This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/16Of3nkjMP8UdSS9id5ZJPl_uic.roa File: 16Of3nkjMP8UdSS9id5ZJPl_uic.roa (raw, json) Hash identifier: 3kAPeMDB74ONzDFPUBPrWjZx5ADHmGueRoPekMbbEgg= Subject key identifier: D7:A3:9F:DE:79:23:30:FF:14:75:24:BD:89:DE:59:24:F9:7F:BA:27 Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44 Certificate serial: 019B7EA450169823990EDF3D960491FA7D67 Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/16Of3nkjMP8UdSS9id5ZJPl_uic.roa Signing time: Fri 02 Jan 2026 12:17:36 +0000 ROA not before: Fri 02 Jan 2026 12:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202409 IP address blocks: 185.1.166.0/23 maxlen: 32 2001:7f8:f2::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:50:16:98:23:99:0e:df:3d:96:04:91:fa:7d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44 Validity Not Before: Jan 2 12:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7a39fde792330ff147524bd89de5924f97fba27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:0b:57:93:cb:40:3e:4c:80:cd:cb:d4:92: da:da:cf:3d:b7:f0:73:24:b2:fb:36:39:a3:37:de: cb:c3:40:5b:22:05:d7:77:46:4f:d8:d1:4b:d6:c7: 4f:d6:73:a3:7e:bf:6a:ee:75:29:52:4b:8b:bd:db: 8a:46:20:54:aa:2f:29:39:85:02:ec:bd:a0:e1:63: eb:5a:58:97:6c:b8:cc:7e:9a:1d:a1:39:70:a2:76: ea:dc:5d:aa:bd:25:a6:e8:df:61:a5:3b:ea:c1:d8: c5:47:5e:88:38:00:59:09:1e:d6:c6:de:a7:9b:be: 2b:b3:2b:66:e4:9d:cd:06:de:32:f4:f2:6d:13:8d: 60:f0:00:0e:d3:d0:e1:29:93:28:62:0f:24:f6:10: 93:0d:0f:38:ba:ca:9d:69:7d:15:6e:b9:de:f3:70: 1d:83:33:0e:cc:0e:96:49:3e:41:6b:1d:33:5e:c1: 37:76:c1:5b:6e:c9:cb:f1:e9:e3:42:ba:7b:2a:a8: fa:8b:26:b6:40:43:e0:67:06:46:d6:7e:43:b4:a7: be:2e:39:ff:d3:db:07:ae:47:02:6a:72:06:35:86: 29:68:80:13:11:df:01:5a:97:d4:b4:3e:09:ca:f2: 53:38:4f:ff:e7:9f:29:c2:5c:19:9e:24:e9:e8:7a: 2d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A3:9F:DE:79:23:30:FF:14:75:24:BD:89:DE:59:24:F9:7F:BA:27 X509v3 Authority Key Identifier: keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/16Of3nkjMP8UdSS9id5ZJPl_uic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.166.0/23 IPv6: 2001:7f8:f2::/48 Signature Algorithm: sha256WithRSAEncryption 52:c2:e4:2f:4a:c0:2f:f9:b6:0d:d6:99:f4:e1:09:8b:75:d0: 6e:77:30:23:c1:21:7f:e4:02:6b:19:3f:7b:e8:b5:b8:e5:91: 60:81:ef:ee:9f:da:fb:68:15:f4:68:18:fb:c5:14:6f:22:6f: 79:35:5d:a5:dd:66:0c:09:97:00:3e:9b:59:19:b2:bd:9c:a1: 52:37:fa:b1:9f:2e:f9:87:08:44:69:c9:07:6c:85:35:a0:cf: 6e:89:82:29:cf:36:55:e1:34:96:e3:e0:40:92:dc:5b:ca:dd: 07:8a:d6:0a:09:08:44:18:e4:32:86:b1:ee:b8:dd:92:5c:a8: 80:63:64:75:19:b5:94:03:60:41:6b:7f:8f:0c:7c:6b:91:36: 8e:2b:d8:80:15:71:92:70:69:54:a0:3c:61:0f:f9:e3:7b:a6: be:d2:be:99:a0:55:2f:9a:d4:60:38:f5:09:1a:4c:4d:7d:6e: 19:d9:bb:c3:0b:54:26:39:34:5e:c5:0d:fc:7f:4b:c3:25:17: 3e:6d:06:e3:18:6c:be:68:e4:09:c2:26:34:70:60:98:64:6b: 4b:ef:67:8f:dd:77:7f:6c:59:7e:6c:0f:5c:50:6c:d6:d2:52: 5e:19:32:45:ee:b6:43:75:70:56:09:e7:0a:7a:a7:4d:ed:66: 86:f4:14:74 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pFAWmCOZDt89lgSR+n1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOGRmODY4ZjdkOWU5OGQ0ZmQ0MWU2ZGE1OTdhMjgzYzkx NDFiNDQwHhcNMjYwMTAyMTIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2EzOWZkZTc5MjMzMGZmMTQ3NTI0YmQ4OWRlNTkyNGY5N2ZiYTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupILV5PLQD5MgM3L1JLa2s89t/Bz JLL7NjmjN97Lw0BbIgXXd0ZP2NFL1sdP1nOjfr9q7nUpUkuLvduKRiBUqi8pOYUC 7L2g4WPrWliXbLjMfpodoTlwonbq3F2qvSWm6N9hpTvqwdjFR16IOABZCR7Wxt6n m74rsytm5J3NBt4y9PJtE41g8AAO09DhKZMoYg8k9hCTDQ84usqdaX0Vbrne83Ad gzMOzA6WST5Bax0zXsE3dsFbbsnL8enjQrp7Kqj6iya2QEPgZwZG1n5DtKe+Ljn/ 09sHrkcCanIGNYYpaIATEd8BWpfUtD4JyvJTOE//558pwlwZniTp6HotLwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNejn955IzD/FHUkvYneWST5f7onMB8GA1UdIwQY MBaAFEGN+Gj32emNT9QebaWXooPJFBtEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVkzNGFQZlo2WTFQMUI1dHBaZWlnOGtVRzBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNmY4NmQtZjc5NS00MTlmLWFkMzEt ZWU5YzM0NTJjYmFmLzEvMTZPZjNua2pNUDhVZFNTOWlkNVpKUGxfdWljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9jNmY4NmQtZjc5NS00MTlmLWFkMzEtZWU5YzM0NTJjYmFm LzEvUVkzNGFQZlo2WTFQMUI1dHBaZWlnOGtVRzBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuQGmMA8E AgACMAkDBwAgAQf4APIwDQYJKoZIhvcNAQELBQADggEBAFLC5C9KwC/5tg3WmfTh CYt10G53MCPBIX/kAmsZP3votbjlkWCB7+6f2vtoFfRoGPvFFG8ib3k1XaXdZgwJ lwA+m1kZsr2coVI3+rGfLvmHCERpyQdshTWgz26JginPNlXhNJbj4ECS3FvK3QeK 1goJCEQY5DKGse643ZJcqIBjZHUZtZQDYEFrf48MfGuRNo4r2IAVcZJwaVSgPGEP +eN7pr7SvpmgVS+a1GA49QkaTE19bhnZu8MLVCY5NF7FDfx/S8MlFz5tBuMYbL5o 5AnCJjRwYJhka0vvZ4/dd39sWX5sD1xQbNbSUl4ZMkXutkN1cFYJ5wp6p03tZob0 FHQ= -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:37 2026 by rpki-client