This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/OexBeKcIncb0jKb4JvVZXcJT1Ug.roa File: OexBeKcIncb0jKb4JvVZXcJT1Ug.roa (raw, json) Hash identifier: O2kEZ95yzKLiq43k1ys04PPuKi6PpIFY+Xw79K5ILEo= Subject key identifier: 39:EC:41:78:A7:08:9D:C6:F4:8C:A6:F8:26:F5:59:5D:C2:53:D5:48 Certificate issuer: /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd Certificate serial: 019B7EA6B7AA6B62F0E8D78D95260F77DBB9 Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/OexBeKcIncb0jKb4JvVZXcJT1Ug.roa Signing time: Fri 02 Jan 2026 12:20:13 +0000 ROA not before: Fri 02 Jan 2026 12:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35790 IP address blocks: 185.31.140.0/22 maxlen: 24 185.57.84.0/22 maxlen: 24 185.105.244.0/22 maxlen: 24 185.217.224.0/22 maxlen: 24 213.204.192.0/20 maxlen: 24 213.204.208.0/20 maxlen: 24 213.204.224.0/20 maxlen: 24 213.204.240.0/21 maxlen: 24 213.204.248.0/22 maxlen: 24 213.204.252.0/22 maxlen: 24 2a0b:cdc0::/29 maxlen: 29 2a0b:cdc0::/32 maxlen: 32 2a0b:cdc1::/32 maxlen: 32 2a0b:cdc7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b7:aa:6b:62:f0:e8:d7:8d:95:26:0f:77:db:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd Validity Not Before: Jan 2 12:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39ec4178a7089dc6f48ca6f826f5595dc253d548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:be:56:5a:fe:34:ea:d5:ab:fc:8a:44:50:3c: 6d:ae:ee:ac:17:f2:93:3a:d3:37:2c:64:0f:d6:15: 0e:ff:87:b3:04:c1:32:45:e5:e4:04:2e:a6:2d:e1: 11:b6:ed:41:e0:ea:a8:2d:c6:b8:1f:c6:58:40:fc: 78:c0:fd:15:9a:1d:55:33:65:f1:6b:87:96:69:17: 81:6e:f0:2c:5a:0a:a0:02:40:e2:6f:76:aa:ef:53: 2d:4b:fc:c9:b2:5e:01:42:7d:64:1a:5c:ae:f3:07: d9:53:d0:bc:cb:e4:6b:84:8e:65:87:f6:2c:44:d3: a7:12:42:4f:fd:92:51:ec:cb:4a:dc:a1:5c:0e:38: 37:fd:cc:eb:42:f2:d1:03:05:f1:b7:ff:fb:9c:e9: a2:23:13:3a:cb:d2:25:08:6c:7f:9c:d7:10:53:79: e1:43:e7:55:9d:da:4c:28:8a:04:26:2a:78:b6:6d: a7:0d:13:a8:42:12:a4:68:b1:89:48:fc:f9:5b:6f: b6:fa:b9:d5:f0:c1:9d:61:ba:1d:ef:59:4b:51:d5: a9:4e:00:26:e1:39:c3:57:36:a7:7b:63:a0:85:55: 4b:aa:a0:74:2b:3c:0b:b4:e7:84:07:80:79:b6:49: 88:11:32:8e:68:c2:92:fc:d8:bd:d0:cf:de:b6:8e: 9e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EC:41:78:A7:08:9D:C6:F4:8C:A6:F8:26:F5:59:5D:C2:53:D5:48 X509v3 Authority Key Identifier: keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/OexBeKcIncb0jKb4JvVZXcJT1Ug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.140.0/22 185.57.84.0/22 185.105.244.0/22 185.217.224.0/22 213.204.192.0/18 IPv6: 2a0b:cdc0::/29 Signature Algorithm: sha256WithRSAEncryption 72:6e:c8:ba:86:49:28:ca:73:d9:fd:4d:74:f5:e3:eb:e8:cc: 63:6c:7b:bc:84:85:77:36:87:1d:e5:02:b8:d3:00:d5:7a:af: 54:d5:52:5b:0b:93:01:03:b8:88:b7:54:1f:0c:f4:76:cb:b0: d0:ab:a2:77:9a:fb:1e:f4:60:82:b2:59:26:5a:e5:56:4d:a9: cc:bd:3c:f8:70:a2:7c:1d:ab:a7:c0:fc:e3:9d:55:60:b1:98: 00:20:3c:cd:47:1e:f2:b6:53:5b:91:60:c2:f0:c5:bb:1f:4a: 3f:46:b1:2d:7a:16:95:06:bc:f9:56:cb:ec:99:c5:15:f2:2a: b8:85:91:77:a8:72:78:68:c8:8c:69:96:e1:9d:c1:04:b3:e8: b2:64:29:88:07:c6:33:f4:cc:77:79:aa:48:6a:5e:a4:65:f4: 51:4a:f0:e1:56:a8:db:cf:81:a6:6a:be:34:61:5f:3b:a2:c6: 11:e1:32:29:74:1e:52:03:b8:ca:89:a7:17:05:d9:d7:b2:fb: 82:e5:d7:82:ec:19:7a:a1:c4:c8:d2:96:12:8d:70:45:6b:e8: 73:fb:e1:ac:d2:10:23:86:7a:61:ae:4c:d4:b9:74:2a:93:94: c3:b1:76:12:22:63:7a:a5:35:f9:eb:30:30:0b:fc:a8:3e:f0: 9c:91:3a:a5 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt+preqa2Lw6NeNlSYPd9u5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNjFiODM3OGU4ZjM2OGFlNDk5OGQ1MWMzYTlhY2U2NDE0 OGQ2Y2QwHhcNMjYwMTAyMTIyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWVjNDE3OGE3MDg5ZGM2ZjQ4Y2E2ZjgyNmY1NTk1ZGMyNTNkNTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr5WWv406tWr/IpEUDxtru6sF/KT OtM3LGQP1hUO/4ezBMEyReXkBC6mLeERtu1B4OqoLca4H8ZYQPx4wP0Vmh1VM2Xx a4eWaReBbvAsWgqgAkDib3aq71MtS/zJsl4BQn1kGlyu8wfZU9C8y+RrhI5lh/Ys RNOnEkJP/ZJR7MtK3KFcDjg3/czrQvLRAwXxt//7nOmiIxM6y9IlCGx/nNcQU3nh Q+dVndpMKIoEJip4tm2nDROoQhKkaLGJSPz5W2+2+rnV8MGdYbod71lLUdWpTgAm 4TnDVzane2OghVVLqqB0KzwLtOeEB4B5tkmIETKOaMKS/Ni90M/eto6eLQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFDnsQXinCJ3G9Iym+Cb1WV3CU9VIMB8GA1UdIwQY MBaAFH1huDeOjzaK5JmNUcOprOZBSNbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZDgyMWItMzQ1Mi00MjdhLThlNDQt ZDE2ZTRhZTYxZjgwLzEvT2V4QmVLY0luY2IwaktiNEp2VlpYY0pUMVVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZDgyMWItMzQ1Mi00MjdhLThlNDQtZDE2ZTRhZTYxZjgw LzEvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCuR+MAwQC uTlUAwQCuWn0AwQCudngAwQG1czAMA0EAgACMAcDBQMqC83AMA0GCSqGSIb3DQEB CwUAA4IBAQBybsi6hkkoynPZ/U109ePr6MxjbHu8hIV3Nocd5QK40wDVeq9U1VJb C5MBA7iIt1QfDPR2y7DQq6J3mvse9GCCslkmWuVWTanMvTz4cKJ8HaunwPzjnVVg sZgAIDzNRx7ytlNbkWDC8MW7H0o/RrEtehaVBrz5VsvsmcUV8iq4hZF3qHJ4aMiM aZbhncEEs+iyZCmIB8Yz9Mx3eapIal6kZfRRSvDhVqjbz4Gmar40YV87osYR4TIp dB5SA7jKiacXBdnXsvuC5deC7Bl6ocTI0pYSjXBFa+hz++Gs0hAjhnphrkzUuXQq k5TDsXYSImN6pTX56zAwC/yoPvCckTql -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:41 2026 by rpki-client