This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/0QHW6BS2yyw5qTyp4zcRaHP-17U.roa File: 0QHW6BS2yyw5qTyp4zcRaHP-17U.roa (raw, json) Hash identifier: +rXufiuFMtIa08EoT1bUhTlLA23WdtsleKjffAHj7cU= Subject key identifier: D1:01:D6:E8:14:B6:CB:2C:39:A9:3C:A9:E3:37:11:68:73:FE:D7:B5 Certificate issuer: /CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d Certificate serial: 019B7C7F934A3015E95AC6E1149B3B060FC7 Authority key identifier: AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/0QHW6BS2yyw5qTyp4zcRaHP-17U.roa Signing time: Fri 02 Jan 2026 02:18:14 +0000 ROA not before: Fri 02 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60645 IP address blocks: 185.32.4.0/22 maxlen: 22 2a04:3dc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:93:4a:30:15:e9:5a:c6:e1:14:9b:3b:06:0f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d Validity Not Before: Jan 2 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d101d6e814b6cb2c39a93ca9e337116873fed7b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:4d:fe:e4:b9:d7:a2:62:06:15:54:75:cc: 6a:bb:d6:cd:63:16:b4:6a:f7:39:78:aa:f0:52:80: 21:c1:6f:1f:75:eb:ce:bf:e5:bf:59:a3:e6:b1:48: 6d:4b:c6:63:56:ad:7e:b5:91:40:6b:31:47:96:d7: fd:1d:bf:a0:1a:c9:2f:61:9f:ad:78:20:cb:fa:92: d4:ff:19:41:0b:af:38:b8:a4:b6:7e:a3:9d:5f:e3: 81:cb:99:87:e8:73:db:60:f3:18:30:77:bb:2c:8b: 83:83:7a:98:fe:16:2f:c1:83:6f:b9:ee:01:84:4a: f4:66:29:12:bc:72:3b:86:7b:64:1e:da:62:ba:4a: a8:aa:17:8d:1a:df:ec:fb:24:48:e8:de:fe:25:88: ef:3b:de:ab:a6:9a:a9:57:86:1c:50:d3:d2:eb:fa: 2e:1b:e0:eb:cc:a5:34:70:03:15:a4:e9:a5:05:a7: c8:3a:d2:b1:99:02:6a:92:91:e6:e7:3a:32:9f:70: c6:5c:b3:e5:cb:04:e6:e3:85:5d:b5:a7:62:91:fc: f9:2a:eb:ef:a5:56:43:5e:d6:76:fd:d1:9a:68:45: 17:ab:be:d6:a4:29:01:8c:fb:4c:77:5a:b4:bd:b8: 4c:13:d5:7e:ea:60:be:01:fa:85:4b:e9:cd:08:56: 73:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:01:D6:E8:14:B6:CB:2C:39:A9:3C:A9:E3:37:11:68:73:FE:D7:B5 X509v3 Authority Key Identifier: keyid:AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/0QHW6BS2yyw5qTyp4zcRaHP-17U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.4.0/22 IPv6: 2a04:3dc0::/29 Signature Algorithm: sha256WithRSAEncryption 58:eb:4f:68:cd:df:65:96:88:84:7b:6a:88:5d:ae:04:fb:14: e1:f4:f3:de:0b:1c:45:da:07:33:7e:b3:ec:f6:a0:e5:97:df: f9:4c:6a:6d:fd:3c:db:c8:5f:6f:6b:d6:db:c1:ce:c5:23:58: 5e:3c:58:a7:c9:c7:9f:a2:75:3d:16:5f:c6:2c:17:e1:ae:6d: 62:c9:01:75:7b:1f:03:1f:c1:3d:1d:4c:e0:d1:00:f5:9b:30: ec:2a:1f:0a:00:20:31:be:2d:bf:bb:92:30:db:2b:58:d5:a4: 64:d0:da:dd:55:f4:6d:56:8c:3d:ec:a3:c1:9e:b1:c1:42:45: 37:fc:e2:28:8a:29:54:ba:ab:04:54:b0:e7:c1:fa:78:b3:47: 18:ba:08:3c:25:62:35:19:76:65:3f:19:3b:4d:6b:b0:b7:89: 4f:5b:10:56:d9:73:e9:39:58:1e:d7:1c:77:dc:ae:cb:91:ab: 1e:09:0d:24:3c:aa:1d:fa:88:8c:2d:93:a5:ec:b1:22:ab:63: 02:3d:16:30:e3:99:ed:e2:f4:7a:ce:66:37:cf:02:8b:0e:e1: 11:fb:5c:92:47:36:36:8e:c9:c1:39:68:88:ef:3c:b2:98:7f: 3a:54:f4:f2:3e:33:33:79:92:53:95:30:0d:48:ee:92:cf:f8: a6:95:f7:2d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f5NKMBXpWsbhFJs7Bg/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMWEwYjljYzVjZThiZmQ5ZWUyNmQwOWQ3ZTkxMTUxYTQy ZDM3MGQwHhcNMjYwMTAyMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTAxZDZlODE0YjZjYjJjMzlhOTNjYTllMzM3MTE2ODczZmVkN2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMFN/uS516JiBhVUdcxqu9bNYxa0 avc5eKrwUoAhwW8fdevOv+W/WaPmsUhtS8ZjVq1+tZFAazFHltf9Hb+gGskvYZ+t eCDL+pLU/xlBC684uKS2fqOdX+OBy5mH6HPbYPMYMHe7LIuDg3qY/hYvwYNvue4B hEr0ZikSvHI7hntkHtpiukqoqheNGt/s+yRI6N7+JYjvO96rppqpV4YcUNPS6/ou G+DrzKU0cAMVpOmlBafIOtKxmQJqkpHm5zoyn3DGXLPlywTm44Vdtadikfz5Kuvv pVZDXtZ2/dGaaEUXq77WpCkBjPtMd1q0vbhME9V+6mC+AfqFS+nNCFZzDQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNEB1ugUtsssOak8qeM3EWhz/te1MB8GA1UdIwQY MBaAFKwaC5zFzov9nuJtCdfpEVGkLTcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckJvTG5NWE9pXzJlNG0wSjEta1JVYVF0TncwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMzI4NzItODhhMy00ZTg0LTlmODMt YWE3MzUzZDRkOThmLzEvMFFIVzZCUzJ5eXc1cVR5cDR6Y1JhSFAtMTdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9hMzI4NzItODhhMy00ZTg0LTlmODMtYWE3MzUzZDRkOThm LzEvckJvTG5NWE9pXzJlNG0wSjEta1JVYVF0TncwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSAEMA0E AgACMAcDBQMqBD3AMA0GCSqGSIb3DQEBCwUAA4IBAQBY609ozd9lloiEe2qIXa4E +xTh9PPeCxxF2gczfrPs9qDll9/5TGpt/TzbyF9va9bbwc7FI1hePFinycefonU9 Fl/GLBfhrm1iyQF1ex8DH8E9HUzg0QD1mzDsKh8KACAxvi2/u5Iw2ytY1aRk0Nrd VfRtVow97KPBnrHBQkU3/OIoiilUuqsEVLDnwfp4s0cYugg8JWI1GXZlPxk7TWuw t4lPWxBW2XPpOVge1xx33K7LkaseCQ0kPKod+oiMLZOl7LEiq2MCPRYw45nt4vR6 zmY3zwKLDuER+1ySRzY2jsnBOWiI7zyymH86VPTyPjMzeZJTlTANSO6Sz/imlfct -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:33 2026 by rpki-client