This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/o8OHfV95jFDGQMcKlS4Elzm403c.roa File: o8OHfV95jFDGQMcKlS4Elzm403c.roa (raw, json) Hash identifier: wX1Olvy8rFtI4rUY+LS6paVP5fazc6rWqyHgWeMMLFI= Subject key identifier: A3:C3:87:7D:5F:79:8C:50:C6:40:C7:0A:95:2E:04:97:39:B8:D3:77 Certificate issuer: /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786 Certificate serial: 019B7E3786C8133B387B25EBA8CC1EEB65B8 Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/o8OHfV95jFDGQMcKlS4Elzm403c.roa Signing time: Fri 02 Jan 2026 10:18:46 +0000 ROA not before: Fri 02 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 185.132.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:86:c8:13:3b:38:7b:25:eb:a8:cc:1e:eb:65:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786 Validity Not Before: Jan 2 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3c3877d5f798c50c640c70a952e049739b8d377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a1:a6:aa:f6:f9:78:19:d8:7e:66:14:aa:7d: 81:ac:eb:b2:df:7f:e1:e9:b2:76:03:d5:d2:30:14: 8d:37:e1:35:82:ec:f3:53:61:65:31:87:ce:57:e6: 09:ac:a1:52:59:94:03:93:17:4b:a4:d2:09:d1:2e: c6:ee:d3:ed:0b:06:57:cc:aa:00:c6:10:d1:47:68: fc:0a:e0:9c:eb:df:9a:cd:d1:29:8f:e8:4a:c1:9e: d4:27:9e:54:cc:fa:8d:6e:ea:bb:79:01:c0:93:d9: 4c:5c:60:63:37:df:67:10:8f:ef:5a:6b:ad:11:ff: 21:97:81:70:ea:55:e4:04:16:95:2b:45:b9:9f:91: b2:5b:bd:a7:42:00:cd:03:ba:45:61:35:64:e6:da: 6a:50:34:12:46:43:f7:95:f0:c4:e1:8e:f0:5e:17: 08:2f:a0:21:97:4a:84:71:31:08:2e:a3:d9:51:b8: d5:57:25:01:33:0d:50:7a:63:3e:ba:36:67:b7:bf: d4:5d:a3:3f:09:4f:c3:a1:e0:dd:6e:9c:bf:22:68: d1:71:2c:19:38:3a:71:73:06:02:61:cb:84:68:7a: 6c:66:8e:08:fa:c5:1d:f0:70:b9:f9:dc:2c:1f:79: 7a:54:da:0c:29:f4:8b:e0:50:12:e7:53:ca:bb:9f: 16:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C3:87:7D:5F:79:8C:50:C6:40:C7:0A:95:2E:04:97:39:B8:D3:77 X509v3 Authority Key Identifier: keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/o8OHfV95jFDGQMcKlS4Elzm403c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.148.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:e8:e5:54:1e:91:1c:cd:43:b1:99:c6:1a:ee:29:e4:2a:9f: 6f:5e:80:51:1c:6a:94:1f:82:c2:1f:55:50:67:18:32:47:d7: 1a:aa:e9:78:ae:4f:a7:08:c2:10:54:e2:38:0c:2e:8e:ac:2b: 6a:97:f6:ba:5d:f7:7b:dc:e3:a0:a5:92:83:1a:4b:2a:bd:f9: 63:c2:e4:d6:4c:1e:46:9d:1a:e0:8a:1f:91:4f:ea:5d:ae:1b: d8:65:33:0d:d7:8a:f6:bd:35:5e:93:57:ec:c2:b0:df:ae:f0: ff:3c:fd:d0:02:bd:7a:a2:70:67:41:85:df:16:05:f4:54:b7: 6a:0d:9e:df:3b:e5:30:36:b3:36:07:83:88:42:17:e4:fa:64: c0:90:8d:7a:98:a9:6d:90:df:65:f2:16:17:fd:08:57:f2:52: 8c:3b:26:8b:76:3e:22:37:5b:0b:3c:cc:4e:a9:37:00:9f:54: 59:fe:05:a3:48:55:32:65:80:a7:3a:2b:7b:09:ab:eb:01:ce: a1:39:cf:8b:07:74:3d:4b:66:63:99:c8:c3:8e:ff:58:04:7c: 63:15:0b:f7:a4:23:43:96:99:d6:35:00:ab:f4:ab:72:06:cc: 71:cf:bb:4e:5a:8d:6b:09:cf:5e:2f:36:1d:83:31:92:0c:e5: 63:96:cf:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N4bIEzs4eyXrqMwe62W4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZjQ2MTE2YTExZjExZjUxZmM5YTFkMjI1YTBiZmNlZmRi ZWQ3ODYwHhcNMjYwMTAyMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2MzODc3ZDVmNzk4YzUwYzY0MGM3MGE5NTJlMDQ5NzM5YjhkMzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKGmqvb5eBnYfmYUqn2BrOuy33/h 6bJ2A9XSMBSNN+E1guzzU2FlMYfOV+YJrKFSWZQDkxdLpNIJ0S7G7tPtCwZXzKoA xhDRR2j8CuCc69+azdEpj+hKwZ7UJ55UzPqNbuq7eQHAk9lMXGBjN99nEI/vWmut Ef8hl4Fw6lXkBBaVK0W5n5GyW72nQgDNA7pFYTVk5tpqUDQSRkP3lfDE4Y7wXhcI L6Ahl0qEcTEILqPZUbjVVyUBMw1QemM+ujZnt7/UXaM/CU/DoeDdbpy/ImjRcSwZ ODpxcwYCYcuEaHpsZo4I+sUd8HC5+dwsH3l6VNoMKfSL4FAS51PKu58W6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKPDh31feYxQxkDHCpUuBJc5uNN3MB8GA1UdIwQY MBaAFD70YRahHxH1H8mh0iWgv879vteGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMTBhMWMtMGFkZS00YmNiLWJiZmMt NjdiYTdhMjE1NjMwLzEvbzhPSGZWOTVqRkRHUU1jS2xTNEVsem00MDNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMTBhMWMtMGFkZS00YmNiLWJiZmMtNjdiYTdhMjE1NjMw LzEvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYSUMA0G CSqGSIb3DQEBCwUAA4IBAQA/6OVUHpEczUOxmcYa7inkKp9vXoBRHGqUH4LCH1VQ ZxgyR9caqul4rk+nCMIQVOI4DC6OrCtql/a6Xfd73OOgpZKDGksqvfljwuTWTB5G nRrgih+RT+pdrhvYZTMN14r2vTVek1fswrDfrvD/PP3QAr16onBnQYXfFgX0VLdq DZ7fO+UwNrM2B4OIQhfk+mTAkI16mKltkN9l8hYX/QhX8lKMOyaLdj4iN1sLPMxO qTcAn1RZ/gWjSFUyZYCnOit7CavrAc6hOc+LB3Q9S2ZjmcjDjv9YBHxjFQv3pCND lpnWNQCr9KtyBsxxz7tOWo1rCc9eLzYdgzGSDOVjls9Z -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:57 2026 by rpki-client