This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ox8TscWhpuJA2tZtd5zyrQISPVc.roa File: Ox8TscWhpuJA2tZtd5zyrQISPVc.roa (raw, json) Hash identifier: h/v+RbpoRQLGznNUVFirFT/hSF1xvp/CIo3MJSUx3ic= Subject key identifier: 3B:1F:13:B1:C5:A1:A6:E2:40:DA:D6:6D:77:9C:F2:AD:02:12:3D:57 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E270C9A5C7246BD8DCEA8AE4DCBDB Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ox8TscWhpuJA2tZtd5zyrQISPVc.roa Signing time: Thu 01 Jan 2026 12:17:49 +0000 ROA not before: Thu 01 Jan 2026 12:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33387 IP address blocks: 185.120.14.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 06:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:27:0c:9a:5c:72:46:bd:8d:ce:a8:ae:4d:cb:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b1f13b1c5a1a6e240dad66d779cf2ad02123d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9c:bb:56:3f:e5:0a:45:e1:9e:9b:87:08:7d: 52:ff:ff:f8:3d:b2:28:19:65:1c:5f:84:75:11:ed: c4:b8:7c:dc:40:f2:2c:34:31:01:25:7a:75:b9:15: a7:0b:1d:94:ff:7a:00:62:d6:7c:92:25:4d:46:85: 06:5c:50:45:e6:2f:3b:a0:bc:c3:33:1f:63:b9:3e: 71:76:d8:ae:19:70:43:cb:cd:dd:c6:7a:26:1d:10: 9c:27:5e:2a:70:c4:10:42:6c:7e:71:04:18:dd:22: d0:8e:35:cd:f8:ce:43:ac:6c:6b:d1:5c:c7:4e:a1: 15:d1:86:e5:8f:ed:61:a5:b7:e5:50:2f:bf:43:34: 81:ac:1d:38:ba:82:7f:08:3d:a9:65:a6:29:7e:a9: 48:14:40:94:a9:8f:9a:86:fb:2f:69:45:b3:ac:65: 06:50:69:97:0f:74:93:99:36:b6:1e:4d:5a:d9:1d: 9e:4c:81:8d:cf:e3:ee:02:be:45:c5:b6:62:0e:14: 28:16:0d:c7:b2:73:56:81:45:32:42:48:71:f7:44: 86:72:86:99:86:af:d2:95:18:f7:3a:97:55:8f:a9: 37:a6:fc:a1:0b:2b:f8:c4:1e:3b:0c:5d:b2:cd:a7: 37:bc:5f:07:38:87:89:8b:cb:61:8c:c3:d4:f4:fd: d5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1F:13:B1:C5:A1:A6:E2:40:DA:D6:6D:77:9C:F2:AD:02:12:3D:57 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ox8TscWhpuJA2tZtd5zyrQISPVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.14.0/24 Signature Algorithm: sha256WithRSAEncryption 48:d5:8f:58:a2:fe:4d:fb:7a:bb:2c:66:14:2e:00:b8:36:11: 1c:95:cf:af:3a:89:6c:5f:25:9b:01:00:fa:63:88:f1:b7:81: f5:da:4c:4f:db:75:cd:92:66:98:d6:15:c8:a3:2f:fb:d8:00: 3d:ea:57:00:c8:27:26:5d:d8:47:c6:3e:a9:4a:b7:9a:f9:ec: a2:9d:22:bf:aa:9f:8f:3f:bb:48:5a:c4:14:c6:7b:26:2a:14: 1a:2e:f3:17:69:27:62:f1:9d:74:b2:4c:ce:f6:79:54:a9:35: bc:d8:78:97:95:9c:13:b4:97:5c:5d:48:f6:64:37:98:fb:7f: b5:51:5c:41:9e:b0:87:54:a6:4c:50:7e:4f:52:eb:a3:0e:a9: 8a:45:40:5b:8e:08:53:45:c6:27:ca:8a:99:d8:68:32:c1:80: d6:9e:27:8b:70:29:66:8f:f3:95:ec:8c:b2:25:d5:6b:c9:6f: dd:63:98:b6:49:bd:2f:7d:e9:43:d1:f7:44:d3:68:62:56:01: b8:aa:26:11:6b:a9:2b:f3:26:5d:7d:a1:d1:0b:10:3d:fc:22: b6:2e:d6:24:f0:c8:ce:c3:06:c6:dc:21:2f:de:ef:82:9c:4f: f6:c5:7f:5f:dc:c8:59:cf:50:b1:a3:74:be:73:0d:10:55:2a: 35:73:39:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ficMmlxyRr2NzqiuTcvbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjFmMTNiMWM1YTFhNmUyNDBkYWQ2NmQ3NzljZjJhZDAyMTIzZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Zy7Vj/lCkXhnpuHCH1S///4PbIo GWUcX4R1Ee3EuHzcQPIsNDEBJXp1uRWnCx2U/3oAYtZ8kiVNRoUGXFBF5i87oLzD Mx9juT5xdtiuGXBDy83dxnomHRCcJ14qcMQQQmx+cQQY3SLQjjXN+M5DrGxr0VzH TqEV0Yblj+1hpbflUC+/QzSBrB04uoJ/CD2pZaYpfqlIFECUqY+ahvsvaUWzrGUG UGmXD3STmTa2Hk1a2R2eTIGNz+PuAr5FxbZiDhQoFg3HsnNWgUUyQkhx90SGcoaZ hq/SlRj3OpdVj6k3pvyhCyv4xB47DF2yzac3vF8HOIeJi8thjMPU9P3VqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDsfE7HFoabiQNrWbXec8q0CEj1XMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvT3g4VHNjV2hwdUpBMnRadGQ1enlyUUlTUFZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXgOMA0G CSqGSIb3DQEBCwUAA4IBAQBI1Y9Yov5N+3q7LGYULgC4NhEclc+vOolsXyWbAQD6 Y4jxt4H12kxP23XNkmaY1hXIoy/72AA96lcAyCcmXdhHxj6pSrea+eyinSK/qp+P P7tIWsQUxnsmKhQaLvMXaSdi8Z10skzO9nlUqTW82HiXlZwTtJdcXUj2ZDeY+3+1 UVxBnrCHVKZMUH5PUuujDqmKRUBbjghTRcYnyoqZ2GgywYDWnieLcClmj/OV7Iyy JdVryW/dY5i2Sb0vfelD0fdE02hiVgG4qiYRa6kr8yZdfaHRCxA9/CK2LtYk8MjO wwbG3CEv3u+CnE/2xX9f3MhZz1Cxo3S+cw0QVSo1cznD -----END CERTIFICATE-----Generated at Sun Jan 11 12:33:47 2026 by rpki-client