This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/oGvgPtzFT-aTFQ_B85J22DwDAck.roa File: oGvgPtzFT-aTFQ_B85J22DwDAck.roa (raw, json) Hash identifier: 6nOejPxS/rpc0rhO5giVJoyCV3cG0CBp7/FNYjbRlys= Subject key identifier: A0:6B:E0:3E:DC:C5:4F:E6:93:15:0F:C1:F3:92:76:D8:3C:03:01:C9 Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943 Certificate serial: 019B7C11BFB7B5F378BA509FF1E548D68C5F Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/oGvgPtzFT-aTFQ_B85J22DwDAck.roa Signing time: Fri 02 Jan 2026 00:18:16 +0000 ROA not before: Fri 02 Jan 2026 00:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210553 IP address blocks: 193.3.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:bf:b7:b5:f3:78:ba:50:9f:f1:e5:48:d6:8c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943 Validity Not Before: Jan 2 00:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a06be03edcc54fe693150fc1f39276d83c0301c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:f1:a3:d5:e4:ee:f7:14:8c:88:f7:d6:64: 48:2c:77:92:94:5f:c4:96:86:6f:44:2f:38:f7:ab: a4:53:38:0c:37:09:9c:08:40:56:9c:48:37:38:19: ff:c0:0a:d8:bb:70:0d:07:3f:7b:cf:29:e4:d7:de: 22:95:ee:f0:7d:ca:2e:e3:73:12:12:d8:00:b8:1b: b8:15:2f:8c:64:41:df:ef:5f:03:c4:0a:c2:5b:be: 4f:13:cc:72:a1:bf:5c:b6:17:97:5d:85:ad:93:49: 1b:0e:c2:a7:f5:4f:5d:b5:b7:ec:6b:00:07:78:64: 0a:5d:83:c8:90:2a:54:e0:b7:f6:8b:c2:5c:c3:cf: 07:21:ad:0d:71:52:b3:43:d1:8f:f4:41:69:4a:7c: 1b:2b:97:13:18:eb:31:c2:76:fa:e6:87:e0:ab:3b: 7b:b7:f1:5c:4a:36:2b:ef:7e:03:17:77:3c:cb:ac: c1:b0:e0:60:62:45:ea:6c:61:60:28:46:eb:56:f2: fa:df:4d:ce:36:b8:39:fa:bf:39:3b:45:d2:de:b6: a5:94:26:a8:03:7d:07:f6:e6:82:1d:55:b9:67:57: e4:59:82:7e:85:ce:74:3a:25:55:56:5b:8e:37:e0: 8f:69:7b:eb:9c:f7:28:2a:46:2a:97:d3:a2:f1:8b: c1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6B:E0:3E:DC:C5:4F:E6:93:15:0F:C1:F3:92:76:D8:3C:03:01:C9 X509v3 Authority Key Identifier: keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/oGvgPtzFT-aTFQ_B85J22DwDAck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.185.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:dd:fc:f8:16:3d:9d:9e:43:ff:52:28:9e:f3:cb:2e:51:3d: 35:a6:c6:76:b4:30:78:fa:c0:aa:72:f8:10:86:be:c7:bc:4f: 5c:16:b0:e6:2a:85:47:d4:8d:06:81:67:3a:9d:8b:7e:9c:dd: ca:07:6c:76:cc:4b:64:00:34:18:fc:de:95:5a:2c:7b:51:7c: 26:4e:f4:13:cf:1d:35:17:c7:21:82:f2:37:ba:5d:34:c5:bc: 25:e2:82:8f:f7:70:cb:8a:35:2c:9d:fb:ae:24:eb:42:49:5e: c3:c8:86:6a:b0:52:26:db:c5:21:2a:ed:67:8d:8a:94:69:e1: 5a:48:3a:8c:34:11:35:3b:06:bb:09:e4:ab:d3:b6:96:03:86: 60:a2:96:3c:a3:9b:b3:ba:44:55:52:c9:88:ac:60:b2:14:4a: 16:c7:d9:2a:99:82:c7:91:b8:12:68:d9:b2:f6:63:08:2d:23: 13:78:cb:b9:d7:28:7f:8b:a9:06:27:09:37:27:f3:d9:01:32: c4:ae:d4:15:da:9d:9b:4c:75:9d:69:6f:9e:ef:18:de:a1:10: 5c:7e:b6:53:e0:e6:9d:46:ea:43:72:f8:28:5a:08:37:12:ad: d9:55:17:00:bf:3a:c2:ad:9f:90:9c:38:9f:ec:f0:5c:c1:60: 23:b2:30:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Eb+3tfN4ulCf8eVI1oxfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YWY0ZTJjMzQ3ODBmM2Q5ZjUxZTgwYTUzYmFjM2JlNmYz MjU5NDMwHhcNMjYwMTAyMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDZiZTAzZWRjYzU0ZmU2OTMxNTBmYzFmMzkyNzZkODNjMDMwMWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujnxo9Xk7vcUjIj31mRILHeSlF/E loZvRC8496ukUzgMNwmcCEBWnEg3OBn/wArYu3ANBz97zynk194ile7wfcou43MS EtgAuBu4FS+MZEHf718DxArCW75PE8xyob9ctheXXYWtk0kbDsKn9U9dtbfsawAH eGQKXYPIkCpU4Lf2i8Jcw88HIa0NcVKzQ9GP9EFpSnwbK5cTGOsxwnb65ofgqzt7 t/FcSjYr734DF3c8y6zBsOBgYkXqbGFgKEbrVvL6303ONrg5+r85O0XS3rallCao A30H9uaCHVW5Z1fkWYJ+hc50OiVVVluON+CPaXvrnPcoKkYql9Oi8YvB3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKBr4D7cxU/mkxUPwfOSdtg8AwHJMB8GA1UdIwQY MBaAFHWvTiw0eA89n1HoClO6w75vMllDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wOTIzOWEtNGY4OC00MDliLWE3ODEt NzUzMzBkNGNlODZlLzEvb0d2Z1B0ekZULWFURlFfQjg1SjIyRHdEQWNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wOTIzOWEtNGY4OC00MDliLWE3ODEtNzUzMzBkNGNlODZl LzEvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQO5MA0G CSqGSIb3DQEBCwUAA4IBAQA83fz4Fj2dnkP/Uiie88suUT01psZ2tDB4+sCqcvgQ hr7HvE9cFrDmKoVH1I0GgWc6nYt+nN3KB2x2zEtkADQY/N6VWix7UXwmTvQTzx01 F8chgvI3ul00xbwl4oKP93DLijUsnfuuJOtCSV7DyIZqsFIm28UhKu1njYqUaeFa SDqMNBE1Owa7CeSr07aWA4ZgopY8o5uzukRVUsmIrGCyFEoWx9kqmYLHkbgSaNmy 9mMILSMTeMu51yh/i6kGJwk3J/PZATLErtQV2p2bTHWdaW+e7xjeoRBcfrZT4Oad RupDcvgoWgg3Eq3ZVRcAvzrCrZ+QnDif7PBcwWAjsjDj -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:23 2026 by rpki-client