This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/OXzsf9355x_Po1YlBAMmXxH7YfM.roa File: OXzsf9355x_Po1YlBAMmXxH7YfM.roa (raw, json) Hash identifier: HyUx0AM/t82HDbhNTlK93mKwtwtfVGbEby4qtiM7vwI= Subject key identifier: 39:7C:EC:7F:DD:F9:E7:1F:CF:A3:56:25:04:03:26:5F:11:FB:61:F3 Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d Certificate serial: 019B783525F21C22AFA8D51C3F139F7784EF Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/OXzsf9355x_Po1YlBAMmXxH7YfM.roa Signing time: Thu 01 Jan 2026 06:18:27 +0000 ROA not before: Thu 01 Jan 2026 06:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210731 IP address blocks: 185.129.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:25:f2:1c:22:af:a8:d5:1c:3f:13:9f:77:84:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d Validity Not Before: Jan 1 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=397cec7fddf9e71fcfa356250403265f11fb61f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8a:78:7a:82:e7:23:62:e2:07:d7:0a:32:d0: c8:ce:f8:ad:b1:f1:7a:ae:c8:19:57:21:33:b8:83: b9:53:25:12:ed:01:0b:0c:95:5c:5f:2c:10:7b:fc: b5:62:62:cd:ff:bc:5f:6c:1d:aa:33:9a:4c:b0:04: a3:3a:49:66:ec:ab:ec:57:5b:3b:73:f4:6c:4d:e5: c4:f1:72:f6:43:44:07:18:0c:13:5a:9c:1c:27:73: 21:87:b5:76:c4:8e:c2:05:b5:e9:30:80:54:29:87: 12:3a:6c:79:5c:64:4f:87:aa:72:75:51:5b:2f:99: 4f:a8:85:4b:f5:6c:d6:45:4e:2e:2d:d5:0d:ed:2f: 40:6f:32:12:4a:37:a2:3e:dc:f9:28:11:d5:bf:b7: ba:86:8a:b9:a9:df:51:5b:e3:02:68:c4:31:95:7f: 87:0a:81:d4:36:28:58:43:76:df:de:e0:26:28:13: 08:04:bf:5e:3e:d6:bb:b3:47:77:51:9b:97:59:68: 1f:dc:fa:d4:1c:4a:65:ff:cb:4b:ad:60:e0:97:d4: b4:10:6b:67:5b:db:43:83:d6:c1:bb:c2:3b:71:93: 1e:10:a1:e4:3e:cd:e5:df:33:00:1a:a1:8c:f5:98: 79:9d:c1:bb:67:85:15:c0:ad:9f:ce:1f:05:74:db: d1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7C:EC:7F:DD:F9:E7:1F:CF:A3:56:25:04:03:26:5F:11:FB:61:F3 X509v3 Authority Key Identifier: keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/OXzsf9355x_Po1YlBAMmXxH7YfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.61.0/24 Signature Algorithm: sha256WithRSAEncryption 19:3f:21:af:7a:34:b3:1c:56:6f:d8:a6:e3:42:76:49:ff:e8: 33:4a:72:45:09:90:ab:32:80:f1:41:90:dc:26:50:ce:43:66: 53:ad:47:ab:69:c1:0c:a5:bd:f1:8d:2e:40:a2:92:e0:eb:b9: 38:c6:e3:3b:e6:f2:ac:f2:12:a2:f7:ea:a2:37:74:d7:cb:a1: c9:e1:c0:65:18:9e:3f:8c:0f:11:99:95:36:b0:92:d3:01:69: c1:97:16:7a:8a:25:8e:64:af:05:6a:3b:66:8a:f3:b3:88:78: b4:2e:db:bd:8c:c5:95:af:d5:05:1f:36:79:57:fb:4d:0d:a0: 68:c5:63:6d:c8:84:31:b0:8f:d1:82:1c:51:3e:80:49:39:a2: 95:8a:4e:07:70:24:74:e2:e8:b0:b8:8d:37:8c:cb:7a:31:6e: 30:f9:35:91:94:7e:19:fc:7b:6a:c8:ec:99:55:7a:10:0f:56: d1:fe:de:d0:ec:5f:b3:d6:da:2a:0c:6e:a2:dd:e6:de:25:2a: 82:3b:4b:6d:62:5d:45:6a:40:96:68:78:48:8c:91:2c:92:d7: 2f:9a:13:ae:4d:ee:dc:c7:d0:b0:47:00:19:c5:1c:4b:1d:64: 22:d5:08:0c:7c:86:20:b1:71:3e:5c:4d:59:3e:6e:d8:62:8a: 26:3f:3b:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NSXyHCKvqNUcPxOfd4TvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDIzYzdhYzZlNjgyZmJjNTNiZTFhMGU5MzE4ZjZjY2Fl NzE5M2QwHhcNMjYwMTAxMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTdjZWM3ZmRkZjllNzFmY2ZhMzU2MjUwNDAzMjY1ZjExZmI2MWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4p4eoLnI2LiB9cKMtDIzvitsfF6 rsgZVyEzuIO5UyUS7QELDJVcXywQe/y1YmLN/7xfbB2qM5pMsASjOklm7KvsV1s7 c/RsTeXE8XL2Q0QHGAwTWpwcJ3Mhh7V2xI7CBbXpMIBUKYcSOmx5XGRPh6pydVFb L5lPqIVL9WzWRU4uLdUN7S9AbzISSjeiPtz5KBHVv7e6hoq5qd9RW+MCaMQxlX+H CoHUNihYQ3bf3uAmKBMIBL9ePta7s0d3UZuXWWgf3PrUHEpl/8tLrWDgl9S0EGtn W9tDg9bBu8I7cZMeEKHkPs3l3zMAGqGM9Zh5ncG7Z4UVwK2fzh8FdNvRGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDl87H/d+ecfz6NWJQQDJl8R+2HzMB8GA1UdIwQY MBaAFF3SPHrG5oL7xTvhoOkxj2zK5xk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hNDJlOWMtZDkyZC00YjIwLWE1ZWIt ZWJlMjMzMmNhZjFjLzEvT1h6c2Y5MzU1eF9QbzFZbEJBTW1YeEg3WWZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hNDJlOWMtZDkyZC00YjIwLWE1ZWItZWJlMjMzMmNhZjFj LzEvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYE9MA0G CSqGSIb3DQEBCwUAA4IBAQAZPyGvejSzHFZv2KbjQnZJ/+gzSnJFCZCrMoDxQZDc JlDOQ2ZTrUeracEMpb3xjS5AopLg67k4xuM75vKs8hKi9+qiN3TXy6HJ4cBlGJ4/ jA8RmZU2sJLTAWnBlxZ6iiWOZK8FajtmivOziHi0Ltu9jMWVr9UFHzZ5V/tNDaBo xWNtyIQxsI/RghxRPoBJOaKVik4HcCR04uiwuI03jMt6MW4w+TWRlH4Z/HtqyOyZ VXoQD1bR/t7Q7F+z1toqDG6i3ebeJSqCO0ttYl1FakCWaHhIjJEsktcvmhOuTe7c x9CwRwAZxRxLHWQi1QgMfIYgsXE+XE1ZPm7YYoomPzvZ -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:16 2026 by rpki-client