This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/ORhpsoGrJDtd4dSX8wo8j8MueNc.roa File: ORhpsoGrJDtd4dSX8wo8j8MueNc.roa (raw, json) Hash identifier: Ea9U9BiaJTwEkaiRq8X+h6S8mcjyQT3ldp1ldkiJibY= Subject key identifier: 39:18:69:B2:81:AB:24:3B:5D:E1:D4:97:F3:0A:3C:8F:C3:2E:78:D7 Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214 Certificate serial: 019B78A241CF9E623CD7FD8533B8F9F609C1 Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/ORhpsoGrJDtd4dSX8wo8j8MueNc.roa Signing time: Thu 01 Jan 2026 08:17:38 +0000 ROA not before: Thu 01 Jan 2026 08:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31126 IP address blocks: 185.91.96.0/24 maxlen: 24 185.91.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:41:cf:9e:62:3c:d7:fd:85:33:b8:f9:f6:09:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214 Validity Not Before: Jan 1 08:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=391869b281ab243b5de1d497f30a3c8fc32e78d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:97:22:55:d9:d7:bd:f4:18:71:f9:a4:d2:84: 62:f6:1b:ce:e1:6c:00:be:c9:8c:b1:a2:f9:30:84: 3f:9f:4e:d5:93:2f:a6:4d:d7:1f:0d:79:a4:0e:f6: b7:1d:e1:78:44:6a:ce:d4:5c:58:a5:8b:32:c4:85: 82:69:ff:0a:0f:3b:40:cc:8b:82:4a:1c:df:80:76: 14:72:46:f7:1a:8a:5b:2f:a8:d6:9a:fe:3a:4a:bc: 55:14:c3:9e:c6:ab:f1:21:60:8a:7c:84:99:1e:19: 27:b3:51:80:49:b1:21:2b:0f:c8:22:c0:a3:6a:bd: f6:a7:ec:06:44:94:fd:3a:16:f4:3c:17:5f:e7:a7: 97:f4:1a:b4:2f:8d:bd:81:48:3e:be:b1:c3:1b:8d: e1:05:0e:7b:d0:88:e5:e5:50:3e:37:31:d9:c3:ec: 2f:60:3a:76:70:7c:da:3a:92:1c:a6:f4:b5:65:5f: c2:58:f3:6f:67:ef:07:ae:8f:3d:a0:3a:3a:91:14: 7b:72:c6:b9:e6:61:c6:2e:49:6a:8d:41:10:8e:09: 3c:ec:87:12:64:f7:ca:b8:72:d8:97:93:eb:f7:ea: 88:f0:63:bf:8f:e8:e0:df:d6:0e:00:82:ee:4c:b3: 4d:3c:15:95:b7:a7:be:32:31:39:01:f6:cc:cc:d6: de:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:18:69:B2:81:AB:24:3B:5D:E1:D4:97:F3:0A:3C:8F:C3:2E:78:D7 X509v3 Authority Key Identifier: keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/ORhpsoGrJDtd4dSX8wo8j8MueNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.91.96.0/24 185.91.99.0/24 Signature Algorithm: sha256WithRSAEncryption 74:80:77:03:81:7d:28:56:30:52:af:90:7c:64:e9:a5:a0:8d: ca:98:47:aa:42:4c:7a:4b:92:ef:7a:6d:7b:d8:74:7e:54:a2: d5:26:ec:e4:7e:1b:bb:6b:89:04:e9:69:b5:ba:7e:23:00:b4: d8:d7:5e:37:38:85:b9:4b:b2:aa:15:d2:64:81:51:69:0b:60: 4a:7e:e5:2d:17:37:70:5b:d7:4b:17:d7:a2:14:a0:30:99:78: 5a:0f:dd:66:24:3b:b6:74:d3:c9:fe:e1:1b:5b:d2:f6:8a:1a: c9:7b:eb:47:44:ea:92:47:6e:5f:23:16:96:2a:49:fb:29:96: 13:a3:e6:85:1a:ee:45:69:89:08:d5:38:39:ce:41:d7:12:65: bf:a9:8a:ae:0a:f7:da:4c:cd:44:4b:fb:63:11:df:c6:94:f8: d4:84:5e:88:de:88:4b:a4:a8:ec:e9:31:28:96:82:9b:d4:c9: 0a:45:cb:c2:53:95:d4:6d:97:4b:00:08:04:83:b1:c4:17:36: 2c:2c:4f:2c:11:a7:b8:3e:78:88:c2:3b:4e:9c:a9:e2:90:2a: dd:0a:ff:ac:95:65:8b:3d:7e:11:a7:4a:9f:06:8a:e4:bb:48: 4a:b1:ab:b7:35:61:d3:09:8b:1d:3d:a5:d4:5c:fd:46:92:e8: 93:65:3e:21 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4okHPnmI81/2FM7j59gnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZjg3MmU0Y2RiMDdkNjgzOTE0N2U0M2E0YTQxOWJjODRi YTMyMTQwHhcNMjYwMTAxMDgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTE4NjliMjgxYWIyNDNiNWRlMWQ0OTdmMzBhM2M4ZmMzMmU3OGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05ciVdnXvfQYcfmk0oRi9hvO4WwA vsmMsaL5MIQ/n07Vky+mTdcfDXmkDva3HeF4RGrO1FxYpYsyxIWCaf8KDztAzIuC ShzfgHYUckb3GopbL6jWmv46SrxVFMOexqvxIWCKfISZHhkns1GASbEhKw/IIsCj ar32p+wGRJT9Ohb0PBdf56eX9Bq0L429gUg+vrHDG43hBQ570Ijl5VA+NzHZw+wv YDp2cHzaOpIcpvS1ZV/CWPNvZ+8Hro89oDo6kRR7csa55mHGLklqjUEQjgk87IcS ZPfKuHLYl5Pr9+qI8GO/j+jg39YOAILuTLNNPBWVt6e+MjE5AfbMzNbeqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDkYabKBqyQ7XeHUl/MKPI/DLnjXMB8GA1UdIwQY MBaAFED4cuTNsH1oORR+Q6SkGbyEujIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81YzkyZDUtYTdlYi00OTI5LWFlMTkt ZGExMzhhZGUyMjJiLzEvT1JocHNvR3JKRHRkNGRTWDh3bzhqOE11ZU5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC81YzkyZDUtYTdlYi00OTI5LWFlMTktZGExMzhhZGUyMjJi LzEvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVtgAwQA uVtjMA0GCSqGSIb3DQEBCwUAA4IBAQB0gHcDgX0oVjBSr5B8ZOmloI3KmEeqQkx6 S5Lvem172HR+VKLVJuzkfhu7a4kE6Wm1un4jALTY1143OIW5S7KqFdJkgVFpC2BK fuUtFzdwW9dLF9eiFKAwmXhaD91mJDu2dNPJ/uEbW9L2ihrJe+tHROqSR25fIxaW Kkn7KZYTo+aFGu5FaYkI1Tg5zkHXEmW/qYquCvfaTM1ES/tjEd/GlPjUhF6I3ohL pKjs6TEoloKb1MkKRcvCU5XUbZdLAAgEg7HEFzYsLE8sEae4PniIwjtOnKnikCrd Cv+slWWLPX4Rp0qfBorku0hKsau3NWHTCYsdPaXUXP1GkuiTZT4h -----END CERTIFICATE-----Generated at Thu Jan 1 14:06:43 2026 by rpki-client