This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/OC2xnBQTRG6dTo8unU-AfiUJoPo.roa File: OC2xnBQTRG6dTo8unU-AfiUJoPo.roa (raw, json) Hash identifier: TCWmomXoe5LhZ7eUQal/1Sd3d3namiJ5LFej1VLenpQ= Subject key identifier: 38:2D:B1:9C:14:13:44:6E:9D:4E:8F:2E:9D:4F:80:7E:25:09:A0:FA Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980 Certificate serial: 019B7EA5A853AF757A801E6D48CE0112B7EE Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/OC2xnBQTRG6dTo8unU-AfiUJoPo.roa Signing time: Fri 02 Jan 2026 12:19:04 +0000 ROA not before: Fri 02 Jan 2026 12:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48296 IP address blocks: 185.7.108.0/22 maxlen: 24 2a03:2640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:a8:53:af:75:7a:80:1e:6d:48:ce:01:12:b7:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980 Validity Not Before: Jan 2 12:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=382db19c1413446e9d4e8f2e9d4f807e2509a0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:32:e4:7d:9f:2e:7e:48:0b:ae:77:34:42: aa:65:bc:28:20:15:c2:97:fc:7a:41:12:ff:1a:e5: a3:45:a1:d2:08:1d:bb:b3:2f:36:e9:0b:dc:d8:ac: 9f:f5:40:75:ef:d8:b9:68:92:d5:bb:8f:3e:74:bb: 4e:01:56:19:61:a3:b4:e5:5f:56:84:ee:dd:49:14: 38:3b:d2:04:f5:fe:25:9c:11:c2:fa:1f:29:54:0f: d5:d6:c5:42:9e:e0:fd:d5:7b:01:ac:91:12:03:bb: b4:a8:a1:db:83:b5:59:3e:ff:3f:ee:f9:a5:7a:da: f5:5e:da:05:a7:8c:53:02:51:d4:c8:a2:9a:9b:ae: d8:af:ff:d1:44:87:bc:09:71:35:7b:c4:34:6f:63: 4f:68:a1:37:fc:8c:f9:e6:18:c8:cc:cf:62:51:fa: d3:76:6e:70:41:51:82:49:71:89:df:a2:0d:f3:65: 8b:3e:61:20:ab:0b:25:1a:b1:2a:56:84:19:ab:90: ea:c6:05:f9:d1:c7:7a:0e:7d:1c:5d:2d:90:49:4c: ab:76:c3:62:a6:05:fe:46:a8:61:f2:c3:c5:5d:64: aa:c2:a6:fe:5e:33:b9:04:f9:61:e1:7e:38:7a:6c: 2b:34:31:6c:0b:7a:e0:94:a0:7f:f4:88:2b:63:6d: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2D:B1:9C:14:13:44:6E:9D:4E:8F:2E:9D:4F:80:7E:25:09:A0:FA X509v3 Authority Key Identifier: keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/OC2xnBQTRG6dTo8unU-AfiUJoPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.108.0/22 IPv6: 2a03:2640::/32 Signature Algorithm: sha256WithRSAEncryption 6c:37:64:e5:c7:49:32:0e:7a:18:10:ef:27:42:51:8d:09:de: 15:d2:22:a0:5c:32:79:14:e0:74:b7:fe:84:fd:2f:3e:71:b2: b4:50:a7:e2:ea:d9:3c:2e:3e:95:26:58:1c:67:aa:45:e0:a2: bc:a8:8c:34:9d:4b:6e:b4:f3:24:63:13:98:4d:b3:6d:52:e9: 55:8b:81:27:5b:bc:1c:aa:87:e7:5d:d2:d4:33:81:d6:d0:0b: e5:29:1d:a2:f6:93:6f:6e:75:28:15:fc:78:2d:d9:8b:1a:44: d5:0c:99:f9:0e:fb:14:9b:05:e2:f6:4f:d6:b1:59:4a:30:69: 6c:1d:c4:b6:87:b8:df:31:60:e9:65:ff:07:28:d2:2c:d3:cc: 2e:13:38:96:88:17:27:f7:c4:aa:be:34:ae:9a:fa:b7:4e:84: e0:4a:59:6d:e8:f2:ec:97:ba:ed:94:33:6d:21:5e:04:49:e6: ef:b8:db:25:20:2d:fc:f3:0b:72:94:41:8f:7c:37:92:25:27: 4d:16:ea:7f:d5:20:bc:e5:7c:63:83:49:77:b7:7b:df:93:ee: 20:22:fb:af:5b:18:6a:bb:d2:47:6b:4d:ca:79:e4:2a:bd:00: 25:3d:20:69:b7:69:0c:97:e5:9f:7c:8f:7b:12:f2:ee:65:17: 1b:3e:9b:d3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pahTr3V6gB5tSM4BErfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NTYxZDBkZTYyMjQ3ZTIwODViZjU5YTczYzg3ZDI1YTI0 Mzg5ODAwHhcNMjYwMTAyMTIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODJkYjE5YzE0MTM0NDZlOWQ0ZThmMmU5ZDRmODA3ZTI1MDlhMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcUy5H2fLn5IC653NEKqZbwoIBXC l/x6QRL/GuWjRaHSCB27sy826Qvc2Kyf9UB179i5aJLVu48+dLtOAVYZYaO05V9W hO7dSRQ4O9IE9f4lnBHC+h8pVA/V1sVCnuD91XsBrJESA7u0qKHbg7VZPv8/7vml etr1XtoFp4xTAlHUyKKam67Yr//RRIe8CXE1e8Q0b2NPaKE3/Iz55hjIzM9iUfrT dm5wQVGCSXGJ36IN82WLPmEgqwslGrEqVoQZq5DqxgX50cd6Dn0cXS2QSUyrdsNi pgX+Rqhh8sPFXWSqwqb+XjO5BPlh4X44emwrNDFsC3rglKB/9IgrY23nwQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDgtsZwUE0RunU6PLp1PgH4lCaD6MB8GA1UdIwQY MBaAFAhWHQ3mIkfiCFv1mnPIfSWiQ4mAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lZDljNjMtNTZiZS00NzFiLTliYWIt NTNlZDgyZDMzZDg0LzEvT0MyeG5CUVRSRzZkVG84dW5VLUFmaVVKb1BvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lZDljNjMtNTZiZS00NzFiLTliYWItNTNlZDgyZDMzZDg0 LzEvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQdsMA0E AgACMAcDBQAqAyZAMA0GCSqGSIb3DQEBCwUAA4IBAQBsN2Tlx0kyDnoYEO8nQlGN Cd4V0iKgXDJ5FOB0t/6E/S8+cbK0UKfi6tk8Lj6VJlgcZ6pF4KK8qIw0nUtutPMk YxOYTbNtUulVi4EnW7wcqofnXdLUM4HW0AvlKR2i9pNvbnUoFfx4LdmLGkTVDJn5 DvsUmwXi9k/WsVlKMGlsHcS2h7jfMWDpZf8HKNIs08wuEziWiBcn98SqvjSumvq3 ToTgSllt6PLsl7rtlDNtIV4ESebvuNslIC388wtylEGPfDeSJSdNFup/1SC85Xxj g0l3t3vfk+4gIvuvWxhqu9JHa03KeeQqvQAlPSBpt2kMl+WffI97EvLuZRcbPpvT -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:12 2026 by rpki-client