This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/oVKcWW4duCpkxQJ1oP8E7IC2AzU.roa File: oVKcWW4duCpkxQJ1oP8E7IC2AzU.roa (raw, json) Hash identifier: myh6PixZ04dXKVpBJ7oXGMj9UcP3arkRwKqy/fuyKlw= Subject key identifier: A1:52:9C:59:6E:1D:B8:2A:64:C5:02:75:A0:FF:04:EC:80:B6:03:35 Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf Certificate serial: 019B7F8430BF6E850FE553799D2A5D4062D8 Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/oVKcWW4duCpkxQJ1oP8E7IC2AzU.roa Signing time: Fri 02 Jan 2026 16:22:08 +0000 ROA not before: Fri 02 Jan 2026 16:22:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30943 IP address blocks: 185.67.167.0/24 maxlen: 24 217.112.32.0/20 maxlen: 20 217.112.32.0/23 maxlen: 23 217.112.34.0/23 maxlen: 23 217.112.35.0/24 maxlen: 24 217.112.40.0/23 maxlen: 23 217.112.44.0/24 maxlen: 24 217.112.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 09:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:30:bf:6e:85:0f:e5:53:79:9d:2a:5d:40:62:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf Validity Not Before: Jan 2 16:22:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1529c596e1db82a64c50275a0ff04ec80b60335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fe:bf:ce:1b:50:70:7c:e5:fe:23:22:70:b1: 65:f4:b9:25:7e:4c:05:be:f5:72:b5:ba:82:dd:a7: 7a:81:10:97:99:c2:28:5c:ae:a0:2c:4e:f6:f6:99: 55:f3:a9:33:c9:8e:8d:b7:58:a1:ef:7f:b7:b0:54: ca:11:53:1a:9b:5c:c2:8f:03:60:6c:29:02:3d:cb: 7c:51:25:8b:6a:24:53:8b:a6:09:fd:d1:ed:28:ba: f4:14:13:36:94:c6:cd:84:d7:eb:16:d9:b3:92:a0: b7:b5:eb:a2:96:ee:8b:05:58:f2:60:27:89:8f:90: e0:34:40:cc:05:94:25:25:90:90:e0:a4:77:1a:86: 9d:23:97:10:4e:14:83:39:75:d0:f5:f5:b9:e2:75: dd:5d:19:ef:ce:f5:b6:6e:3f:be:5d:07:2e:7a:4c: f2:8f:70:0c:70:a7:96:57:65:57:19:b0:61:f7:1e: 7b:1d:b7:62:46:af:44:ae:77:d1:5b:4d:9f:38:df: cc:9c:1a:78:84:b9:4b:2d:fd:64:9d:8f:44:90:ea: 5b:69:49:6c:cc:43:7f:fe:42:fe:1d:1e:96:82:42: 2b:eb:33:12:bb:57:50:08:c3:06:81:7e:47:9b:83: 33:bb:26:5a:31:5b:25:52:ac:25:04:b1:1d:92:bd: fc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:52:9C:59:6E:1D:B8:2A:64:C5:02:75:A0:FF:04:EC:80:B6:03:35 X509v3 Authority Key Identifier: keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/oVKcWW4duCpkxQJ1oP8E7IC2AzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.67.167.0/24 217.112.32.0/20 Signature Algorithm: sha256WithRSAEncryption 43:37:84:d4:68:9e:c2:98:10:6d:8f:83:94:d5:eb:c7:3c:ff: 7f:59:15:d5:09:a1:52:b6:b3:6e:e8:92:a6:26:0c:ce:0c:89: 79:51:cd:a9:5c:97:fa:8b:a6:00:36:85:30:61:ee:05:96:1b: ff:43:3e:37:b2:04:d5:c3:0f:6a:ab:b7:7d:30:ec:97:94:9c: 0f:93:7b:cb:d1:cb:86:2e:9a:d3:6d:1c:04:a2:48:a1:1d:02: 00:7b:4f:33:a8:1f:87:b1:c6:91:07:dd:2b:49:94:dc:fe:e2: 84:5c:54:0c:3d:fb:56:d0:73:2a:97:5c:a1:a9:9a:17:ea:0f: ab:7a:a6:26:8c:aa:24:37:08:2d:1f:ad:91:0c:a3:f8:60:98: 17:f7:1d:99:94:e8:42:be:dc:19:ff:b5:4e:45:e2:06:0a:79: ae:f3:a7:64:45:b1:d1:72:38:cc:98:6c:be:a2:42:9f:7a:f3: 51:32:d6:16:be:11:3e:bf:3a:53:c0:15:b4:db:80:e4:7b:9d: 13:5d:b7:8d:02:0f:ec:2a:a6:ad:7a:b7:70:20:a4:13:8c:4b: 80:4a:8f:17:41:cd:60:09:b9:64:ab:a2:6d:57:1e:1b:68:7c: a0:31:0b:2c:80:77:cf:6f:7d:f5:3f:74:b6:8b:f0:ba:dc:54: c2:80:82:6d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hDC/boUP5VN5nSpdQGLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGRkOWU3MzU1YzcyYzc1MWZmZjRmMTc1ZGFjZTdkYWE3 YjljYmYwHhcNMjYwMTAyMTYyMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTUyOWM1OTZlMWRiODJhNjRjNTAyNzVhMGZmMDRlYzgwYjYwMzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf6/zhtQcHzl/iMicLFl9LklfkwF vvVytbqC3ad6gRCXmcIoXK6gLE729plV86kzyY6Nt1ih73+3sFTKEVMam1zCjwNg bCkCPct8USWLaiRTi6YJ/dHtKLr0FBM2lMbNhNfrFtmzkqC3teuilu6LBVjyYCeJ j5DgNEDMBZQlJZCQ4KR3GoadI5cQThSDOXXQ9fW54nXdXRnvzvW2bj++XQcuekzy j3AMcKeWV2VXGbBh9x57HbdiRq9ErnfRW02fON/MnBp4hLlLLf1knY9EkOpbaUls zEN//kL+HR6WgkIr6zMSu1dQCMMGgX5Hm4MzuyZaMVslUqwlBLEdkr38OwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKFSnFluHbgqZMUCdaD/BOyAtgM1MB8GA1UdIwQY MBaAFDgN2ec1XHLHUf/08XXazn2qe5y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0EzWjV6VmNjc2RSX19UeGRkck9mYXA3bkw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iN2ZlYTItYTMyZC00YTVlLTk5ODIt NTRiNGNhNTBkMjQ4LzEvb1ZLY1dXNGR1Q3BreFFKMW9QOEU3SUMyQXpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iN2ZlYTItYTMyZC00YTVlLTk5ODItNTRiNGNhNTBkMjQ4 LzEvT0EzWjV6VmNjc2RSX19UeGRkck9mYXA3bkw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuUOnAwQE 2XAgMA0GCSqGSIb3DQEBCwUAA4IBAQBDN4TUaJ7CmBBtj4OU1evHPP9/WRXVCaFS trNu6JKmJgzODIl5Uc2pXJf6i6YANoUwYe4Flhv/Qz43sgTVww9qq7d9MOyXlJwP k3vL0cuGLprTbRwEokihHQIAe08zqB+HscaRB90rSZTc/uKEXFQMPftW0HMql1yh qZoX6g+reqYmjKokNwgtH62RDKP4YJgX9x2ZlOhCvtwZ/7VOReIGCnmu86dkRbHR cjjMmGy+okKfevNRMtYWvhE+vzpTwBW024Dke50TXbeNAg/sKqaterdwIKQTjEuA So8XQc1gCblkq6JtVx4baHygMQssgHfPb331P3S2i/C63FTCgIJt -----END CERTIFICATE-----Generated at Sat Feb 7 17:36:53 2026 by rpki-client