This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/OCjFzuWnGnUje1dEwwbYZ43peEM.roa File: OCjFzuWnGnUje1dEwwbYZ43peEM.roa (raw, json) Hash identifier: P5fQaYguprLTn4X7pglwbJyeWRvGrv3R1qzPPGB8wdU= Subject key identifier: 38:28:C5:CE:E5:A7:1A:75:23:7B:57:44:C3:06:D8:67:8D:E9:78:43 Certificate issuer: /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7 Certificate serial: 019B7F15A095D4F616D47B6256E7848AEA8D Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/OCjFzuWnGnUje1dEwwbYZ43peEM.roa Signing time: Fri 02 Jan 2026 14:21:22 +0000 ROA not before: Fri 02 Jan 2026 14:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197453 IP address blocks: 46.183.176.0/21 maxlen: 21 91.200.86.0/23 maxlen: 23 178.57.80.0/21 maxlen: 21 178.57.88.0/22 maxlen: 22 178.57.93.0/24 maxlen: 24 178.57.95.0/24 maxlen: 24 185.9.84.0/22 maxlen: 22 185.162.232.0/24 maxlen: 24 185.195.243.0/24 maxlen: 24 185.196.116.0/24 maxlen: 24 185.218.182.0/23 maxlen: 23 185.218.182.1/32 maxlen: 32 185.218.182.2/32 maxlen: 32 185.218.183.1/32 maxlen: 32 193.47.154.0/24 maxlen: 24 212.74.228.0/24 maxlen: 24 212.74.229.0/24 maxlen: 24 212.74.230.0/24 maxlen: 24 213.5.224.0/23 maxlen: 23 217.72.0.0/23 maxlen: 23 2a01:bc40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a0:95:d4:f6:16:d4:7b:62:56:e7:84:8a:ea:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7 Validity Not Before: Jan 2 14:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3828c5cee5a71a75237b5744c306d8678de97843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:be:e3:d7:c2:36:1b:c7:91:a3:9c:64:24:cf: fa:f7:a8:8e:33:87:5d:79:79:ca:ff:7c:e5:be:5d: 98:0a:a3:1f:2f:4f:f1:10:63:23:b2:47:88:4f:4d: 73:92:ba:b8:e0:66:78:34:7e:18:b8:63:12:ab:e0: 09:a0:af:b4:83:78:17:7e:01:b4:6e:62:fe:f6:a5: c1:18:f6:d5:db:5b:dd:25:da:ff:75:ac:0f:2a:73: 17:f1:8d:2f:93:be:8a:8d:40:2c:b3:e6:6c:c4:d2: 33:74:69:cb:59:5c:18:b8:b3:b1:ca:c8:58:3c:06: df:3b:56:a4:fc:75:40:b6:e2:2e:7a:39:c3:5a:e3: d3:69:ed:a2:98:89:2f:f3:f0:18:5b:3b:76:56:f3: b8:ac:60:5f:b4:5a:1a:f6:cf:18:f0:09:89:18:20: bf:e0:54:ba:8d:1d:f5:51:ef:bc:6d:c5:ef:9c:87: b4:2f:f9:a8:2f:f8:81:dc:14:de:56:5d:41:4a:ad: d7:90:77:b5:9b:17:01:8e:d6:34:64:a9:63:2f:21: 7b:6b:1a:8b:68:5d:1a:38:d7:8c:f7:e2:99:82:02: 37:09:6c:a4:34:85:66:62:f9:80:bd:cf:76:08:f5: 10:ba:0c:14:78:3b:7c:c0:99:45:fd:9d:22:16:e2: d1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:28:C5:CE:E5:A7:1A:75:23:7B:57:44:C3:06:D8:67:8D:E9:78:43 X509v3 Authority Key Identifier: keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/OCjFzuWnGnUje1dEwwbYZ43peEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.176.0/21 91.200.86.0/23 178.57.80.0-178.57.91.255 178.57.93.0/24 178.57.95.0/24 185.9.84.0/22 185.162.232.0/24 185.195.243.0/24 185.196.116.0/24 185.218.182.0/23 193.47.154.0/24 212.74.228.0-212.74.230.255 213.5.224.0/23 217.72.0.0/23 IPv6: 2a01:bc40::/32 Signature Algorithm: sha256WithRSAEncryption 55:97:9d:72:9c:08:34:b6:35:ed:78:20:1d:2b:15:31:59:52: 8a:23:e0:92:1e:87:94:ac:23:c4:6f:26:75:1b:fb:11:93:02: 92:35:c6:55:b0:21:a3:4c:35:57:51:24:a2:d4:40:32:82:6b: 92:e5:18:b6:4d:8f:a9:69:01:fc:95:8b:06:cd:d6:16:d0:50: 83:af:02:51:d9:6d:13:ac:30:62:77:33:59:43:f9:ee:c4:60: 23:96:0e:01:12:0b:83:0c:b9:f8:0e:91:86:59:59:58:a8:77: 47:c5:f2:0e:f5:d8:37:fb:65:a6:e0:d7:a3:e3:18:b7:17:9f: cf:81:5a:5a:b5:53:d5:95:02:f3:4f:65:e6:03:41:ab:87:ea: 89:0c:5b:b5:40:d5:67:b7:cb:6b:b4:e3:f9:c4:54:dc:ac:ae: 43:61:c2:ec:a5:f4:0b:cb:bd:f2:c6:60:41:c9:0f:12:5c:bc: 49:83:0f:dc:05:54:fb:67:bd:d3:ba:b1:4e:4a:86:11:b4:75: 5f:e0:53:be:14:1c:47:af:5e:26:82:1a:6a:8d:80:f5:36:fd: 90:20:91:ec:03:d5:2a:dc:5d:05:60:b6:39:b0:40:03:b4:68: 12:6c:9e:d4:3f:3b:af:3f:c7:0c:84:ef:84:d3:1e:9c:8b:47: fe:ef:bb:f2 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgISAZt/FaCV1PYW1HtiVueEiuqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NjlmZTNkODgyYzkzZTM4ZThiNmEyODZhMzE3N2RjMTdl OTlhYzcwHhcNMjYwMTAyMTQyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODI4YzVjZWU1YTcxYTc1MjM3YjU3NDRjMzA2ZDg2NzhkZTk3ODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy77j18I2G8eRo5xkJM/696iOM4dd eXnK/3zlvl2YCqMfL0/xEGMjskeIT01zkrq44GZ4NH4YuGMSq+AJoK+0g3gXfgG0 bmL+9qXBGPbV21vdJdr/dawPKnMX8Y0vk76KjUAss+ZsxNIzdGnLWVwYuLOxyshY PAbfO1ak/HVAtuIuejnDWuPTae2imIkv8/AYWzt2VvO4rGBftFoa9s8Y8AmJGCC/ 4FS6jR31Ue+8bcXvnIe0L/moL/iB3BTeVl1BSq3XkHe1mxcBjtY0ZKljLyF7axqL aF0aONeM9+KZggI3CWykNIVmYvmAvc92CPUQugwUeDt8wJlF/Z0iFuLRXwIDAQAB o4ICdzCCAnMwHQYDVR0OBBYEFDgoxc7lpxp1I3tXRMMG2GeN6XhDMB8GA1UdIwQY MBaAFMRp/j2ILJPjjotqKGoxd9wX6ZrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEduLVBZZ3NrLU9PaTJvb2FqRjMzQmZwbXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jNDc1YWItZmRkNS00OTJmLTgxM2Et NjFkOWEyM2YzNDExLzEvT0NqRnp1V25HblVqZTFkRXd3YllaNDNwZUVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jNDc1YWItZmRkNS00OTJmLTgxM2EtNjFkOWEyM2YzNDEx LzEveEduLVBZZ3NrLU9PaTJvb2FqRjMzQmZwbXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGMBggrBgEFBQcBBwEB/wR9MHswagQCAAEwZAMEAy63sAME AVvIVjAMAwQEsjlQAwQCsjlYAwQAsjldAwQAsjlfAwQCuQlUAwQAuaLoAwQAucPz AwQAucR0AwQBudq2AwQAwS+aMAwDBALUSuQDBADUSuYDBAHVBeADBAHZSAAwDQQC AAIwBwMFACoBvEAwDQYJKoZIhvcNAQELBQADggEBAFWXnXKcCDS2Ne14IB0rFTFZ Uooj4JIeh5SsI8RvJnUb+xGTApI1xlWwIaNMNVdRJKLUQDKCa5LlGLZNj6lpAfyV iwbN1hbQUIOvAlHZbROsMGJ3M1lD+e7EYCOWDgESC4MMufgOkYZZWViod0fF8g71 2Df7Zabg16PjGLcXn8+BWlq1U9WVAvNPZeYDQauH6okMW7VA1We3y2u04/nEVNys rkNhwuyl9AvLvfLGYEHJDxJcvEmDD9wFVPtnvdO6sU5KhhG0dV/gU74UHEevXiaC GmqNgPU2/ZAgkewD1SrcXQVgtjmwQAO0aBJsntQ/O68/xwyE74TTHpyLR/7vu/I= -----END CERTIFICATE-----Generated at Tue Feb 3 02:26:14 2026 by rpki-client