This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/osPeBc4knLAAONu4R4kr2x3GNNg.roa File: osPeBc4knLAAONu4R4kr2x3GNNg.roa (raw, json) Hash identifier: K1SKtfaoXH921JFKnYEFRpg4kdcXgbPJupJv9WRo+30= Subject key identifier: A2:C3:DE:05:CE:24:9C:B0:00:38:DB:B8:47:89:2B:DB:1D:C6:34:D8 Certificate issuer: /CN=8ce735129f777a25bf84727206bf978d9a1db200 Certificate serial: 019B7EA6E29A1A08BB0D6B470FD8EB5B30F5 Authority key identifier: 8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/osPeBc4knLAAONu4R4kr2x3GNNg.roa Signing time: Fri 02 Jan 2026 12:20:24 +0000 ROA not before: Fri 02 Jan 2026 12:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201786 IP address blocks: 185.63.196.0/22 maxlen: 22 2a03:e60::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e2:9a:1a:08:bb:0d:6b:47:0f:d8:eb:5b:30:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce735129f777a25bf84727206bf978d9a1db200 Validity Not Before: Jan 2 12:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2c3de05ce249cb00038dbb847892bdb1dc634d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9e:cd:a6:c0:78:41:df:ae:4d:08:ef:ec:d5: 91:0a:8f:df:17:af:d5:65:16:bb:bb:b9:c0:1d:54: 6b:31:d0:ab:1c:45:25:f2:a5:dd:91:0a:97:56:13: f8:98:8d:a7:07:69:5e:e9:9c:cd:44:07:19:5e:a5: c8:12:5e:ec:36:fd:a7:87:bb:fb:81:59:51:f0:1a: 60:35:b9:54:5e:ce:c4:7c:8d:8c:53:40:f1:d2:7d: 6d:b7:19:97:bd:ab:2f:5b:48:86:3c:7b:9e:51:4f: e4:f5:ee:8a:a1:f7:54:41:a4:15:c5:de:95:98:69: 26:46:8e:3b:b3:f1:ef:45:b6:66:f5:38:66:f2:04: 0e:40:90:a9:b5:27:e3:3f:77:ba:b2:05:16:8e:a0: ce:51:6b:61:79:28:86:ba:28:6f:36:ed:6b:97:4c: 84:55:11:75:95:74:5a:73:29:13:b4:a0:74:f4:13: 4e:fa:59:5f:d6:1d:7e:4a:94:ad:2c:10:43:15:d6: d1:9b:ce:31:7a:b1:8e:1e:77:fb:5c:2e:57:cf:38: d6:f0:95:41:ba:18:a7:e1:ae:9c:99:8e:03:2b:bb: 27:f3:84:8c:51:e8:79:ef:26:79:cf:3e:ab:d6:e9: ec:76:a1:05:db:da:bb:37:c9:a1:b2:df:4c:e3:97: 65:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C3:DE:05:CE:24:9C:B0:00:38:DB:B8:47:89:2B:DB:1D:C6:34:D8 X509v3 Authority Key Identifier: keyid:8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/osPeBc4knLAAONu4R4kr2x3GNNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.196.0/22 IPv6: 2a03:e60::/34 Signature Algorithm: sha256WithRSAEncryption 68:6d:16:f6:c8:6b:2f:4f:12:73:07:a0:5b:c9:31:63:dd:6b: 56:31:ef:2d:ce:82:7b:74:f2:b0:f6:69:5a:61:eb:cd:f5:f3: 98:fc:3d:37:01:5d:bd:9c:7b:01:ff:f0:a5:d2:8f:9e:58:90: 25:c0:a6:33:97:97:0e:b6:65:2c:e5:41:dd:f2:d3:70:79:d6: ce:9c:99:ec:09:e2:94:d8:7a:33:25:e4:7d:86:e2:9f:8b:df: 6f:4c:6b:93:6b:4d:22:b4:1e:39:5c:58:5f:d2:73:3d:1a:37: ac:36:10:9c:e7:41:aa:3f:6c:2e:8c:c2:21:d9:49:6e:fc:cb: 50:75:ab:fd:2b:ed:2a:e5:ff:2d:5b:83:ea:c2:9f:05:ed:b1: 18:44:88:fb:e2:60:f7:dd:01:b6:d0:6c:79:95:39:3d:b3:cf: d0:39:d3:8f:67:e2:d3:c2:89:86:5a:95:21:02:93:7e:90:b3: df:4a:26:f1:e1:68:69:2c:46:b7:9e:8a:09:de:11:34:57:e7: 80:7e:02:dc:3c:0a:a3:28:7f:32:3e:e2:14:0b:fc:5d:e6:2f: 0c:44:92:72:80:4a:d5:4d:e2:88:a7:7f:69:17:73:83:79:8b: 00:d4:3b:40:01:78:27:20:fa:e3:91:d9:56:ee:f4:70:b4:e3: ed:4d:f6:59 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt+puKaGgi7DWtHD9jrWzD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZTczNTEyOWY3NzdhMjViZjg0NzI3MjA2YmY5NzhkOWEx ZGIyMDAwHhcNMjYwMTAyMTIyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmMzZGUwNWNlMjQ5Y2IwMDAzOGRiYjg0Nzg5MmJkYjFkYzYzNGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ7NpsB4Qd+uTQjv7NWRCo/fF6/V ZRa7u7nAHVRrMdCrHEUl8qXdkQqXVhP4mI2nB2le6ZzNRAcZXqXIEl7sNv2nh7v7 gVlR8BpgNblUXs7EfI2MU0Dx0n1ttxmXvasvW0iGPHueUU/k9e6KofdUQaQVxd6V mGkmRo47s/HvRbZm9Thm8gQOQJCptSfjP3e6sgUWjqDOUWtheSiGuihvNu1rl0yE VRF1lXRacykTtKB09BNO+llf1h1+SpStLBBDFdbRm84xerGOHnf7XC5XzzjW8JVB uhin4a6cmY4DK7sn84SMUeh57yZ5zz6r1unsdqEF29q7N8mhst9M45dl1QIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFKLD3gXOJJywADjbuEeJK9sdxjTYMB8GA1UdIwQY MBaAFIznNRKfd3olv4Rycga/l42aHbIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak9jMUVwOTNlaVdfaEhKeUJyLVhqWm9kc2dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZGU0YTMtOGYyMC00MDBhLWI4NzYt Zjc4YzIyMDY1NzVhLzEvb3NQZUJjNGtuTEFBT051NFI0a3IyeDNHTk5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lZGU0YTMtOGYyMC00MDBhLWI4NzYtZjc4YzIyMDY1NzVh LzEvak9jMUVwOTNlaVdfaEhKeUJyLVhqWm9kc2dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCuT/EMA4E AgACMAgDBgYqAw5gADANBgkqhkiG9w0BAQsFAAOCAQEAaG0W9shrL08ScwegW8kx Y91rVjHvLc6Ce3TysPZpWmHrzfXzmPw9NwFdvZx7Af/wpdKPnliQJcCmM5eXDrZl LOVB3fLTcHnWzpyZ7AnilNh6MyXkfYbin4vfb0xrk2tNIrQeOVxYX9JzPRo3rDYQ nOdBqj9sLozCIdlJbvzLUHWr/SvtKuX/LVuD6sKfBe2xGESI++Jg990BttBseZU5 PbPP0DnTj2fi08KJhlqVIQKTfpCz30om8eFoaSxGt56KCd4RNFfngH4C3DwKoyh/ Mj7iFAv8XeYvDESScoBK1U3iiKd/aRdzg3mLANQ7QAF4JyD645HZVu70cLTj7U32 WQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:57:53 2026 by rpki-client