This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/o1zjZNlBpE66dvhTYzI4pj6m9jM.roa File: o1zjZNlBpE66dvhTYzI4pj6m9jM.roa (raw, json) Hash identifier: wVl4rNHZWCUbMyCjP/aG6EY9BIdfaxUELJ3NnDLrmak= Subject key identifier: A3:5C:E3:64:D9:41:A4:4E:BA:76:F8:53:63:32:38:A6:3E:A6:F6:33 Certificate issuer: /CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c Certificate serial: 019B79ED2F9C3A9AFC9797887CB57E94E75B Authority key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/o1zjZNlBpE66dvhTYzI4pj6m9jM.roa Signing time: Thu 01 Jan 2026 14:19:05 +0000 ROA not before: Thu 01 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16218 IP address blocks: 185.60.208.0/22 maxlen: 22 217.113.32.0/20 maxlen: 20 2a02:ea0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 14:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2f:9c:3a:9a:fc:97:97:88:7c:b5:7e:94:e7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a35ce364d941a44eba76f853633238a63ea6f633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:17:8d:08:0e:96:ce:f0:4f:3b:2a:ed:68:c8: b2:47:ae:2e:f6:ff:7a:40:eb:78:b2:46:43:2c:c3: 5b:e7:bf:d0:dc:7e:c4:0c:85:c0:e2:a4:20:91:fc: b2:6c:b2:91:9b:50:ee:10:55:fc:bf:00:d8:5b:fd: 05:c5:7d:b7:b1:f5:54:dd:fb:14:55:ce:12:cd:30: 22:b3:b5:c6:4b:4f:cb:78:ec:8c:95:d5:2f:c5:73: 51:eb:42:99:d8:72:4a:82:32:ad:36:1c:66:39:8b: 68:d1:d5:69:8b:d9:ad:1a:0e:14:f9:c8:d6:59:95: d3:69:74:ea:67:c1:72:a7:e0:0b:e3:5e:48:e3:09: 7e:b6:bf:48:e8:47:78:a3:c2:2f:e2:fe:59:27:a5: 6f:69:cd:ac:87:22:83:b6:e3:34:28:25:53:e0:80: bb:0a:0c:19:16:53:04:16:35:dc:1c:59:c3:28:73: 78:73:1e:39:f7:ce:a7:88:c1:56:b4:55:c9:20:7b: 64:49:1e:46:ef:dc:e7:42:e6:36:e5:85:96:ab:19: 9f:f1:ea:a2:c1:e6:70:fe:09:e7:96:cf:a2:5f:d1: 7e:ec:ee:58:ed:38:10:91:01:67:2a:79:77:8c:74: 3a:ea:d4:81:c6:bf:66:c9:23:2d:cd:fb:5e:09:80: 5d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5C:E3:64:D9:41:A4:4E:BA:76:F8:53:63:32:38:A6:3E:A6:F6:33 X509v3 Authority Key Identifier: keyid:58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/o1zjZNlBpE66dvhTYzI4pj6m9jM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.208.0/22 217.113.32.0/20 IPv6: 2a02:ea0::/29 Signature Algorithm: sha256WithRSAEncryption 08:c3:75:3c:ce:bb:67:e5:89:be:78:d3:37:53:94:fc:7f:2a: d9:59:1c:06:6b:f0:09:38:a8:34:59:54:ed:e0:2f:cb:d4:d2: a9:dc:02:e9:05:b2:06:1a:68:99:83:66:b4:77:79:16:e9:e0: 29:27:5c:18:95:db:4c:a3:1a:02:b2:9f:e6:11:b5:d0:41:f4: 77:e8:65:6d:e3:73:7c:37:a5:16:fe:b4:21:07:5e:2e:ed:ae: 3d:ee:26:c8:e2:4e:02:58:c7:1d:a3:35:51:b0:d4:14:71:24: 3f:e9:8f:e1:cf:25:b1:5d:f4:a5:40:73:92:e4:4d:cb:64:82: 2a:de:b9:99:9f:24:e6:23:e0:70:1f:04:90:04:3d:4d:76:a8: 18:59:9f:94:fa:e4:08:da:7f:12:ae:f1:7f:c9:1d:ba:25:3f: ed:4f:c4:1b:1e:9f:3b:ee:6e:46:59:46:63:97:e2:f0:73:13: 13:eb:ea:60:56:ea:65:57:46:ad:2f:8d:2a:a7:9d:88:77:df: a0:1a:78:bc:c3:01:cd:93:cf:7f:a1:9a:d5:42:b0:de:8b:ac: 6f:0c:65:11:39:c6:50:1d:65:70:d7:93:71:0b:0a:e3:08:50: 6a:cc:32:a4:18:46:7b:d7:bb:01:c7:67:2d:a4:28:9d:4b:e5: c7:f6:7a:3d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57S+cOpr8l5eIfLV+lOdbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZDJhMzU2YTU0NzgxNTViZWFhOGJjNjI1NmE4NmY2ZDVi M2Y3M2MwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzVjZTM2NGQ5NDFhNDRlYmE3NmY4NTM2MzMyMzhhNjNlYTZmNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxeNCA6WzvBPOyrtaMiyR64u9v96 QOt4skZDLMNb57/Q3H7EDIXA4qQgkfyybLKRm1DuEFX8vwDYW/0FxX23sfVU3fsU Vc4SzTAis7XGS0/LeOyMldUvxXNR60KZ2HJKgjKtNhxmOYto0dVpi9mtGg4U+cjW WZXTaXTqZ8Fyp+AL415I4wl+tr9I6Ed4o8Iv4v5ZJ6Vvac2shyKDtuM0KCVT4IC7 CgwZFlMEFjXcHFnDKHN4cx45986niMFWtFXJIHtkSR5G79znQuY25YWWqxmf8eqi weZw/gnnls+iX9F+7O5Y7TgQkQFnKnl3jHQ66tSBxr9mySMtzfteCYBdbwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKNc42TZQaROunb4U2MyOKY+pvYzMB8GA1UdIwQY MBaAFFjSo1alR4FVvqqLxiVqhvbVs/c8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNWFmYzItYjA0Yy00NDZkLTlhMDQt OTA1MzA1NGE1Y2FiLzEvbzF6alpObEJwRTY2ZHZoVFl6STRwajZtOWpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kNWFmYzItYjA0Yy00NDZkLTlhMDQtOTA1MzA1NGE1Y2Fi LzEvV05LalZxVkhnVlctcW92R0pXcUc5dFd6OXp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuTzQAwQE 2XEgMA0EAgACMAcDBQMqAg6gMA0GCSqGSIb3DQEBCwUAA4IBAQAIw3U8zrtn5Ym+ eNM3U5T8fyrZWRwGa/AJOKg0WVTt4C/L1NKp3ALpBbIGGmiZg2a0d3kW6eApJ1wY ldtMoxoCsp/mEbXQQfR36GVt43N8N6UW/rQhB14u7a497ibI4k4CWMcdozVRsNQU cSQ/6Y/hzyWxXfSlQHOS5E3LZIIq3rmZnyTmI+BwHwSQBD1NdqgYWZ+U+uQI2n8S rvF/yR26JT/tT8QbHp877m5GWUZjl+LwcxMT6+pgVuplV0atL40qp52Id9+gGni8 wwHNk89/oZrVQrDei6xvDGUROcZQHWVw15NxCwrjCFBqzDKkGEZ717sBx2ctpCid S+XH9no9 -----END CERTIFICATE-----Generated at Thu Jan 1 21:18:49 2026 by rpki-client