This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/oxlX37hwRfJw6rYvD_DlOds6oAM.roa File: oxlX37hwRfJw6rYvD_DlOds6oAM.roa (raw, json) Hash identifier: NBmTSUZkwjvyNiisqMltw+Cq5Ss6K9JzeUmdp5uxYs4= Subject key identifier: A3:19:57:DF:B8:70:45:F2:70:EA:B6:2F:0F:F0:E5:39:DB:3A:A0:03 Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974 Certificate serial: 019B791107B9C243C52FD1727C9E9F181BF8 Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/oxlX37hwRfJw6rYvD_DlOds6oAM.roa Signing time: Thu 01 Jan 2026 10:18:37 +0000 ROA not before: Thu 01 Jan 2026 10:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207013 IP address blocks: 185.168.176.0/22 maxlen: 22 185.168.176.0/24 maxlen: 24 185.168.177.0/24 maxlen: 24 185.168.178.0/24 maxlen: 24 185.168.179.0/24 maxlen: 24 2a0b:ffc0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:07:b9:c2:43:c5:2f:d1:72:7c:9e:9f:18:1b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974 Validity Not Before: Jan 1 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a31957dfb87045f270eab62f0ff0e539db3aa003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:21:10:81:4d:bf:3e:2f:32:c6:7a:26:4d: a9:72:88:4e:37:a4:22:43:70:eb:15:8f:bb:e6:85: 8f:d5:9c:e2:ec:7e:db:c3:f5:10:e8:2a:3b:a4:83: 47:d7:e9:09:f6:7b:a4:c0:89:a8:b7:e9:5b:aa:90: 7f:8c:83:c9:12:1d:c8:a0:24:be:bd:f8:02:62:49: 30:83:d3:94:d1:b4:e3:d4:c4:af:cc:08:0e:da:df: da:2f:c3:a3:80:a1:b7:f0:fb:f4:95:d6:81:83:3b: a4:7d:67:bb:e6:81:0f:23:fc:9f:82:1b:26:90:6d: 70:2c:b6:a0:f2:ee:9b:b5:80:b8:4d:09:62:07:4b: eb:15:6c:d1:8e:c8:3a:a9:ad:eb:44:55:ac:a7:a9: 62:0b:37:31:1c:9c:7c:46:1f:7a:7c:09:97:00:e0: 4b:7e:fa:2d:e8:7a:12:37:35:80:02:f6:ba:c7:28: 10:61:cc:a7:db:85:b4:71:42:12:f9:b3:46:6e:5c: 6d:84:f3:b4:72:1b:3d:66:2c:74:7f:b6:bd:09:bb: 89:33:86:09:6a:1b:50:b2:19:9c:1b:1d:96:76:2f: f2:86:ac:77:fe:ea:06:ff:e0:12:44:43:b5:54:58: 57:12:a4:60:07:dd:70:18:a1:d3:a9:6b:a1:a4:09: 1d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:19:57:DF:B8:70:45:F2:70:EA:B6:2F:0F:F0:E5:39:DB:3A:A0:03 X509v3 Authority Key Identifier: keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/oxlX37hwRfJw6rYvD_DlOds6oAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.176.0/22 IPv6: 2a0b:ffc0::/32 Signature Algorithm: sha256WithRSAEncryption 04:d8:7f:83:c9:76:c5:94:0b:f5:a7:30:96:e4:61:92:31:85: 9e:26:48:75:a9:a4:f7:80:4b:56:d6:0c:be:3b:a2:5f:72:ce: e6:1b:f7:cc:16:18:28:1b:b3:05:63:e9:0c:16:63:67:e6:21: 33:64:5b:cc:c9:7b:8b:fe:69:99:d1:12:99:45:22:c8:ca:a6: 3e:48:6e:37:3b:f6:c3:f6:46:c5:fc:cf:d2:68:30:3b:de:d8: 3b:89:19:26:6f:5f:d1:5a:27:7a:e1:e5:e9:07:33:d0:a4:30: 4f:6b:48:24:20:48:1d:6c:ae:b4:b6:28:26:66:92:45:ea:b2: 7e:d1:b0:ec:ce:61:a8:64:29:ae:d2:b6:a6:cf:b5:d5:36:7e: 0d:35:c9:04:29:dc:13:c6:dd:99:d1:0d:fd:20:a4:7a:ea:0c: 9a:eb:c3:ab:18:d1:4b:20:62:87:62:a5:a6:3b:b9:16:e6:9e: 1c:ae:7e:d0:e6:5e:f7:e7:06:64:bf:80:7f:8e:24:23:e0:69: 8a:71:98:85:15:df:d3:c0:30:ca:c6:95:cc:5c:08:f7:37:5a: 2c:3f:eb:73:3b:e3:5b:42:d9:1a:c5:1b:01:61:e4:89:ec:07: ae:75:0f:b6:c0:c7:23:2a:8d:04:3d:ce:58:c8:10:de:66:ee: 03:0c:ad:00 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EQe5wkPFL9FyfJ6fGBv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OGYwNjNkMjllOTEwZjAzM2JlY2I2NTZlOGI5OTAxZjY5 ZWM5NzQwHhcNMjYwMTAxMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzE5NTdkZmI4NzA0NWYyNzBlYWI2MmYwZmYwZTUzOWRiM2FhMDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtQhEIFNvz4vMsZ6Jk2pcohON6Qi Q3DrFY+75oWP1Zzi7H7bw/UQ6Co7pINH1+kJ9nukwImot+lbqpB/jIPJEh3IoCS+ vfgCYkkwg9OU0bTj1MSvzAgO2t/aL8OjgKG38Pv0ldaBgzukfWe75oEPI/yfghsm kG1wLLag8u6btYC4TQliB0vrFWzRjsg6qa3rRFWsp6liCzcxHJx8Rh96fAmXAOBL fvot6HoSNzWAAva6xygQYcyn24W0cUIS+bNGblxthPO0chs9Zix0f7a9CbuJM4YJ ahtQshmcGx2Wdi/yhqx3/uoG/+ASREO1VFhXEqRgB91wGKHTqWuhpAkduQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKMZV9+4cEXycOq2Lw/w5TnbOqADMB8GA1UdIwQY MBaAFLSPBj0p6RDwM77LZW6LmQH2nsl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEk4R1BTbnBFUEF6dnN0bGJvdVpBZmFleVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8yNmM3ZmYtOTk4ZS00MTMxLWE3NDct M2M0M2MzZDM1ZWYzLzEvb3hsWDM3aHdSZkp3NnJZdkRfRGxPZHM2b0FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8yNmM3ZmYtOTk4ZS00MTMxLWE3NDctM2M0M2MzZDM1ZWYz LzEvdEk4R1BTbnBFUEF6dnN0bGJvdVpBZmFleVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaiwMA0E AgACMAcDBQAqC//AMA0GCSqGSIb3DQEBCwUAA4IBAQAE2H+DyXbFlAv1pzCW5GGS MYWeJkh1qaT3gEtW1gy+O6Jfcs7mG/fMFhgoG7MFY+kMFmNn5iEzZFvMyXuL/mmZ 0RKZRSLIyqY+SG43O/bD9kbF/M/SaDA73tg7iRkmb1/RWid64eXpBzPQpDBPa0gk IEgdbK60tigmZpJF6rJ+0bDszmGoZCmu0ramz7XVNn4NNckEKdwTxt2Z0Q39IKR6 6gya68OrGNFLIGKHYqWmO7kW5p4crn7Q5l735wZkv4B/jiQj4GmKcZiFFd/TwDDK xpXMXAj3N1osP+tzO+NbQtkaxRsBYeSJ7AeudQ+2wMcjKo0EPc5YyBDeZu4DDK0A -----END CERTIFICATE-----Generated at Tue Feb 10 01:23:43 2026 by rpki-client