This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/obQSThMDI54tnVCG6iwWlU2d5xA.roa File: obQSThMDI54tnVCG6iwWlU2d5xA.roa (raw, json) Hash identifier: fWHmiFl72Qtr24MSIZkfu38dOhvU6zUrAoirFatj96E= Subject key identifier: A1:B4:12:4E:13:03:23:9E:2D:9D:50:86:EA:2C:16:95:4D:9D:E7:10 Certificate issuer: /CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827 Certificate serial: 019B7834BE2A42C2E3402260512A8128CD42 Authority key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/obQSThMDI54tnVCG6iwWlU2d5xA.roa Signing time: Thu 01 Jan 2026 06:18:01 +0000 ROA not before: Thu 01 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198371 IP address blocks: 185.96.208.0/24 maxlen: 24 185.96.209.0/24 maxlen: 24 185.96.210.0/24 maxlen: 24 185.96.211.0/24 maxlen: 24 2a06:180::/32 maxlen: 32 2a06:181::/32 maxlen: 32 2a06:182::/32 maxlen: 32 2a06:183::/32 maxlen: 32 2a06:184::/32 maxlen: 32 2a06:185::/32 maxlen: 32 2a06:186::/32 maxlen: 32 2a06:187::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:be:2a:42:c2:e3:40:22:60:51:2a:81:28:cd:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827 Validity Not Before: Jan 1 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1b4124e1303239e2d9d5086ea2c16954d9de710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3a:39:74:55:e8:81:e1:63:2d:c2:49:60:a6: b0:2d:63:37:9c:35:6f:7e:61:cd:f2:3f:ae:07:a6: e0:c8:b0:e7:c0:2f:a6:aa:e2:73:80:36:6c:18:6a: de:74:9b:78:1c:68:20:b6:38:7e:95:9d:06:10:eb: 61:f4:90:76:7a:0f:bc:dd:d8:85:d4:05:c4:1a:51: 85:86:0b:ed:33:93:83:9c:52:68:76:7f:ec:01:df: b4:48:80:2c:9e:db:86:78:63:b2:2c:7f:0c:1c:5b: 13:9b:dc:e0:71:5d:6a:42:5d:ce:50:32:ca:21:ad: 56:6f:95:0a:5f:b1:f5:bb:96:d1:40:44:58:01:3f: 53:bc:08:b6:0c:3f:d6:ad:62:88:db:a4:f8:e9:9b: 46:e4:cb:16:24:bb:96:1b:b1:12:87:fc:c5:1b:a4: ca:17:15:ce:a8:38:25:21:3a:1d:e5:d6:17:05:44: e3:b1:40:66:29:40:d4:3e:af:fb:6b:57:c5:db:1a: b9:b4:64:4c:cc:6b:94:07:cf:de:72:2a:fc:08:8a: 13:7f:26:62:06:cd:51:70:b8:59:fe:bc:2e:13:3f: 1d:4d:36:83:bb:5b:7a:e8:80:6d:10:84:52:53:cb: 01:d1:9f:a2:b0:c1:cf:ca:61:13:45:94:9d:71:4b: 9a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B4:12:4E:13:03:23:9E:2D:9D:50:86:EA:2C:16:95:4D:9D:E7:10 X509v3 Authority Key Identifier: keyid:FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/obQSThMDI54tnVCG6iwWlU2d5xA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.96.208.0/22 IPv6: 2a06:180::/29 Signature Algorithm: sha256WithRSAEncryption 3d:46:76:69:1f:17:5d:fa:58:07:da:2b:c0:eb:4a:f8:85:5d: ef:0d:b6:82:ce:b9:6b:4d:2c:ea:55:ef:7a:8f:5b:f2:a7:db: 29:37:1c:6c:d9:c4:80:4d:e9:09:74:ba:4a:78:8e:e0:dd:e3: f3:0f:11:88:b4:ce:92:9e:5e:e1:99:f6:b8:d5:c5:72:5d:78: 55:75:7e:07:a6:54:54:43:f1:0f:5a:d9:a3:a0:75:57:8a:47: c4:24:02:a2:ea:ce:5d:c3:77:b2:c9:e3:2f:9d:bf:1b:07:9c: 78:a3:f9:b8:57:de:fb:de:1b:88:fe:94:74:e1:e5:80:c0:ec: bb:2e:60:cc:b8:d2:67:96:21:e7:d6:0c:62:43:e0:18:bd:ca: 96:f0:51:40:fb:c4:c5:ca:91:d3:aa:e4:78:dd:f1:63:2b:11: b0:64:eb:4d:0b:9f:4c:65:7f:c5:31:dc:1f:12:fe:ad:55:0a: e2:83:2a:e4:fc:85:ee:9c:05:c4:9e:eb:57:75:35:d3:62:6a: 70:df:f1:50:90:a5:30:a7:bb:97:f5:44:94:e7:e8:46:6f:8a: 1a:25:05:cf:48:78:f8:0a:3b:29:c7:af:53:64:04:26:87:62: 6f:f6:c1:92:88:42:53:ce:38:04:54:74:6b:2e:36:96:f7:c1: a2:83:72:60 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NL4qQsLjQCJgUSqBKM1CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlM2QyM2EzOWVkMzY1NmY5YTYwNjRiNjA5ZDAyYTJmNmU0 YTM4MjcwHhcNMjYwMTAxMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWI0MTI0ZTEzMDMyMzllMmQ5ZDUwODZlYTJjMTY5NTRkOWRlNzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojo5dFXogeFjLcJJYKawLWM3nDVv fmHN8j+uB6bgyLDnwC+mquJzgDZsGGredJt4HGggtjh+lZ0GEOth9JB2eg+83diF 1AXEGlGFhgvtM5ODnFJodn/sAd+0SIAsntuGeGOyLH8MHFsTm9zgcV1qQl3OUDLK Ia1Wb5UKX7H1u5bRQERYAT9TvAi2DD/WrWKI26T46ZtG5MsWJLuWG7ESh/zFG6TK FxXOqDglITod5dYXBUTjsUBmKUDUPq/7a1fF2xq5tGRMzGuUB8/ecir8CIoTfyZi Bs1RcLhZ/rwuEz8dTTaDu1t66IBtEIRSU8sB0Z+isMHPymETRZSdcUua5wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKG0Ek4TAyOeLZ1QhuosFpVNnecQMB8GA1UdIwQY MBaAFP49I6Oe02VvmmBktgnQKi9uSjgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84ZTYyZTktNDA2ZC00YWIwLThmZGIt ZDlhODA4ZWMxYWIxLzEvb2JRU1RoTURJNTR0blZDRzZpd1dsVTJkNXhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy84ZTYyZTktNDA2ZC00YWIwLThmZGItZDlhODA4ZWMxYWIx LzEvX2owam81N1RaVy1hWUdTMkNkQXFMMjVLT0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWDQMA0E AgACMAcDBQMqBgGAMA0GCSqGSIb3DQEBCwUAA4IBAQA9RnZpHxdd+lgH2ivA60r4 hV3vDbaCzrlrTSzqVe96j1vyp9spNxxs2cSATekJdLpKeI7g3ePzDxGItM6Snl7h mfa41cVyXXhVdX4HplRUQ/EPWtmjoHVXikfEJAKi6s5dw3eyyeMvnb8bB5x4o/m4 V9773huI/pR04eWAwOy7LmDMuNJnliHn1gxiQ+AYvcqW8FFA+8TFypHTquR43fFj KxGwZOtNC59MZX/FMdwfEv6tVQrigyrk/IXunAXEnutXdTXTYmpw3/FQkKUwp7uX 9USU5+hGb4oaJQXPSHj4Cjspx69TZAQmh2Jv9sGSiEJTzjgEVHRrLjaW98Gig3Jg -----END CERTIFICATE-----Generated at Tue Jan 20 06:59:13 2026 by rpki-client