This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/wO6fRWt8N7XMvIeyLTRMhJ0-t94.roa File: wO6fRWt8N7XMvIeyLTRMhJ0-t94.roa (raw, json) Hash identifier: HaZn3L1Ow7LzOKxqi0hwoJYvNFRFIKrjZGo6K0g1OtQ= Subject key identifier: C0:EE:9F:45:6B:7C:37:B5:CC:BC:87:B2:2D:34:4C:84:9D:3E:B7:DE Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885 Certificate serial: 019B7834579B9D55B1996C2E6558D55FAC98 Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/wO6fRWt8N7XMvIeyLTRMhJ0-t94.roa Signing time: Thu 01 Jan 2026 06:17:34 +0000 ROA not before: Thu 01 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213338 IP address blocks: 185.209.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:57:9b:9d:55:b1:99:6c:2e:65:58:d5:5f:ac:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885 Validity Not Before: Jan 1 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0ee9f456b7c37b5ccbc87b22d344c849d3eb7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dc:23:58:a3:3f:a6:37:18:0e:d5:0e:ce:42: f8:d2:b2:06:16:96:07:46:1f:73:13:e4:46:8a:e7: ca:14:ba:14:2a:b8:db:29:bf:2f:0e:a5:d1:bd:b9: 56:57:6e:2f:a6:07:2b:9e:3a:35:ae:78:d8:ef:2f: cb:6c:e1:05:75:82:10:b1:f6:92:2b:6d:81:2e:f0: f5:92:c5:94:2f:90:f2:ad:8d:ce:68:9d:f2:31:c6: 2a:fa:bf:5f:8c:62:2a:fa:a5:65:b5:91:aa:61:a8: ce:4d:39:1e:8c:a2:13:22:3f:62:b4:a0:40:5c:8f: 72:d3:81:df:45:5b:6d:cb:46:e6:83:82:2f:d7:cd: 03:ec:2e:a7:91:41:6e:e5:bb:f5:86:d1:89:f5:c2: 6d:8f:6a:30:31:96:48:b3:25:30:08:ce:10:54:6c: 8e:49:39:22:cc:88:b8:73:d0:89:35:ed:ec:3a:20: 68:ef:48:25:42:fc:74:66:60:32:95:cb:cc:bd:2b: 6b:73:78:5c:f4:ec:7c:63:5a:33:ee:0c:70:9a:87: 03:a8:43:41:40:b7:09:3d:d0:25:87:4c:68:af:27: a9:ab:66:30:96:e2:fd:e6:43:4e:07:7c:64:25:a6: fb:a9:90:bc:f4:5f:d5:34:75:7d:34:17:f5:c9:a1: 7d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EE:9F:45:6B:7C:37:B5:CC:BC:87:B2:2D:34:4C:84:9D:3E:B7:DE X509v3 Authority Key Identifier: keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/wO6fRWt8N7XMvIeyLTRMhJ0-t94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.41.0/24 Signature Algorithm: sha256WithRSAEncryption 92:07:09:4f:73:1a:c7:90:fe:e8:c5:58:62:99:55:51:cf:6b: b3:47:ce:ce:a6:ff:0d:e9:c2:07:12:35:18:b7:99:97:44:7f: 50:d8:95:21:a4:87:a5:e5:af:c6:c7:8b:24:15:07:b5:6f:7d: 6e:18:c1:2e:2e:15:88:e4:24:0c:df:e7:b0:b1:ab:05:f2:f0: 52:1b:7f:92:a5:b7:ca:2c:37:af:39:7e:74:c0:80:20:e6:5c: 3c:34:c3:be:f0:cc:ac:b1:15:67:4b:a9:fd:db:3b:8c:43:95: 48:64:8b:8e:c3:3b:e8:a7:e3:81:73:fb:c8:61:8c:d0:80:d8: 65:bd:f6:9b:1a:e0:3f:cf:87:ca:1c:33:6f:f9:68:56:78:90: cc:69:de:ea:f0:65:4c:ca:04:9b:8d:a7:6b:7a:1e:76:14:02: ac:7b:44:e0:79:4b:ba:c4:55:ae:ab:48:73:86:0a:89:c3:51: 80:e1:d8:4c:6a:00:6a:e4:b4:95:24:f4:09:aa:30:32:95:4c: cd:34:61:d1:76:3e:f3:94:3b:d2:77:37:ba:19:85:2d:df:c9: 98:d7:dd:e1:ef:8c:fb:78:b1:81:75:94:38:b5:14:e9:22:5f: 41:06:a2:e4:26:0d:c2:56:16:cd:fc:88:cd:c1:0b:58:79:c1: ae:78:b5:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFebnVWxmWwuZVjVX6yYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzAxZjc3Mjc1M2Q4MGE3YjYyYzJkMjEzZDM0N2EzYjll YmU4ODUwHhcNMjYwMTAxMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGVlOWY0NTZiN2MzN2I1Y2NiYzg3YjIyZDM0NGM4NDlkM2ViN2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldwjWKM/pjcYDtUOzkL40rIGFpYH Rh9zE+RGiufKFLoUKrjbKb8vDqXRvblWV24vpgcrnjo1rnjY7y/LbOEFdYIQsfaS K22BLvD1ksWUL5DyrY3OaJ3yMcYq+r9fjGIq+qVltZGqYajOTTkejKITIj9itKBA XI9y04HfRVtty0bmg4Iv180D7C6nkUFu5bv1htGJ9cJtj2owMZZIsyUwCM4QVGyO STkizIi4c9CJNe3sOiBo70glQvx0ZmAylcvMvStrc3hc9Ox8Y1oz7gxwmocDqENB QLcJPdAlh0xoryepq2YwluL95kNOB3xkJab7qZC89F/VNHV9NBf1yaF96QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMDun0VrfDe1zLyHsi00TISdPrfeMB8GA1UdIwQY MBaAFNcwH3cnU9gKe2LC0hPTR6O56+iFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2It MmY2NzY5ZTc1ZjI0LzEvd082ZlJXdDhON1hNdklleUxUUk1oSjAtdDk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2ItMmY2NzY5ZTc1ZjI0 LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudEpMA0G CSqGSIb3DQEBCwUAA4IBAQCSBwlPcxrHkP7oxVhimVVRz2uzR87Opv8N6cIHEjUY t5mXRH9Q2JUhpIel5a/Gx4skFQe1b31uGMEuLhWI5CQM3+ewsasF8vBSG3+SpbfK LDevOX50wIAg5lw8NMO+8MyssRVnS6n92zuMQ5VIZIuOwzvop+OBc/vIYYzQgNhl vfabGuA/z4fKHDNv+WhWeJDMad7q8GVMygSbjadreh52FAKse0TgeUu6xFWuq0hz hgqJw1GA4dhMagBq5LSVJPQJqjAylUzNNGHRdj7zlDvSdze6GYUt38mY193h74z7 eLGBdZQ4tRTpIl9BBqLkJg3CVhbN/IjNwQtYecGueLWH -----END CERTIFICATE-----Generated at Sat Jan 10 14:24:03 2026 by rpki-client