This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/OeILc9n1u8YEH2AOBIE0o0dgpEE.roa File: OeILc9n1u8YEH2AOBIE0o0dgpEE.roa (raw, json) Hash identifier: /7A8rLMm0YbWTOXfPXut3LLp0Fa9Ut9MxlMvs+Wsm1w= Subject key identifier: 39:E2:0B:73:D9:F5:BB:C6:04:1F:60:0E:04:81:34:A3:47:60:A4:41 Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d Certificate serial: 019B7CEDC7CA67F64E6985FA1B8C64CECE3F Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/OeILc9n1u8YEH2AOBIE0o0dgpEE.roa Signing time: Fri 02 Jan 2026 04:18:36 +0000 ROA not before: Fri 02 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59891 IP address blocks: 185.32.124.0/24 maxlen: 24 185.32.125.0/24 maxlen: 24 185.32.126.0/24 maxlen: 24 185.32.127.0/24 maxlen: 24 185.150.28.0/24 maxlen: 24 185.150.29.0/24 maxlen: 24 185.150.30.0/24 maxlen: 24 185.150.31.0/24 maxlen: 24 2a00:c1e0::/32 maxlen: 32 2a00:c1e1::/32 maxlen: 32 2a00:c1e2::/32 maxlen: 32 2a00:c1e3::/32 maxlen: 32 2a00:c1e4::/32 maxlen: 32 2a00:c1e5::/32 maxlen: 32 2a00:c1e6::/32 maxlen: 32 2a00:c1e7::/32 maxlen: 32 2a07:6d80::/32 maxlen: 32 2a07:6d81::/32 maxlen: 32 2a07:6d82::/32 maxlen: 32 2a07:6d83::/32 maxlen: 32 2a07:6d84::/32 maxlen: 32 2a07:6d85::/32 maxlen: 32 2a07:6d86::/32 maxlen: 32 2a07:6d87::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c7:ca:67:f6:4e:69:85:fa:1b:8c:64:ce:ce:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d Validity Not Before: Jan 2 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39e20b73d9f5bbc6041f600e048134a34760a441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:08:cf:cc:bc:c7:1a:dd:fe:7d:6f:d8:64:43: 6e:4a:0e:40:93:a5:e0:1f:9d:a5:8f:2e:0e:93:96: f4:1c:99:da:ef:83:17:47:8a:72:e9:4c:2b:18:7b: eb:37:ae:23:25:50:a4:0a:77:c7:6b:5a:d1:9b:ec: 92:7b:2d:97:b6:5f:4d:e9:75:1e:ac:95:3f:e5:24: a2:b0:97:81:b3:35:2f:63:fd:05:79:d4:44:99:fa: df:9a:5c:67:29:b8:1f:7c:a3:a9:9f:66:2c:9d:1a: 41:1e:2b:88:6b:a0:3d:65:d9:b1:c4:dd:d3:57:b7: a8:4d:19:00:9b:1a:a2:dc:ba:f7:88:ee:b3:ae:ab: 58:dc:f4:bf:89:d1:ce:8e:e7:00:20:6a:b3:99:6c: 48:d3:b9:c1:db:6c:f8:d9:50:ec:d9:e7:cf:95:16: 6d:cc:ba:7f:e5:da:15:1e:57:4e:33:40:fd:7c:af: 76:7a:ee:da:b1:21:2d:a0:2a:95:cd:35:ef:e1:66: 48:98:81:82:16:cd:a3:29:c8:07:fd:ed:d0:e9:0f: 35:15:b4:f9:7a:45:a3:84:3b:2f:ef:ae:99:6a:08: 40:c1:a6:47:e0:65:8b:3d:b1:d8:5f:66:de:07:a1: c6:b8:ea:8f:c9:c9:47:17:8d:13:98:09:1f:eb:cc: 3a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E2:0B:73:D9:F5:BB:C6:04:1F:60:0E:04:81:34:A3:47:60:A4:41 X509v3 Authority Key Identifier: keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/OeILc9n1u8YEH2AOBIE0o0dgpEE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.124.0/22 185.150.28.0/22 IPv6: 2a00:c1e0::/29 2a07:6d80::/29 Signature Algorithm: sha256WithRSAEncryption 6e:c5:4e:6d:1d:38:d2:83:8d:1e:25:06:42:dc:e5:b6:70:6c: 25:0e:ac:87:2d:80:d8:62:9a:82:e6:d7:d6:51:78:6a:56:cc: 18:7f:5d:ba:ea:d0:9a:18:77:15:d7:43:9b:8e:bc:4e:19:c0: 58:67:75:48:aa:86:cb:85:6a:90:f4:41:e8:8b:b3:13:ac:e6: 17:e2:6b:bf:91:75:15:96:44:02:85:21:21:6c:93:f2:6d:4c: cc:79:4c:83:a1:21:5a:37:64:32:91:ee:4a:8b:43:6e:30:ca: f0:d1:73:a8:9d:b4:16:3f:e2:ac:57:11:62:42:5c:ad:ef:da: 5d:f9:89:d3:5c:e5:91:bd:f2:9e:5e:c7:ad:17:b5:24:53:8b: 67:21:4c:de:14:85:3e:a6:33:6b:ee:b7:53:a0:c3:94:b6:58: ff:74:10:fb:cb:ad:c1:44:a6:1d:94:d8:da:47:35:7e:96:8c: 44:f7:3c:3b:a5:2b:44:23:b0:24:61:db:ab:1c:d6:83:ef:53: ed:84:dd:a7:49:3d:9f:20:6f:62:e1:2e:39:ec:3c:67:41:de: 42:ff:9a:ec:d4:e2:7f:f9:49:27:74:af:17:fb:d0:17:37:24: c4:0d:15:cf:6e:a5:76:60:71:f6:e5:e8:da:e9:7b:01:f4:77: 26:de:04:39 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt87cfKZ/ZOaYX6G4xkzs4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NzdjZTE0MzQyMzJkODA4MTk1ZDBjYTcwYWIzOTFkZmIw N2FmMmQwHhcNMjYwMTAyMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWUyMGI3M2Q5ZjViYmM2MDQxZjYwMGUwNDgxMzRhMzQ3NjBhNDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgjPzLzHGt3+fW/YZENuSg5Ak6Xg H52ljy4Ok5b0HJna74MXR4py6UwrGHvrN64jJVCkCnfHa1rRm+ySey2Xtl9N6XUe rJU/5SSisJeBszUvY/0FedREmfrfmlxnKbgffKOpn2YsnRpBHiuIa6A9ZdmxxN3T V7eoTRkAmxqi3Lr3iO6zrqtY3PS/idHOjucAIGqzmWxI07nB22z42VDs2efPlRZt zLp/5doVHldOM0D9fK92eu7asSEtoCqVzTXv4WZImIGCFs2jKcgH/e3Q6Q81FbT5 ekWjhDsv766ZaghAwaZH4GWLPbHYX2beB6HGuOqPyclHF40TmAkf68w6ZQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDniC3PZ9bvGBB9gDgSBNKNHYKRBMB8GA1UdIwQY MBaAFNV3zhQ0Iy2AgZXQynCrOR37B68tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVhmT0ZEUWpMWUNCbGRES2NLczVIZnNIcnkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZDYxNWUtMjRkYi00N2VmLTlhYTMt NjBlNmIxNDhkMjhiLzEvT2VJTGM5bjF1OFlFSDJBT0JJRTBvMGRncEVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wZDYxNWUtMjRkYi00N2VmLTlhYTMtNjBlNmIxNDhkMjhi LzEvMVhmT0ZEUWpMWUNCbGRES2NLczVIZnNIcnkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuSB8AwQC uZYcMBQEAgACMA4DBQMqAMHgAwUDKgdtgDANBgkqhkiG9w0BAQsFAAOCAQEAbsVO bR040oONHiUGQtzltnBsJQ6shy2A2GKagubX1lF4albMGH9duurQmhh3FddDm468 ThnAWGd1SKqGy4VqkPRB6IuzE6zmF+Jrv5F1FZZEAoUhIWyT8m1MzHlMg6EhWjdk MpHuSotDbjDK8NFzqJ20Fj/irFcRYkJcre/aXfmJ01zlkb3ynl7HrRe1JFOLZyFM 3hSFPqYza+63U6DDlLZY/3QQ+8utwUSmHZTY2kc1fpaMRPc8O6UrRCOwJGHbqxzW g+9T7YTdp0k9nyBvYuEuOew8Z0HeQv+a7NTif/lJJ3SvF/vQFzckxA0Vz26ldmBx 9uXo2ul7AfR3Jt4EOQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:44 2026 by rpki-client