This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/oFrdrnyW8tV0-krY3waUROhvwWw.roa File: oFrdrnyW8tV0-krY3waUROhvwWw.roa (raw, json) Hash identifier: QeN2HanlQ0AK3izov4uywvu+l/5m1PgafcG6RGWrge0= Subject key identifier: A0:5A:DD:AE:7C:96:F2:D5:74:FA:4A:D8:DF:06:94:44:E8:6F:C1:6C Certificate issuer: /CN=2ae2d17fd5bb9d7611113c586a410802c785edf2 Certificate serial: 019B7758955D05EC64CF69F9A28BBA02A8B6 Authority key identifier: 2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/oFrdrnyW8tV0-krY3waUROhvwWw.roa Signing time: Thu 01 Jan 2026 02:17:32 +0000 ROA not before: Thu 01 Jan 2026 02:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200509 IP address blocks: 185.66.56.0/22 maxlen: 22 185.66.56.0/24 maxlen: 24 185.66.57.0/24 maxlen: 24 185.66.58.0/24 maxlen: 24 185.66.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:95:5d:05:ec:64:cf:69:f9:a2:8b:ba:02:a8:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ae2d17fd5bb9d7611113c586a410802c785edf2 Validity Not Before: Jan 1 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a05addae7c96f2d574fa4ad8df069444e86fc16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4e:04:04:ea:22:2f:da:8d:eb:fc:b8:86:3e: 1a:94:48:de:4a:d9:95:8b:73:83:69:75:09:80:9a: 8b:a5:fd:97:b3:ff:0a:a4:d8:7c:d0:80:e9:7d:81: 82:52:1d:5e:56:08:14:3d:b3:6b:a8:44:e6:ca:b1: c8:62:e8:5f:37:18:7c:77:43:90:90:0e:c7:1b:67: 5e:77:0b:48:42:71:b7:dc:5b:1a:d1:26:79:47:26: 64:8c:2e:57:3f:0d:b7:d8:ab:a4:8c:5c:39:ea:51: 0d:fd:68:f0:5c:ba:74:51:0f:2a:85:36:12:37:54: 47:0f:37:8c:f5:f6:0f:b4:a7:48:03:f9:be:22:79: a8:7d:f3:86:ae:33:99:e3:72:15:27:8a:0c:c6:4b: de:c6:50:6a:e8:2f:df:d8:0f:b4:64:75:78:84:15: 05:8d:57:40:54:37:7b:50:de:a7:fc:6d:97:5b:08: a2:19:5f:48:90:76:17:85:87:1f:d2:4c:5b:57:ae: 36:a6:e1:d5:7e:9e:0a:97:c5:bb:fa:d6:b5:e1:60: 98:52:35:57:07:86:3f:48:61:98:9e:4d:bf:50:ab: 22:52:00:6e:81:b0:9b:32:be:63:05:27:c6:ea:a9: 70:52:66:70:60:07:4b:6b:45:02:47:1a:58:64:c5: 4d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5A:DD:AE:7C:96:F2:D5:74:FA:4A:D8:DF:06:94:44:E8:6F:C1:6C X509v3 Authority Key Identifier: keyid:2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/oFrdrnyW8tV0-krY3waUROhvwWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.56.0/22 Signature Algorithm: sha256WithRSAEncryption 52:ba:d1:6c:a7:32:af:81:79:27:ba:fc:cc:92:3e:80:b2:73: 48:62:d7:29:df:c8:23:51:9a:2e:79:6d:05:e2:ad:22:41:53: 29:52:98:f5:e0:53:0f:aa:eb:b7:c9:83:13:da:71:78:08:7b: 9a:8b:09:40:6d:4d:f8:76:7a:89:a0:a7:6a:bb:f0:88:b4:4f: 55:f0:07:9f:c1:35:37:e8:fe:cf:e0:5d:0b:3e:3d:3f:7f:db: b2:e9:0f:53:7a:31:7a:bf:1f:c6:f4:b7:f0:f2:f4:2f:1b:b7: b4:00:16:3a:61:7a:39:97:25:1e:61:3b:1d:07:b8:f1:b2:27: d9:1b:bc:a6:cf:a2:97:f6:d1:88:6c:48:24:8c:21:49:60:0e: 2d:0e:fa:7d:5e:99:3c:a7:a3:cc:2f:23:d5:ea:e0:60:e5:b2: f6:b3:c7:a6:98:d0:5d:3c:b1:1d:22:c7:98:d9:bd:d8:3d:35: 99:a9:09:48:34:a0:d3:b5:49:0a:e3:dc:ae:fa:61:9c:15:79: f6:ef:11:f6:92:38:bc:a5:cc:3b:2f:99:d2:86:34:65:c3:99: 0f:c1:e3:3a:43:37:1d:43:94:31:af:a0:b1:62:5e:e3:ce:8f: 30:ca:25:ae:57:6c:48:db:6b:76:94:60:f0:2d:bf:c9:4e:83: c5:37:fd:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJVdBexkz2n5oou6Aqi2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZTJkMTdmZDViYjlkNzYxMTExM2M1ODZhNDEwODAyYzc4 NWVkZjIwHhcNMjYwMTAxMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDVhZGRhZTdjOTZmMmQ1NzRmYTRhZDhkZjA2OTQ0NGU4NmZjMTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy04EBOoiL9qN6/y4hj4alEjeStmV i3ODaXUJgJqLpf2Xs/8KpNh80IDpfYGCUh1eVggUPbNrqETmyrHIYuhfNxh8d0OQ kA7HG2dedwtIQnG33Fsa0SZ5RyZkjC5XPw232KukjFw56lEN/WjwXLp0UQ8qhTYS N1RHDzeM9fYPtKdIA/m+InmoffOGrjOZ43IVJ4oMxkvexlBq6C/f2A+0ZHV4hBUF jVdAVDd7UN6n/G2XWwiiGV9IkHYXhYcf0kxbV642puHVfp4Kl8W7+ta14WCYUjVX B4Y/SGGYnk2/UKsiUgBugbCbMr5jBSfG6qlwUmZwYAdLa0UCRxpYZMVNAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKBa3a58lvLVdPpK2N8GlETob8FsMB8GA1UdIwQY MBaAFCri0X/Vu512ERE8WGpBCALHhe3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iYTdmZDYtYjNhOC00OTMxLWFjMDUt YWI0ODg3YzYzZWE1LzEvb0ZyZHJueVc4dFYwLWtyWTN3YVVST2h2d1d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iYTdmZDYtYjNhOC00OTMxLWFjMDUtYWI0ODg3YzYzZWE1 LzEvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUI4MA0G CSqGSIb3DQEBCwUAA4IBAQBSutFspzKvgXknuvzMkj6AsnNIYtcp38gjUZoueW0F 4q0iQVMpUpj14FMPquu3yYMT2nF4CHuaiwlAbU34dnqJoKdqu/CItE9V8AefwTU3 6P7P4F0LPj0/f9uy6Q9TejF6vx/G9Lfw8vQvG7e0ABY6YXo5lyUeYTsdB7jxsifZ G7ymz6KX9tGIbEgkjCFJYA4tDvp9Xpk8p6PMLyPV6uBg5bL2s8emmNBdPLEdIseY 2b3YPTWZqQlINKDTtUkK49yu+mGcFXn27xH2kji8pcw7L5nShjRlw5kPweM6Qzcd Q5Qxr6CxYl7jzo8wyiWuV2xI22t2lGDwLb/JToPFN/31 -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:44 2026 by rpki-client