This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/oYoaCxePjZcRzRJTrNBrONO_Ym0.roa File: oYoaCxePjZcRzRJTrNBrONO_Ym0.roa (raw, json) Hash identifier: 4nGnf7vQYWEUFNLWW0oRGYuPycV7h1x++stMCLyo5Bk= Subject key identifier: A1:8A:1A:0B:17:8F:8D:97:11:CD:12:53:AC:D0:6B:38:D3:BF:62:6D Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 019B7F84A1F9752B7028CAEAA4B8F324F6D2 Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/oYoaCxePjZcRzRJTrNBrONO_Ym0.roa Signing time: Fri 02 Jan 2026 16:22:37 +0000 ROA not before: Fri 02 Jan 2026 16:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216135 IP address blocks: 185.174.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a1:f9:75:2b:70:28:ca:ea:a4:b8:f3:24:f6:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a18a1a0b178f8d9711cd1253acd06b38d3bf626d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:72:30:8a:36:94:8f:b0:d9:15:94:d1:e5:8b: a3:dd:30:ac:42:f3:d5:ad:e0:de:aa:d4:24:b6:24: 50:f8:5a:4e:4c:77:6e:88:43:06:d5:e8:86:8b:33: 3b:4f:f0:1f:ae:77:e9:4b:5e:95:b0:50:0a:b8:c9: 3a:19:2b:ca:67:41:1f:90:d6:0c:63:ab:e1:f2:99: b7:b8:9d:14:5f:19:75:f2:bf:d7:5c:fc:d8:58:3c: 20:2c:a5:8d:ee:b6:c7:e1:bb:86:3c:cf:31:b9:d3: 24:d0:25:6b:a2:f2:67:ca:02:0f:40:e1:ca:2c:9a: 20:cb:1b:8a:b2:0f:e0:ab:7e:c1:4c:46:88:e6:0a: c5:61:e2:93:90:0f:8f:73:b9:f5:fd:d0:48:a9:de: 63:b8:49:26:47:81:be:04:b0:b0:94:c0:c1:8c:af: cf:76:98:54:34:30:df:aa:92:ff:c3:4a:14:8e:14: ce:94:ed:c2:14:8d:71:2b:36:bf:c3:c7:fa:69:ce: 49:4e:7d:15:56:55:89:53:9b:04:1b:50:26:d3:d8: bc:dc:40:48:a3:07:9a:47:be:0a:b0:09:6c:97:83: e4:31:06:e8:e8:27:dc:0c:8d:ee:0c:b4:e2:ba:77: 84:c1:e2:60:d4:e3:5e:24:70:2c:bd:a7:89:bc:39: 53:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8A:1A:0B:17:8F:8D:97:11:CD:12:53:AC:D0:6B:38:D3:BF:62:6D X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/oYoaCxePjZcRzRJTrNBrONO_Ym0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.212.0/24 Signature Algorithm: sha256WithRSAEncryption 15:e4:60:2b:05:91:82:44:28:26:de:7c:ea:1a:4e:12:a9:cf: b2:67:a6:5f:32:9b:19:56:f8:e7:05:47:e5:d7:47:63:83:62: 8e:c8:bf:bf:d6:37:14:cf:c1:0a:53:c6:f3:53:70:fd:17:b8: 15:9e:a4:9c:65:8e:cf:59:24:49:31:ae:74:44:da:4d:13:45: fa:3d:a2:cb:29:a3:7c:b2:84:86:0e:94:10:e2:43:a4:f2:cf: f9:6b:49:95:f9:e2:4b:2a:29:5f:73:f4:a8:c9:f4:69:e3:d8: 93:e6:97:21:3e:f0:d3:e1:a9:e5:d8:16:18:51:1b:4e:05:44: 4f:5e:aa:db:95:88:01:6f:ad:65:88:20:b7:f6:6e:7b:cb:af: 63:78:12:4a:6c:eb:83:3d:74:46:e5:5c:12:0d:bc:b9:3d:34: a7:be:ae:25:01:19:24:62:f3:2d:5f:14:31:df:6f:c8:32:25: f6:a1:73:e5:8b:75:32:84:65:2a:f1:df:a0:2e:f1:81:58:6b: e4:01:60:8d:d9:67:1e:c0:68:18:00:13:de:d9:88:1d:ae:ff: 7c:b2:c6:ad:f3:f6:1e:2d:b2:69:9a:ce:64:63:a7:ab:06:19: f2:39:91:da:b2:d0:1a:31:e6:09:34:0b:af:d4:e8:88:4f:bc: 91:b6:bc:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKH5dStwKMrqpLjzJPbSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMThhMWEwYjE3OGY4ZDk3MTFjZDEyNTNhY2QwNmIzOGQzYmY2MjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXIwijaUj7DZFZTR5Yuj3TCsQvPV reDeqtQktiRQ+FpOTHduiEMG1eiGizM7T/AfrnfpS16VsFAKuMk6GSvKZ0EfkNYM Y6vh8pm3uJ0UXxl18r/XXPzYWDwgLKWN7rbH4buGPM8xudMk0CVrovJnygIPQOHK LJogyxuKsg/gq37BTEaI5grFYeKTkA+Pc7n1/dBIqd5juEkmR4G+BLCwlMDBjK/P dphUNDDfqpL/w0oUjhTOlO3CFI1xKza/w8f6ac5JTn0VVlWJU5sEG1Am09i83EBI oweaR74KsAlsl4PkMQbo6CfcDI3uDLTiuneEweJg1ONeJHAsvaeJvDlTKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKGKGgsXj42XEc0SU6zQazjTv2JtMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvb1lvYUN4ZVBqWmNSelJKVHJOQnJPTk9fWW0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAua7UMA0G CSqGSIb3DQEBCwUAA4IBAQAV5GArBZGCRCgm3nzqGk4Sqc+yZ6ZfMpsZVvjnBUfl 10djg2KOyL+/1jcUz8EKU8bzU3D9F7gVnqScZY7PWSRJMa50RNpNE0X6PaLLKaN8 soSGDpQQ4kOk8s/5a0mV+eJLKilfc/SoyfRp49iT5pchPvDT4anl2BYYURtOBURP XqrblYgBb61liCC39m57y69jeBJKbOuDPXRG5VwSDby5PTSnvq4lARkkYvMtXxQx 32/IMiX2oXPli3UyhGUq8d+gLvGBWGvkAWCN2WcewGgYABPe2Ygdrv98ssat8/Ye LbJpms5kY6erBhnyOZHastAaMeYJNAuv1OiIT7yRtry2 -----END CERTIFICATE-----Generated at Tue Feb 10 07:12:44 2026 by rpki-client