This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OIGK3fIEiFmZfmRpYAlWEkdgqdk.roa File: OIGK3fIEiFmZfmRpYAlWEkdgqdk.roa (raw, json) Hash identifier: hcYwqWF447eq3lyDsVWb4+xK0zgKnwM4ldW8d0AIi/g= Subject key identifier: 38:81:8A:DD:F2:04:88:59:99:7E:64:69:60:09:56:12:47:60:A9:D9 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13827F05FBF905C9131BFF65A5EF7E Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OIGK3fIEiFmZfmRpYAlWEkdgqdk.roa Signing time: Fri 02 Jan 2026 00:20:11 +0000 ROA not before: Fri 02 Jan 2026 00:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200019 IP address blocks: 185.223.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:82:7f:05:fb:f9:05:c9:13:1b:ff:65:a5:ef:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38818addf2048859997e6469600956124760a9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:16:73:f7:76:ee:d6:51:4e:3a:46:6a:d9: c5:92:ca:9b:48:3d:28:e3:ba:90:ed:6b:a0:dc:0d: a8:5e:30:33:21:bd:6b:17:f4:3f:9b:20:fc:7d:46: 31:96:64:e8:d7:19:77:ca:d3:a3:3e:3f:1d:cd:02: 2b:c5:07:e3:47:8c:6a:60:b6:20:4e:73:25:1b:8a: a8:e7:a1:f5:91:8b:16:f0:4a:18:ea:a4:6e:6d:c8: 50:fa:ec:b3:b7:17:7b:b5:24:b6:46:2a:72:25:3a: e3:1a:7a:1f:ff:4e:12:a6:00:b8:fd:f2:39:8c:2d: 8d:f0:00:d2:1d:61:36:0f:7b:5f:23:cd:84:32:90: a7:8e:1a:e7:f8:d5:cc:39:c3:df:54:80:72:fc:52: e1:15:a0:e3:bc:e4:40:15:9d:64:96:06:22:36:64: d2:30:31:97:91:53:9b:57:88:8f:c2:4a:6c:f7:e5: f0:37:9e:93:71:83:18:d7:40:32:2a:90:9b:c0:e3: 1f:98:bb:b1:5e:ed:08:76:5f:6b:60:b0:d9:4a:8d: 08:8b:bc:87:70:e5:c2:91:09:1f:71:e4:0e:77:9c: 74:1d:00:d5:c2:36:97:09:c3:7c:a5:1c:45:9e:e9: ea:7a:1f:7c:50:61:1c:64:fe:10:db:58:27:c8:48: d7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:81:8A:DD:F2:04:88:59:99:7E:64:69:60:09:56:12:47:60:A9:D9 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OIGK3fIEiFmZfmRpYAlWEkdgqdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.79.0/24 Signature Algorithm: sha256WithRSAEncryption a2:a8:f4:7a:e0:82:0d:c5:bc:ca:84:00:e5:ec:13:4a:85:f2: a8:dd:30:45:a3:65:f6:7f:06:86:b1:52:6b:9b:ef:bb:50:75: 5f:a8:1b:68:8a:53:3f:e2:db:cc:78:68:8f:41:ba:f1:9c:b0: 36:61:80:93:2f:5c:4d:5f:46:01:ba:44:73:5f:e2:af:68:1c: f0:ee:ff:47:37:ec:91:02:07:9a:55:d4:31:31:fb:08:d9:b8: 64:27:94:29:77:9c:bf:07:17:39:bc:de:6e:0e:ea:8b:f0:9a: 25:79:49:53:bc:56:f7:9c:67:18:64:3e:fb:e0:2e:a1:82:9c: f5:66:3b:ee:19:e8:3b:38:f9:40:65:bb:93:47:87:83:13:48: 5e:d8:29:de:e1:ed:89:1f:ae:ef:ef:88:89:9e:44:07:bf:5d: f1:cf:c2:4c:9b:70:98:d9:4c:38:07:9c:2b:57:bd:d3:fd:a5: 77:56:58:4f:2b:18:f0:26:49:c7:fa:d0:09:a2:96:aa:f4:c7: fc:83:8b:97:ff:ee:6e:2e:a0:e0:09:17:bb:53:fa:5e:42:6d: 6f:20:09:21:08:25:50:7c:c6:a2:a3:cb:1d:43:d1:fa:f3:a4: db:a9:12:e3:6b:13:e5:51:6f:f4:d4:04:1b:d5:c1:b2:ce:7f: ab:d1:68:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E4J/Bfv5BckTG/9lpe9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODgxOGFkZGYyMDQ4ODU5OTk3ZTY0Njk2MDA5NTYxMjQ3NjBhOWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUwWc/d27tZRTjpGatnFksqbSD0o 47qQ7Wug3A2oXjAzIb1rF/Q/myD8fUYxlmTo1xl3ytOjPj8dzQIrxQfjR4xqYLYg TnMlG4qo56H1kYsW8EoY6qRubchQ+uyztxd7tSS2RipyJTrjGnof/04SpgC4/fI5 jC2N8ADSHWE2D3tfI82EMpCnjhrn+NXMOcPfVIBy/FLhFaDjvORAFZ1klgYiNmTS MDGXkVObV4iPwkps9+XwN56TcYMY10AyKpCbwOMfmLuxXu0Idl9rYLDZSo0Ii7yH cOXCkQkfceQOd5x0HQDVwjaXCcN8pRxFnunqeh98UGEcZP4Q21gnyEjXCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDiBit3yBIhZmX5kaWAJVhJHYKnZMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvT0lHSzNmSUVpRm1aZm1ScFlBbFdFa2RncWRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud9PMA0G CSqGSIb3DQEBCwUAA4IBAQCiqPR64IINxbzKhADl7BNKhfKo3TBFo2X2fwaGsVJr m++7UHVfqBtoilM/4tvMeGiPQbrxnLA2YYCTL1xNX0YBukRzX+KvaBzw7v9HN+yR AgeaVdQxMfsI2bhkJ5Qpd5y/Bxc5vN5uDuqL8JoleUlTvFb3nGcYZD774C6hgpz1 ZjvuGeg7OPlAZbuTR4eDE0he2Cne4e2JH67v74iJnkQHv13xz8JMm3CY2Uw4B5wr V73T/aV3VlhPKxjwJknH+tAJopaq9Mf8g4uX/+5uLqDgCRe7U/peQm1vIAkhCCVQ fMaio8sdQ9H686TbqRLjaxPlUW/01AQb1cGyzn+r0Wij -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:27 2026 by rpki-client