This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/O4FogktllEObQ3m4gcGbxOTXFjc.roa File: O4FogktllEObQ3m4gcGbxOTXFjc.roa (raw, json) Hash identifier: LSEt+DfGeh7UZL23uB93PJ34d8wXBxGJPcCGrkXjZy8= Subject key identifier: 3B:81:68:82:4B:65:94:43:9B:43:79:B8:81:C1:9B:C4:E4:D7:16:37 Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678 Certificate serial: 019B7EA59A5C2B5C63B611735CE1DD8F47B2 Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/O4FogktllEObQ3m4gcGbxOTXFjc.roa Signing time: Fri 02 Jan 2026 12:19:00 +0000 ROA not before: Fri 02 Jan 2026 12:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39405 IP address blocks: 185.247.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:9a:5c:2b:5c:63:b6:11:73:5c:e1:dd:8f:47:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678 Validity Not Before: Jan 2 12:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b8168824b6594439b4379b881c19bc4e4d71637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:52:f2:fb:9a:d5:bc:34:38:64:e0:26:19: fd:33:12:eb:2e:6f:20:ee:7c:1a:2d:78:14:36:38: d3:d6:9a:9e:52:a4:50:a4:cd:1e:09:f4:fe:7d:71: c8:a5:97:17:4f:1e:69:d0:c6:a5:14:e0:08:48:34: 74:e2:29:8b:52:b1:7e:80:64:45:1e:c4:87:87:af: 33:89:1b:7d:6a:d5:80:75:77:27:66:60:60:4b:1f: d3:ee:a8:50:dd:1d:55:02:24:ef:45:9b:0b:0f:3e: 08:c9:3c:95:3b:bb:56:73:3c:cf:4f:b2:1c:81:56: 24:c5:6d:8f:dd:13:53:f2:4c:45:b5:dc:e2:82:4c: b0:b3:8a:52:5e:b8:2b:79:23:8b:aa:a5:bf:66:d2: c6:cd:28:75:b9:b6:10:cf:45:96:4b:9c:c3:49:d3: 5f:70:75:3e:3d:c2:38:b3:87:41:50:20:48:0e:7c: a5:2b:b1:93:e4:fd:b0:eb:ae:5e:00:2e:e1:8a:3f: 60:27:6a:d3:3b:47:d7:c8:de:a3:8d:1a:24:da:48: 70:77:a4:66:7f:b0:9c:3c:b5:0f:7a:d2:0e:92:5f: 63:33:36:68:7f:0f:aa:4b:2c:26:c9:fb:90:39:76: 15:3a:1e:95:a6:9f:4b:34:d4:8a:c2:b4:c0:eb:c1: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:81:68:82:4B:65:94:43:9B:43:79:B8:81:C1:9B:C4:E4:D7:16:37 X509v3 Authority Key Identifier: keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/O4FogktllEObQ3m4gcGbxOTXFjc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.247.84.0/23 Signature Algorithm: sha256WithRSAEncryption 55:10:66:23:f7:13:cd:70:ba:fc:ad:f4:62:20:95:a0:c1:74: 7e:9e:cd:a2:c2:93:1a:22:19:83:72:8a:35:13:25:e8:6a:1e: 26:99:42:ab:a4:3f:e0:db:96:e9:b6:d6:6e:02:f4:7a:3c:30: 27:e2:5a:6c:64:12:01:71:7d:94:8c:5d:f8:c5:61:1d:a1:87: e4:4a:40:86:38:97:f8:e0:7f:c1:27:b3:e6:6f:c7:33:2b:a4: 45:0c:d7:54:cd:4d:12:4c:bf:f0:0b:1b:f2:c7:68:0b:90:04: 75:5b:70:d9:35:89:10:5a:43:08:00:8c:34:fe:1d:13:74:90: 6a:58:d8:20:92:e2:8a:df:1b:78:d1:d9:44:db:45:c8:67:dc: d0:60:dd:5b:2c:74:b4:02:7e:0a:4e:22:0a:ba:1c:e0:c1:36: 3e:7c:c3:71:8b:f8:ef:76:b1:7f:7d:12:cf:15:68:33:a6:19: 37:c6:56:59:6d:59:90:5e:37:14:0a:ea:aa:96:3d:a2:03:2e: 9c:69:69:07:58:60:41:42:f2:53:88:e1:61:38:ec:99:b5:6f: c6:36:bc:5d:73:ed:50:5e:ea:98:50:a9:ce:45:f7:a9:00:40: db:3c:ca:64:d5:50:c0:f9:41:a3:c2:91:c8:30:bc:8a:5e:0f: 46:ae:31:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pZpcK1xjthFzXOHdj0eyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzEyZmU5NzQ2NGJjMGU2YTFlZmZhMmYxYzg5NmY3YThh MDI2NzgwHhcNMjYwMTAyMTIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjgxNjg4MjRiNjU5NDQzOWI0Mzc5Yjg4MWMxOWJjNGU0ZDcxNjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3RS8vua1bw0OGTgJhn9MxLrLm8g 7nwaLXgUNjjT1pqeUqRQpM0eCfT+fXHIpZcXTx5p0MalFOAISDR04imLUrF+gGRF HsSHh68ziRt9atWAdXcnZmBgSx/T7qhQ3R1VAiTvRZsLDz4IyTyVO7tWczzPT7Ic gVYkxW2P3RNT8kxFtdzigkyws4pSXrgreSOLqqW/ZtLGzSh1ubYQz0WWS5zDSdNf cHU+PcI4s4dBUCBIDnylK7GT5P2w665eAC7hij9gJ2rTO0fXyN6jjRok2khwd6Rm f7CcPLUPetIOkl9jMzZofw+qSywmyfuQOXYVOh6Vpp9LNNSKwrTA68ES2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDuBaIJLZZRDm0N5uIHBm8Tk1xY3MB8GA1UdIwQY MBaAFAsxL+l0ZLwOah7/ovHIlveooCZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODIt ZmExYjU1NWRhYTkxLzEvTzRGb2drdGxsRU9iUTNtNGdjR2J4T1RYRmpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODItZmExYjU1NWRhYTkx LzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufdUMA0G CSqGSIb3DQEBCwUAA4IBAQBVEGYj9xPNcLr8rfRiIJWgwXR+ns2iwpMaIhmDcoo1 EyXoah4mmUKrpD/g25bpttZuAvR6PDAn4lpsZBIBcX2UjF34xWEdoYfkSkCGOJf4 4H/BJ7Pmb8czK6RFDNdUzU0STL/wCxvyx2gLkAR1W3DZNYkQWkMIAIw0/h0TdJBq WNggkuKK3xt40dlE20XIZ9zQYN1bLHS0An4KTiIKuhzgwTY+fMNxi/jvdrF/fRLP FWgzphk3xlZZbVmQXjcUCuqqlj2iAy6caWkHWGBBQvJTiOFhOOyZtW/GNrxdc+1Q XuqYUKnORfepAEDbPMpk1VDA+UGjwpHIMLyKXg9GrjEM -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:36 2026 by rpki-client