This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/OLaCsdQ4sg-u5_SUOVqiRzJngxw.roa File: OLaCsdQ4sg-u5_SUOVqiRzJngxw.roa (raw, json) Hash identifier: LbFlyjzKtWZ1y7kJgj0oynVYxTM3x3eGRVvy4xZ47Q0= Subject key identifier: 38:B6:82:B1:D4:38:B2:0F:AE:E7:F4:94:39:5A:A2:47:32:67:83:1C Certificate issuer: /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375 Certificate serial: 019B78A2691B852713F9E09B4B21D6308589 Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/OLaCsdQ4sg-u5_SUOVqiRzJngxw.roa Signing time: Thu 01 Jan 2026 08:17:48 +0000 ROA not before: Thu 01 Jan 2026 08:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56788 IP address blocks: 185.166.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:69:1b:85:27:13:f9:e0:9b:4b:21:d6:30:85:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375 Validity Not Before: Jan 1 08:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38b682b1d438b20faee7f494395aa2473267831c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b2:6e:47:78:25:b1:93:20:a9:42:44:ca:29: 0b:67:f5:b5:dd:36:87:0f:bc:62:82:3a:1c:3d:da: 59:87:04:66:73:75:35:e4:6e:05:29:01:1a:3c:aa: 0d:46:d9:17:89:28:fd:d8:cc:25:86:c5:90:16:d9: de:c5:1e:76:be:cb:1d:62:94:b0:00:e5:7a:eb:c2: 4d:86:18:f3:9f:92:2e:9f:8a:d9:fb:10:40:e0:4d: b7:f2:81:6f:37:c1:e6:3f:c7:e3:ff:01:5f:79:7b: eb:c1:df:9c:44:0e:18:40:11:93:81:3d:0b:c8:41: 30:5c:e6:9b:64:79:b4:73:88:c1:aa:79:db:2d:78: bf:e2:d3:7f:36:57:fb:0b:ce:e8:40:5f:f3:49:17: 9a:12:3d:e1:c9:18:57:32:48:b5:33:ba:5b:db:f6: 06:96:98:24:7d:71:91:99:65:c4:a0:6e:e5:0f:3c: 93:13:ed:f0:5d:ce:95:fa:f3:c8:95:6d:2e:0a:8c: f7:10:52:28:00:fa:f8:da:89:07:8f:c2:6a:91:73: 4a:1e:67:d9:62:e6:55:cd:42:14:21:d6:7b:66:27: 1e:34:f6:9d:bb:23:af:a1:64:5e:1f:26:e2:ed:6f: 5c:9d:ba:78:c9:33:f6:62:05:1c:b1:72:e3:b4:ee: b0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B6:82:B1:D4:38:B2:0F:AE:E7:F4:94:39:5A:A2:47:32:67:83:1C X509v3 Authority Key Identifier: keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/OLaCsdQ4sg-u5_SUOVqiRzJngxw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.8.0/24 Signature Algorithm: sha256WithRSAEncryption 39:12:9a:b6:b3:c5:a7:11:bb:6c:4a:b1:db:5d:35:97:a2:2b: 82:99:aa:b7:25:56:c4:43:c8:e8:3b:24:cf:d5:7f:8c:62:ed: aa:a2:50:72:6f:28:d3:bb:15:51:09:51:13:9e:19:c0:04:5c: 20:f3:5e:b0:ce:2c:a5:f4:6e:9c:ac:d5:cf:78:54:e1:08:22: b1:44:f1:ef:93:26:4e:0d:b8:9a:d6:57:77:ad:86:d7:06:9a: 68:1a:d7:d0:05:f2:01:51:69:03:5a:fd:ab:bc:1f:ea:28:c0: fe:c4:ac:11:bd:ce:e0:0f:46:b1:70:8a:45:5d:7d:83:18:06: 57:b0:4c:6d:8c:f3:25:14:61:07:1c:37:5c:1b:c4:56:06:eb: b9:14:8d:bf:01:91:19:a4:a1:d9:3a:78:69:e4:64:5a:f1:30: ec:83:27:b7:43:58:a9:57:49:49:ce:8e:24:67:94:10:6c:8a: 6b:e8:e3:64:22:76:94:48:01:0f:b5:34:7a:02:3c:80:1a:69: a9:9a:9a:87:9d:ab:9b:a6:2e:ff:64:33:ea:ce:50:5e:ec:d1: 71:60:75:5e:75:aa:8f:17:37:2b:2a:58:08:c9:f2:63:c6:cd: cf:6c:81:f3:b2:cc:84:92:cc:21:0d:1b:9f:ef:63:3d:6b:2a: 78:fd:28:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4omkbhScT+eCbSyHWMIWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ZDM4MjkzZjY2OWRiNDhiNmQwYmQxMDM2YWRmZGVmNmJk M2QzNzUwHhcNMjYwMTAxMDgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGI2ODJiMWQ0MzhiMjBmYWVlN2Y0OTQzOTVhYTI0NzMyNjc4MzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7JuR3glsZMgqUJEyikLZ/W13TaH D7xigjocPdpZhwRmc3U15G4FKQEaPKoNRtkXiSj92MwlhsWQFtnexR52vssdYpSw AOV668JNhhjzn5Iun4rZ+xBA4E238oFvN8HmP8fj/wFfeXvrwd+cRA4YQBGTgT0L yEEwXOabZHm0c4jBqnnbLXi/4tN/Nlf7C87oQF/zSReaEj3hyRhXMki1M7pb2/YG lpgkfXGRmWXEoG7lDzyTE+3wXc6V+vPIlW0uCoz3EFIoAPr42okHj8JqkXNKHmfZ YuZVzUIUIdZ7ZiceNPaduyOvoWReHybi7W9cnbp4yTP2YgUcsXLjtO6wUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDi2grHUOLIPruf0lDlaokcyZ4McMB8GA1UdIwQY MBaAFCbTgpP2adtIttC9EDat/e9r09N1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wN2NjMjUtODU5Ny00MzBiLWJjNTIt NDQ4YjliOTViMDllLzEvT0xhQ3NkUTRzZy11NV9TVU9WcWlSekpuZ3h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8wN2NjMjUtODU5Ny00MzBiLWJjNTItNDQ4YjliOTViMDll LzEvSnRPQ2tfWnAyMGkyMEwwUU5xMzk3MnZUMDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaYIMA0G CSqGSIb3DQEBCwUAA4IBAQA5Epq2s8WnEbtsSrHbXTWXoiuCmaq3JVbEQ8joOyTP 1X+MYu2qolBybyjTuxVRCVETnhnABFwg816wziyl9G6crNXPeFThCCKxRPHvkyZO Dbia1ld3rYbXBppoGtfQBfIBUWkDWv2rvB/qKMD+xKwRvc7gD0axcIpFXX2DGAZX sExtjPMlFGEHHDdcG8RWBuu5FI2/AZEZpKHZOnhp5GRa8TDsgye3Q1ipV0lJzo4k Z5QQbIpr6ONkInaUSAEPtTR6AjyAGmmpmpqHnaubpi7/ZDPqzlBe7NFxYHVedaqP FzcrKlgIyfJjxs3PbIHzssyEkswhDRuf72M9ayp4/Sjx -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:33 2026 by rpki-client