This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/OiGHdHjDagoWQKaQO3HU1k4kpCk.roa File: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (raw, json) Hash identifier: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM= Subject key identifier: 3A:21:87:74:78:C3:6A:0A:16:40:A6:90:3B:71:D4:D6:4E:24:A4:29 Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Certificate serial: 019B7F1365E3C3039E7F6DD3AF31587DFA0B Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/OiGHdHjDagoWQKaQO3HU1k4kpCk.roa Signing time: Fri 02 Jan 2026 14:18:56 +0000 ROA not before: Fri 02 Jan 2026 14:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26383 IP address blocks: 185.211.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:65:e3:c3:03:9e:7f:6d:d3:af:31:58:7d:fa:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Validity Not Before: Jan 2 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a21877478c36a0a1640a6903b71d4d64e24a429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:39:48:11:ed:2f:68:90:a6:5b:a6:66:67: b3:67:a5:44:1e:bb:6d:49:58:45:6f:39:0b:9a:90: c0:ff:ce:1c:63:12:73:c3:96:a3:24:4b:01:13:0b: 3b:92:18:91:1e:c2:55:c8:26:5c:cb:79:9d:27:b2: 9e:bb:40:04:2a:7e:6c:01:00:af:ab:38:05:37:63: de:68:4d:b1:c9:c3:ce:0e:c9:93:d8:71:6f:e3:5f: 29:a6:b5:61:cf:62:4d:d8:5f:6e:38:3c:4c:86:c0: 3e:e4:97:eb:61:40:b2:56:ae:07:04:d9:3e:b9:03: de:23:5b:e9:95:a8:c5:5f:b5:9c:94:f3:06:f2:9e: 8a:da:fd:5f:f2:47:52:4f:31:2b:d4:03:10:aa:96: f6:49:81:b9:2c:0c:60:38:7f:b9:f0:f6:ae:27:d4: 26:b4:a1:fa:c8:c5:de:25:18:45:c5:62:26:70:e9: a1:12:70:d0:90:e4:d0:b0:a7:eb:21:7a:c0:4b:fb: 07:d0:95:0c:5e:43:0d:83:0c:e4:77:cb:1e:14:6f: a4:34:9e:08:41:1d:62:6d:06:15:db:5e:28:db:dc: 23:bd:63:46:21:04:f5:f7:7b:36:46:42:58:54:f7: 3f:e3:ed:1c:50:b2:b0:1f:3b:52:b3:d0:8a:9e:39: 6f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:21:87:74:78:C3:6A:0A:16:40:A6:90:3B:71:D4:D6:4E:24:A4:29 X509v3 Authority Key Identifier: keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/OiGHdHjDagoWQKaQO3HU1k4kpCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.103.0/24 Signature Algorithm: sha256WithRSAEncryption 10:b7:e6:52:f3:f8:41:42:c5:8c:ab:df:22:fe:e4:ca:e2:76: 15:3a:51:f5:40:0f:93:f5:6e:07:ad:3f:b9:aa:74:d5:05:38: 1c:90:c6:9e:81:ae:e4:45:39:27:74:68:97:08:bb:21:fd:e5: f5:41:96:bd:59:78:64:e7:34:55:47:0b:82:c0:82:2c:88:d6: 09:77:00:9c:13:5f:15:3f:7e:7b:fc:df:26:57:b2:cd:d2:77: 8d:b2:c0:17:d9:ce:8b:0a:16:16:68:0e:68:72:b4:f7:e1:80: 88:8a:75:32:47:40:a9:d6:b1:a1:83:4d:e0:3b:cd:07:5c:72: 76:4e:d8:80:2e:a0:c7:da:d0:6d:ef:fe:3c:0f:8b:1a:db:3b: 58:7c:50:ce:32:10:2d:29:42:ee:b7:c2:fa:7f:49:63:ce:3f: 5a:7e:0c:7a:65:26:3f:52:4c:c7:28:3e:d8:31:5e:01:2a:f6: 1e:5b:b4:f9:40:37:fb:79:44:f5:63:ef:4f:1b:c1:ee:7c:6c: 69:f9:a7:e9:f2:01:af:53:d0:56:81:09:0e:5d:2f:54:e7:fe: 0c:2b:91:c1:c6:53:0a:15:60:cf:c3:50:6c:8d:fc:68:42:95: 1a:93:98:38:7c:6c:e5:a0:c3:f6:2a:0a:0d:b6:e5:5a:fd:34: d6:3d:e5:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E2XjwwOef23TrzFYffoLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2 ZGVmMjAwHhcNMjYwMTAyMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTIxODc3NDc4YzM2YTBhMTY0MGE2OTAzYjcxZDRkNjRlMjRhNDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+o5SBHtL2iQplumZmezZ6VEHrtt SVhFbzkLmpDA/84cYxJzw5ajJEsBEws7khiRHsJVyCZcy3mdJ7Keu0AEKn5sAQCv qzgFN2PeaE2xycPODsmT2HFv418pprVhz2JN2F9uODxMhsA+5JfrYUCyVq4HBNk+ uQPeI1vplajFX7WclPMG8p6K2v1f8kdSTzEr1AMQqpb2SYG5LAxgOH+58PauJ9Qm tKH6yMXeJRhFxWImcOmhEnDQkOTQsKfrIXrAS/sH0JUMXkMNgwzkd8seFG+kNJ4I QR1ibQYV214o29wjvWNGIQT193s2RkJYVPc/4+0cULKwHztSs9CKnjlvAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDohh3R4w2oKFkCmkDtx1NZOJKQpMB8GA1UdIwQY MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt MjU0NDY4M2FhMTI1LzEvT2lHSGRIakRhZ29XUUthUU8zSFUxazRrcENrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1 LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudNnMA0G CSqGSIb3DQEBCwUAA4IBAQAQt+ZS8/hBQsWMq98i/uTK4nYVOlH1QA+T9W4HrT+5 qnTVBTgckMaega7kRTkndGiXCLsh/eX1QZa9WXhk5zRVRwuCwIIsiNYJdwCcE18V P357/N8mV7LN0neNssAX2c6LChYWaA5ocrT34YCIinUyR0Cp1rGhg03gO80HXHJ2 TtiALqDH2tBt7/48D4sa2ztYfFDOMhAtKULut8L6f0ljzj9afgx6ZSY/UkzHKD7Y MV4BKvYeW7T5QDf7eUT1Y+9PG8HufGxp+afp8gGvU9BWgQkOXS9U5/4MK5HBxlMK FWDPw1BsjfxoQpUak5g4fGzloMP2KgoNtuVa/TTWPeUt -----END CERTIFICATE-----Generated at Sat Jan 3 06:28:21 2026 by rpki-client