This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/O2gYXWLOZ1baGkkO6V4ffkZOf14.roa File: O2gYXWLOZ1baGkkO6V4ffkZOf14.roa (raw, json) Hash identifier: 0azU39AJWRQ9GwuVFR5XGckgzC3aJ2sgglAZkdjKoC0= Subject key identifier: 3B:68:18:5D:62:CE:67:56:DA:1A:49:0E:E9:5E:1F:7E:46:4E:7F:5E Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209 Certificate serial: 019B7D5BF3C1323E4DF7FFCA88AF9CF46463 Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/O2gYXWLOZ1baGkkO6V4ffkZOf14.roa Signing time: Fri 02 Jan 2026 06:18:56 +0000 ROA not before: Fri 02 Jan 2026 06:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57124 IP address blocks: 141.105.144.0/21 maxlen: 21 185.117.76.0/22 maxlen: 22 2a01:8980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:f3:c1:32:3e:4d:f7:ff:ca:88:af:9c:f4:64:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209 Validity Not Before: Jan 2 06:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b68185d62ce6756da1a490ee95e1f7e464e7f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:00:db:7c:94:ba:4a:6f:7a:48:22:7d:7e: 48:1b:22:bb:2c:f6:ed:fd:a8:07:23:71:ca:65:c7: e9:ca:11:62:5c:08:09:21:ac:03:d9:24:97:c2:85: 31:01:7e:82:e4:62:ed:cc:af:1d:f0:27:a6:b5:29: f2:4e:af:c2:d6:12:18:62:6f:89:6b:1e:e3:98:f1: 9d:68:21:4e:a8:91:7f:ef:c1:05:de:a6:16:ed:bf: cc:48:46:97:9a:3c:39:83:fd:46:f8:11:a8:91:66: 58:56:7e:2a:06:cc:b5:cd:32:b5:f3:52:dc:44:00: 84:af:9e:a4:4a:ee:2c:82:bf:c9:1c:69:a8:11:2c: 44:44:82:ea:63:69:44:62:09:9d:c0:3e:00:c8:87: 32:c8:e4:5b:ab:9f:3d:fd:52:e2:b6:a6:9c:93:a4: 46:f3:eb:e8:93:72:db:89:9d:b2:6a:40:74:2f:3c: 98:f1:b0:3a:0f:ce:9f:b9:f0:fc:dd:ca:1b:9d:56: 66:f4:be:18:c5:3f:1e:c1:c0:db:28:08:9c:7c:f0: 0e:6c:6e:f4:e8:47:85:6c:5f:c9:11:6a:7f:ee:b4: b3:d7:9d:be:1a:a6:09:ef:70:8d:df:a5:87:ea:0a: 64:d3:ca:9e:64:39:05:09:9e:40:93:bc:ac:f9:2d: 54:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:68:18:5D:62:CE:67:56:DA:1A:49:0E:E9:5E:1F:7E:46:4E:7F:5E X509v3 Authority Key Identifier: keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/O2gYXWLOZ1baGkkO6V4ffkZOf14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.105.144.0/21 185.117.76.0/22 IPv6: 2a01:8980::/32 Signature Algorithm: sha256WithRSAEncryption 43:19:ce:8a:6b:e2:44:95:53:d2:4c:08:bc:b5:3f:9f:93:ae: 1e:d0:cc:c9:4d:c5:cd:a0:3d:01:e2:2a:cd:96:d9:6c:5a:7c: e3:ce:85:af:87:b1:92:b9:e6:de:10:96:69:b2:6e:06:d8:25: 13:7d:c8:5a:e1:9f:59:3a:4a:5e:7d:f8:58:d8:1b:bf:77:dd: d0:de:75:cd:d2:2f:28:00:1a:a1:bf:4c:9d:47:c7:52:f7:82: 7d:c5:a8:a2:b7:b3:cb:f3:86:d3:de:8f:bf:8a:43:73:fa:44: b4:a2:61:96:b8:8c:9c:d6:66:a1:76:84:1c:6b:98:fd:4b:67: 6e:37:b5:5d:71:24:86:58:52:46:4d:b3:6f:a6:4f:90:8a:bc: bc:e7:ed:e4:b4:c4:0f:77:7e:56:0f:72:12:c3:12:23:28:98: 80:85:b3:b8:cd:d1:ce:e4:3c:ac:6a:40:90:85:e0:17:b1:e9: 74:53:82:56:9b:63:6e:91:ed:eb:6d:c3:d0:bb:dd:82:6b:b0: 84:7e:b8:9e:73:3b:fc:88:7e:c8:65:54:f3:fc:c2:c8:76:98: d0:fa:e3:36:4a:52:39:a9:8a:d3:94:7e:8d:ad:f5:74:39:cb: 69:97:84:4f:8b:f7:ff:00:12:c3:84:07:f5:79:3d:8b:06:b8: 26:ab:28:0f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9W/PBMj5N9//KiK+c9GRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMDFjZGEwMzAyYjgxM2ViMTQ1NTc5YWQ4MWY1ZWQ3ZDI5 YzAyMDkwHhcNMjYwMTAyMDYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjY4MTg1ZDYyY2U2NzU2ZGExYTQ5MGVlOTVlMWY3ZTQ2NGU3ZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqekA23yUukpvekgifX5IGyK7LPbt /agHI3HKZcfpyhFiXAgJIawD2SSXwoUxAX6C5GLtzK8d8CemtSnyTq/C1hIYYm+J ax7jmPGdaCFOqJF/78EF3qYW7b/MSEaXmjw5g/1G+BGokWZYVn4qBsy1zTK181Lc RACEr56kSu4sgr/JHGmoESxERILqY2lEYgmdwD4AyIcyyORbq589/VLitqack6RG 8+vok3LbiZ2yakB0LzyY8bA6D86fufD83cobnVZm9L4YxT8ewcDbKAicfPAObG70 6EeFbF/JEWp/7rSz152+GqYJ73CN36WH6gpk08qeZDkFCZ5Ak7ys+S1ULQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDtoGF1izmdW2hpJDuleH35GTn9eMB8GA1UdIwQY MBaAFM0BzaAwK4E+sUVXmtgfXtfSnAIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelFITm9EQXJnVDZ4UlZlYTJCOWUxOUtjQWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zZTM0ODMtMTg0NS00NDJkLWE1OWEt ZGQ3MjU1MGQ3OGFjLzEvTzJnWVhXTE9aMWJhR2trTzZWNGZma1pPZjE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zZTM0ODMtMTg0NS00NDJkLWE1OWEtZGQ3MjU1MGQ3OGFj LzEvelFITm9EQXJnVDZ4UlZlYTJCOWUxOUtjQWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDjWmQAwQC uXVMMA0EAgACMAcDBQAqAYmAMA0GCSqGSIb3DQEBCwUAA4IBAQBDGc6Ka+JElVPS TAi8tT+fk64e0MzJTcXNoD0B4irNltlsWnzjzoWvh7GSuebeEJZpsm4G2CUTfcha 4Z9ZOkpeffhY2Bu/d93Q3nXN0i8oABqhv0ydR8dS94J9xaiit7PL84bT3o+/ikNz +kS0omGWuIyc1mahdoQca5j9S2duN7VdcSSGWFJGTbNvpk+Qiry85+3ktMQPd35W D3ISwxIjKJiAhbO4zdHO5DysakCQheAXsel0U4JWm2Nuke3rbcPQu92Ca7CEfrie czv8iH7IZVTz/MLIdpjQ+uM2SlI5qYrTlH6NrfV0Octpl4RPi/f/ABLDhAf1eT2L BrgmqygP -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:47 2026 by rpki-client