This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/IOHxcXYoTkPZ8SNGG2e5ArcFyZs.roa File: IOHxcXYoTkPZ8SNGG2e5ArcFyZs.roa (raw, json) Hash identifier: okIc8Ez3ehyNvt0MyrhxyHEumFu+GWw2/XRgSeYqOe4= Subject key identifier: 20:E1:F1:71:76:28:4E:43:D9:F1:23:46:1B:67:B9:02:B7:05:C9:9B Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 019B7D5C9057EAEC68998B9C145476C05992 Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/IOHxcXYoTkPZ8SNGG2e5ArcFyZs.roa Signing time: Fri 02 Jan 2026 06:19:36 +0000 ROA not before: Fri 02 Jan 2026 06:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59712 IP address blocks: 185.1.0.0/24 maxlen: 24 2001:7f8:70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:90:57:ea:ec:68:99:8b:9c:14:54:76:c0:59:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Jan 2 06:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20e1f17176284e43d9f123461b67b902b705c99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:10:b0:62:eb:8a:83:68:63:5a:4d:7d:6e:79: 61:62:31:80:d8:22:95:af:61:1f:de:ea:a4:43:c7: 9d:81:ec:9c:c6:44:3b:a4:33:2f:2a:c2:a0:53:b9: 41:a9:39:6b:35:c5:0b:8d:a8:2f:a0:18:9a:35:9e: 9c:9a:53:96:30:c7:c4:46:50:18:44:14:51:18:34: a1:69:2e:48:1d:e3:43:76:da:e6:19:db:89:d1:b9: 00:74:ad:b5:d2:7b:d7:eb:30:ac:e2:75:de:1f:5d: 60:8d:84:59:b6:8b:b7:40:b6:96:4b:71:ce:e7:f0: ac:9d:e9:4d:15:ac:7f:2a:fe:54:82:b2:c0:e1:7c: e7:b1:94:62:39:e6:35:0f:fa:68:0e:fa:71:a3:1d: e4:65:18:be:0a:3e:d7:a0:d8:64:c7:80:45:77:01: d8:1d:d6:1b:91:69:ac:fb:de:4e:12:d1:d7:64:91: 7f:7a:08:07:2b:00:05:b4:64:b9:0d:20:05:72:93: 32:c8:f3:2c:c4:e7:10:5d:32:fa:5b:5c:05:55:1a: 1f:94:84:5a:ac:37:03:b5:34:8f:66:9c:45:68:6e: be:b2:ef:fe:7f:88:d9:d1:67:dc:13:3c:cb:c1:e0: 8f:a7:34:e8:24:c5:68:fa:68:f3:ff:25:d6:7e:fb: 2d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E1:F1:71:76:28:4E:43:D9:F1:23:46:1B:67:B9:02:B7:05:C9:9B X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/IOHxcXYoTkPZ8SNGG2e5ArcFyZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.0.0/24 IPv6: 2001:7f8:70::/48 Signature Algorithm: sha256WithRSAEncryption 7a:d8:fc:bb:7b:85:43:e9:5d:37:4c:69:0d:b7:1f:1f:e6:60: 7c:07:7d:04:5e:9c:bf:b4:19:00:dc:05:80:d5:c9:52:b1:99: de:d3:1f:08:11:1d:f9:5a:39:b8:4a:63:55:77:7a:06:61:e2: 37:b3:d7:2f:9c:bb:4c:91:86:be:f0:b3:01:e0:f0:e1:4b:30: cc:3c:8d:46:ca:0c:4d:46:04:e6:e8:72:ff:7d:ee:bb:58:e9: 06:7c:2d:a2:f8:6f:db:2a:35:bb:b2:28:03:c3:d3:a2:27:86: 7d:bd:ad:67:36:63:05:17:b1:8f:a9:b4:9b:76:d0:5d:0b:5f: 90:97:8f:42:9c:0a:aa:8d:7d:fc:dc:76:2e:d8:86:42:7d:74: 09:ea:59:bb:79:6e:f5:e4:36:39:4d:e7:fa:5e:62:c2:65:1f: 74:1d:c1:25:1b:65:b6:c5:30:92:98:e7:74:d3:7e:34:cc:74: 1d:db:6f:da:d6:14:df:95:e0:23:2f:d9:93:fc:4c:84:11:67: 8d:ac:0f:9f:21:b3:18:47:e7:e3:3e:40:2e:a4:74:ea:53:62: 1a:4d:c4:06:eb:d6:bf:a0:2c:5f:fb:87:ce:72:c1:dd:61:36: 1c:c3:74:11:0b:b2:d4:8b:af:53:5f:92:f1:01:85:5d:6e:98: 5f:2c:a8:18 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XJBX6uxomYucFFR2wFmSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjYwMTAyMDYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGUxZjE3MTc2Mjg0ZTQzZDlmMTIzNDYxYjY3YjkwMmI3MDVjOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRCwYuuKg2hjWk19bnlhYjGA2CKV r2Ef3uqkQ8edgeycxkQ7pDMvKsKgU7lBqTlrNcULjagvoBiaNZ6cmlOWMMfERlAY RBRRGDShaS5IHeNDdtrmGduJ0bkAdK210nvX6zCs4nXeH11gjYRZtou3QLaWS3HO 5/CsnelNFax/Kv5UgrLA4XznsZRiOeY1D/poDvpxox3kZRi+Cj7XoNhkx4BFdwHY HdYbkWms+95OEtHXZJF/eggHKwAFtGS5DSAFcpMyyPMsxOcQXTL6W1wFVRoflIRa rDcDtTSPZpxFaG6+su/+f4jZ0WfcEzzLweCPpzToJMVo+mjz/yXWfvstAQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCDh8XF2KE5D2fEjRhtnuQK3BcmbMB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvSU9IeGNYWW9Ua1BaOFNOR0cyZTVBcmNGeVpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQEAMA8E AgACMAkDBwAgAQf4AHAwDQYJKoZIhvcNAQELBQADggEBAHrY/Lt7hUPpXTdMaQ23 Hx/mYHwHfQRenL+0GQDcBYDVyVKxmd7THwgRHflaObhKY1V3egZh4jez1y+cu0yR hr7wswHg8OFLMMw8jUbKDE1GBObocv997rtY6QZ8LaL4b9sqNbuyKAPD06Inhn29 rWc2YwUXsY+ptJt20F0LX5CXj0KcCqqNffzcdi7YhkJ9dAnqWbt5bvXkNjlN5/pe YsJlH3QdwSUbZbbFMJKY53TTfjTMdB3bb9rWFN+V4CMv2ZP8TIQRZ42sD58hsxhH 5+M+QC6kdOpTYhpNxAbr1r+gLF/7h85ywd1hNhzDdBELstSLr1NfkvEBhV1umF8s qBg= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:47 2026 by rpki-client