This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/oLlYP-c7d1IiKVSrcUMhwmbY61s.roa File: oLlYP-c7d1IiKVSrcUMhwmbY61s.roa (raw, json) Hash identifier: AU8NC+uYOmw2IhzeeedIVabaHATngMqK3THaOWJcgZo= Subject key identifier: A0:B9:58:3F:E7:3B:77:52:22:29:54:AB:71:43:21:C2:66:D8:EB:5B Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c Certificate serial: 019B76EB0FE6E689E4E0922E9AB328C69167 Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/oLlYP-c7d1IiKVSrcUMhwmbY61s.roa Signing time: Thu 01 Jan 2026 00:17:55 +0000 ROA not before: Thu 01 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200918 IP address blocks: 185.186.36.0/24 maxlen: 24 185.186.37.0/24 maxlen: 24 185.186.38.0/24 maxlen: 24 185.186.39.0/24 maxlen: 24 2a06:bfc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0f:e6:e6:89:e4:e0:92:2e:9a:b3:28:c6:91:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c Validity Not Before: Jan 1 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0b9583fe73b7752222954ab714321c266d8eb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:24:89:0c:1a:37:e1:fe:a1:2a:75:4a:b4:db: 9b:55:11:d4:d2:b0:b9:ca:dd:23:28:04:90:0d:64: bb:82:2e:b1:c0:4b:61:bf:5e:7e:20:05:42:25:48: 4c:48:17:04:53:dc:1e:8f:7c:bb:72:08:c6:d1:f1: 86:1d:58:a8:e5:ce:7b:ff:3f:3c:9c:01:12:67:3d: 65:fb:e4:46:0d:0e:01:a6:3b:15:3e:47:46:a2:73: 59:87:dd:ae:be:d5:48:75:b4:20:26:83:1a:52:1a: 0a:dc:9b:31:79:5e:1c:13:63:ba:96:16:1e:11:c2: 3b:76:91:79:c5:7a:58:85:4d:79:17:13:b3:5a:55: 40:0f:a9:85:98:39:9b:db:d3:87:cb:6e:ac:b0:5a: 47:7a:4a:6f:43:c8:8b:e5:d6:5b:d6:5f:ea:67:79: 4e:96:b1:ef:a5:9d:2c:48:33:99:2e:27:03:e8:75: 5c:70:75:55:0e:d3:51:33:b5:bf:f6:24:16:50:f4: 31:4b:27:b2:65:f0:e0:d7:1b:76:b8:63:d3:ed:2e: eb:ce:a7:64:3a:24:57:49:3f:99:18:45:e3:75:cc: 10:ec:49:39:d7:a7:28:7c:d5:cf:36:f5:fe:db:42: f0:95:16:af:e1:5d:9b:59:5c:c3:f4:9b:ea:d9:90: 12:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B9:58:3F:E7:3B:77:52:22:29:54:AB:71:43:21:C2:66:D8:EB:5B X509v3 Authority Key Identifier: keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/oLlYP-c7d1IiKVSrcUMhwmbY61s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.36.0/22 IPv6: 2a06:bfc0::/29 Signature Algorithm: sha256WithRSAEncryption 9d:83:1d:22:78:e8:16:8d:0b:15:b9:fb:f4:2f:2e:0a:5b:b6: 60:93:9d:09:bf:ff:39:47:f6:15:1e:f3:5d:34:da:71:c6:ff: 54:44:06:35:b8:bb:92:09:af:cf:b9:e4:1c:41:8e:7a:ca:7e: 6c:33:61:69:6a:d2:4f:66:0d:f4:8f:19:df:42:02:07:0f:ae: 75:cb:87:fb:5c:ef:e4:21:66:53:7c:46:f5:83:d4:8e:4f:5e: fc:93:97:be:5a:31:58:5c:27:c2:e7:e9:9b:7f:13:1f:b7:43: 17:16:3d:ff:81:49:34:ba:27:5b:68:68:49:79:e2:60:3a:70: 3b:63:6e:0c:fa:a5:76:3e:b1:aa:7c:47:b4:2f:16:4f:34:b9: d7:d4:7a:60:00:82:04:64:76:7e:83:5a:10:b9:30:5a:7f:78: 49:83:7a:6c:f5:6f:dd:41:00:a5:00:f8:e0:ac:75:c8:1f:9c: 0e:ff:92:2f:70:00:9a:e9:92:d9:d8:42:80:49:a7:f5:57:bf: 7e:3d:4b:7a:85:7a:1b:7b:4b:24:ce:93:1c:4c:2b:bd:7a:03: a6:aa:a0:59:4e:e5:f7:84:e4:12:ff:e3:b8:eb:53:41:ec:a5: ae:26:b1:e4:27:46:56:65:79:83:d8:05:c7:0e:fc:4c:03:5a: 87:84:50:be -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26w/m5onk4JIumrMoxpFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMDM4N2M5NDEzNGQ5YTA4ZmZkMzI2MzA5Njc3MDNhZGM1 ODJiNmMwHhcNMjYwMTAxMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGI5NTgzZmU3M2I3NzUyMjIyOTU0YWI3MTQzMjFjMjY2ZDhlYjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCSJDBo34f6hKnVKtNubVRHU0rC5 yt0jKASQDWS7gi6xwEthv15+IAVCJUhMSBcEU9wej3y7cgjG0fGGHVio5c57/z88 nAESZz1l++RGDQ4BpjsVPkdGonNZh92uvtVIdbQgJoMaUhoK3JsxeV4cE2O6lhYe EcI7dpF5xXpYhU15FxOzWlVAD6mFmDmb29OHy26ssFpHekpvQ8iL5dZb1l/qZ3lO lrHvpZ0sSDOZLicD6HVccHVVDtNRM7W/9iQWUPQxSyeyZfDg1xt2uGPT7S7rzqdk OiRXST+ZGEXjdcwQ7Ek516cofNXPNvX+20LwlRav4V2bWVzD9Jvq2ZAS5QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKC5WD/nO3dSIilUq3FDIcJm2OtbMB8GA1UdIwQY MBaAFEIDh8lBNNmgj/0yYwlncDrcWCtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMt Mzc2ZjRiNGQ5ZGE2LzEvb0xsWVAtYzdkMUlpS1ZTcmNVTWh3bWJZNjFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMtMzc2ZjRiNGQ5ZGE2 LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubokMA0E AgACMAcDBQMqBr/AMA0GCSqGSIb3DQEBCwUAA4IBAQCdgx0ieOgWjQsVufv0Ly4K W7Zgk50Jv/85R/YVHvNdNNpxxv9URAY1uLuSCa/PueQcQY56yn5sM2FpatJPZg30 jxnfQgIHD651y4f7XO/kIWZTfEb1g9SOT178k5e+WjFYXCfC5+mbfxMft0MXFj3/ gUk0uidbaGhJeeJgOnA7Y24M+qV2PrGqfEe0LxZPNLnX1HpgAIIEZHZ+g1oQuTBa f3hJg3ps9W/dQQClAPjgrHXIH5wO/5IvcACa6ZLZ2EKASaf1V79+PUt6hXobe0sk zpMcTCu9egOmqqBZTuX3hOQS/+O461NB7KWuJrHkJ0ZWZXmD2AXHDvxMA1qHhFC+ -----END CERTIFICATE-----Generated at Mon Jan 26 13:31:30 2026 by rpki-client