This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/_OEYR_NlTtbmQ4jWp8KafD4MvOk.roa File: _OEYR_NlTtbmQ4jWp8KafD4MvOk.roa (raw, json) Hash identifier: 4XDRL8Ii1WLuqDpCaTnrPdX+U3rQ6Em8H+bJRAAY9Nk= Subject key identifier: FC:E1:18:47:F3:65:4E:D6:E6:43:88:D6:A7:C2:9A:7C:3E:0C:BC:E9 Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159 Certificate serial: 019B7C120C85BA25DF27EA68D68CCF0EADC2 Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/_OEYR_NlTtbmQ4jWp8KafD4MvOk.roa Signing time: Fri 02 Jan 2026 00:18:36 +0000 ROA not before: Fri 02 Jan 2026 00:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60427 IP address blocks: 80.240.107.0/24 maxlen: 24 185.64.128.0/22 maxlen: 22 185.64.128.0/24 maxlen: 24 185.64.129.0/24 maxlen: 24 185.64.130.0/24 maxlen: 24 185.64.131.0/24 maxlen: 24 185.87.236.0/24 maxlen: 24 194.5.183.0/24 maxlen: 24 2a03:14a0::/32 maxlen: 32 2a03:14a0::/48 maxlen: 48 2a03:14a0:1::/48 maxlen: 48 2a03:14a0:2::/48 maxlen: 48 2a03:14a0:3::/48 maxlen: 48 2a03:14a0:5::/48 maxlen: 48 2a03:14a0:1301::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:0c:85:ba:25:df:27:ea:68:d6:8c:cf:0e:ad:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1902391799337601331f5a12af11e9f4f6421159 Validity Not Before: Jan 2 00:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fce11847f3654ed6e64388d6a7c29a7c3e0cbce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4c:23:d7:ae:3e:3e:eb:ae:b2:e3:2c:e9:c9: 30:e6:f4:b0:b9:69:b9:d6:6f:55:eb:39:8d:e7:49: b6:d8:25:20:29:ed:ee:24:94:7c:4f:24:a0:a3:36: 2b:41:86:36:a4:a8:bc:50:ca:de:9d:5b:0c:e9:ea: 04:88:aa:4c:8f:80:24:fe:a9:8f:54:87:ac:db:a5: 57:d7:d5:19:66:73:f9:7f:d7:3c:3f:d6:f3:82:eb: ba:64:16:3e:2b:7e:fa:fc:88:c7:0a:c9:03:40:36: 01:10:04:63:bc:65:14:59:16:73:c3:9a:d6:22:88: fc:e9:c9:ab:2f:bf:5e:76:dd:04:6e:ae:0c:69:fd: bb:f7:44:e0:54:56:e9:73:e0:ab:1b:48:77:f5:ad: 46:53:50:5f:81:a3:7a:81:e6:9d:28:db:c1:4c:cd: cb:91:1c:fd:31:a1:a0:4a:d1:24:d3:02:72:8c:f3: 6d:de:20:0c:48:da:a8:f7:b9:14:8b:31:98:24:13: 8b:42:74:47:e7:4f:0a:85:3c:28:a1:0c:ef:0c:5f: 11:97:89:98:69:b5:07:ce:6f:a5:c7:4a:77:67:81: a8:08:84:b0:9e:96:de:f6:87:9f:28:ad:c0:33:d9: c1:a6:ca:70:3d:4d:e2:d2:10:93:14:ec:d7:0f:a0: 95:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E1:18:47:F3:65:4E:D6:E6:43:88:D6:A7:C2:9A:7C:3E:0C:BC:E9 X509v3 Authority Key Identifier: keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/_OEYR_NlTtbmQ4jWp8KafD4MvOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.240.107.0/24 185.64.128.0/22 185.87.236.0/24 194.5.183.0/24 IPv6: 2a03:14a0::/32 Signature Algorithm: sha256WithRSAEncryption 79:2c:00:d7:5b:2a:27:39:fa:93:06:74:0f:b6:59:70:32:83: a3:1d:f8:8a:23:c3:6f:e4:e9:ea:01:2f:21:de:32:02:6f:d4: 86:f8:17:93:fc:74:82:e9:4d:6a:37:7f:0b:b6:1b:fb:29:fd: 26:9f:95:6e:b0:35:a2:5c:c4:37:78:5d:8b:ac:5f:31:6f:37: 44:6c:3c:cb:8e:ab:03:4b:64:ba:8a:26:c7:a1:b2:6a:6c:30: 9c:3d:1d:9d:73:0d:f5:e1:3f:7c:28:36:24:0b:12:ac:d6:47: 17:c9:62:cd:fa:9d:10:05:4e:7c:96:61:97:26:a5:05:6a:71: 44:e9:b1:2c:c0:72:38:d1:f8:fe:01:d5:a6:d9:cb:d5:db:42: d5:1b:e2:e8:57:b7:37:76:23:30:8d:a7:00:c7:db:f6:05:0c: 75:23:3a:c3:db:4c:f6:8d:e6:e3:13:b8:d7:ac:b8:03:36:99: 3b:b5:cc:cb:b2:70:05:b1:83:4e:43:c4:58:0a:04:9d:56:ae: 9d:ca:7d:ab:1b:28:f2:6c:ba:1d:21:a6:92:e8:0b:6f:dd:47: f1:20:90:17:65:2c:b1:60:e5:1b:1d:47:df:7f:12:83:97:a3: 66:a0:73:fc:f9:5d:70:47:2b:4f:4a:1b:5d:18:eb:39:40:f2: 68:4f:05:c9 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8EgyFuiXfJ+po1ozPDq3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDIzOTE3OTkzMzc2MDEzMzFmNWExMmFmMTFlOWY0ZjY0 MjExNTkwHhcNMjYwMTAyMDAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2UxMTg0N2YzNjU0ZWQ2ZTY0Mzg4ZDZhN2MyOWE3YzNlMGNiY2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUwj164+PuuusuMs6ckw5vSwuWm5 1m9V6zmN50m22CUgKe3uJJR8TySgozYrQYY2pKi8UMrenVsM6eoEiKpMj4Ak/qmP VIes26VX19UZZnP5f9c8P9bzguu6ZBY+K376/IjHCskDQDYBEARjvGUUWRZzw5rW Ioj86cmrL79edt0Ebq4Maf2790TgVFbpc+CrG0h39a1GU1BfgaN6geadKNvBTM3L kRz9MaGgStEk0wJyjPNt3iAMSNqo97kUizGYJBOLQnRH508KhTwooQzvDF8Rl4mY abUHzm+lx0p3Z4GoCISwnpbe9oefKK3AM9nBpspwPU3i0hCTFOzXD6CVbwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFPzhGEfzZU7W5kOI1qfCmnw+DLzpMB8GA1UdIwQY MBaAFBkCOReZM3YBMx9aEq8R6fT2QhFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hOWZmMWEtZDU4MC00YjQyLWJkODct NTU5NzI2MGY2NWVlLzEvX09FWVJfTmxUdGJtUTRqV3A4S2FmRDRNdk9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hOWZmMWEtZDU4MC00YjQyLWJkODctNTU5NzI2MGY2NWVl LzEvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAUPBrAwQC uUCAAwQAuVfsAwQAwgW3MA0EAgACMAcDBQAqAxSgMA0GCSqGSIb3DQEBCwUAA4IB AQB5LADXWyonOfqTBnQPtllwMoOjHfiKI8Nv5OnqAS8h3jICb9SG+BeT/HSC6U1q N38Lthv7Kf0mn5VusDWiXMQ3eF2LrF8xbzdEbDzLjqsDS2S6iibHobJqbDCcPR2d cw314T98KDYkCxKs1kcXyWLN+p0QBU58lmGXJqUFanFE6bEswHI40fj+AdWm2cvV 20LVG+LoV7c3diMwjacAx9v2BQx1IzrD20z2jebjE7jXrLgDNpk7tczLsnAFsYNO Q8RYCgSdVq6dyn2rGyjybLodIaaS6Atv3UfxIJAXZSyxYOUbHUfffxKDl6NmoHP8 +V1wRytPShtdGOs5QPJoTwXJ -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:57 2026 by rpki-client