This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/Ou_-5XfRW7Pj_t00aQ0MsDeBACU.roa File: Ou_-5XfRW7Pj_t00aQ0MsDeBACU.roa (raw, json) Hash identifier: 34gxOKg3qSEtY+T0UNXHRR5fecyXigkS1h3vUgoGZqM= Subject key identifier: 3A:EF:FE:E5:77:D1:5B:B3:E3:FE:DD:34:69:0D:0C:B0:37:81:00:25 Certificate issuer: /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e Certificate serial: 019B7C805967A2DBF99C595A92436E6DEB91 Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/Ou_-5XfRW7Pj_t00aQ0MsDeBACU.roa Signing time: Fri 02 Jan 2026 02:19:04 +0000 ROA not before: Fri 02 Jan 2026 02:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43076 IP address blocks: 185.8.44.0/24 maxlen: 24 185.8.45.0/24 maxlen: 24 185.8.46.0/24 maxlen: 24 185.8.47.0/24 maxlen: 24 217.171.80.0/24 maxlen: 24 217.171.81.0/24 maxlen: 24 217.171.82.0/24 maxlen: 24 217.171.83.0/24 maxlen: 24 217.171.84.0/24 maxlen: 24 217.171.85.0/24 maxlen: 24 217.171.86.0/24 maxlen: 24 217.171.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:59:67:a2:db:f9:9c:59:5a:92:43:6e:6d:eb:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e Validity Not Before: Jan 2 02:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3aeffee577d15bb3e3fedd34690d0cb037810025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:6d:56:69:62:94:75:ff:18:d5:ab:2a:e9: 7a:9d:d5:19:54:c5:6b:d8:7d:46:2c:c5:58:d3:c0: c3:07:ae:77:4e:75:f2:3b:73:ff:27:dd:97:48:e3: 4d:54:69:72:88:f5:ba:92:f1:c1:69:73:9d:5b:7e: 9c:68:f6:e0:c9:e6:65:c4:04:89:09:2c:ec:fc:55: 6c:3e:6a:85:b9:52:8a:4f:de:1a:a7:f1:7c:78:66: 3c:15:8c:8c:2f:d4:33:43:4a:bb:6b:75:d0:96:a3: e5:b7:c4:12:f3:05:34:8f:a0:a5:d2:5a:6e:f8:c0: 20:23:ea:68:a0:a7:39:a8:63:2f:ac:ca:7e:5c:56: 40:55:a5:5a:a4:77:21:e7:39:87:b1:30:a9:a5:97: 27:cc:78:a1:70:d0:26:c6:36:81:da:17:56:fc:88: c4:9e:e9:96:09:32:c5:11:11:85:f6:14:eb:e0:ce: 1a:ce:e5:9e:ac:9a:91:a1:6b:ee:fc:ea:17:54:01: 36:9b:9a:4d:ea:b5:c2:61:f5:68:3a:33:9e:a2:ee: 2b:bb:2b:2a:bd:42:09:7c:34:7e:a1:ee:c7:fd:ed: ec:e9:26:07:0b:d4:32:c3:45:22:64:a1:31:07:2f: 77:42:9e:74:4a:09:83:74:68:fd:b6:bf:98:18:b3: 1b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EF:FE:E5:77:D1:5B:B3:E3:FE:DD:34:69:0D:0C:B0:37:81:00:25 X509v3 Authority Key Identifier: keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/Ou_-5XfRW7Pj_t00aQ0MsDeBACU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.8.44.0/22 217.171.80.0/21 Signature Algorithm: sha256WithRSAEncryption 19:1f:2a:a9:b6:97:b1:51:52:16:37:3e:cd:0f:f0:89:a6:8c: a2:46:82:d9:3a:fc:4a:bd:f0:f1:16:99:cf:74:d0:8d:eb:90: 90:12:59:d8:77:79:94:d3:a1:b8:19:f0:36:39:42:5d:05:54: e7:f2:df:2a:49:4b:cd:86:b6:f6:85:ad:de:ac:74:09:ab:2c: d5:8e:40:fe:87:6e:05:2b:b9:e3:8a:1f:97:3e:25:f4:cf:ae: 7c:23:99:f3:a7:b4:a9:78:21:85:4e:f0:16:30:70:1b:3c:3f: 7b:c1:4b:4f:1c:93:d9:b8:c8:fe:56:c0:b9:03:0d:9f:19:a9: 4c:92:27:e5:51:ec:94:a9:f9:3e:76:c5:db:df:04:5d:76:9a: 3b:a0:ce:b7:47:97:de:a4:6f:4f:cb:05:42:81:4f:d3:1b:19: 52:2d:6b:b0:e2:9c:8b:ab:1b:b9:bf:7c:a9:5c:69:5d:38:d6: 96:ae:c5:1d:00:3e:25:e6:ff:a2:69:75:a2:fd:91:db:f3:1a: 54:a5:ab:34:54:33:15:71:ae:95:f0:c0:51:2c:45:e0:2d:54: f3:d6:24:78:8f:a3:a5:9d:9a:d7:ba:f6:fb:64:c4:01:86:61: 51:89:cf:33:0c:5f:f8:bf:8e:1b:fa:79:74:40:95:d5:1e:e3: 86:85:b8:28 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gFlnotv5nFlakkNubeuRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmMxNDM4ZWUwODE1YTliZjhiNzNmOWE3Y2VkMDk0ZjIx YWM3OWUwHhcNMjYwMTAyMDIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWVmZmVlNTc3ZDE1YmIzZTNmZWRkMzQ2OTBkMGNiMDM3ODEwMDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3ZtVmlilHX/GNWrKul6ndUZVMVr 2H1GLMVY08DDB653TnXyO3P/J92XSONNVGlyiPW6kvHBaXOdW36caPbgyeZlxASJ CSzs/FVsPmqFuVKKT94ap/F8eGY8FYyML9QzQ0q7a3XQlqPlt8QS8wU0j6Cl0lpu +MAgI+pooKc5qGMvrMp+XFZAVaVapHch5zmHsTCppZcnzHihcNAmxjaB2hdW/IjE numWCTLFERGF9hTr4M4azuWerJqRoWvu/OoXVAE2m5pN6rXCYfVoOjOeou4ruysq vUIJfDR+oe7H/e3s6SYHC9Qyw0UiZKExBy93Qp50SgmDdGj9tr+YGLMb/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDrv/uV30Vuz4/7dNGkNDLA3gQAlMB8GA1UdIwQY MBaAFG38FDjuCBWpv4tz+afO0JTyGseeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEt ZDY0Njc2N2M1ZjEzLzEvT3VfLTVYZlJXN1BqX3QwMGFRME1zRGVCQUNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEtZDY0Njc2N2M1ZjEz LzEvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuQgsAwQD 2atQMA0GCSqGSIb3DQEBCwUAA4IBAQAZHyqptpexUVIWNz7ND/CJpoyiRoLZOvxK vfDxFpnPdNCN65CQElnYd3mU06G4GfA2OUJdBVTn8t8qSUvNhrb2ha3erHQJqyzV jkD+h24FK7njih+XPiX0z658I5nzp7SpeCGFTvAWMHAbPD97wUtPHJPZuMj+VsC5 Aw2fGalMkiflUeyUqfk+dsXb3wRddpo7oM63R5fepG9PywVCgU/TGxlSLWuw4pyL qxu5v3ypXGldONaWrsUdAD4l5v+iaXWi/ZHb8xpUpas0VDMVca6V8MBRLEXgLVTz 1iR4j6OlnZrXuvb7ZMQBhmFRic8zDF/4v44b+nl0QJXVHuOGhbgo -----END CERTIFICATE-----Generated at Tue Feb 10 06:23:36 2026 by rpki-client