This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/OSKscQD0G4SoAfxxYL6yDh6a54w.roa File: OSKscQD0G4SoAfxxYL6yDh6a54w.roa (raw, json) Hash identifier: VlEznS11KOD/hclQl2r806Gq2L274/j4CryjPPg588I= Subject key identifier: 39:22:AC:71:00:F4:1B:84:A8:01:FC:71:60:BE:B2:0E:1E:9A:E7:8C Certificate issuer: /CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a Certificate serial: 019B7EA588FB17EBE02B1FF17BB60D509C58 Authority key identifier: 14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/OSKscQD0G4SoAfxxYL6yDh6a54w.roa Signing time: Fri 02 Jan 2026 12:18:56 +0000 ROA not before: Fri 02 Jan 2026 12:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34767 IP address blocks: 80.75.240.0/20 maxlen: 20 185.53.180.0/22 maxlen: 22 2a00:7a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:88:fb:17:eb:e0:2b:1f:f1:7b:b6:0d:50:9c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a Validity Not Before: Jan 2 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3922ac7100f41b84a801fc7160beb20e1e9ae78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:07:ba:19:9e:7c:99:25:89:3a:b6:f1:f0:63: a0:3c:83:17:56:7d:0a:75:44:bd:16:c8:7e:f4:ed: 17:ee:1b:ef:16:d8:72:92:ec:4b:b5:fc:19:e8:c4: bc:cd:2d:94:58:bd:0e:a9:0c:95:37:33:1c:6a:af: 79:05:c3:1c:ad:76:2e:ab:60:d7:94:a3:13:9f:c6: 45:80:2a:35:0f:fc:9c:f9:8a:9e:9e:f1:bd:24:18: 88:db:d3:c0:c6:fc:4a:ef:d7:46:f6:0a:35:51:3e: 69:cd:14:d0:11:1f:39:30:f2:8b:bb:fe:4a:9e:22: 6a:73:4b:b3:f1:17:7f:34:5f:70:e3:08:bc:ff:07: a3:8a:c9:64:46:6e:f9:b7:11:30:b6:7f:4f:ca:8c: 9b:b2:7c:96:f9:4c:79:98:de:2a:63:23:b7:08:31: 74:e8:f0:63:85:91:82:c6:a1:a6:66:e4:7b:fa:4c: cd:69:30:34:4d:b2:e7:88:4f:0a:a8:58:db:31:e9: 12:52:02:ff:15:0e:ba:05:4c:80:28:4c:c9:a6:2f: db:11:c3:4e:62:d6:d9:43:ac:58:51:de:bd:29:c5: c1:d3:19:9d:d2:e1:58:91:de:be:e9:e0:8e:21:fc: 23:74:ba:64:2a:be:60:a8:37:48:b1:1c:86:0f:e4: 17:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:22:AC:71:00:F4:1B:84:A8:01:FC:71:60:BE:B2:0E:1E:9A:E7:8C X509v3 Authority Key Identifier: keyid:14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/OSKscQD0G4SoAfxxYL6yDh6a54w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.75.240.0/20 185.53.180.0/22 IPv6: 2a00:7a80::/32 Signature Algorithm: sha256WithRSAEncryption 3d:64:72:91:33:88:0b:ff:29:5a:98:52:1c:1b:96:d3:27:da: 98:5d:87:96:f9:39:4c:88:e4:ee:88:88:37:db:63:62:fa:08: e8:67:5d:47:75:24:01:0c:f0:48:68:09:97:ed:b0:a2:0a:cf: 6c:39:4d:6a:60:d7:6f:0d:c7:03:05:7e:9c:9c:ae:0f:d7:eb: f2:39:54:e7:fb:17:08:4c:9a:fa:74:8d:ee:23:0a:dc:c2:76: 88:53:cb:b5:b5:5f:95:8f:46:38:03:a0:0b:e8:9b:6f:50:dc: e5:1c:2c:f1:88:37:63:84:90:0c:b3:55:4c:be:ba:9a:df:7f: 09:00:85:32:1f:54:91:69:b1:cf:d2:7d:1b:61:13:98:a9:67: 98:a1:c3:8f:56:9a:52:70:ba:54:2c:9b:91:a0:6b:ff:f7:3b: 0f:b5:ea:0c:a4:00:bf:c0:82:21:20:5d:22:71:ef:2e:6f:b5: 03:99:5c:27:3c:a3:92:69:aa:56:5c:36:01:38:8e:5f:5f:f2: f9:8e:15:bd:ef:f6:6c:9d:25:ec:8b:27:ce:67:31:be:5f:85: 7c:f0:b9:b0:ec:e5:67:f1:d0:9d:3d:29:18:07:64:3f:56:0f: ff:34:10:24:3c:1d:f4:dc:48:e8:d2:b6:e5:db:cd:fa:36:f7: 98:ac:cb:8a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+pYj7F+vgKx/xe7YNUJxYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NjJhNDk3ZWZlMGJjOTJiN2VkOTI1MjllYmJlMzljYjE5 ZDMzMGEwHhcNMjYwMTAyMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTIyYWM3MTAwZjQxYjg0YTgwMWZjNzE2MGJlYjIwZTFlOWFlNzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ae6GZ58mSWJOrbx8GOgPIMXVn0K dUS9Fsh+9O0X7hvvFthykuxLtfwZ6MS8zS2UWL0OqQyVNzMcaq95BcMcrXYuq2DX lKMTn8ZFgCo1D/yc+YqenvG9JBiI29PAxvxK79dG9go1UT5pzRTQER85MPKLu/5K niJqc0uz8Rd/NF9w4wi8/wejislkRm75txEwtn9PyoybsnyW+Ux5mN4qYyO3CDF0 6PBjhZGCxqGmZuR7+kzNaTA0TbLniE8KqFjbMekSUgL/FQ66BUyAKEzJpi/bEcNO YtbZQ6xYUd69KcXB0xmd0uFYkd6+6eCOIfwjdLpkKr5gqDdIsRyGD+QXzQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDkirHEA9BuEqAH8cWC+sg4emueMMB8GA1UdIwQY MBaAFBRipJfv4LySt+2SUp6745yxnTMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkdLa2wtX2d2SkszN1pKU25ydmpuTEdkTXdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iZTExNzEtMTIwMi00ZGY4LThjMzAt ZDM2OTM1ZWJjNmFkLzEvT1NLc2NRRDBHNFNvQWZ4eFlMNnlEaDZhNTR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9iZTExNzEtMTIwMi00ZGY4LThjMzAtZDM2OTM1ZWJjNmFk LzEvRkdLa2wtX2d2SkszN1pKU25ydmpuTEdkTXdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUEvwAwQC uTW0MA0EAgACMAcDBQAqAHqAMA0GCSqGSIb3DQEBCwUAA4IBAQA9ZHKRM4gL/yla mFIcG5bTJ9qYXYeW+TlMiOTuiIg322Ni+gjoZ11HdSQBDPBIaAmX7bCiCs9sOU1q YNdvDccDBX6cnK4P1+vyOVTn+xcITJr6dI3uIwrcwnaIU8u1tV+Vj0Y4A6AL6Jtv UNzlHCzxiDdjhJAMs1VMvrqa338JAIUyH1SRabHP0n0bYROYqWeYocOPVppScLpU LJuRoGv/9zsPteoMpAC/wIIhIF0ice8ub7UDmVwnPKOSaapWXDYBOI5fX/L5jhW9 7/ZsnSXsiyfOZzG+X4V88Lmw7OVn8dCdPSkYB2Q/Vg//NBAkPB303Ejo0rbl2836 NveYrMuK -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:25 2026 by rpki-client