This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/OyB8W9_wA5wbpLXiXUV8OttkP34.roa File: OyB8W9_wA5wbpLXiXUV8OttkP34.roa (raw, json) Hash identifier: 0Tul/Q70maJ+aYBSNOe7pTN1kLta1YDTWvdIAUQpUg4= Subject key identifier: 3B:20:7C:5B:DF:F0:03:9C:1B:A4:B5:E2:5D:45:7C:3A:DB:64:3F:7E Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6 Certificate serial: 019B7AC7EEEBA37282CC4FE42C91EFDCB923 Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/OyB8W9_wA5wbpLXiXUV8OttkP34.roa Signing time: Thu 01 Jan 2026 18:18:01 +0000 ROA not before: Thu 01 Jan 2026 18:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61112 IP address blocks: 185.155.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ee:eb:a3:72:82:cc:4f:e4:2c:91:ef:dc:b9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6 Validity Not Before: Jan 1 18:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b207c5bdff0039c1ba4b5e25d457c3adb643f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:72:ab:19:25:58:50:5e:fc:42:50:57:e7:93: 1b:a5:1d:30:9f:74:1e:d4:6d:98:66:51:6d:98:58: 05:ba:65:95:0a:3d:f6:93:86:67:93:3a:70:92:18: 9e:79:14:3f:1d:1e:56:30:c5:2b:2c:5d:9d:a7:6d: b6:2d:67:5f:4a:b1:f1:6b:b2:7c:e9:94:a4:6e:2f: 37:b4:d8:d9:29:1d:81:a0:de:71:a0:2f:b0:34:79: 50:f6:5a:5e:01:4e:47:12:ff:c7:f9:09:21:ab:85: c5:e8:7e:ab:68:38:f6:e1:a4:ab:25:3f:55:c6:3c: d7:63:64:10:d1:2a:53:57:a8:db:a5:a4:b1:98:b5: f7:a5:7c:79:c5:e0:48:69:d8:b1:58:2b:a6:b4:4e: f7:55:a1:88:04:b6:90:3e:7e:d3:18:41:94:81:85: d7:84:93:c5:db:f8:12:c6:97:80:d3:77:81:72:14: f1:c4:b5:30:54:3f:ea:33:37:8d:4e:5d:1b:e1:3d: 45:23:84:02:70:4c:34:1e:51:36:63:93:a3:bf:da: 98:2c:cd:26:c8:78:9e:c2:2c:65:4a:ba:56:d4:48: f1:94:e5:fe:b4:c1:5e:a8:e4:b5:fe:f1:33:39:a4: aa:a0:b9:4e:56:09:91:7f:e8:a6:cb:22:5e:14:f8: 47:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:20:7C:5B:DF:F0:03:9C:1B:A4:B5:E2:5D:45:7C:3A:DB:64:3F:7E X509v3 Authority Key Identifier: keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/OyB8W9_wA5wbpLXiXUV8OttkP34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.235.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:65:9d:fe:9b:ac:bf:61:15:39:6b:06:d6:08:8e:c7:1a:4b: 05:9f:b5:1b:da:ee:42:66:bf:44:cf:37:29:3f:f2:63:bb:33: 10:f4:6c:5e:33:51:8a:ee:84:bf:31:d1:2b:9c:53:cf:cf:d6: e7:5d:28:9b:2d:a3:87:3f:33:63:f2:d1:4c:93:00:76:ba:07: 97:26:eb:06:1c:6a:b1:7f:72:d7:a2:9f:35:eb:75:6a:d2:bc: f6:6a:a3:2e:f1:c7:6a:8f:6d:70:cc:6b:8d:db:ac:cb:1e:8f: 49:15:18:29:e8:1e:1e:c8:1a:45:1c:95:96:32:60:c7:ba:a8: 93:78:55:58:c4:a0:70:49:ac:c9:96:42:dd:0e:84:03:ae:26: c5:83:7e:e9:04:cb:9e:57:23:05:9d:dc:31:f2:b5:37:5a:29: 22:b8:21:62:34:6a:a7:5a:03:64:08:a3:e8:b7:56:ea:28:82: 02:98:7f:ee:0c:a8:61:d2:5c:11:20:65:e3:bc:35:33:d7:84: 60:03:24:cc:e1:23:6b:41:e2:f3:3e:20:a4:97:de:aa:84:d7: 92:b2:32:a9:6a:83:27:2a:76:8d:0c:36:ea:c5:34:03:96:68: 06:7a:5d:40:60:1b:5c:af:cc:9e:9b:f9:9e:53:48:81:96:2c: 73:b5:ab:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+7ro3KCzE/kLJHv3LkjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTdjOWRlOTI3ZmE3NWJlYWVmNzg4NWYwZDg4ZjZmNGQy YTBlZDYwHhcNMjYwMTAxMTgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjIwN2M1YmRmZjAwMzljMWJhNGI1ZTI1ZDQ1N2MzYWRiNjQzZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XKrGSVYUF78QlBX55MbpR0wn3Qe 1G2YZlFtmFgFumWVCj32k4ZnkzpwkhieeRQ/HR5WMMUrLF2dp222LWdfSrHxa7J8 6ZSkbi83tNjZKR2BoN5xoC+wNHlQ9lpeAU5HEv/H+Qkhq4XF6H6raDj24aSrJT9V xjzXY2QQ0SpTV6jbpaSxmLX3pXx5xeBIadixWCumtE73VaGIBLaQPn7TGEGUgYXX hJPF2/gSxpeA03eBchTxxLUwVD/qMzeNTl0b4T1FI4QCcEw0HlE2Y5Ojv9qYLM0m yHiewixlSrpW1EjxlOX+tMFeqOS1/vEzOaSqoLlOVgmRf+imyyJeFPhHPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDsgfFvf8AOcG6S14l1FfDrbZD9+MB8GA1UdIwQY MBaAFDUXyd6Sf6db6u94hfDYj29NKg7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTIt ZmQzYjMwMDJjMGJiLzEvT3lCOFc5X3dBNXdicExYaVhVVjhPdHRrUDM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTItZmQzYjMwMDJjMGJi LzEvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZvrMA0G CSqGSIb3DQEBCwUAA4IBAQBtZZ3+m6y/YRU5awbWCI7HGksFn7Ub2u5CZr9Ezzcp P/JjuzMQ9GxeM1GK7oS/MdErnFPPz9bnXSibLaOHPzNj8tFMkwB2ugeXJusGHGqx f3LXop8163Vq0rz2aqMu8cdqj21wzGuN26zLHo9JFRgp6B4eyBpFHJWWMmDHuqiT eFVYxKBwSazJlkLdDoQDribFg37pBMueVyMFndwx8rU3WikiuCFiNGqnWgNkCKPo t1bqKIICmH/uDKhh0lwRIGXjvDUz14RgAyTM4SNrQeLzPiCkl96qhNeSsjKpaoMn KnaNDDbqxTQDlmgGel1AYBtcr8yem/meU0iBlixztatN -----END CERTIFICATE-----Generated at Mon Jan 19 11:23:54 2026 by rpki-client