This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/O_Y6QXqfgR1bT3-qfaN4aqRablI.roa File: O_Y6QXqfgR1bT3-qfaN4aqRablI.roa (raw, json) Hash identifier: AVgxi/LaFBopGraEAcGBwe4wpEI0podi/fhwyy6P7Uo= Subject key identifier: 3B:F6:3A:41:7A:9F:81:1D:5B:4F:7F:AA:7D:A3:78:6A:A4:5A:6E:52 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C136C91FBB2E1797F8546E932D9B25E Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/O_Y6QXqfgR1bT3-qfaN4aqRablI.roa Signing time: Fri 02 Jan 2026 00:20:06 +0000 ROA not before: Fri 02 Jan 2026 00:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 176.125.248.0/24 maxlen: 24 185.222.29.0/24 maxlen: 24 185.240.122.0/24 maxlen: 24 185.251.231.0/24 maxlen: 24 193.8.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:6c:91:fb:b2:e1:79:7f:85:46:e9:32:d9:b2:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bf63a417a9f811d5b4f7faa7da3786aa45a6e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:4d:1f:e0:bf:99:7b:88:f1:ce:03:b2:15: f7:55:a4:06:0a:0c:37:54:3d:67:f5:72:71:54:47: 65:c2:b0:ce:c6:46:79:31:27:c5:e2:94:b4:d4:99: 18:89:6d:de:52:15:15:87:0d:15:66:06:6c:96:c1: b7:f8:fc:60:91:c9:9c:5e:f5:f8:25:23:8f:87:e0: 70:48:7f:1b:5f:9c:a4:82:84:5f:c7:f4:70:b2:0f: 99:7a:a0:ae:f1:07:fc:f9:98:df:9f:17:64:f7:d3: 89:3a:1b:dc:e0:41:ad:8f:77:ca:0e:a9:b0:13:63: 15:32:ef:de:40:5e:95:ce:7d:7b:6b:7b:56:14:c9: 28:da:ec:17:dc:40:a9:ac:6d:c1:2d:7d:2d:f6:21: df:41:54:8d:06:3e:1c:3b:76:5d:36:5d:c2:49:99: ad:5d:9f:b0:87:cf:2b:17:e6:fe:57:90:8e:a0:87: ba:70:56:ee:91:8c:2b:14:de:04:0b:05:bd:8f:53: a7:ec:6f:ef:0f:43:4f:1c:95:e5:14:ed:a6:a7:c0: 69:16:55:21:2c:de:90:e3:1f:94:74:cf:50:24:6b: f6:66:67:4e:38:77:16:97:6d:6a:a9:2f:b2:c2:3b: d1:bf:01:23:06:e4:4d:3c:33:3a:2c:bd:3e:9a:a9: de:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F6:3A:41:7A:9F:81:1D:5B:4F:7F:AA:7D:A3:78:6A:A4:5A:6E:52 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/O_Y6QXqfgR1bT3-qfaN4aqRablI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.125.248.0/24 185.222.29.0/24 185.240.122.0/24 185.251.231.0/24 193.8.112.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:bc:1f:18:35:fb:16:e5:b6:b6:33:0d:02:35:7d:b7:06:20: f1:ad:4c:41:fe:ff:22:21:ad:b8:58:b7:52:1c:08:22:e8:7a: 2e:0e:30:5b:54:a1:3f:fa:6a:68:6d:06:c2:cf:d0:85:d1:6b: 55:64:db:a9:85:07:ff:88:19:3e:5f:47:db:9a:ea:0f:66:8e: 61:1e:23:f2:f9:24:1b:c6:84:2a:0b:6e:3f:0f:ae:f6:1a:94: fc:e2:d0:a7:8e:84:e5:15:62:9c:cb:29:a3:56:97:fd:9a:9c: eb:30:02:b4:ce:fe:18:52:c6:90:e6:09:2d:0b:5e:a7:b9:06: e1:e6:53:d0:aa:8d:1a:51:7d:99:92:98:2f:8f:87:b1:53:d4: 40:c8:bd:23:42:7b:3d:98:15:80:dc:47:77:0e:15:f4:bd:cd: f6:3d:3a:d2:64:82:37:32:9d:3a:4b:48:fa:40:8b:66:84:49: d4:9b:db:65:a5:99:30:17:92:c1:e4:06:e6:3d:34:c8:0b:2d: d0:cd:e7:37:94:88:0d:fc:0f:e1:22:71:6d:79:e0:aa:e6:d6: 06:02:5c:36:d3:a7:73:1c:36:ef:fc:a3:bb:fa:44:22:6e:b1: e6:c1:a1:99:1e:f7:09:7c:d2:d3:76:42:0a:e7:03:de:73:39: c7:d0:24:e2 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8E2yR+7LheX+FRuky2bJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmY2M2E0MTdhOWY4MTFkNWI0ZjdmYWE3ZGEzNzg2YWE0NWE2ZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfxNH+C/mXuI8c4DshX3VaQGCgw3 VD1n9XJxVEdlwrDOxkZ5MSfF4pS01JkYiW3eUhUVhw0VZgZslsG3+PxgkcmcXvX4 JSOPh+BwSH8bX5ykgoRfx/Rwsg+ZeqCu8Qf8+Zjfnxdk99OJOhvc4EGtj3fKDqmw E2MVMu/eQF6Vzn17a3tWFMko2uwX3ECprG3BLX0t9iHfQVSNBj4cO3ZdNl3CSZmt XZ+wh88rF+b+V5COoIe6cFbukYwrFN4ECwW9j1On7G/vD0NPHJXlFO2mp8BpFlUh LN6Q4x+UdM9QJGv2ZmdOOHcWl21qqS+ywjvRvwEjBuRNPDM6LL0+mqneVQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDv2OkF6n4EdW09/qn2jeGqkWm5SMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvT19ZNlFYcWZnUjFiVDMtcWZhTjRhcVJhYmxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAsH34AwQA ud4dAwQAufB6AwQAufvnAwQAwQhwMA0GCSqGSIb3DQEBCwUAA4IBAQCevB8YNfsW 5ba2Mw0CNX23BiDxrUxB/v8iIa24WLdSHAgi6HouDjBbVKE/+mpobQbCz9CF0WtV ZNuphQf/iBk+X0fbmuoPZo5hHiPy+SQbxoQqC24/D672GpT84tCnjoTlFWKcyymj Vpf9mpzrMAK0zv4YUsaQ5gktC16nuQbh5lPQqo0aUX2Zkpgvj4exU9RAyL0jQns9 mBWA3Ed3DhX0vc32PTrSZII3Mp06S0j6QItmhEnUm9tlpZkwF5LB5AbmPTTICy3Q zec3lIgN/A/hInFteeCq5tYGAlw206dzHDbv/KO7+kQibrHmwaGZHvcJfNLTdkIK 5wPecznH0CTi -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:24 2026 by rpki-client