This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/fOzoYMnI727icUByo14Jb0elADg.roa File: fOzoYMnI727icUByo14Jb0elADg.roa (raw, json) Hash identifier: H2kPNJ2J5KQbcSM3KTsy/JJVmpzgkcwioFna5QOuXKo= Subject key identifier: 7C:EC:E8:60:C9:C8:EF:6E:E2:71:40:72:A3:5E:09:6F:47:A5:00:38 Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1 Certificate serial: 019B7C11B58C80A647EF88722EAE06959B58 Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/fOzoYMnI727icUByo14Jb0elADg.roa Signing time: Fri 02 Jan 2026 00:18:13 +0000 ROA not before: Fri 02 Jan 2026 00:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35236 IP address blocks: 185.205.136.0/22 maxlen: 24 185.205.137.0/24 maxlen: 24 2a0b:640::/30 maxlen: 30 2a0b:640:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:b5:8c:80:a6:47:ef:88:72:2e:ae:06:95:9b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1 Validity Not Before: Jan 2 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cece860c9c8ef6ee2714072a35e096f47a50038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:b7:83:6e:e7:d1:c4:34:6a:df:dd:6f:2f: 02:2a:5e:48:05:0b:94:91:5b:72:9e:98:10:4a:54: f0:d9:84:ca:83:94:65:e8:fe:7c:e8:af:c3:db:b3: 64:58:e6:af:b1:e1:59:98:6f:8c:1f:51:23:60:ba: d6:83:a4:5d:a2:28:ec:26:cb:9f:ec:52:a3:73:27: 85:68:aa:8c:af:dc:b1:34:e1:b4:2f:d7:ed:ba:68: d2:b9:7b:b6:4a:f9:0c:ed:69:d3:b1:8c:cb:45:e8: 12:b9:b6:cd:00:20:96:09:d0:a5:3e:72:25:ca:74: 51:2c:5f:e4:20:2d:a8:d2:90:77:a3:fa:ae:ba:81: b9:3a:ed:80:ad:74:cd:9f:75:c6:c5:2e:b8:64:ed: fc:a4:4c:0c:8d:1b:f3:1c:c8:b6:2e:11:c4:65:db: 23:56:d5:b1:e5:6c:cc:ee:42:5f:6a:86:e9:13:e6: 95:c9:a3:00:b3:45:ff:78:3f:9b:03:e8:e4:ce:73: dc:69:d5:81:0a:db:7e:8c:4e:54:c7:ef:de:bd:f5: 82:9f:ae:bc:a9:94:3d:14:5c:52:5c:a7:15:4e:60: 38:05:8a:7e:3e:7d:d3:34:1b:26:de:c1:4d:1a:f3: dd:4b:f5:22:64:ae:f8:6c:d9:56:bf:96:9b:7a:97: dd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EC:E8:60:C9:C8:EF:6E:E2:71:40:72:A3:5E:09:6F:47:A5:00:38 X509v3 Authority Key Identifier: keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/fOzoYMnI727icUByo14Jb0elADg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.136.0/22 IPv6: 2a0b:640::/30 Signature Algorithm: sha256WithRSAEncryption 56:50:5a:ac:ac:b3:53:be:df:f4:77:97:cc:c0:66:85:7c:87: 8b:6b:64:4c:3d:c6:ec:d9:29:7f:aa:95:f8:b1:d5:08:c4:0b: c2:41:70:db:8e:c3:62:17:b2:56:c9:e6:73:b8:0c:66:49:4b: 93:fb:04:21:6e:6a:e0:e2:f3:a5:8d:15:d9:b7:59:3c:94:bf: c9:96:83:42:38:b4:9e:88:a3:a2:c9:db:24:34:b9:1e:14:40: 7a:14:8e:ea:07:ee:21:31:66:34:52:c6:9c:b0:04:78:c6:96: a5:d1:a1:37:02:5b:32:ee:bd:3d:9d:62:ba:b3:c0:f5:b5:98: 00:0a:72:aa:3f:85:26:5a:73:53:c2:24:b6:32:42:a9:1b:f0: e7:3b:f2:12:79:33:1f:01:5e:25:e0:94:79:d2:c5:36:37:b5: e3:af:55:29:92:d5:87:db:6d:b5:81:f3:a1:30:53:64:84:3c: 4c:28:be:b5:ef:34:fb:a8:cb:e7:29:50:df:d8:61:42:2f:e0: bd:39:80:fc:5f:ee:ce:e5:79:d2:b5:0e:ae:eb:b6:1a:d9:1a: c0:eb:67:fb:fa:8e:bb:d5:5c:d2:f3:ea:d1:d5:a9:32:b5:c9: ae:91:82:27:67:46:04:c2:de:db:c0:e7:d9:42:38:f0:45:d7: 03:d7:a5:9f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EbWMgKZH74hyLq4GlZtYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNWQ0ODRlYjZiNGI1Njg5YTU0NGNmMGIxM2I3ZWY5MzI0 NTdlZjEwHhcNMjYwMTAyMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2VjZTg2MGM5YzhlZjZlZTI3MTQwNzJhMzVlMDk2ZjQ3YTUwMDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGS3g27n0cQ0at/dby8CKl5IBQuU kVtynpgQSlTw2YTKg5Rl6P586K/D27NkWOavseFZmG+MH1EjYLrWg6RdoijsJsuf 7FKjcyeFaKqMr9yxNOG0L9ftumjSuXu2SvkM7WnTsYzLRegSubbNACCWCdClPnIl ynRRLF/kIC2o0pB3o/quuoG5Ou2ArXTNn3XGxS64ZO38pEwMjRvzHMi2LhHEZdsj VtWx5WzM7kJfaobpE+aVyaMAs0X/eD+bA+jkznPcadWBCtt+jE5Ux+/evfWCn668 qZQ9FFxSXKcVTmA4BYp+Pn3TNBsm3sFNGvPdS/UiZK74bNlWv5abepfduQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHzs6GDJyO9u4nFAcqNeCW9HpQA4MB8GA1UdIwQY MBaAFJ5dSE62tLVomlRM8LE7fvkyRX7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNjc0YmItMDQ0Ny00ZDcyLWIzMDIt NmVjNDBhMzgxODE5LzEvZk96b1lNbkk3MjdpY1VCeW8xNEpiMGVsQURnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iNjc0YmItMDQ0Ny00ZDcyLWIzMDItNmVjNDBhMzgxODE5 LzEvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuc2IMA0E AgACMAcDBQIqCwZAMA0GCSqGSIb3DQEBCwUAA4IBAQBWUFqsrLNTvt/0d5fMwGaF fIeLa2RMPcbs2Sl/qpX4sdUIxAvCQXDbjsNiF7JWyeZzuAxmSUuT+wQhbmrg4vOl jRXZt1k8lL/JloNCOLSeiKOiydskNLkeFEB6FI7qB+4hMWY0UsacsAR4xpal0aE3 Alsy7r09nWK6s8D1tZgACnKqP4UmWnNTwiS2MkKpG/DnO/ISeTMfAV4l4JR50sU2 N7Xjr1UpktWH2221gfOhMFNkhDxMKL617zT7qMvnKVDf2GFCL+C9OYD8X+7O5XnS tQ6u67Ya2RrA62f7+o671VzS8+rR1akytcmukYInZ0YEwt7bwOfZQjjwRdcD16Wf -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:08 2026 by rpki-client