This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/oQepNcyAV3n8LUNhG2lmlku6ctQ.roa File: oQepNcyAV3n8LUNhG2lmlku6ctQ.roa (raw, json) Hash identifier: 57EPoHIct+eDALqqvem38LPIDDYzx2hlHTQeuMM95dE= Subject key identifier: A1:07:A9:35:CC:80:57:79:FC:2D:43:61:1B:69:66:96:4B:BA:72:D4 Certificate issuer: /CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3 Certificate serial: 019B7E37E830CC5DC641F5DE03B27DAF82B0 Authority key identifier: C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/oQepNcyAV3n8LUNhG2lmlku6ctQ.roa Signing time: Fri 02 Jan 2026 10:19:11 +0000 ROA not before: Fri 02 Jan 2026 10:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202208 IP address blocks: 185.42.252.0/22 maxlen: 22 185.42.252.0/24 maxlen: 24 185.42.254.0/23 maxlen: 23 2a01:66a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e8:30:cc:5d:c6:41:f5:de:03:b2:7d:af:82:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3 Validity Not Before: Jan 2 10:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a107a935cc805779fc2d43611b6966964bba72d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:98:17:47:e8:70:3b:1d:2e:a4:06:11:d0:b9: 44:4a:06:66:89:c4:a2:ac:5c:95:70:fa:96:40:9a: 8c:f1:0d:35:fb:29:97:63:dc:c7:74:4b:21:a4:bb: f2:0a:15:ec:87:e7:9b:be:dc:81:cc:51:9e:9a:96: 4c:80:bb:3c:c4:5e:23:f0:60:60:32:55:a9:79:56: 6b:a6:97:d8:6d:b0:15:10:2f:35:02:03:f8:2a:d3: 4d:d8:8d:5b:07:db:9e:1b:ec:25:99:69:57:16:7d: ca:66:1f:a0:17:f2:ce:f9:2c:5f:4b:76:c0:ff:8c: 99:79:9e:a9:e0:d4:14:e8:6a:d2:48:0a:7b:bc:ab: 52:7b:19:6b:6a:f8:c3:ad:ac:90:f9:da:91:3b:bb: b2:c9:3f:22:76:00:2d:3d:85:aa:fb:d8:f0:03:b0: be:17:af:95:25:28:7f:6d:5c:5d:16:ce:b3:86:2e: c8:9b:4e:d8:e6:94:e2:21:3e:47:e9:29:87:34:82: 86:22:4c:8a:89:a8:36:27:9d:ce:0e:d2:8d:fc:57: b8:cf:18:84:d3:31:14:9f:02:90:d3:33:55:0e:ea: 95:96:34:01:eb:fe:64:7e:b3:09:a4:e0:91:b8:06: 7f:02:0d:ce:ce:6a:4b:2a:b3:12:6d:d0:65:3b:b7: f5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:07:A9:35:CC:80:57:79:FC:2D:43:61:1B:69:66:96:4B:BA:72:D4 X509v3 Authority Key Identifier: keyid:C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/oQepNcyAV3n8LUNhG2lmlku6ctQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.252.0/22 IPv6: 2a01:66a0::/32 Signature Algorithm: sha256WithRSAEncryption 63:06:38:4b:5d:01:2c:29:97:96:68:f5:9f:fb:b4:6c:90:5f: 7e:ee:89:c2:6e:b3:34:82:7a:cd:f7:26:9d:9c:42:b5:5b:0a: 79:ff:1e:b3:bf:81:b4:6d:24:22:d2:2d:bf:37:e2:fa:ad:37: 6c:b7:27:2b:b4:c4:36:18:36:ce:64:43:a4:3b:26:00:c8:89: 17:ae:a2:48:35:9e:ba:5d:70:c9:7a:93:c7:94:61:89:43:67: 30:0e:68:7b:4c:fa:5f:2c:58:41:95:3c:eb:1c:f4:d9:06:c2: 66:01:0f:79:35:e8:c4:df:f3:6c:c7:f0:09:83:db:6e:95:2c: 96:99:77:77:64:47:8b:63:ba:48:e5:1d:80:90:90:9d:74:d1: 92:ab:9d:7e:a7:a1:ee:a1:bd:7d:bb:38:43:34:68:de:91:7f: fd:a1:f9:49:9f:fd:c2:a7:76:9e:21:59:81:cd:8e:e8:22:09: c4:14:5b:4e:d3:00:26:f9:ba:83:0a:72:3e:50:3e:9c:7d:39: ba:14:58:4c:e1:9a:f2:ae:bf:a2:6a:fa:fb:6d:37:5d:70:49: 17:2f:df:75:77:d1:50:ee:2b:8b:ed:01:ac:45:70:af:6f:23: f4:c3:aa:95:49:79:c2:1b:c0:07:2b:39:6a:83:5e:87:61:14: 5d:1d:53:e7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N+gwzF3GQfXeA7J9r4KwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxOTFhN2JmMmYwM2E2N2ZkZmZjYjcxNDRiZDJmODExNGRj ZGQzYjMwHhcNMjYwMTAyMTAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTA3YTkzNWNjODA1Nzc5ZmMyZDQzNjExYjY5NjY5NjRiYmE3MmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZgXR+hwOx0upAYR0LlESgZmicSi rFyVcPqWQJqM8Q01+ymXY9zHdEshpLvyChXsh+ebvtyBzFGempZMgLs8xF4j8GBg MlWpeVZrppfYbbAVEC81AgP4KtNN2I1bB9ueG+wlmWlXFn3KZh+gF/LO+SxfS3bA /4yZeZ6p4NQU6GrSSAp7vKtSexlravjDrayQ+dqRO7uyyT8idgAtPYWq+9jwA7C+ F6+VJSh/bVxdFs6zhi7Im07Y5pTiIT5H6SmHNIKGIkyKiag2J53ODtKN/Fe4zxiE 0zEUnwKQ0zNVDuqVljQB6/5kfrMJpOCRuAZ/Ag3OzmpLKrMSbdBlO7f1rQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKEHqTXMgFd5/C1DYRtpZpZLunLUMB8GA1UdIwQY MBaAFMGRp78vA6Z/3/y3FEvS+BFNzdOzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1pHbnZ5OERwbl9mX0xjVVM5TDRFVTNOMDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYWY2MjUtYzZiYS00OWRiLWFmNjQt MzQ5MjhmOWExYzRmLzEvb1FlcE5jeUFWM244TFVOaEcybG1sa3U2Y3RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8xYWY2MjUtYzZiYS00OWRiLWFmNjQtMzQ5MjhmOWExYzRm LzEvd1pHbnZ5OERwbl9mX0xjVVM5TDRFVTNOMDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSr8MA0E AgACMAcDBQAqAWagMA0GCSqGSIb3DQEBCwUAA4IBAQBjBjhLXQEsKZeWaPWf+7Rs kF9+7onCbrM0gnrN9yadnEK1Wwp5/x6zv4G0bSQi0i2/N+L6rTdstycrtMQ2GDbO ZEOkOyYAyIkXrqJINZ66XXDJepPHlGGJQ2cwDmh7TPpfLFhBlTzrHPTZBsJmAQ95 NejE3/Nsx/AJg9tulSyWmXd3ZEeLY7pI5R2AkJCddNGSq51+p6Huob19uzhDNGje kX/9oflJn/3Cp3aeIVmBzY7oIgnEFFtO0wAm+bqDCnI+UD6cfTm6FFhM4Zryrr+i avr7bTddcEkXL991d9FQ7iuL7QGsRXCvbyP0w6qVSXnCG8AHKzlqg16HYRRdHVPn -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:40 2026 by rpki-client