This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/o1g1zzHTc7aldgN6ad41PbDOjB0.roa File: o1g1zzHTc7aldgN6ad41PbDOjB0.roa (raw, json) Hash identifier: QQnybFplu1wEOqxD5tKldN28I8hCKl9A3kHEsDPVLd4= Subject key identifier: A3:58:35:CF:31:D3:73:B6:A5:76:03:7A:69:DE:35:3D:B0:CE:8C:1D Certificate issuer: /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d Certificate serial: 019B7F156F03510195578CACC0AFA13AA560 Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/o1g1zzHTc7aldgN6ad41PbDOjB0.roa Signing time: Fri 02 Jan 2026 14:21:09 +0000 ROA not before: Fri 02 Jan 2026 14:21:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30761 IP address blocks: 185.73.252.0/24 maxlen: 24 185.73.253.0/24 maxlen: 24 185.73.254.0/24 maxlen: 24 193.22.7.0/24 maxlen: 24 2a05:4780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6f:03:51:01:95:57:8c:ac:c0:af:a1:3a:a5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d Validity Not Before: Jan 2 14:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a35835cf31d373b6a576037a69de353db0ce8c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:84:e9:79:e5:cf:8b:fe:0d:d9:bb:8b:58: 75:ad:ae:4e:40:23:e1:ab:a4:d3:f4:92:06:26:0a: 9b:c5:04:58:dc:7b:f8:46:8e:1b:9b:a8:86:a4:b5: 4a:e0:87:de:e2:49:75:b2:73:cb:ed:8c:45:88:25: 99:81:f5:e1:c5:62:3b:6a:60:67:0e:7d:1e:d1:63: 76:d5:59:1d:a6:6c:5f:7f:f8:19:c2:11:ea:a5:6c: 34:28:de:ef:0c:9d:82:05:70:f9:ec:25:a9:32:d7: 9a:10:61:c6:c5:0e:97:63:b0:83:e4:7c:0b:9c:6f: c1:a6:d0:40:bb:56:60:80:10:14:32:a3:d1:54:b6: 40:c9:9a:b1:b9:1b:98:54:68:ab:88:c2:8e:24:0c: a2:38:b3:e1:ed:a2:b3:3f:e4:b1:cf:96:87:10:22: fb:03:f2:c3:a1:af:1f:b6:4e:8f:f1:4f:49:43:10: 53:96:52:3d:52:cc:c0:59:5f:01:80:50:eb:7c:33: 43:df:89:53:26:b2:fc:d9:93:f9:1f:a8:b4:cd:cb: 40:7c:f3:7c:e8:65:7c:e0:1d:73:38:92:60:e0:c5: e8:b7:3f:dd:0a:d7:4d:f8:1f:b7:17:c9:b5:55:a3: 97:70:12:d0:fc:25:06:88:a0:c1:25:60:27:0a:45: b8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:58:35:CF:31:D3:73:B6:A5:76:03:7A:69:DE:35:3D:B0:CE:8C:1D X509v3 Authority Key Identifier: keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/o1g1zzHTc7aldgN6ad41PbDOjB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.252.0-185.73.254.255 193.22.7.0/24 IPv6: 2a05:4780::/29 Signature Algorithm: sha256WithRSAEncryption 0d:b6:98:4a:8b:f7:d8:36:0d:9f:96:e2:fb:cf:b7:a6:fc:e7: 6d:27:d8:76:95:ea:f5:1a:25:ea:d4:d2:6e:8d:e1:1e:68:27: 02:57:f2:c0:c6:5a:c2:52:53:4f:14:bf:61:13:42:f9:5b:88: 28:ef:1d:be:b3:4b:54:32:d9:7d:40:5f:11:cf:a4:c9:1d:c5: 10:dd:49:31:f7:2e:59:ed:b9:02:7d:a3:51:aa:c3:44:f3:19: 63:e7:1d:04:b4:7e:8c:a6:d1:5c:2c:5a:58:c4:ad:c0:0d:c5: 85:ee:bd:74:06:d1:57:80:e4:ac:3d:c9:0e:d9:ff:ee:b6:79: 10:be:d9:cd:ec:80:fa:17:54:cd:0c:5f:1b:a1:5f:0b:4c:ce: 7a:53:c0:59:c0:88:c0:c1:7c:c1:76:fa:56:84:b0:b3:a3:43: e5:2d:40:d8:ac:7c:87:c0:79:7f:3d:5a:32:3f:d6:da:64:18: 93:7e:c1:b8:8b:e5:0c:eb:b7:fb:9e:df:3d:b5:33:af:ae:90: 6f:22:93:24:d1:bd:78:47:d2:b7:02:ba:fc:08:95:fb:f4:f0: 96:6c:9f:9f:20:1c:22:69:66:3e:fc:1c:98:dd:7b:92:08:fa: 7c:ed:7c:67:f7:75:67:6b:fc:cf:b7:34:23:94:c1:7c:e3:14: be:d8:b4:85 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/FW8DUQGVV4yswK+hOqVgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZDVlMDlhZjgyYTk2OTE4Yzg2YTY0N2I0ZWRjZDhlYmIy MzgyMGQwHhcNMjYwMTAyMTQyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzU4MzVjZjMxZDM3M2I2YTU3NjAzN2E2OWRlMzUzZGIwY2U4YzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpiE6Xnlz4v+Ddm7i1h1ra5OQCPh q6TT9JIGJgqbxQRY3Hv4Ro4bm6iGpLVK4Ife4kl1snPL7YxFiCWZgfXhxWI7amBn Dn0e0WN21Vkdpmxff/gZwhHqpWw0KN7vDJ2CBXD57CWpMteaEGHGxQ6XY7CD5HwL nG/BptBAu1ZggBAUMqPRVLZAyZqxuRuYVGiriMKOJAyiOLPh7aKzP+Sxz5aHECL7 A/LDoa8ftk6P8U9JQxBTllI9UszAWV8BgFDrfDND34lTJrL82ZP5H6i0zctAfPN8 6GV84B1zOJJg4MXotz/dCtdN+B+3F8m1VaOXcBLQ/CUGiKDBJWAnCkW44wIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFKNYNc8x03O2pXYDemneNT2wzowdMB8GA1UdIwQY MBaAFIjV4Jr4KpaRjIamR7TtzY67I4INMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ZGJlOTMtNWRmOC00OGEzLTg2MTMt MjkzYjYyNzk0ODUwLzEvbzFnMXp6SFRjN2FsZGdONmFkNDFQYkRPakIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83ZGJlOTMtNWRmOC00OGEzLTg2MTMtMjkzYjYyNzk0ODUw LzEvaU5YZ212Z3FscEdNaHFaSHRPM05qcnNqZ2cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAK5SfwD BAC5Sf4DBADBFgcwDQQCAAIwBwMFAyoFR4AwDQYJKoZIhvcNAQELBQADggEBAA22 mEqL99g2DZ+W4vvPt6b8520n2HaV6vUaJerU0m6N4R5oJwJX8sDGWsJSU08Uv2ET QvlbiCjvHb6zS1Qy2X1AXxHPpMkdxRDdSTH3LlntuQJ9o1Gqw0TzGWPnHQS0foym 0VwsWljErcANxYXuvXQG0VeA5Kw9yQ7Z/+62eRC+2c3sgPoXVM0MXxuhXwtMznpT wFnAiMDBfMF2+laEsLOjQ+UtQNisfIfAeX89WjI/1tpkGJN+wbiL5Qzrt/ue3z21 M6+ukG8ikyTRvXhH0rcCuvwIlfv08JZsn58gHCJpZj78HJjde5II+nztfGf3dWdr /M+3NCOUwXzjFL7YtIU= -----END CERTIFICATE-----Generated at Mon Feb 2 08:25:58 2026 by rpki-client