This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/O0WFOQ5F0adp9CIdcAP4Tkb9e78.roa File: O0WFOQ5F0adp9CIdcAP4Tkb9e78.roa (raw, json) Hash identifier: 2t8GAUYJVh4IihKnWbix0KGV/ekdr74eFxI1zTcuA2c= Subject key identifier: 3B:45:85:39:0E:45:D1:A7:69:F4:22:1D:70:03:F8:4E:46:FD:7B:BF Certificate issuer: /CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2 Certificate serial: 019B7CED25E486476C6761C74F744BF36403 Authority key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/O0WFOQ5F0adp9CIdcAP4Tkb9e78.roa Signing time: Fri 02 Jan 2026 04:17:55 +0000 ROA not before: Fri 02 Jan 2026 04:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206197 IP address blocks: 185.192.52.0/24 maxlen: 24 185.192.53.0/24 maxlen: 24 185.192.54.0/24 maxlen: 24 185.192.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:25:e4:86:47:6c:67:61:c7:4f:74:4b:f3:64:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2 Validity Not Before: Jan 2 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b4585390e45d1a769f4221d7003f84e46fd7bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:73:f0:5d:4b:a8:67:2c:06:35:db:37:3d:71: a2:61:81:3d:69:2a:88:e1:be:5a:ab:ce:82:e2:36: 22:5f:ae:a3:d6:cb:ba:c5:ff:99:7d:76:39:d3:77: 0a:f2:c9:eb:82:6d:9d:ce:ee:55:0e:3b:c1:47:11: 4a:48:47:7f:8b:a5:97:35:d8:cc:11:da:0c:e5:a3: 01:6b:29:df:35:f9:c0:2d:e5:37:0e:48:cf:89:4b: d6:1e:2a:44:6c:40:67:d8:06:3c:37:44:cd:8a:93: 7a:07:f9:13:ba:03:df:c1:62:76:d8:e2:83:40:81: 47:0d:c7:e4:f5:4f:4d:3d:53:f6:25:9d:ef:47:7a: b2:b4:e1:21:0d:7e:7e:c6:c7:59:21:c6:b8:fc:c4: 16:6f:21:1a:e0:b9:26:35:71:fd:de:2f:61:a3:b6: d9:72:20:eb:5d:dd:2e:c8:ad:33:d3:36:fc:59:92: 4d:8a:b9:2c:a2:aa:c0:7f:fd:6c:a9:f5:96:91:26: c2:93:da:f5:30:45:49:83:0c:b2:3c:de:da:c5:9d: fa:99:0c:11:02:cc:de:4a:a9:5a:92:32:ac:bf:6e: a9:e4:b0:a6:83:4d:d3:1f:e2:84:87:3f:18:5a:6a: 70:44:81:ca:11:6c:10:53:24:1a:b9:6e:4d:21:e2: 09:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:45:85:39:0E:45:D1:A7:69:F4:22:1D:70:03:F8:4E:46:FD:7B:BF X509v3 Authority Key Identifier: keyid:77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/O0WFOQ5F0adp9CIdcAP4Tkb9e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.52.0/22 Signature Algorithm: sha256WithRSAEncryption bf:4c:75:db:1f:b8:f1:e0:6c:ef:66:ef:3e:f2:53:f9:35:73: ac:7e:9a:1d:3d:3b:12:b8:a6:91:aa:ef:c2:50:f0:da:65:21: 50:72:0e:b6:f7:96:15:d4:ef:d3:84:f1:96:a0:01:d2:65:df: 62:ea:94:13:1b:df:26:ad:50:9b:da:0e:26:3a:d5:36:b1:af: 7a:20:e0:9d:d8:9a:a2:9a:cf:2c:af:fb:09:ea:71:a7:23:0d: 55:9d:7a:ae:24:18:94:38:26:ca:4c:6a:5a:46:2b:11:45:93: e5:41:8b:cb:14:f5:83:b4:d5:cc:34:58:ae:27:19:0d:ab:15: 09:d6:54:66:16:17:b6:c1:f9:d9:17:36:08:77:e6:f3:c5:f9: c9:81:d2:8e:87:8d:16:c8:0d:6f:00:26:67:6b:08:33:dd:d4: ef:ba:68:38:91:cc:fa:af:0d:bd:cd:c9:3a:ad:0e:4f:f5:5f: 41:41:c5:fc:52:85:ca:bd:ce:c5:4c:fa:34:31:13:93:b9:06: c1:6d:a8:96:0c:c6:f0:aa:dd:9f:cb:85:2f:5b:14:ba:54:59: d0:70:c9:06:ce:f0:55:13:39:f8:1d:b9:1a:a8:1a:d7:f0:82: 67:37:5c:d4:14:87:5d:51:23:3a:67:4c:74:27:4e:92:83:a8: a2:01:39:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87SXkhkdsZ2HHT3RL82QDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZDE4YjBmNjUzNWZjYmJiNDkyZjYwNmNiODgwYmU3YTI2 ZWZjYzIwHhcNMjYwMTAyMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjQ1ODUzOTBlNDVkMWE3NjlmNDIyMWQ3MDAzZjg0ZTQ2ZmQ3YmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHPwXUuoZywGNds3PXGiYYE9aSqI 4b5aq86C4jYiX66j1su6xf+ZfXY503cK8snrgm2dzu5VDjvBRxFKSEd/i6WXNdjM EdoM5aMBaynfNfnALeU3DkjPiUvWHipEbEBn2AY8N0TNipN6B/kTugPfwWJ22OKD QIFHDcfk9U9NPVP2JZ3vR3qytOEhDX5+xsdZIca4/MQWbyEa4LkmNXH93i9ho7bZ ciDrXd0uyK0z0zb8WZJNirksoqrAf/1sqfWWkSbCk9r1MEVJgwyyPN7axZ36mQwR AszeSqlakjKsv26p5LCmg03TH+KEhz8YWmpwRIHKEWwQUyQauW5NIeIJfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDtFhTkORdGnafQiHXAD+E5G/Xu/MB8GA1UdIwQY MBaAFHfRiw9lNfy7tJL2BsuIC+eibvzCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDlHTEQyVTFfTHUwa3ZZR3k0Z0w1Nkp1X01JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNzg3M2UtMjQ3NS00NzFkLWIwMzkt MThlY2QwNGE3YjVlLzEvTzBXRk9RNUYwYWRwOUNJZGNBUDRUa2I5ZTc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iNzg3M2UtMjQ3NS00NzFkLWIwMzktMThlY2QwNGE3YjVl LzEvZDlHTEQyVTFfTHUwa3ZZR3k0Z0w1Nkp1X01JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucA0MA0G CSqGSIb3DQEBCwUAA4IBAQC/THXbH7jx4GzvZu8+8lP5NXOsfpodPTsSuKaRqu/C UPDaZSFQcg6295YV1O/ThPGWoAHSZd9i6pQTG98mrVCb2g4mOtU2sa96IOCd2Jqi ms8sr/sJ6nGnIw1VnXquJBiUOCbKTGpaRisRRZPlQYvLFPWDtNXMNFiuJxkNqxUJ 1lRmFhe2wfnZFzYId+bzxfnJgdKOh40WyA1vACZnawgz3dTvumg4kcz6rw29zck6 rQ5P9V9BQcX8UoXKvc7FTPo0MROTuQbBbaiWDMbwqt2fy4UvWxS6VFnQcMkGzvBV Ezn4HbkaqBrX8IJnN1zUFIddUSM6Z0x0J06Sg6iiATmL -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:22 2026 by rpki-client