This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/OIq2o5hKdaMH_2PTUWzIlIKfs2g.roa File: OIq2o5hKdaMH_2PTUWzIlIKfs2g.roa (raw, json) Hash identifier: gefzhJXJU82C+eFShlNs7p/wt0aYa1LR779QRT2gD0A= Subject key identifier: 38:8A:B6:A3:98:4A:75:A3:07:FF:63:D3:51:6C:C8:94:82:9F:B3:68 Certificate issuer: /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a Certificate serial: 019B76EB3BB22BC37F3456BF3EFA7D02D6C2 Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/OIq2o5hKdaMH_2PTUWzIlIKfs2g.roa Signing time: Thu 01 Jan 2026 00:18:06 +0000 ROA not before: Thu 01 Jan 2026 00:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62040 IP address blocks: 185.14.4.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3b:b2:2b:c3:7f:34:56:bf:3e:fa:7d:02:d6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=388ab6a3984a75a307ff63d3516cc894829fb368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:01:83:3e:9e:c6:43:cb:9b:5f:a2:3a:90: 94:7e:f4:4f:7c:f2:6d:6d:3c:ce:42:55:2b:3e:57: aa:1d:51:82:f1:16:b9:2f:a8:6c:33:77:24:a9:73: f8:56:b6:1c:21:57:bd:bb:09:1c:f1:21:6f:61:a5: 8a:62:f7:69:ad:91:33:19:d6:e9:a9:94:9e:ab:85: 72:06:bd:a2:3a:9d:2d:41:f8:5c:63:3a:61:2c:34: 04:a2:ee:e1:40:99:88:2d:19:49:aa:5b:b5:a6:7c: b7:5a:f5:d4:38:d8:6e:fb:a0:ed:cd:d0:6f:c9:eb: 4e:ba:ff:0b:4e:d2:86:67:60:a1:75:84:18:9d:e8: 1e:4f:6a:ae:80:d6:e8:de:c5:f4:5a:92:2f:cf:ed: 75:45:7b:48:5e:33:36:b0:b9:84:ce:66:91:6c:87: 50:a6:68:72:00:2c:c6:1f:68:ce:85:09:71:49:c0: ea:9b:c0:6f:7f:1e:16:ce:14:fe:ea:34:95:4f:80: 8e:c2:54:2a:20:ff:5e:08:6f:48:7b:9e:1c:31:a4: 22:cc:9b:77:25:3b:33:02:1c:58:e0:18:1f:4f:c4: 0b:87:a7:e9:19:45:72:c5:d4:c9:54:75:4f:57:76: fc:b7:cb:be:1a:9f:7f:bd:dd:21:3c:f6:7a:98:d1: 71:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8A:B6:A3:98:4A:75:A3:07:FF:63:D3:51:6C:C8:94:82:9F:B3:68 X509v3 Authority Key Identifier: keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/OIq2o5hKdaMH_2PTUWzIlIKfs2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.14.4.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:8d:6c:5f:c7:c2:ff:58:19:bd:d2:06:91:90:8b:98:b4:99: e0:1f:cc:4d:57:61:17:65:ae:75:6c:b2:91:0f:45:68:38:52: dd:d0:0b:b4:b4:3b:e1:2c:a6:59:ad:29:9f:25:53:c7:87:02: cf:9f:ff:ef:9b:93:01:8f:ab:ba:46:6f:91:a3:9c:6d:86:40: 95:6d:da:ec:db:54:c8:09:9f:73:ff:f6:b0:ef:62:1b:68:c8: 3d:33:1b:92:2f:4b:e6:93:08:ff:75:83:70:4e:6b:d2:74:d7: 36:9c:16:9d:5d:02:ba:a3:99:77:49:3a:98:dc:e8:72:3d:20: e8:48:fa:d9:62:27:fb:8d:00:76:d3:f5:57:cf:05:48:f3:cc: a9:fb:f8:4b:9e:9f:3c:dd:6c:f9:79:b0:7b:41:73:49:27:1e: 50:bc:35:97:d7:9f:ba:cb:bd:3e:87:f6:b1:7e:aa:76:d0:ec: 91:8f:51:23:77:bd:75:f0:f3:0a:9a:a1:59:44:f2:b8:fc:48: cc:fb:4b:21:ee:10:72:5a:4b:43:39:df:1c:16:76:86:bf:52: cf:a4:0a:c9:6b:64:3b:96:3e:4f:03:df:a0:0d:7f:0b:50:5b: ca:13:44:cc:8b:22:03:d2:ae:09:f1:01:5a:0c:e3:b7:59:75: df:6f:ca:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26zuyK8N/NFa/Pvp9AtbCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMGJjZGVlOGNlODM5YzRkMjA0MTNjODYyNDIzY2NhMDRm ZGM2MGEwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODhhYjZhMzk4NGE3NWEzMDdmZjYzZDM1MTZjYzg5NDgyOWZiMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQYBgz6exkPLm1+iOpCUfvRPfPJt bTzOQlUrPleqHVGC8Ra5L6hsM3ckqXP4VrYcIVe9uwkc8SFvYaWKYvdprZEzGdbp qZSeq4VyBr2iOp0tQfhcYzphLDQEou7hQJmILRlJqlu1pny3WvXUONhu+6DtzdBv yetOuv8LTtKGZ2ChdYQYnegeT2qugNbo3sX0WpIvz+11RXtIXjM2sLmEzmaRbIdQ pmhyACzGH2jOhQlxScDqm8Bvfx4WzhT+6jSVT4COwlQqIP9eCG9Ie54cMaQizJt3 JTszAhxY4BgfT8QLh6fpGUVyxdTJVHVPV3b8t8u+Gp9/vd0hPPZ6mNFxywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDiKtqOYSnWjB/9j01FsyJSCn7NoMB8GA1UdIwQY MBaAFHoLze6M6DnE0gQTyGJCPMoE/cYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NGU5MTItYjUwMy00NTRjLWE0MzMt NGRlZjU3MzY1MTY5LzEvT0lxMm81aEtkYU1IXzJQVFVXeklsSUtmczJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81NGU5MTItYjUwMy00NTRjLWE0MzMtNGRlZjU3MzY1MTY5 LzEvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ4EMA0G CSqGSIb3DQEBCwUAA4IBAQCLjWxfx8L/WBm90gaRkIuYtJngH8xNV2EXZa51bLKR D0VoOFLd0Au0tDvhLKZZrSmfJVPHhwLPn//vm5MBj6u6Rm+Ro5xthkCVbdrs21TI CZ9z//aw72IbaMg9MxuSL0vmkwj/dYNwTmvSdNc2nBadXQK6o5l3STqY3OhyPSDo SPrZYif7jQB20/VXzwVI88yp+/hLnp883Wz5ebB7QXNJJx5QvDWX15+6y70+h/ax fqp20OyRj1Ejd7118PMKmqFZRPK4/EjM+0sh7hByWktDOd8cFnaGv1LPpArJa2Q7 lj5PA9+gDX8LUFvKE0TMiyID0q4J8QFaDOO3WXXfb8o/ -----END CERTIFICATE-----Generated at Thu Jan 1 12:46:58 2026 by rpki-client