:e6: 84:b7:76:72:7e:0d:81:53:43:2e:77:24:29:05:50: 82:98:20:57:e0:0d:c8:e1:aa:e8:28:9a:01:11:42: d8:81:42:7b:39:36:a7:11:3c:89:57:f2:13:13:e6: e3:00:40:0e:89:b2:93:c2:90:16:1c:6f:7b:e5:ca: 02:54:e6:30:da:f6:5f:53:dd:b2:34:da:2a:49:e2: e0:a8:d2:f5:6c:cb:ba:b2:ae:1e:68:96:3f:ff:d5: 5d:74:b0:ef:a9:73:85:20:13:57:e5:0e:c7:3f:f7: 41:92:7c:00:bc:57:33:c7:64:6a:27:0e:c5:09:90: ec:02:49:1f:f7:86:13:d4:d1:ad:18:73:2e:36:3f: 89:28:5c:ef:c2:e5:12:b0:35:c5:7d:1e:33:20:96: 10:b5:d7:9f:f6:b5:46:2b:25:9d:34:2d:b8:91:81: 72:a1:63:c8:c2:fa:7d:1b:b1:10:5e:47:22:5c:b8: 19:3a:48:f0:19:80:51:05:85:3e:da:6a:70:0e:47: ea:32:e2:a7:24:c1:a2:22:fa:28:00:44:95:ee:20: 00:2b:3f:7d:bb:b3:26:9c:1b:da:bf:04:f4:df:b5: fe:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:10:1A:4C:99:BA:C3:5F:59:60:07:B3:C0:CD:81:B1:ED:73:93:E9 X509v3 Authority Key Identifier: keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/oxAaTJm6w19ZYAezwM2Bse1zk-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.148.0/24 193.3.37.0/24 212.146.160.0/21 212.146.172.0/24 212.146.175.0-212.146.183.255 212.146.188.0/24 212.146.190.0/24 IPv6: 2a06:dac0::/44 2a06:dac0:100::/44 2a06:dac0:200::/44 Signature Algorithm: sha256WithRSAEncryption a1:0e:25:da:a3:54:30:02:cb:69:59:23:2c:cc:35:bf:3d:00: b2:f2:de:e3:7c:4c:30:3c:23:62:11:35:30:fa:b8:f0:dc:72: 09:93:33:c9:fe:b2:b4:58:b7:da:f9:05:a3:9a:22:a4:1c:82: 5b:b8:f8:58:83:26:1f:65:c1:0e:91:3b:e7:d1:cc:cb:e9:6f: cb:28:eb:ae:4d:29:4d:bf:59:59:75:fa:7f:5a:b7:40:14:d8: 45:98:bb:4b:5a:f5:40:c0:ce:1f:4a:0f:2a:63:ce:94:db:8f: 49:ad:f3:62:8a:d1:5f:14:1c:7e:10:3a:89:d5:d0:4f:2b:bc: c3:fc:36:97:56:bf:5c:b8:2e:e2:d7:b3:af:89:53:ba:d9:cf: e8:d9:6b:4b:3a:02:89:80:29:5d:1d:18:aa:66:84:98:a5:cb: c5:c7:d9:94:f4:14:96:24:4c:ba:d1:a1:4d:5c:70:d1:32:46: dd:b3:a9:7a:74:0f:d6:f9:c9:a8:c5:e6:b9:04:65:be:36:ca: a1:06:c7:00:9f:70:e5:22:2f:d1:92:18:5d:e2:77:62:62:b9: 5f:0e:0b:49:ec:e3:a1:92:51:a8:9d:6d:88:74:c9:b0:84:78: f8:ce:af:31:66:34:fc:34:ea:6f:9f:f9:a0:57:b9:fe:ec:17: 0c:72:3e:2c -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZt+OHrLomd7Wtdqtcr+QbVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYzYyM2VmYmZjMTI0NzEyMTYyMjQwY2JhMDJhNGRhMWQ0 ZGNlYTMwHhcNMjYwMTAyMTAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzEwMWE0Yzk5YmFjMzVmNTk2MDA3YjNjMGNkODFiMWVkNzM5M2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA+zCFzNypwyjnjIZOsWVPxA63xP xg4Afht05eaEt3Zyfg2BU0MudyQpBVCCmCBX4A3I4aroKJoBEULYgUJ7OTanETyJ V/ITE+bjAEAOibKTwpAWHG975coCVOYw2vZfU92yNNoqSeLgqNL1bMu6sq4eaJY/ /9VddLDvqXOFIBNX5Q7HP/dBknwAvFczx2RqJw7FCZDsAkkf94YT1NGtGHMuNj+J KFzvwuUSsDXFfR4zIJYQtdef9rVGKyWdNC24kYFyoWPIwvp9G7EQXkciXLgZOkjw GYBRBYU+2mpwDkfqMuKnJMGiIvooAESV7iAAKz99u7MmnBvavwT037X+vQIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFKMQGkyZusNfWWAHs8DNgbHtc5PpMB8GA1UdIwQY MBaAFHrGI++/wSRxIWIkDLoCpNodTc6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jNzRhNGYtNDA1Mi00YzliLWE3Zjgt NDNhYTRjY2UzZjQ4LzEvb3hBYVRKbTZ3MTlaWUFlendNMkJzZTF6ay1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9jNzRhNGYtNDA1Mi00YzliLWE3ZjgtNDNhYTRjY2UzZjQ4 LzEvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTA4BAIAATAyAwQAuXuUAwQA wQMlAwQD1JKgAwQA1JKsMAwDBADUkq8DBAPUkrADBADUkrwDBADUkr4wIQQCAAIw GwMHBCoG2sAAAAMHBCoG2sABAAMHBCoG2sACADANBgkqhkiG9w0BAQsFAAOCAQEA oQ4l2qNUMALLaVkjLMw1vz0AsvLe43xMMDwjYhE1MPq48NxyCZMzyf6ytFi32vkF o5oipByCW7j4WIMmH2XBDpE759HMy+lvyyjrrk0pTb9ZWXX6f1q3QBTYRZi7S1r1 QMDOH0oPKmPOlNuPSa3zYorRXxQcfhA6idXQTyu8w/w2l1a/XLgu4tezr4lTutnP 6NlrSzoCiYApXR0YqmaEmKXLxcfZlPQUliRMutGhTVxw0TJG3bOpenQP1vnJqMXm uQRlvjbKoQbHAJ9w5SIv0ZIYXeJ3YmK5Xw4LSezjoZJRqJ1tiHTJsIR4+M6vMWY0 /DTqb5/5oFe5/uwXDHI+LA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:14 2026 by rpki-client