This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/OoWh-cPJxIo9-JnYWW14PlGkMmw.roa File: OoWh-cPJxIo9-JnYWW14PlGkMmw.roa (raw, json) Hash identifier: cwPQ8D+hZiBjw4HTvZt5RVfnCwIHlW6ts6eZs3ca5ro= Subject key identifier: 3A:85:A1:F9:C3:C9:C4:8A:3D:F8:99:D8:59:6D:78:3E:51:A4:32:6C Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019B7C1317627441B8002D33C7D9BDB949E8 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/OoWh-cPJxIo9-JnYWW14PlGkMmw.roa Signing time: Fri 02 Jan 2026 00:19:44 +0000 ROA not before: Fri 02 Jan 2026 00:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 89.185.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:17:62:74:41:b8:00:2d:33:c7:d9:bd:b9:49:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a85a1f9c3c9c48a3df899d8596d783e51a4326c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:72:e5:17:f4:01:db:69:15:51:50:20:9e:60: 85:f4:47:56:25:50:b2:58:d4:ad:1c:e4:37:b5:ea: 0a:cd:e9:c8:bd:93:2e:05:d4:b5:ac:d0:24:71:c9: 27:7c:a8:a8:9a:b1:4f:c0:fe:df:d7:59:9a:48:27: 2d:33:96:4f:6e:13:ce:12:b7:de:eb:22:de:45:c4: 7a:c0:29:44:50:e4:7f:7a:86:e8:38:81:57:a1:77: 65:80:d6:04:b6:9a:3f:09:1d:20:99:2c:1f:a6:0c: 9f:e8:ac:c6:6c:18:82:8f:03:f1:d3:38:da:dd:a3: 27:6d:35:e1:22:2e:56:55:8c:d7:d5:b8:a0:0d:c2: 87:f6:62:0e:c9:e0:da:65:7e:24:1b:ca:5e:e3:cc: 43:a9:27:64:48:8e:85:07:ca:76:f0:8a:ce:ef:d7: 18:0b:fd:12:26:61:ab:38:63:28:02:ae:90:0b:e1: e4:2a:3d:75:8b:72:60:c3:0a:20:b6:b0:3a:b8:2c: 31:1b:25:cc:c7:55:9e:d4:34:b5:24:fc:7c:29:fa: 53:e9:76:a3:bc:10:50:03:c1:a6:3d:86:b9:14:a6: c3:4d:c2:30:3d:a1:81:cd:10:ed:0e:35:6c:8e:0b: cc:b9:e0:60:b7:b1:e9:a6:87:0c:78:b0:29:c2:89: 0f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:85:A1:F9:C3:C9:C4:8A:3D:F8:99:D8:59:6D:78:3E:51:A4:32:6C X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/OoWh-cPJxIo9-JnYWW14PlGkMmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.85.0/24 Signature Algorithm: sha256WithRSAEncryption ac:52:33:f8:ff:e3:17:25:20:0c:a8:93:86:99:73:bc:7e:c5: c4:d9:fb:ec:88:f8:3d:e2:60:cf:af:70:30:20:37:5b:53:61: 55:4e:ac:3b:06:34:13:15:06:3c:f7:0a:da:f2:28:a0:98:31: 61:bb:15:19:cc:6a:59:29:8b:23:a2:3a:1e:08:08:27:88:6b: e0:0d:b0:fe:33:ae:99:51:37:ed:63:d2:de:45:9d:3c:73:7c: 08:69:57:d4:22:c3:88:ac:eb:e8:73:2d:a2:02:6b:05:70:15: 00:0a:4b:19:8c:18:b2:07:d8:fb:a1:bf:44:5b:3f:75:f2:ac: aa:b6:fe:14:77:f2:4f:d3:51:63:69:10:97:c7:8c:8f:22:5b: 16:79:0f:d5:b0:43:4f:ac:96:f6:c7:2d:ae:df:ff:a9:25:17: ee:ac:22:03:c1:76:b8:cf:1c:20:de:07:6a:31:2f:0d:f1:ef: 10:5d:8c:a8:cd:22:c5:59:56:cb:7a:d0:ea:d5:d2:e6:e2:9d: bc:c7:44:d9:f1:c3:94:30:02:9e:f0:2d:c1:37:03:3b:51:70: e0:6f:5e:d4:9d:74:78:6b:78:6e:bd:66:22:66:08:70:e1:05: 95:b5:8a:79:13:52:6a:9f:3f:4e:0a:58:b8:98:e6:47:5b:36: f8:fb:01:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ExdidEG4AC0zx9m9uUnoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTg1YTFmOWMzYzljNDhhM2RmODk5ZDg1OTZkNzgzZTUxYTQzMjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXLlF/QB22kVUVAgnmCF9EdWJVCy WNStHOQ3teoKzenIvZMuBdS1rNAkccknfKiomrFPwP7f11maSCctM5ZPbhPOErfe 6yLeRcR6wClEUOR/eoboOIFXoXdlgNYEtpo/CR0gmSwfpgyf6KzGbBiCjwPx0zja 3aMnbTXhIi5WVYzX1bigDcKH9mIOyeDaZX4kG8pe48xDqSdkSI6FB8p28IrO79cY C/0SJmGrOGMoAq6QC+HkKj11i3JgwwogtrA6uCwxGyXMx1We1DS1JPx8KfpT6Xaj vBBQA8GmPYa5FKbDTcIwPaGBzRDtDjVsjgvMueBgt7HppocMeLApwokPFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDqFofnDycSKPfiZ2FlteD5RpDJsMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvT29XaC1jUEp4SW85LUpuWVdXMTRQbEdrTW13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWblVMA0G CSqGSIb3DQEBCwUAA4IBAQCsUjP4/+MXJSAMqJOGmXO8fsXE2fvsiPg94mDPr3Aw IDdbU2FVTqw7BjQTFQY89wra8iigmDFhuxUZzGpZKYsjojoeCAgniGvgDbD+M66Z UTftY9LeRZ08c3wIaVfUIsOIrOvocy2iAmsFcBUACksZjBiyB9j7ob9EWz918qyq tv4Ud/JP01FjaRCXx4yPIlsWeQ/VsENPrJb2xy2u3/+pJRfurCIDwXa4zxwg3gdq MS8N8e8QXYyozSLFWVbLetDq1dLm4p28x0TZ8cOUMAKe8C3BNwM7UXDgb17UnXR4 a3huvWYiZghw4QWVtYp5E1Jqnz9OCli4mOZHWzb4+wGt -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:36 2026 by rpki-client