This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/O654y5p4Qf5vqt0PN2xJcmyF0Og.roa File: O654y5p4Qf5vqt0PN2xJcmyF0Og.roa (raw, json) Hash identifier: KRIvPR/2+jDrBziPo6SVSyDtCM7Okqo4BaF0x5mxhnE= Subject key identifier: 3B:AE:78:CB:9A:78:41:FE:6F:AA:DD:0F:37:6C:49:72:6C:85:D0:E8 Certificate issuer: /CN=3061e6155e3f35f88e6b44cd355e6e936e921a6c Certificate serial: 019B7EA5186B20740EA81471AD068C4D5BE5 Authority key identifier: 30:61:E6:15:5E:3F:35:F8:8E:6B:44:CD:35:5E:6E:93:6E:92:1A:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/O654y5p4Qf5vqt0PN2xJcmyF0Og.roa Signing time: Fri 02 Jan 2026 12:18:27 +0000 ROA not before: Fri 02 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33915 IP address blocks: 185.211.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.mft rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:18:6b:20:74:0e:a8:14:71:ad:06:8c:4d:5b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3061e6155e3f35f88e6b44cd355e6e936e921a6c Validity Not Before: Jan 2 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bae78cb9a7841fe6faadd0f376c49726c85d0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f6:67:45:3a:9e:8c:35:22:58:20:ab:97:c5: d4:c6:6e:65:d3:16:a7:d2:11:89:24:df:09:49:52: 40:5e:bf:d6:76:8c:ec:52:27:a2:ef:ed:e1:c9:2e: bb:3d:15:cf:88:88:c0:c6:a7:58:a6:be:da:39:35: 37:ed:bc:32:4f:9e:6f:b6:89:f1:ee:d9:b1:58:ef: 77:db:95:d2:ed:bd:46:91:56:c7:13:9a:d7:50:96: 3a:0f:63:36:6f:f2:80:e8:d1:4b:5d:49:0f:84:cc: 3b:6b:72:e0:a1:94:1e:dd:f0:20:28:50:23:02:22: e2:8d:89:9e:34:3c:14:fb:b3:be:fa:96:06:bd:9a: de:48:5c:15:24:04:53:13:23:48:bb:f2:8d:60:d7: 98:68:62:5f:b6:e2:3d:c4:9b:71:cb:30:0d:47:83: a5:41:66:2f:02:09:7e:26:4e:f6:ea:95:65:7a:92: 05:4c:7e:cd:60:29:07:70:a0:8d:08:4b:e8:0f:0b: 22:eb:94:e1:45:76:99:e7:22:f7:17:19:1c:98:52: 70:b5:fb:b9:99:18:96:d0:fd:f8:fd:98:f6:68:a3: a6:b3:c4:44:7d:18:04:a2:8c:74:0b:a4:fe:ff:bb: dc:3e:4b:b5:53:0c:71:f8:a1:1c:be:96:b2:f2:10: d3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AE:78:CB:9A:78:41:FE:6F:AA:DD:0F:37:6C:49:72:6C:85:D0:E8 X509v3 Authority Key Identifier: keyid:30:61:E6:15:5E:3F:35:F8:8E:6B:44:CD:35:5E:6E:93:6E:92:1A:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGHmFV4_NfiOa0TNNV5uk26SGmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/O654y5p4Qf5vqt0PN2xJcmyF0Og.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d58401-a67c-4583-b9b6-64166c695378/1/MGHmFV4_NfiOa0TNNV5uk26SGmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.187.0/24 Signature Algorithm: sha256WithRSAEncryption b0:4d:24:81:9a:c4:fb:82:e7:b6:fa:0f:51:2e:87:1b:c9:12: 55:a5:92:7c:d9:21:83:98:da:2a:a6:d7:fd:9f:a5:95:9e:3b: fe:cc:37:40:0e:f8:7e:45:d7:7d:12:ca:9f:3b:05:37:7d:9b: 57:df:73:17:d4:01:5d:17:d5:cc:8f:d2:c2:b4:19:86:2c:34: f3:11:75:f4:90:45:06:3a:94:33:9a:85:fe:eb:29:52:d7:d0: 4c:85:ae:15:dd:d8:bb:38:1f:00:87:af:a2:e6:57:1a:34:2f: 86:79:d9:3f:fc:9d:f0:49:3f:e9:23:53:5b:de:56:91:6b:0f: 81:1b:35:50:10:32:13:73:b8:6e:4b:57:47:6a:70:26:e1:8e: 91:3e:66:2f:89:5a:fd:b3:0c:09:ba:f3:cd:a8:92:be:62:74: 6a:b6:19:78:ba:f2:a9:1d:f2:21:a9:ad:5c:7e:65:02:22:2a: d1:db:f1:c8:26:e6:f6:75:56:f1:a2:ab:a8:ad:8a:40:c0:f3: eb:5e:72:e2:cf:f3:83:38:69:ae:54:36:e2:46:98:70:5c:05: 41:7a:28:13:ef:0c:72:83:ae:62:a2:b9:94:eb:5b:8a:f7:4b: 3b:23:e8:85:32:1e:3c:dd:42:59:71:5d:c7:ae:7e:b4:bb:2a: 6b:ee:d5:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pRhrIHQOqBRxrQaMTVvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjFlNjE1NWUzZjM1Zjg4ZTZiNDRjZDM1NWU2ZTkzNmU5 MjFhNmMwHhcNMjYwMTAyMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmFlNzhjYjlhNzg0MWZlNmZhYWRkMGYzNzZjNDk3MjZjODVkMGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/ZnRTqejDUiWCCrl8XUxm5l0xan 0hGJJN8JSVJAXr/WdozsUiei7+3hyS67PRXPiIjAxqdYpr7aOTU37bwyT55vtonx 7tmxWO9325XS7b1GkVbHE5rXUJY6D2M2b/KA6NFLXUkPhMw7a3LgoZQe3fAgKFAj AiLijYmeNDwU+7O++pYGvZreSFwVJARTEyNIu/KNYNeYaGJftuI9xJtxyzANR4Ol QWYvAgl+Jk726pVlepIFTH7NYCkHcKCNCEvoDwsi65ThRXaZ5yL3FxkcmFJwtfu5 mRiW0P34/Zj2aKOms8REfRgEoox0C6T+/7vcPku1Uwxx+KEcvpay8hDTlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDuueMuaeEH+b6rdDzdsSXJshdDoMB8GA1UdIwQY MBaAFDBh5hVePzX4jmtEzTVebpNukhpsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdIbUZWNF9OZmlPYTBUTk5WNXVrMjZTR213LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kNTg0MDEtYTY3Yy00NTgzLWI5YjYt NjQxNjZjNjk1Mzc4LzEvTzY1NHk1cDRRZjV2cXQwUE4yeEpjbXlGME9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9kNTg0MDEtYTY3Yy00NTgzLWI5YjYtNjQxNjZjNjk1Mzc4 LzEvTUdIbUZWNF9OZmlPYTBUTk5WNXVrMjZTR213LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudO7MA0G CSqGSIb3DQEBCwUAA4IBAQCwTSSBmsT7gue2+g9RLocbyRJVpZJ82SGDmNoqptf9 n6WVnjv+zDdADvh+Rdd9EsqfOwU3fZtX33MX1AFdF9XMj9LCtBmGLDTzEXX0kEUG OpQzmoX+6ylS19BMha4V3di7OB8Ah6+i5lcaNC+Gedk//J3wST/pI1Nb3laRaw+B GzVQEDITc7huS1dHanAm4Y6RPmYviVr9swwJuvPNqJK+YnRqthl4uvKpHfIhqa1c fmUCIirR2/HIJub2dVbxoquorYpAwPPrXnLiz/ODOGmuVDbiRphwXAVBeigT7wxy g65iormU61uK90s7I+iFMh483UJZcV3Hrn60uypr7tUu -----END CERTIFICATE-----Generated at Mon Jan 26 22:37:34 2026 by rpki-client