This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/o5xjwD3RHYwZb8BGUpI8BsGBfV0.roa File: o5xjwD3RHYwZb8BGUpI8BsGBfV0.roa (raw, json) Hash identifier: GZFTwMUyNntUts8RndeOn9OC9VYkHxusfe9yub/gTL4= Subject key identifier: A3:9C:63:C0:3D:D1:1D:8C:19:6F:C0:46:52:92:3C:06:C1:81:7D:5D Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619 Certificate serial: 019B7834EADA682E3A7379196AA76C71C076 Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/o5xjwD3RHYwZb8BGUpI8BsGBfV0.roa Signing time: Thu 01 Jan 2026 06:18:12 +0000 ROA not before: Thu 01 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.71.228.0/24 maxlen: 24 185.71.229.0/24 maxlen: 24 185.71.230.0/24 maxlen: 24 185.71.231.0/24 maxlen: 24 185.125.84.0/24 maxlen: 24 185.125.85.0/24 maxlen: 24 185.125.86.0/24 maxlen: 24 185.125.87.0/24 maxlen: 24 193.0.180.0/24 maxlen: 24 193.0.181.0/24 maxlen: 24 193.0.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ea:da:68:2e:3a:73:79:19:6a:a7:6c:71:c0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619 Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a39c63c03dd11d8c196fc04652923c06c1817d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:84:e0:8a:f9:ee:29:31:a4:e6:ca:14:df:c6: 8d:42:c8:21:a8:e7:7b:dc:f6:36:d2:8c:70:b2:70: c0:5c:10:5a:3d:a3:71:1c:ab:9d:10:48:e8:a0:57: 09:54:6e:a5:96:20:bc:e7:8c:80:f0:66:ad:8c:9e: d1:57:00:54:a0:9a:e0:99:7d:7a:d7:70:be:b7:7e: ab:81:3a:53:24:45:b7:11:12:1d:ea:f6:aa:76:02: e3:46:f4:c1:09:06:57:ee:e6:bc:ee:14:ed:43:1f: 12:38:b0:da:82:f0:ce:ca:10:93:b4:40:29:6a:b3: 44:76:93:53:95:22:84:05:3a:8d:10:d5:e6:58:75: 29:58:df:4c:da:4d:a4:72:34:be:fd:4a:e4:90:81: 33:dc:19:cc:cf:cf:33:47:77:f7:14:92:f5:a9:77: b3:47:0b:f2:d8:04:59:47:35:b7:1e:74:bc:d4:79: 58:74:87:7e:92:1b:ba:38:8e:4a:b8:33:7d:e7:34: 5d:3f:24:66:0f:b9:17:45:4f:5f:9c:1f:72:5e:8e: 0e:04:25:1a:4e:f7:d7:0e:ca:f5:e2:61:59:77:68: b0:1c:06:fc:2b:99:95:3e:44:62:7d:d6:3f:f4:63: aa:1e:ed:62:f8:6f:8e:28:79:be:08:55:57:a3:0c: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9C:63:C0:3D:D1:1D:8C:19:6F:C0:46:52:92:3C:06:C1:81:7D:5D X509v3 Authority Key Identifier: keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/o5xjwD3RHYwZb8BGUpI8BsGBfV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.228.0/22 185.125.84.0/22 193.0.180.0-193.0.182.255 Signature Algorithm: sha256WithRSAEncryption 00:ea:b5:b2:9e:15:4e:5a:41:e9:d9:bb:53:1c:7e:1a:ee:63: 40:d3:5f:b6:51:0e:8f:8c:1c:48:cc:1c:dc:49:34:b5:2d:d7: 2c:9a:be:6f:51:ea:09:4c:39:8b:29:85:6c:ab:6b:8e:1c:a0: 2b:ec:73:e4:be:71:39:6b:da:02:a0:b3:2a:a1:83:54:31:41: 06:6f:2e:b6:c1:5c:93:35:4a:04:22:9a:79:fc:b4:8f:d0:cc: 95:1f:d8:fa:a0:8c:1e:8f:15:0f:5b:8c:3c:9e:9e:27:02:17: 43:d7:8e:8f:16:80:e1:b7:ff:d5:1a:98:9f:78:50:96:f1:99: 7f:67:60:f4:19:22:0d:2a:ec:1c:f6:5c:1b:78:eb:6a:4f:bf: 19:da:89:42:3d:20:79:3c:94:89:94:75:f1:5e:51:d6:46:48: d5:36:d4:08:cc:13:b5:34:f4:29:42:3e:74:4e:1b:58:32:8a: 18:bd:1d:0f:01:8b:a1:90:94:89:89:ad:a6:f9:eb:55:6a:69: b8:1d:28:51:41:d5:72:52:2e:18:d6:69:a0:cb:94:5a:09:16: 4b:72:97:e2:7d:8f:fc:d5:26:57:35:10:0e:b1:60:79:9c:96: bf:83:23:28:d1:06:b0:9c:89:65:a2:eb:14:6a:fe:8a:bc:cf: 8c:0e:2c:b4 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4NOraaC46c3kZaqdsccB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjRjN2VjZmEzN2QyNDg3MTUyZmI5YmJiYWI1MGJlNzlk ZTI2MTkwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzljNjNjMDNkZDExZDhjMTk2ZmMwNDY1MjkyM2MwNmMxODE3ZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYTgivnuKTGk5soU38aNQsghqOd7 3PY20oxwsnDAXBBaPaNxHKudEEjooFcJVG6lliC854yA8GatjJ7RVwBUoJrgmX16 13C+t36rgTpTJEW3ERId6vaqdgLjRvTBCQZX7ua87hTtQx8SOLDagvDOyhCTtEAp arNEdpNTlSKEBTqNENXmWHUpWN9M2k2kcjS+/UrkkIEz3BnMz88zR3f3FJL1qXez Rwvy2ARZRzW3HnS81HlYdId+khu6OI5KuDN95zRdPyRmD7kXRU9fnB9yXo4OBCUa TvfXDsr14mFZd2iwHAb8K5mVPkRifdY/9GOqHu1i+G+OKHm+CFVXowxNKQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFKOcY8A90R2MGW/ARlKSPAbBgX1dMB8GA1UdIwQY MBaAFD4kx+z6N9JIcVL7m7urUL553iYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMt NDkzZDc3NGFhMWZmLzEvbzV4andEM1JIWXdaYjhCR1VwSThCc0dCZlYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zOWE1ZmMtZDI2ZS00ZDUzLTkxZTMtNDkzZDc3NGFhMWZm LzEvUGlUSDdQbzMwa2h4VXZ1YnU2dFF2bm5lSmhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCuUfkAwQC uX1UMAwDBALBALQDBADBALYwDQYJKoZIhvcNAQELBQADggEBAADqtbKeFU5aQenZ u1McfhruY0DTX7ZRDo+MHEjMHNxJNLUt1yyavm9R6glMOYsphWyra44coCvsc+S+ cTlr2gKgsyqhg1QxQQZvLrbBXJM1SgQimnn8tI/QzJUf2PqgjB6PFQ9bjDyenicC F0PXjo8WgOG3/9UamJ94UJbxmX9nYPQZIg0q7Bz2XBt462pPvxnaiUI9IHk8lImU dfFeUdZGSNU21AjME7U09ClCPnROG1gyihi9HQ8Bi6GQlImJrab561VqabgdKFFB 1XJSLhjWaaDLlFoJFktyl+J9j/zVJlc1EA6xYHmclr+DIyjRBrCciWWi6xRq/oq8 z4wOLLQ= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:17 2026 by rpki-client