This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/Og8b6mn9T1akZjxc4TVcMnSz1As.roa File: Og8b6mn9T1akZjxc4TVcMnSz1As.roa (raw, json) Hash identifier: MZENTXsLseNKZbHPbPVFQM4cXWctRVemJxC3RSLuLEk= Subject key identifier: 3A:0F:1B:EA:69:FD:4F:56:A4:66:3C:5C:E1:35:5C:32:74:B3:D4:0B Certificate issuer: /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5 Certificate serial: 019B7E37ACE43FAA32C4614C7AB5E795332D Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/Og8b6mn9T1akZjxc4TVcMnSz1As.roa Signing time: Fri 02 Jan 2026 10:18:56 +0000 ROA not before: Fri 02 Jan 2026 10:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207048 IP address blocks: 185.123.52.0/24 maxlen: 24 193.107.51.0/24 maxlen: 24 2a10:ec0::/29 maxlen: 29 2a12:60c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ac:e4:3f:aa:32:c4:61:4c:7a:b5:e7:95:33:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5 Validity Not Before: Jan 2 10:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a0f1bea69fd4f56a4663c5ce1355c3274b3d40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:67:71:45:76:c6:a1:32:bc:88:7d:fb:c8:04: bc:6b:5e:b5:31:64:56:55:5a:16:2b:02:cf:9d:23: 1f:12:6c:de:91:d9:7c:21:bd:17:66:f4:5c:f3:e3: 69:7f:66:fa:68:31:22:3e:06:40:fd:15:7d:f5:f1: 77:95:df:f6:29:a7:84:e2:51:36:73:73:af:f5:37: 65:ef:07:ab:e5:a2:f1:fc:03:30:1e:eb:c4:38:90: a5:a9:4c:cc:af:32:bb:f3:5a:fe:7c:ef:8e:8a:30: a6:d7:3a:a2:2c:5e:40:90:66:77:be:d0:45:36:36: 49:aa:8e:bd:53:39:47:d9:b7:54:f2:b1:a3:be:ac: 7c:30:cc:6b:e4:eb:eb:e3:63:19:e7:9c:cb:a8:fe: ea:a6:f2:89:8b:ad:e3:9b:7d:e7:01:7b:f7:aa:98: dc:8b:35:97:a0:27:fb:fb:62:6c:eb:ca:30:4a:1b: c4:bb:85:27:38:0a:9a:f5:b6:f2:ff:f1:1b:34:a5: bf:cb:ba:f7:4b:a4:c8:8c:ed:89:c9:38:cc:25:b3: 3e:72:48:1f:6c:41:01:53:6b:b1:e4:46:2b:a1:95: c1:c2:c9:e1:01:7e:91:1c:7e:66:5a:1b:37:2d:1a: 27:83:f5:e2:4b:93:57:29:b4:a7:54:d6:5c:a5:6e: 2a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0F:1B:EA:69:FD:4F:56:A4:66:3C:5C:E1:35:5C:32:74:B3:D4:0B X509v3 Authority Key Identifier: keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/Og8b6mn9T1akZjxc4TVcMnSz1As.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.52.0/24 193.107.51.0/24 IPv6: 2a10:ec0::/29 2a12:60c0::/29 Signature Algorithm: sha256WithRSAEncryption 6b:8c:20:6c:2a:51:1e:20:c5:06:64:be:0e:c3:72:ea:39:ff: b0:e9:dd:8e:3f:2b:71:b6:a7:dc:53:d8:ad:55:63:7a:9d:a4: 36:15:be:18:bb:2c:12:12:6d:09:cf:2c:67:32:92:ef:09:3c: ee:50:a0:49:ec:d8:2b:6f:e0:78:f0:19:8b:cc:e6:d3:b7:0c: f6:56:00:8c:7c:fe:06:51:5d:90:9d:ff:c9:32:e5:bd:4f:85: 39:45:c7:60:06:e1:08:b8:e5:ab:d8:11:e0:03:43:86:0d:e7: 50:55:ae:c2:1d:8b:71:d8:73:23:18:55:7f:8a:9e:2e:ea:d3: e5:e5:d5:00:4b:83:bc:f0:85:1b:a3:fd:7f:cb:8b:fe:a6:e9: 53:24:a5:ff:5b:2c:1a:47:d9:ee:dd:c7:19:5b:8b:52:31:ef: 6d:45:8b:fa:a6:c6:1d:78:27:7d:3e:0d:67:d5:c9:b4:c5:6a: 36:78:74:5d:fc:b0:60:40:91:6e:2d:9c:e2:13:63:3b:7b:93: 94:63:a3:7e:d1:79:84:20:db:e9:64:a1:09:73:44:e6:91:dc: dd:50:ff:7e:60:a1:42:15:b8:b1:71:e6:5d:87:d8:8f:81:e8: 30:b6:cf:3e:f6:c5:0a:ee:50:0c:9f:59:e9:9a:14:2b:72:df: 51:53:fd:67 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt+N6zkP6oyxGFMerXnlTMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZjZkMTYzNTkzZGViOGFlZmYwNzJmZWNhNThlNmYzZjFj NGU3ZTUwHhcNMjYwMTAyMTAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTBmMWJlYTY5ZmQ0ZjU2YTQ2NjNjNWNlMTM1NWMzMjc0YjNkNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWdxRXbGoTK8iH37yAS8a161MWRW VVoWKwLPnSMfEmzekdl8Ib0XZvRc8+Npf2b6aDEiPgZA/RV99fF3ld/2KaeE4lE2 c3Ov9Tdl7wer5aLx/AMwHuvEOJClqUzMrzK781r+fO+OijCm1zqiLF5AkGZ3vtBF NjZJqo69UzlH2bdU8rGjvqx8MMxr5Ovr42MZ55zLqP7qpvKJi63jm33nAXv3qpjc izWXoCf7+2Js68owShvEu4UnOAqa9bby//EbNKW/y7r3S6TIjO2JyTjMJbM+ckgf bEEBU2ux5EYroZXBwsnhAX6RHH5mWhs3LRong/XiS5NXKbSnVNZcpW4qXQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDoPG+pp/U9WpGY8XOE1XDJ0s9QLMB8GA1UdIwQY MBaAFJ320WNZPeuK7/By/spY5vPxxOflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmZiUlkxazk2NHJ2OEhMLXlsam04X0hFNS1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZjI1ZDctNWZmYS00Njg2LTgzMjYt NjlkNzljOWQwNzIxLzEvT2c4YjZtbjlUMWFrWmp4YzRUVmNNblN6MUFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9mZjI1ZDctNWZmYS00Njg2LTgzMjYtNjlkNzljOWQwNzIx LzEvbmZiUlkxazk2NHJ2OEhMLXlsam04X0hFNS1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAuXs0AwQA wWszMBQEAgACMA4DBQMqEA7AAwUDKhJgwDANBgkqhkiG9w0BAQsFAAOCAQEAa4wg bCpRHiDFBmS+DsNy6jn/sOndjj8rcban3FPYrVVjep2kNhW+GLssEhJtCc8sZzKS 7wk87lCgSezYK2/gePAZi8zm07cM9lYAjHz+BlFdkJ3/yTLlvU+FOUXHYAbhCLjl q9gR4ANDhg3nUFWuwh2LcdhzIxhVf4qeLurT5eXVAEuDvPCFG6P9f8uL/qbpUySl /1ssGkfZ7t3HGVuLUjHvbUWL+qbGHXgnfT4NZ9XJtMVqNnh0XfywYECRbi2c4hNj O3uTlGOjftF5hCDb6WShCXNE5pHc3VD/fmChQhW4sXHmXYfYj4HoMLbPPvbFCu5Q DJ9Z6ZoUK3LfUVP9Zw== -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:19 2026 by rpki-client