This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/1OhU1ba4r4lAxG-v3HBo5kpowjY.roa File: 1OhU1ba4r4lAxG-v3HBo5kpowjY.roa (raw, json) Hash identifier: uhi47WtmC1HtS+uzfaoWnsMLVST1oI2GfXGXB1P0CWo= Subject key identifier: D4:E8:54:D5:B6:B8:AF:89:40:C4:6F:AF:DC:70:68:E6:4A:68:C2:36 Certificate issuer: /CN=e31aba3c2f56283ce5c74bce405844c1591babfc Certificate serial: 019B7B366CA739583E89A76CC12358CD8D37 Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/1OhU1ba4r4lAxG-v3HBo5kpowjY.roa Signing time: Thu 01 Jan 2026 20:18:42 +0000 ROA not before: Thu 01 Jan 2026 20:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199469 IP address blocks: 185.15.112.0/22 maxlen: 22 185.15.112.0/24 maxlen: 24 185.15.113.0/24 maxlen: 24 185.15.114.0/24 maxlen: 24 185.15.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6c:a7:39:58:3e:89:a7:6c:c1:23:58:cd:8d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4e854d5b6b8af8940c46fafdc7068e64a68c236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8f:fd:4f:34:40:08:97:83:a8:70:30:a1:07: b5:be:f6:5e:61:3a:0f:ce:96:9d:6b:6d:9f:a0:b2: 27:cb:da:a4:0d:f1:58:47:cc:b9:fc:cc:9a:f6:3d: c9:1a:53:52:9d:81:91:bf:6e:52:67:14:9b:2f:88: e1:e9:eb:0f:43:c6:93:12:23:79:3a:c0:16:8d:c5: 09:01:4b:b9:d3:88:a9:c2:cb:35:bd:87:3b:35:19: b9:d0:7f:83:fe:f0:33:5b:61:f0:c2:39:93:46:21: 24:d5:c6:c4:b0:a7:a6:25:70:8b:35:78:92:cc:e2: c4:20:01:a0:95:65:d6:10:7c:c2:1f:a3:bb:5d:36: db:fe:8d:84:c6:cf:ac:78:9c:48:97:e3:5d:0b:f0: 3c:fc:41:85:95:4a:82:62:a8:89:09:91:cc:07:ff: 1c:2a:a3:29:b9:87:3e:e8:85:b8:4b:df:9f:ad:7e: e2:23:37:8c:16:a0:43:6b:51:e6:82:5e:8c:7f:75: ca:1a:40:0a:e9:e3:9c:36:9f:c0:52:32:c1:6b:0d: 65:c3:2f:2a:37:84:bf:6c:f7:d7:e3:fd:e9:c3:89: 74:bb:b4:f7:38:6c:bb:90:bf:63:84:3b:39:10:c4: 80:04:a6:a4:02:54:0a:92:0d:d1:f1:93:b1:3e:15: 0f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E8:54:D5:B6:B8:AF:89:40:C4:6F:AF:DC:70:68:E6:4A:68:C2:36 X509v3 Authority Key Identifier: keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/1OhU1ba4r4lAxG-v3HBo5kpowjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.112.0/22 Signature Algorithm: sha256WithRSAEncryption 68:ff:5c:45:81:45:95:7f:ea:2c:c5:db:bd:87:ed:48:ba:3e: 40:f4:3a:9f:e0:4e:42:09:eb:8b:97:d5:a7:85:68:4b:e2:c8: 7b:95:83:51:03:c4:13:42:ec:2e:ad:e5:b3:3d:38:91:35:e1: a6:be:be:e2:de:94:ef:ed:aa:27:6e:8f:18:5e:6f:83:ed:b1: 6a:c4:f2:5a:b7:df:6b:be:03:e7:b9:ff:08:dc:2f:a0:45:dc: 5c:5d:06:1c:4c:0f:e0:50:b2:7d:55:62:4c:53:30:e4:7f:bb: 20:fc:77:d1:c4:88:99:4a:bb:db:e1:f8:b3:d9:94:8f:3a:a6: 08:14:12:db:91:5c:1d:5e:fb:b8:5b:ea:79:1b:c2:51:0c:6a: 7c:1b:df:13:cb:93:8c:48:ce:3c:5b:8e:7b:c2:9b:76:4d:c5: 5d:bb:b1:ab:8f:c6:74:ca:35:c7:33:fa:7b:2c:1b:dd:a4:d7: 35:f5:c8:09:90:4e:14:ac:6e:c9:5e:55:ce:5e:a1:90:ac:dc: 5b:58:c5:22:d4:b7:7d:6e:2f:99:6b:a0:e2:6c:56:01:3f:c5: 2f:bd:65:5e:04:48:bc:67:e0:21:70:90:84:64:3a:8e:64:32: aa:de:9d:fb:0d:0d:88:40:27:a0:fb:6d:35:9c:50:66:a1:4a: 33:61:41:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NmynOVg+iadswSNYzY03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMWFiYTNjMmY1NjI4M2NlNWM3NGJjZTQwNTg0NGMxNTkx YmFiZmMwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGU4NTRkNWI2YjhhZjg5NDBjNDZmYWZkYzcwNjhlNjRhNjhjMjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4/9TzRACJeDqHAwoQe1vvZeYToP zpada22foLIny9qkDfFYR8y5/Mya9j3JGlNSnYGRv25SZxSbL4jh6esPQ8aTEiN5 OsAWjcUJAUu504ipwss1vYc7NRm50H+D/vAzW2HwwjmTRiEk1cbEsKemJXCLNXiS zOLEIAGglWXWEHzCH6O7XTbb/o2Exs+seJxIl+NdC/A8/EGFlUqCYqiJCZHMB/8c KqMpuYc+6IW4S9+frX7iIzeMFqBDa1Hmgl6Mf3XKGkAK6eOcNp/AUjLBaw1lwy8q N4S/bPfX4/3pw4l0u7T3OGy7kL9jhDs5EMSABKakAlQKkg3R8ZOxPhUPVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNToVNW2uK+JQMRvr9xwaOZKaMI2MB8GA1UdIwQY MBaAFOMaujwvVig85cdLzkBYRMFZG6v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgt NWYyODEzN2E3NjU4LzEvMU9oVTFiYTRyNGxBeEctdjNIQm81a3Bvd2pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgtNWYyODEzN2E3NjU4 LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQ9wMA0G CSqGSIb3DQEBCwUAA4IBAQBo/1xFgUWVf+osxdu9h+1Iuj5A9Dqf4E5CCeuLl9Wn hWhL4sh7lYNRA8QTQuwureWzPTiRNeGmvr7i3pTv7aonbo8YXm+D7bFqxPJat99r vgPnuf8I3C+gRdxcXQYcTA/gULJ9VWJMUzDkf7sg/HfRxIiZSrvb4fiz2ZSPOqYI FBLbkVwdXvu4W+p5G8JRDGp8G98Ty5OMSM48W457wpt2TcVdu7Grj8Z0yjXHM/p7 LBvdpNc19cgJkE4UrG7JXlXOXqGQrNxbWMUi1Ld9bi+Za6DibFYBP8UvvWVeBEi8 Z+AhcJCEZDqOZDKq3p37DQ2IQCeg+201nFBmoUozYUHn -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:18 2026 by rpki-client