This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/oEH8nhYQ01y7WjioI86JnkPzqMo.roa File: oEH8nhYQ01y7WjioI86JnkPzqMo.roa (raw, json) Hash identifier: xshPB3d2fKitkQGG8nbyvRROHtDOfLvy4a9oIUwsRfY= Subject key identifier: A0:41:FC:9E:16:10:D3:5C:BB:5A:38:A8:23:CE:89:9E:43:F3:A8:CA Certificate issuer: /CN=00046b434526bf2836e2749ce0e36e08443d6b91 Certificate serial: 019B79ED2B657BB17605C934A752263C0422 Authority key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/oEH8nhYQ01y7WjioI86JnkPzqMo.roa Signing time: Thu 01 Jan 2026 14:19:04 +0000 ROA not before: Thu 01 Jan 2026 14:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210104 IP address blocks: 85.115.212.0/22 maxlen: 22 93.177.88.0/22 maxlen: 22 185.215.74.0/24 maxlen: 24 185.215.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2b:65:7b:b1:76:05:c9:34:a7:52:26:3c:04:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00046b434526bf2836e2749ce0e36e08443d6b91 Validity Not Before: Jan 1 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a041fc9e1610d35cbb5a38a823ce899e43f3a8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:21:34:2e:22:c6:6f:44:73:47:63:34:99:cb: 02:54:0e:1e:a5:e4:3f:1c:1a:72:99:c4:16:17:68: af:6a:78:5b:7a:6c:26:bd:83:9c:51:d2:3d:0f:c8: e5:e0:cb:8d:4d:64:47:b4:2e:b5:3d:c7:9a:c1:18: 1a:75:5b:4f:63:86:e1:9b:8f:e7:51:76:9b:ed:37: 5d:e4:ab:58:fb:b5:a9:5f:d9:a3:f4:2a:61:43:6f: 87:71:2d:77:b8:0d:c8:a2:f4:bf:b7:49:c7:6a:85: b1:a9:3f:4a:0e:e6:a3:f1:86:7a:75:a7:17:14:88: 42:d0:ee:9e:5f:e1:db:4e:91:f1:f7:69:ad:24:97: 01:7c:39:8c:a1:0e:cf:6c:2c:50:b0:2c:1e:e5:b1: 29:4c:cc:87:4f:6b:5e:ea:51:2e:f8:50:9c:1a:b8: 08:c4:bf:e8:d3:32:37:3d:69:3a:81:b9:30:6e:d7: 53:7f:41:68:8e:f4:e0:f9:8d:f6:a0:01:fe:51:46: 01:56:14:e4:89:db:52:a4:fe:5b:6b:0b:13:b1:9b: 12:29:98:a2:86:ef:b7:13:24:90:ca:45:3a:ec:0b: f6:c2:20:51:0b:8a:d7:45:d2:f6:c2:f6:20:c9:80: ff:5b:e3:cd:b5:09:52:21:d3:c2:c7:76:9a:e1:d9: 16:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:41:FC:9E:16:10:D3:5C:BB:5A:38:A8:23:CE:89:9E:43:F3:A8:CA X509v3 Authority Key Identifier: keyid:00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/oEH8nhYQ01y7WjioI86JnkPzqMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.115.212.0/22 93.177.88.0/22 185.215.74.0/23 Signature Algorithm: sha256WithRSAEncryption dd:62:68:0b:df:de:8e:5a:f5:50:85:f0:56:db:09:d5:89:ae: 63:bd:d0:3c:bb:d6:c4:f0:30:b2:66:0a:a0:fa:ba:c4:48:1b: 0f:7d:b0:cc:d2:87:ce:a9:4a:a7:e4:51:01:af:85:b5:06:99: 5f:34:ab:98:f9:7d:8d:9f:85:c4:49:8d:9c:3d:4f:f8:fe:39: de:66:54:f5:18:de:39:8e:0c:17:56:43:78:4d:16:2f:0e:cf: 15:0e:1e:b2:70:f1:f0:51:dc:b6:0b:a9:88:60:93:5b:18:26: 4b:7c:d0:f5:dc:ec:ca:6a:dc:03:06:02:d8:c9:63:08:64:bc: 22:36:19:93:f5:23:d8:03:1e:b7:1f:c3:06:86:6a:21:73:e2: 11:35:0b:95:fc:4e:ab:38:6c:ce:ed:a4:8d:19:c2:b9:e4:da: 9a:8e:03:d7:44:1d:91:dd:04:b8:86:e3:34:28:48:6a:eb:16: a4:8a:b6:09:bb:4b:86:bb:93:c7:ae:25:c8:9f:07:92:59:5e: 65:a2:29:d9:42:7f:2e:3b:7e:52:54:cd:91:d6:6c:75:61:16: 01:9c:55:36:1b:86:2d:ad:a7:ad:e9:4f:00:fb:58:a6:fe:2d: 30:79:ff:2c:44:95:95:23:07:7f:2c:b7:6b:dc:df:e2:13:5c: a4:d9:99:3d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57Stle7F2Bck0p1ImPAQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMDQ2YjQzNDUyNmJmMjgzNmUyNzQ5Y2UwZTM2ZTA4NDQz ZDZiOTEwHhcNMjYwMTAxMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDQxZmM5ZTE2MTBkMzVjYmI1YTM4YTgyM2NlODk5ZTQzZjNhOGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriE0LiLGb0RzR2M0mcsCVA4epeQ/ HBpymcQWF2ivanhbemwmvYOcUdI9D8jl4MuNTWRHtC61PceawRgadVtPY4bhm4/n UXab7Tdd5KtY+7WpX9mj9CphQ2+HcS13uA3IovS/t0nHaoWxqT9KDuaj8YZ6dacX FIhC0O6eX+HbTpHx92mtJJcBfDmMoQ7PbCxQsCwe5bEpTMyHT2te6lEu+FCcGrgI xL/o0zI3PWk6gbkwbtdTf0FojvTg+Y32oAH+UUYBVhTkidtSpP5bawsTsZsSKZii hu+3EySQykU67Av2wiBRC4rXRdL2wvYgyYD/W+PNtQlSIdPCx3aa4dkWmQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKBB/J4WENNcu1o4qCPOiZ5D86jKMB8GA1UdIwQY MBaAFAAEa0NFJr8oNuJ0nODjbghEPWuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMzdmOGQtNDEwZC00NTE4LTgwZTYt ZWNkNjcxMjgyYzFmLzEvb0VIOG5oWVEwMXk3V2ppb0k4Nkpua1B6cU1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kMzdmOGQtNDEwZC00NTE4LTgwZTYtZWNkNjcxMjgyYzFm LzEvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCVXPUAwQC XbFYAwQBuddKMA0GCSqGSIb3DQEBCwUAA4IBAQDdYmgL396OWvVQhfBW2wnVia5j vdA8u9bE8DCyZgqg+rrESBsPfbDM0ofOqUqn5FEBr4W1BplfNKuY+X2Nn4XESY2c PU/4/jneZlT1GN45jgwXVkN4TRYvDs8VDh6ycPHwUdy2C6mIYJNbGCZLfND13OzK atwDBgLYyWMIZLwiNhmT9SPYAx63H8MGhmohc+IRNQuV/E6rOGzO7aSNGcK55Nqa jgPXRB2R3QS4huM0KEhq6xakirYJu0uGu5PHriXInweSWV5loinZQn8uO35SVM2R 1mx1YRYBnFU2G4Ytraet6U8A+1im/i0wef8sRJWVIwd/LLdr3N/iE1yk2Zk9 -----END CERTIFICATE-----Generated at Tue Jan 27 18:29:02 2026 by rpki-client