This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/owCHA24oC0FOb4x18JCSnTAlWZI.roa File: owCHA24oC0FOb4x18JCSnTAlWZI.roa (raw, json) Hash identifier: V2Wf8EKDyk5Qv0JbA3iyriP4XMKfQBD3QUhcqhII+PA= Subject key identifier: A3:00:87:03:6E:28:0B:41:4E:6F:8C:75:F0:90:92:9D:30:25:59:92 Certificate issuer: /CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9 Certificate serial: 019B8D8CDD540561CF21FD581D8CA96B5030 Authority key identifier: 57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/owCHA24oC0FOb4x18JCSnTAlWZI.roa Signing time: Mon 05 Jan 2026 09:46:17 +0000 ROA not before: Mon 05 Jan 2026 09:46:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56494 IP address blocks: 185.49.160.0/24 maxlen: 24 185.49.161.0/24 maxlen: 24 185.49.162.0/24 maxlen: 24 185.49.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:8c:dd:54:05:61:cf:21:fd:58:1d:8c:a9:6b:50:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9 Validity Not Before: Jan 5 09:46:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a30087036e280b414e6f8c75f090929d30255992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:90:2f:97:95:02:99:d9:b7:c2:2f:4f:a2:5c: aa:5f:78:d6:98:cf:8c:78:c4:36:60:ca:e3:79:79: f5:be:8c:e0:48:c0:f0:5c:78:55:84:26:35:5d:fe: 9a:2d:ab:e1:e9:b2:56:ed:8d:38:4e:72:8a:87:89: 06:39:11:57:28:32:50:14:18:c8:82:0e:82:1b:4e: 32:3a:31:13:f9:be:ad:66:62:88:f2:66:f0:f0:95: b8:d9:5e:b3:53:07:b1:c1:0f:b1:38:58:8a:ca:5f: 4e:e3:a1:08:83:37:8e:9f:f9:03:71:38:f7:40:ed: 7f:b0:42:90:9d:58:f8:b3:eb:36:10:f3:7c:08:e9: d7:5f:f4:ed:dc:21:a1:84:f4:f4:02:e2:21:75:d3: 25:83:7b:8b:c0:a2:16:0b:ec:39:13:ba:1e:df:64: a1:1b:5c:4c:78:95:b5:69:31:21:93:26:8f:fa:4a: af:2e:8c:df:21:6b:20:cd:c1:0d:79:ae:6a:69:30: c8:5a:5b:da:f4:2b:1c:87:00:7d:15:f2:93:61:78: 80:8b:d0:a2:ea:91:b9:19:72:70:36:68:22:31:3e: 6b:22:fb:2b:cd:4b:bb:27:6c:83:0c:53:c4:c8:ba: 7e:9d:ca:7e:9b:0e:9b:16:e5:a6:a6:05:7f:f5:b8: 9a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:00:87:03:6E:28:0B:41:4E:6F:8C:75:F0:90:92:9D:30:25:59:92 X509v3 Authority Key Identifier: keyid:57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/owCHA24oC0FOb4x18JCSnTAlWZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.160.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:43:e9:29:8b:54:12:df:72:5e:fd:07:ff:11:cf:11:03:69: b9:79:e1:0f:e7:d2:9c:3a:ad:70:a3:29:24:0f:0a:85:7c:60: 6f:65:1b:b2:fd:69:ce:95:e7:c5:da:88:bc:fb:04:e8:e4:a8: 20:49:56:81:68:45:5d:1f:9d:bb:eb:a6:28:20:74:5a:30:e8: 56:16:79:c7:6c:b3:82:18:93:fc:19:2f:00:b6:ea:27:ed:0c: 3a:ce:77:d5:56:ef:3f:32:30:35:85:63:31:45:5d:90:48:66: 55:95:77:12:ab:3f:3d:28:10:7f:ec:22:b4:bf:c6:13:b5:be: 0b:1c:81:e2:d5:94:09:c3:14:ce:23:f2:7b:b4:66:fa:a5:2c: 43:aa:f4:95:f7:fb:73:36:cf:5a:a7:e4:1b:9a:99:d7:6b:57: c6:af:41:48:2c:9c:ee:2f:36:8a:d8:f1:2b:5b:82:38:11:6e: 5f:e4:bc:d3:ee:1b:75:31:e9:2c:a2:e1:20:9c:33:74:b6:b2: 3c:ac:43:53:5f:47:0e:3c:22:c6:3f:a5:5b:f8:ad:6c:24:79: 1d:c0:bb:91:cd:3a:3c:f6:c5:ef:50:ac:53:48:b9:af:10:e2: 52:b8:be:98:88:07:aa:29:af:b6:e4:af:48:5a:6b:4a:12:93: 1f:6a:1b:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuNjN1UBWHPIf1YHYypa1AwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3M2U5NGM0M2NkMzRhM2I4M2E0YmQ4YWE3YmY0YWUzMjQ2 ZTZkYTkwHhcNMjYwMTA1MDk0NjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzAwODcwMzZlMjgwYjQxNGU2ZjhjNzVmMDkwOTI5ZDMwMjU1OTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pAvl5UCmdm3wi9PolyqX3jWmM+M eMQ2YMrjeXn1vozgSMDwXHhVhCY1Xf6aLavh6bJW7Y04TnKKh4kGORFXKDJQFBjI gg6CG04yOjET+b6tZmKI8mbw8JW42V6zUwexwQ+xOFiKyl9O46EIgzeOn/kDcTj3 QO1/sEKQnVj4s+s2EPN8COnXX/Tt3CGhhPT0AuIhddMlg3uLwKIWC+w5E7oe32Sh G1xMeJW1aTEhkyaP+kqvLozfIWsgzcENea5qaTDIWlva9CschwB9FfKTYXiAi9Ci 6pG5GXJwNmgiMT5rIvsrzUu7J2yDDFPEyLp+ncp+mw6bFuWmpgV/9biamwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKMAhwNuKAtBTm+MdfCQkp0wJVmSMB8GA1UdIwQY MBaAFFc+lMQ800o7g6S9iqe/SuMkbm2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVno2VXhEelRTanVEcEwyS3A3OUs0eVJ1YmFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jODViZmEtYzA3MC00ZGU4LTg0NDQt ODI5NzcwNjJiOTQ3LzEvb3dDSEEyNG9DMEZPYjR4MThKQ1NuVEFsV1pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9jODViZmEtYzA3MC00ZGU4LTg0NDQtODI5NzcwNjJiOTQ3 LzEvVno2VXhEelRTanVEcEwyS3A3OUs0eVJ1YmFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTGgMA0G CSqGSIb3DQEBCwUAA4IBAQBsQ+kpi1QS33Je/Qf/Ec8RA2m5eeEP59KcOq1woykk DwqFfGBvZRuy/WnOlefF2oi8+wTo5KggSVaBaEVdH52766YoIHRaMOhWFnnHbLOC GJP8GS8Atuon7Qw6znfVVu8/MjA1hWMxRV2QSGZVlXcSqz89KBB/7CK0v8YTtb4L HIHi1ZQJwxTOI/J7tGb6pSxDqvSV9/tzNs9ap+QbmpnXa1fGr0FILJzuLzaK2PEr W4I4EW5f5LzT7ht1MeksouEgnDN0trI8rENTX0cOPCLGP6Vb+K1sJHkdwLuRzTo8 9sXvUKxTSLmvEOJSuL6YiAeqKa+25K9IWmtKEpMfahvu -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:41 2026 by rpki-client