This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/oCt8auGQpXUjEabo0a0mrHcE8mA.roa File: oCt8auGQpXUjEabo0a0mrHcE8mA.roa (raw, json) Hash identifier: TaTgQOOqbIQbFt9MChM73ZfXSDx+bRyOV5FHdrddGfQ= Subject key identifier: A0:2B:7C:6A:E1:90:A5:75:23:11:A6:E8:D1:AD:26:AC:77:04:F2:60 Certificate issuer: /CN=44b1467c20481d11b67ff7bac6498959f718e1f5 Certificate serial: 019B79110F59D0154770CB2191FEAE34A98A Authority key identifier: 44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/oCt8auGQpXUjEabo0a0mrHcE8mA.roa Signing time: Thu 01 Jan 2026 10:18:39 +0000 ROA not before: Thu 01 Jan 2026 10:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42343 IP address blocks: 84.240.96.0/21 maxlen: 21 91.150.0.0/18 maxlen: 18 93.91.188.0/22 maxlen: 22 185.141.96.0/22 maxlen: 22 2a04:b080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0f:59:d0:15:47:70:cb:21:91:fe:ae:34:a9:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44b1467c20481d11b67ff7bac6498959f718e1f5 Validity Not Before: Jan 1 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a02b7c6ae190a5752311a6e8d1ad26ac7704f260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b1:58:13:46:10:25:e2:d6:c7:40:14:b1:23: 8a:e6:cf:cc:de:4d:c9:32:c3:85:13:94:90:38:69: 9f:64:bb:18:fd:fe:36:f8:d0:0c:51:cc:5d:34:f9: c1:ee:0a:9d:f4:35:8c:a9:46:ff:65:be:91:0b:ea: 67:72:b0:66:ae:f5:8e:dd:96:b6:ee:7e:93:f0:fd: 15:2c:fa:12:2b:ed:5c:b7:72:17:fc:48:1c:79:22: be:70:b9:ed:1d:da:6d:24:fd:79:9f:12:8b:50:1b: fe:79:ab:41:9a:e2:94:2f:82:ab:69:1d:ce:1c:b3: 3f:3b:08:0f:78:80:17:27:9f:a0:88:b5:9e:f8:6d: 9c:94:f3:be:e3:f1:51:f7:a9:cc:6a:ca:7b:d0:46: 7e:1c:89:91:c7:e1:75:1e:e1:e2:e6:d6:4a:b2:20: 08:2d:48:0b:84:57:85:af:49:b0:75:f0:20:eb:45: 50:c4:6b:f0:9b:f9:83:99:b1:3d:07:c6:32:84:82: 6f:3d:8f:17:f9:59:79:32:07:a2:07:ca:a5:0d:4c: c4:b9:91:c0:05:b3:b1:de:3d:7e:d5:73:3c:8c:aa: 58:e6:49:ec:04:a3:2d:53:30:b5:f1:27:10:bf:04: d4:21:e8:5d:5c:cb:f5:e7:e6:62:2e:0a:83:64:7e: 2a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2B:7C:6A:E1:90:A5:75:23:11:A6:E8:D1:AD:26:AC:77:04:F2:60 X509v3 Authority Key Identifier: keyid:44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/oCt8auGQpXUjEabo0a0mrHcE8mA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.240.96.0/21 91.150.0.0/18 93.91.188.0/22 185.141.96.0/22 IPv6: 2a04:b080::/29 Signature Algorithm: sha256WithRSAEncryption 17:32:b8:30:22:c1:3c:2c:fb:83:92:f6:d5:f8:64:7a:bd:bd: 97:73:4c:04:cc:89:d6:0f:18:7c:3d:9e:4d:12:85:eb:e5:9e: 4a:a2:58:53:4e:58:b3:2a:37:76:3d:36:da:b1:6d:56:e4:1d: 12:35:e7:c8:96:50:45:96:5f:57:12:1f:52:c9:47:e7:d8:81: 64:80:dc:c4:4e:7c:4e:ff:8f:4a:c3:e9:ef:29:20:c5:5a:3f: b7:75:8b:a9:d6:be:31:06:b6:23:e9:64:79:7a:62:18:70:d7: 15:7a:42:86:94:bd:12:32:02:8f:aa:12:47:a4:39:94:9e:66: 87:01:2b:56:ca:72:49:66:04:a6:ec:30:fe:4b:b4:96:b2:66: 83:f9:03:fb:7d:a7:c8:cb:70:32:c8:9b:bd:73:47:21:8c:f8: a7:3c:c4:a5:c1:3b:24:c3:00:0d:c4:4d:30:75:ea:5e:40:f6: 08:66:8a:33:66:23:06:27:48:4d:a4:07:38:c0:4a:4a:2d:18: 72:8b:e8:60:29:f9:d6:85:76:37:98:2b:05:2c:14:7b:9f:dc: 8e:0f:7f:92:9b:eb:59:28:e9:3c:8d:d7:90:21:94:45:04:65: 88:c6:5a:d6:3e:43:96:ee:5d:c3:2f:1c:20:cc:93:08:e6:21: 74:1b:77:45 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt5EQ9Z0BVHcMshkf6uNKmKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YjE0NjdjMjA0ODFkMTFiNjdmZjdiYWM2NDk4OTU5Zjcx OGUxZjUwHhcNMjYwMTAxMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDJiN2M2YWUxOTBhNTc1MjMxMWE2ZThkMWFkMjZhYzc3MDRmMjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rFYE0YQJeLWx0AUsSOK5s/M3k3J MsOFE5SQOGmfZLsY/f42+NAMUcxdNPnB7gqd9DWMqUb/Zb6RC+pncrBmrvWO3Za2 7n6T8P0VLPoSK+1ct3IX/EgceSK+cLntHdptJP15nxKLUBv+eatBmuKUL4KraR3O HLM/OwgPeIAXJ5+giLWe+G2clPO+4/FR96nMasp70EZ+HImRx+F1HuHi5tZKsiAI LUgLhFeFr0mwdfAg60VQxGvwm/mDmbE9B8YyhIJvPY8X+Vl5MgeiB8qlDUzEuZHA BbOx3j1+1XM8jKpY5knsBKMtUzC18ScQvwTUIehdXMv15+ZiLgqDZH4qHwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFKArfGrhkKV1IxGm6NGtJqx3BPJgMB8GA1UdIwQY MBaAFESxRnwgSB0Rtn/3usZJiVn3GOH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkxGR2ZDQklIUkcyZl9lNnhrbUpXZmNZNGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYjdmNWEtZTg2MC00NDIwLWFiZWUt MTlmODc0YTE4MWM1LzEvb0N0OGF1R1FwWFVqRWFibzBhMG1ySGNFOG1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYjdmNWEtZTg2MC00NDIwLWFiZWUtMTlmODc0YTE4MWM1 LzEvUkxGR2ZDQklIUkcyZl9lNnhrbUpXZmNZNGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDVPBgAwQG W5YAAwQCXVu8AwQCuY1gMA0EAgACMAcDBQMqBLCAMA0GCSqGSIb3DQEBCwUAA4IB AQAXMrgwIsE8LPuDkvbV+GR6vb2Xc0wEzInWDxh8PZ5NEoXr5Z5KolhTTlizKjd2 PTbasW1W5B0SNefIllBFll9XEh9SyUfn2IFkgNzETnxO/49Kw+nvKSDFWj+3dYup 1r4xBrYj6WR5emIYcNcVekKGlL0SMgKPqhJHpDmUnmaHAStWynJJZgSm7DD+S7SW smaD+QP7fafIy3AyyJu9c0chjPinPMSlwTskwwANxE0wdepeQPYIZoozZiMGJ0hN pAc4wEpKLRhyi+hgKfnWhXY3mCsFLBR7n9yOD3+Sm+tZKOk8jdeQIZRFBGWIxlrW PkOW7l3DLxwgzJMI5iF0G3dF -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:28 2026 by rpki-client