This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/OaJvJxx6v6GWi19b1tfcABNBceQ.roa File: OaJvJxx6v6GWi19b1tfcABNBceQ.roa (raw, json) Hash identifier: TnzXeBtI+3T5OrY62DPWKmO+Wg3GD37hX6hbBQYvfBw= Subject key identifier: 39:A2:6F:27:1C:7A:BF:A1:96:8B:5F:5B:D6:D7:DC:00:13:41:71:E4 Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668 Certificate serial: 019B76EB210FE7DA3A65EF73BC3FDAADA3AA Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/OaJvJxx6v6GWi19b1tfcABNBceQ.roa Signing time: Thu 01 Jan 2026 00:17:59 +0000 ROA not before: Thu 01 Jan 2026 00:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199906 IP address blocks: 185.54.136.0/23 maxlen: 23 2a01:6160:1996::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:21:0f:e7:da:3a:65:ef:73:bc:3f:da:ad:a3:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668 Validity Not Before: Jan 1 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39a26f271c7abfa1968b5f5bd6d7dc00134171e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b8:ca:0f:72:e4:ca:6e:bd:c7:b1:65:84:18: 2f:bf:8e:91:0f:e1:49:c9:cf:3c:26:e6:8f:e0:11: 65:d1:82:92:51:11:4e:23:41:bd:d5:7f:22:6f:b4: fa:9e:81:69:1a:e6:28:8a:58:c2:ed:6b:f2:a3:5a: d3:88:81:17:48:7b:39:5e:aa:c8:8e:87:53:d5:68: f9:80:96:33:3f:32:df:1e:b6:83:ad:6d:10:96:85: 23:7f:58:76:b3:cd:cc:3a:fc:d1:36:89:18:c1:06: a8:5e:8b:dd:1c:b0:4c:78:5e:75:16:44:41:4a:5a: 8e:98:83:99:f6:24:e1:28:95:5d:a0:c0:ea:76:b9: c0:86:71:32:50:45:c0:f8:eb:a6:27:78:f3:d4:24: 3b:0e:9f:ad:d7:c5:07:c2:bd:7b:00:67:ce:b6:79: 23:ed:e7:9a:47:50:07:74:63:b5:ba:8e:b5:07:eb: 4e:08:6b:f1:ff:bc:e6:aa:f6:25:55:fe:c1:51:22: 94:58:54:fd:18:36:2c:c9:1e:3a:16:c7:76:cc:b8: c7:b1:b3:09:ef:62:38:9f:ea:d2:1d:bc:10:7b:34: 06:19:77:34:7d:04:01:b0:bc:71:17:93:7c:fb:8d: 1a:c3:b9:8d:77:ca:51:e9:4e:b3:e6:2e:fb:f2:77: d1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A2:6F:27:1C:7A:BF:A1:96:8B:5F:5B:D6:D7:DC:00:13:41:71:E4 X509v3 Authority Key Identifier: keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/OaJvJxx6v6GWi19b1tfcABNBceQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.136.0/23 IPv6: 2a01:6160:1996::/48 Signature Algorithm: sha256WithRSAEncryption ac:4d:f7:69:eb:98:da:ca:82:d1:20:1e:fc:f6:5a:fc:ce:bd: 01:14:06:cc:77:ee:36:de:56:4f:76:67:bf:b9:18:2c:ff:8f: 64:b3:de:3a:7d:6e:ac:95:96:90:c0:b7:de:d3:25:9c:9c:55: 9a:df:00:5e:51:c4:c3:87:88:da:5b:04:0f:78:1c:83:ac:b9: bc:d7:22:77:af:ad:d4:c9:f5:6c:8a:38:d4:0c:2e:ed:5e:7c: 0a:0b:15:af:43:75:2f:13:f7:2e:b9:82:af:2d:0c:a1:e1:de: 69:b0:89:89:2d:5f:b6:74:1f:75:98:52:6a:89:50:22:1d:67: 3e:ee:e9:d8:5e:f5:df:0a:ce:e3:b7:4e:ca:68:fd:91:fd:17: 5d:49:08:2f:a0:65:3b:e9:09:63:17:2d:c6:ea:89:01:ab:12: ab:fb:29:1b:6f:57:bb:68:46:75:3b:4b:d6:c3:3a:b1:8a:8e: 0b:cb:fb:87:5a:3c:51:8b:6b:8a:8a:dc:d7:fe:7e:1e:64:64: 4d:39:6b:8c:ad:f9:91:1d:74:64:b4:54:45:60:49:95:80:0c: 4f:98:10:25:b2:66:74:ca:ed:d8:0b:b1:85:ce:b1:7f:19:9f: b2:7c:a3:29:a3:f4:fd:fe:b6:d1:6a:9a:e7:b6:45:6c:43:bc: 9c:4c:5c:b5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt26yEP59o6Ze9zvD/araOqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZGU3MDdkNmMwMTAwNmIyYWNhNjg3ZWFhYjI5Y2I0NzM2 Yjc2NjgwHhcNMjYwMTAxMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWEyNmYyNzFjN2FiZmExOTY4YjVmNWJkNmQ3ZGMwMDEzNDE3MWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLjKD3Lkym69x7FlhBgvv46RD+FJ yc88JuaP4BFl0YKSURFOI0G91X8ib7T6noFpGuYoiljC7Wvyo1rTiIEXSHs5XqrI jodT1Wj5gJYzPzLfHraDrW0QloUjf1h2s83MOvzRNokYwQaoXovdHLBMeF51FkRB SlqOmIOZ9iThKJVdoMDqdrnAhnEyUEXA+OumJ3jz1CQ7Dp+t18UHwr17AGfOtnkj 7eeaR1AHdGO1uo61B+tOCGvx/7zmqvYlVf7BUSKUWFT9GDYsyR46Fsd2zLjHsbMJ 72I4n+rSHbwQezQGGXc0fQQBsLxxF5N8+40aw7mNd8pR6U6z5i778nfRiQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDmibyccer+hlotfW9bX3AATQXHkMB8GA1UdIwQY MBaAFHDecH1sAQBrKspofqqynLRza3ZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQt MThlNWM1MzdkNTFkLzEvT2FKdkp4eDZ2NkdXaTE5YjF0ZmNBQk5CY2VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQtMThlNWM1MzdkNTFk LzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuTaIMA8E AgACMAkDBwAqAWFgGZYwDQYJKoZIhvcNAQELBQADggEBAKxN92nrmNrKgtEgHvz2 WvzOvQEUBsx37jbeVk92Z7+5GCz/j2Sz3jp9bqyVlpDAt97TJZycVZrfAF5RxMOH iNpbBA94HIOsubzXInevrdTJ9WyKONQMLu1efAoLFa9DdS8T9y65gq8tDKHh3mmw iYktX7Z0H3WYUmqJUCIdZz7u6dhe9d8KzuO3Tspo/ZH9F11JCC+gZTvpCWMXLcbq iQGrEqv7KRtvV7toRnU7S9bDOrGKjgvL+4daPFGLa4qK3Nf+fh5kZE05a4yt+ZEd dGS0VEVgSZWADE+YECWyZnTK7dgLsYXOsX8Zn7J8oymj9P3+ttFqmue2RWxDvJxM XLU= -----END CERTIFICATE-----Generated at Tue Feb 10 06:28:38 2026 by rpki-client