This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/oca5XIEdccD_mFy30LwMDBppQlc.roa File: oca5XIEdccD_mFy30LwMDBppQlc.roa (raw, json) Hash identifier: oOccAqwZohR6NOKyRdyvweUbqEHR+Ucd2tYEtvhmMDk= Subject key identifier: A1:C6:B9:5C:81:1D:71:C0:FF:98:5C:B7:D0:BC:0C:0C:1A:69:42:57 Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078 Certificate serial: 019B7D5AD74D3EA8C74BD5629EF0F8995CAE Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/oca5XIEdccD_mFy30LwMDBppQlc.roa Signing time: Fri 02 Jan 2026 06:17:43 +0000 ROA not before: Fri 02 Jan 2026 06:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209964 IP address blocks: 185.6.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:d7:4d:3e:a8:c7:4b:d5:62:9e:f0:f8:99:5c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078 Validity Not Before: Jan 2 06:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1c6b95c811d71c0ff985cb7d0bc0c0c1a694257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8d:35:7f:34:5c:34:1e:8d:79:7d:93:93:d3: 6a:be:3b:dd:61:54:81:85:56:33:4b:52:89:68:00: c7:b8:cc:c5:f0:b7:73:d5:ae:40:12:66:75:43:3c: a0:dc:aa:0f:0d:b6:32:23:36:89:92:af:49:4d:a9: c2:f1:2a:52:e0:f7:9c:b3:74:ae:05:49:6a:43:d9: a9:bf:d8:7f:c7:21:42:47:16:3f:2b:e2:9c:56:65: 09:8d:7d:bc:5d:c2:d9:ff:51:ac:3a:a4:6d:32:e1: d9:7c:d4:09:c7:d0:72:3b:55:ee:eb:c7:0c:ff:2a: 63:d4:ef:15:be:57:2b:56:41:21:b3:92:de:a3:b2: 7c:3e:15:54:7e:14:9c:d4:36:cf:8a:b9:44:14:58: 20:7c:44:b4:9f:26:11:35:3a:75:a8:40:b7:84:b7: 62:83:8d:93:fc:49:b0:1e:a3:92:dc:f1:9d:a9:fb: 05:17:7b:06:9b:7b:42:1b:b7:b9:f8:d5:d8:31:01: 8f:5a:f6:c9:1d:a4:3e:d9:d8:0b:53:5c:5d:cd:0e: ae:d7:80:1e:4f:e8:63:c0:bb:ce:8c:b0:25:a0:01: be:78:3f:4c:26:ea:5a:17:28:8a:e3:2f:81:9f:3d: 82:3d:75:72:01:54:8a:54:a7:bd:a2:b4:67:81:2d: 01:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C6:B9:5C:81:1D:71:C0:FF:98:5C:B7:D0:BC:0C:0C:1A:69:42:57 X509v3 Authority Key Identifier: keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/oca5XIEdccD_mFy30LwMDBppQlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.6.0.0/24 Signature Algorithm: sha256WithRSAEncryption 28:cf:0d:fa:dd:cb:2d:85:11:66:09:41:4f:71:3d:bd:7a:8a: 1c:53:67:9f:cb:d6:ef:9a:ed:a5:70:39:99:aa:dc:10:d2:64: 98:ac:f7:31:22:c7:54:e6:86:12:fc:38:6c:e5:5c:51:83:53: 87:24:f1:b6:b2:bb:74:7a:41:07:a2:79:f8:28:59:11:00:85: b4:a8:55:e4:00:a0:ef:ab:84:0a:69:18:29:6a:c8:f7:27:2f: 9b:22:6b:79:10:36:23:74:3d:f7:e9:9b:8c:1b:c3:93:dc:8c: 85:14:38:71:0a:cf:06:e7:5b:af:6c:80:be:ee:23:73:8d:61: 47:80:3a:ee:59:9b:aa:7e:40:b0:c6:32:62:fe:8b:a1:7b:da: f9:dd:e1:96:fd:33:25:7b:ae:48:dd:b0:be:22:f6:c6:d8:49: 07:d2:be:3b:73:0a:b3:8f:97:37:c9:ef:7d:a3:9b:bf:3e:d0: 49:81:b8:72:3f:34:3d:44:21:2f:5b:15:29:a7:c2:3f:ce:ce: be:11:82:fb:80:0f:a0:32:07:ba:ca:5d:98:41:90:0f:04:e8: 4b:5c:c2:c4:c8:28:e9:a5:a6:3a:a7:63:eb:10:84:76:55:b2: b0:95:a7:2e:ad:72:2a:f7:13:8b:dc:7e:8f:c5:57:7e:54:9d: 0c:22:c4:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WtdNPqjHS9VinvD4mVyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNmI3YjNlYTYwZWZiNGE1NzlhNGY1ZTIzN2VhN2E4OGQz YmMwNzgwHhcNMjYwMTAyMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWM2Yjk1YzgxMWQ3MWMwZmY5ODVjYjdkMGJjMGMwYzFhNjk0MjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI01fzRcNB6NeX2Tk9NqvjvdYVSB hVYzS1KJaADHuMzF8Ldz1a5AEmZ1Qzyg3KoPDbYyIzaJkq9JTanC8SpS4Pecs3Su BUlqQ9mpv9h/xyFCRxY/K+KcVmUJjX28XcLZ/1GsOqRtMuHZfNQJx9ByO1Xu68cM /ypj1O8VvlcrVkEhs5Leo7J8PhVUfhSc1DbPirlEFFggfES0nyYRNTp1qEC3hLdi g42T/EmwHqOS3PGdqfsFF3sGm3tCG7e5+NXYMQGPWvbJHaQ+2dgLU1xdzQ6u14Ae T+hjwLvOjLAloAG+eD9MJupaFyiK4y+Bnz2CPXVyAVSKVKe9orRngS0BMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKHGuVyBHXHA/5hct9C8DAwaaUJXMB8GA1UdIwQY MBaAFJtrez6mDvtKV5pPXiN+p6iNO8B4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAt ZTc0ZDhkMWQ0ZTAyLzEvb2NhNVhJRWRjY0RfbUZ5MzBMd01EQnBwUWxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAtZTc0ZDhkMWQ0ZTAy LzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQYAMA0G CSqGSIb3DQEBCwUAA4IBAQAozw363csthRFmCUFPcT29eoocU2efy9bvmu2lcDmZ qtwQ0mSYrPcxIsdU5oYS/Dhs5VxRg1OHJPG2srt0ekEHonn4KFkRAIW0qFXkAKDv q4QKaRgpasj3Jy+bImt5EDYjdD336ZuMG8OT3IyFFDhxCs8G51uvbIC+7iNzjWFH gDruWZuqfkCwxjJi/ouhe9r53eGW/TMle65I3bC+IvbG2EkH0r47cwqzj5c3ye99 o5u/PtBJgbhyPzQ9RCEvWxUpp8I/zs6+EYL7gA+gMge6yl2YQZAPBOhLXMLEyCjp paY6p2PrEIR2VbKwlacurXIq9xOL3H6PxVd+VJ0MIsQl -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:59 2026 by rpki-client