This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/oVYqrlFhD7zcwh_F2ONVqQJ2mdQ.roa File: oVYqrlFhD7zcwh_F2ONVqQJ2mdQ.roa (raw, json) Hash identifier: Yn6vN33kb9RjwKZiBCTU79r+CEwj1FzkLh9/leqQkWo= Subject key identifier: A1:56:2A:AE:51:61:0F:BC:DC:C2:1F:C5:D8:E3:55:A9:02:76:99:D4 Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100 Certificate serial: 019B7DCA9DA9509A5D398080175DEF6000AA Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/oVYqrlFhD7zcwh_F2ONVqQJ2mdQ.roa Signing time: Fri 02 Jan 2026 08:19:49 +0000 ROA not before: Fri 02 Jan 2026 08:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 185.204.93.0/24 maxlen: 24 185.204.94.0/24 maxlen: 24 185.204.95.0/24 maxlen: 24 185.230.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:9d:a9:50:9a:5d:39:80:80:17:5d:ef:60:00:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100 Validity Not Before: Jan 2 08:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1562aae51610fbcdcc21fc5d8e355a9027699d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2b:e0:12:fd:e3:ff:ba:6f:6f:24:6b:34:80: 8d:41:12:d7:77:c9:80:12:b0:41:72:4a:b3:91:23: b1:41:78:df:75:b4:05:0d:ec:6d:b0:d1:84:64:a9: 1f:21:04:51:01:7f:9a:43:02:85:bf:96:ad:21:fa: 95:05:30:dc:9c:59:e0:3c:47:60:36:3f:7d:c5:7c: aa:27:15:f0:ef:2b:a1:8e:df:68:db:3b:cd:2f:9f: e8:a6:27:cb:c5:71:7d:eb:7b:f1:1a:15:4c:da:c4: bd:a3:f8:f5:38:2d:3e:06:ca:3f:1e:ab:5c:21:9b: 95:37:40:0d:4b:8b:e7:58:49:25:38:f4:2b:5d:5d: 4f:92:46:09:f3:16:35:d6:c8:5d:c3:bb:c6:2f:5f: 55:f3:da:42:47:8c:a9:ad:6e:1e:f5:92:f7:9a:b0: 0e:3f:12:93:1f:f7:7d:49:9c:46:73:28:a1:3b:f0: 51:dc:a6:60:b2:11:1d:b7:0e:94:86:79:10:e7:7c: b3:6c:97:81:48:bf:c4:60:a5:a9:a8:c3:ee:0c:84: 8b:55:75:b6:c7:d6:c0:da:63:75:3a:3b:60:70:63: 74:9a:69:a5:ad:be:28:bc:64:9a:4a:79:e6:c1:07: 8e:7d:21:67:6f:a6:e8:6d:08:b9:38:d8:88:c9:bf: 92:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:56:2A:AE:51:61:0F:BC:DC:C2:1F:C5:D8:E3:55:A9:02:76:99:D4 X509v3 Authority Key Identifier: keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/oVYqrlFhD7zcwh_F2ONVqQJ2mdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.93.0-185.204.95.255 185.230.228.0/24 Signature Algorithm: sha256WithRSAEncryption 65:e4:15:fc:db:4b:b4:b7:63:1b:68:e6:fd:40:45:26:50:93: f7:20:6d:3f:be:b0:88:9c:ac:0a:0d:88:ac:9a:84:83:8a:27: bc:93:b3:58:94:31:b6:89:60:c1:ab:d2:a0:5a:68:87:fb:3d: 42:a7:1d:27:43:c5:91:7f:fe:4d:1e:a0:9a:f5:01:49:77:a4: b4:c4:48:06:75:42:c0:9d:51:86:59:fb:e4:15:51:e3:a2:bc: 24:85:d4:30:d4:d7:2e:b6:5b:e4:54:2e:07:5a:e4:85:9d:46: 04:a1:9a:31:cb:fc:b2:64:1f:fc:8a:c6:e2:8a:0a:e0:b3:6e: 74:c2:39:d7:9f:34:28:97:02:fd:74:36:8c:28:a7:d5:2c:ab: 21:87:80:92:e1:55:30:5f:c0:5f:67:55:cc:61:7e:00:8a:f9: 24:27:d7:74:ab:41:57:9b:e4:a0:72:1f:45:6d:71:9f:84:73: da:ff:41:02:3c:34:46:ea:68:1b:61:47:68:12:fe:89:6b:4a: a9:2c:4a:c4:fd:ad:7e:93:c1:f1:a5:a6:0f:45:0c:76:ea:a1: 4e:bb:89:5c:4d:ca:38:1b:d3:06:6d:24:5c:54:2b:30:23:07: cf:f8:ab:91:61:4f:a8:49:3c:c4:c2:eb:c5:53:bd:4c:b4:5a: b3:8d:c6:5c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9yp2pUJpdOYCAF13vYACqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZjFkZWRhZjRkYmRhNjBkYTk5MGQ2ODU2NTBlNjhjODg4 YzYxMDAwHhcNMjYwMTAyMDgxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTU2MmFhZTUxNjEwZmJjZGNjMjFmYzVkOGUzNTVhOTAyNzY5OWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yvgEv3j/7pvbyRrNICNQRLXd8mA ErBBckqzkSOxQXjfdbQFDextsNGEZKkfIQRRAX+aQwKFv5atIfqVBTDcnFngPEdg Nj99xXyqJxXw7yuhjt9o2zvNL5/opifLxXF963vxGhVM2sS9o/j1OC0+Bso/Hqtc IZuVN0ANS4vnWEklOPQrXV1PkkYJ8xY11shdw7vGL19V89pCR4yprW4e9ZL3mrAO PxKTH/d9SZxGcyihO/BR3KZgshEdtw6UhnkQ53yzbJeBSL/EYKWpqMPuDISLVXW2 x9bA2mN1OjtgcGN0mmmlrb4ovGSaSnnmwQeOfSFnb6bobQi5ONiIyb+SkwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFKFWKq5RYQ+83MIfxdjjVakCdpnUMB8GA1UdIwQY MBaAFObx3tr029pg2pkNaFZQ5oyIjGEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8yM2JhNDYtZmM3YS00Yjk3LThiNGYt MjMxNjU3ODI5ZWY1LzEvb1ZZcXJsRmhEN3pjd2hfRjJPTlZxUUoybWRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8yM2JhNDYtZmM3YS00Yjk3LThiNGYtMjMxNjU3ODI5ZWY1 LzEvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAC5zF0D BAW5zEADBAC55uQwDQYJKoZIhvcNAQELBQADggEBAGXkFfzbS7S3Yxto5v1ARSZQ k/cgbT++sIicrAoNiKyahIOKJ7yTs1iUMbaJYMGr0qBaaIf7PUKnHSdDxZF//k0e oJr1AUl3pLTESAZ1QsCdUYZZ++QVUeOivCSF1DDU1y62W+RULgda5IWdRgShmjHL /LJkH/yKxuKKCuCzbnTCOdefNCiXAv10Nowop9UsqyGHgJLhVTBfwF9nVcxhfgCK +SQn13SrQVeb5KByH0VtcZ+Ec9r/QQI8NEbqaBthR2gS/olrSqksSsT9rX6TwfGl pg9FDHbqoU67iVxNyjgb0wZtJFxUKzAjB8/4q5FhT6hJPMTC68VTvUy0WrONxlw= -----END CERTIFICATE-----Generated at Wed Jan 7 06:57:04 2026 by rpki-client