This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/oWAA3712bfUBzXFDQ4qEFnRk4-8.roa File: oWAA3712bfUBzXFDQ4qEFnRk4-8.roa (raw, json) Hash identifier: IL/tQvQ5PPq+dUr5LLZdpWR+gfGz/0GU5klPWCUecLo= Subject key identifier: A1:60:00:DF:BD:76:6D:F5:01:CD:71:43:43:8A:84:16:74:64:E3:EF Certificate issuer: /CN=913380e8b850454db381dddeb9ac2cc8a2f62531 Certificate serial: 019B7F833C927DE1FD19625E706BD88C759A Authority key identifier: 91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/oWAA3712bfUBzXFDQ4qEFnRk4-8.roa Signing time: Fri 02 Jan 2026 16:21:05 +0000 ROA not before: Fri 02 Jan 2026 16:21:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201299 IP address blocks: 185.26.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.mft rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:3c:92:7d:e1:fd:19:62:5e:70:6b:d8:8c:75:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=913380e8b850454db381dddeb9ac2cc8a2f62531 Validity Not Before: Jan 2 16:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a16000dfbd766df501cd7143438a84167464e3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:35:2d:c1:2b:35:ed:7e:f4:89:91:12:8d: 78:4d:f1:09:ab:fa:81:c8:6e:66:9f:16:b3:1b:65: 51:83:ff:b5:51:3e:1a:44:7e:5d:04:e5:cb:e3:8d: d1:8e:f8:9a:07:3f:fc:fa:b3:a3:7b:24:e9:83:42: 7d:fb:ba:f6:04:f9:c0:a8:fc:3b:37:5b:b2:42:ca: 4e:79:da:10:3c:36:f0:f2:92:54:ec:ad:37:e4:3f: 5e:16:9c:c6:5a:b6:c8:33:9f:63:a6:fd:a0:94:a3: 19:3f:5c:6d:45:43:8f:cd:07:1a:c8:14:57:db:9d: 08:bc:2e:94:72:2f:27:ad:18:b1:88:72:11:d9:cd: 1b:22:ff:7f:64:cc:f2:bd:22:87:96:04:f4:42:f3: 15:82:59:f8:c4:17:94:07:f5:78:b3:78:a5:0a:96: 86:14:2a:7d:57:7e:da:da:4a:7e:b4:2d:48:8b:a3: 4d:ed:39:63:3e:19:80:99:d6:25:11:81:d7:93:d4: 16:6e:95:68:82:54:a2:da:7c:35:fb:7a:c8:a2:e5: e3:02:8b:74:d5:ad:9b:e9:a7:1a:97:c9:35:c3:f1: 85:cc:03:0f:56:93:a6:5c:4e:96:ba:da:5f:3a:1c: 99:fe:e9:1b:41:39:a3:a2:7f:aa:d7:1f:e0:22:ca: a1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:60:00:DF:BD:76:6D:F5:01:CD:71:43:43:8A:84:16:74:64:E3:EF X509v3 Authority Key Identifier: keyid:91:33:80:E8:B8:50:45:4D:B3:81:DD:DE:B9:AC:2C:C8:A2:F6:25:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTOA6LhQRU2zgd3euawsyKL2JTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/oWAA3712bfUBzXFDQ4qEFnRk4-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/8694b9-01d7-48b8-a882-94e700bd55f5/1/kTOA6LhQRU2zgd3euawsyKL2JTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.87.0/24 Signature Algorithm: sha256WithRSAEncryption 78:d4:69:8e:98:be:1b:a7:a6:ac:db:47:69:3d:5d:ba:f9:35: d6:9c:38:8b:ca:26:40:06:23:55:93:d1:24:0d:de:1a:8b:45: 6d:8b:25:72:bd:27:f2:e7:48:51:24:48:d3:ee:2b:21:0a:34: ef:42:bc:cf:c8:b9:83:08:1a:57:05:c5:34:3e:ae:40:57:5a: 59:8f:70:31:80:73:6e:01:af:dc:d2:51:b6:89:66:3d:70:95: 38:b0:2f:d1:09:9c:fa:81:ef:eb:69:60:88:0c:a4:93:08:ef: 3c:a3:db:8f:0a:c8:8a:1b:31:70:39:e8:66:7e:f8:2c:00:d4: 1b:43:9b:7f:c4:1e:d2:cf:56:e5:ab:c8:36:91:3d:c0:f6:1f: 74:bf:ab:63:13:d8:1a:b4:dc:2a:d7:dc:a8:53:b3:48:eb:ef: a1:7c:8e:c1:df:14:4c:eb:06:0a:26:3b:f8:58:bc:2d:e8:4f: 84:a4:23:51:b7:9b:2a:9a:a2:67:b1:27:7a:ae:b5:a0:6d:1f: e5:9d:e0:5b:a1:cf:74:1f:3e:ee:0c:38:56:73:59:1c:8f:1b: 3d:9c:a3:9f:7e:56:ea:34:af:ca:c2:10:25:46:e9:99:de:9a: 55:01:fc:e7:0c:c4:62:4f:c3:90:3b:6c:f0:6e:8d:ea:a3:95: 0a:b0:10:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gzySfeH9GWJecGvYjHWaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzM4MGU4Yjg1MDQ1NGRiMzgxZGRkZWI5YWMyY2M4YTJm NjI1MzEwHhcNMjYwMTAyMTYyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTYwMDBkZmJkNzY2ZGY1MDFjZDcxNDM0MzhhODQxNjc0NjRlM2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqw1LcErNe1+9ImREo14TfEJq/qB yG5mnxazG2VRg/+1UT4aRH5dBOXL443RjviaBz/8+rOjeyTpg0J9+7r2BPnAqPw7 N1uyQspOedoQPDbw8pJU7K035D9eFpzGWrbIM59jpv2glKMZP1xtRUOPzQcayBRX 250IvC6Uci8nrRixiHIR2c0bIv9/ZMzyvSKHlgT0QvMVgln4xBeUB/V4s3ilCpaG FCp9V37a2kp+tC1Ii6NN7TljPhmAmdYlEYHXk9QWbpVoglSi2nw1+3rIouXjAot0 1a2b6acal8k1w/GFzAMPVpOmXE6WutpfOhyZ/ukbQTmjon+q1x/gIsqhLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKFgAN+9dm31Ac1xQ0OKhBZ0ZOPvMB8GA1UdIwQY MBaAFJEzgOi4UEVNs4Hd3rmsLMii9iUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RPQTZMaFFSVTJ6Z2QzZXVhd3N5S0wySlRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84Njk0YjktMDFkNy00OGI4LWE4ODIt OTRlNzAwYmQ1NWY1LzEvb1dBQTM3MTJiZlVCelhGRFE0cUVGblJrNC04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi84Njk0YjktMDFkNy00OGI4LWE4ODItOTRlNzAwYmQ1NWY1 LzEva1RPQTZMaFFSVTJ6Z2QzZXVhd3N5S0wySlRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRpXMA0G CSqGSIb3DQEBCwUAA4IBAQB41GmOmL4bp6as20dpPV26+TXWnDiLyiZABiNVk9Ek Dd4ai0VtiyVyvSfy50hRJEjT7ishCjTvQrzPyLmDCBpXBcU0Pq5AV1pZj3AxgHNu Aa/c0lG2iWY9cJU4sC/RCZz6ge/raWCIDKSTCO88o9uPCsiKGzFwOehmfvgsANQb Q5t/xB7Sz1blq8g2kT3A9h90v6tjE9gatNwq19yoU7NI6++hfI7B3xRM6wYKJjv4 WLwt6E+EpCNRt5sqmqJnsSd6rrWgbR/lneBboc90Hz7uDDhWc1kcjxs9nKOfflbq NK/KwhAlRumZ3ppVAfznDMRiT8OQO2zwbo3qo5UKsBAb -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:41 2026 by rpki-client