This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/9OHSHGyjsScShjBBbXM0V0egb5U.roa File: 9OHSHGyjsScShjBBbXM0V0egb5U.roa (raw, json) Hash identifier: RsCConIkq/oZjKu/2h6K0E/nfItiCMTNkuH27KUNGlU= Subject key identifier: F4:E1:D2:1C:6C:A3:B1:27:12:86:30:41:6D:73:34:57:47:A0:6F:95 Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e Certificate serial: 019B7DCB1B632EEDA9AA56BE2EEC35F4C821 Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/9OHSHGyjsScShjBBbXM0V0egb5U.roa Signing time: Fri 02 Jan 2026 08:20:21 +0000 ROA not before: Fri 02 Jan 2026 08:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 185.248.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1b:63:2e:ed:a9:aa:56:be:2e:ec:35:f4:c8:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e Validity Not Before: Jan 2 08:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4e1d21c6ca3b127128630416d73345747a06f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:75:25:18:72:81:05:a2:94:be:40:05:66:f7: 42:6d:64:51:9e:3a:ff:67:78:72:22:a2:cb:40:19: 56:b2:03:6f:1e:61:91:36:54:36:b2:09:41:c3:90: d8:8b:95:53:b8:7a:96:06:6c:e0:42:d1:18:10:96: a1:f9:81:a0:a7:24:51:fc:56:cb:1b:5f:34:25:a6: e7:69:3b:83:71:c0:3d:9a:b3:bf:79:7f:6a:d1:54: 65:ac:6d:18:2e:59:1b:c2:cb:f2:ad:69:94:f1:c4: 2c:ba:43:0c:85:87:2f:ce:03:bd:9c:d9:b2:a9:9c: 22:da:4c:38:c1:3e:6f:0b:ac:d3:19:49:a3:4b:c6: f0:da:0f:3c:b0:5e:7b:fa:18:a4:41:56:ab:ee:15: c7:73:26:e0:0f:46:b7:aa:0c:e7:5e:b1:77:e5:c3: c0:6b:7f:e0:a2:18:66:6d:d8:f0:b6:a0:00:06:bf: d3:a6:f8:e6:ce:00:2a:09:cf:76:2c:74:8c:83:42: 8e:94:43:88:bc:29:76:44:03:40:90:a7:15:26:46: 5e:66:bc:f3:2b:51:7b:e9:6c:9f:5c:e8:30:62:20: 19:ac:61:9c:eb:db:69:6d:25:2b:df:44:e4:57:8a: 40:7e:85:66:9d:55:c8:5e:6c:70:29:e3:e5:43:1f: 78:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E1:D2:1C:6C:A3:B1:27:12:86:30:41:6D:73:34:57:47:A0:6F:95 X509v3 Authority Key Identifier: keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/9OHSHGyjsScShjBBbXM0V0egb5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.248.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:26:6a:de:a5:a6:6e:a0:3a:33:78:c6:1c:47:70:25:99:83: af:ca:38:7b:96:f0:0b:5b:c2:37:2d:e0:75:fe:82:7e:6d:9d: 84:71:37:3d:a9:37:16:0c:c9:ae:09:6a:0a:79:6f:dc:f9:88: 54:2c:1b:ca:62:d1:51:b1:2c:c8:2f:45:a9:ee:bf:ef:87:4e: bb:df:aa:c6:54:8a:2b:47:f4:dd:1d:8d:c8:41:8f:46:64:b9: 67:a0:25:bb:a9:e1:25:63:af:29:1f:e6:b0:a3:ed:a8:ff:ee: 93:2a:a9:5e:eb:43:3d:8e:4d:df:12:5c:b6:36:79:ae:d0:c1: 86:8c:ac:ab:80:2d:1c:f6:73:c2:e4:17:e2:2c:d5:ad:df:41: e0:58:cf:59:bf:4f:a0:32:36:4a:4d:1e:62:eb:57:09:fb:9e: 18:c5:1f:12:3a:ba:46:c7:e2:07:f0:70:30:a2:77:f1:e1:e5: 96:8c:1e:d2:4f:1a:48:e3:e9:5f:23:0c:26:30:ce:bf:dd:dc: 71:ae:0e:fa:fc:a0:96:d5:2f:6e:e5:e6:23:25:60:21:e7:57: d1:67:2f:b9:f1:a8:a8:4a:36:11:d6:9e:77:08:59:41:71:79: cc:70:c0:26:17:e6:ed:74:c7:69:67:2e:32:07:d0:e4:06:62: 02:8d:c1:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yxtjLu2pqla+Luw19MghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZTVkNjkxN2RjMmRhYmZiNWNhZjkwN2MzZTc0NTE0OTUw MmM5MGUwHhcNMjYwMTAyMDgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGUxZDIxYzZjYTNiMTI3MTI4NjMwNDE2ZDczMzQ1NzQ3YTA2Zjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XUlGHKBBaKUvkAFZvdCbWRRnjr/ Z3hyIqLLQBlWsgNvHmGRNlQ2sglBw5DYi5VTuHqWBmzgQtEYEJah+YGgpyRR/FbL G180JabnaTuDccA9mrO/eX9q0VRlrG0YLlkbwsvyrWmU8cQsukMMhYcvzgO9nNmy qZwi2kw4wT5vC6zTGUmjS8bw2g88sF57+hikQVar7hXHcybgD0a3qgznXrF35cPA a3/gohhmbdjwtqAABr/TpvjmzgAqCc92LHSMg0KOlEOIvCl2RANAkKcVJkZeZrzz K1F76WyfXOgwYiAZrGGc69tpbSUr30TkV4pAfoVmnVXIXmxwKePlQx948wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPTh0hxso7EnEoYwQW1zNFdHoG+VMB8GA1UdIwQY MBaAFFTl1pF9wtq/tcr5B8PnRRSVAskOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk9YV2tYM0Myci0xeXZrSHctZEZGSlVDeVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS80NzlkMDYtOWU4NC00Zjc2LThhZTAt MTMxZDI5MTY0ODhjLzEvOU9IU0hHeWpzU2NTaGpCQmJYTTBWMGVnYjVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS80NzlkMDYtOWU4NC00Zjc2LThhZTAtMTMxZDI5MTY0ODhj LzEvVk9YV2tYM0Myci0xeXZrSHctZEZGSlVDeVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufj4MA0G CSqGSIb3DQEBCwUAA4IBAQCPJmrepaZuoDozeMYcR3AlmYOvyjh7lvALW8I3LeB1 /oJ+bZ2EcTc9qTcWDMmuCWoKeW/c+YhULBvKYtFRsSzIL0Wp7r/vh06736rGVIor R/TdHY3IQY9GZLlnoCW7qeElY68pH+awo+2o/+6TKqle60M9jk3fEly2Nnmu0MGG jKyrgC0c9nPC5BfiLNWt30HgWM9Zv0+gMjZKTR5i61cJ+54YxR8SOrpGx+IH8HAw onfx4eWWjB7STxpI4+lfIwwmMM6/3dxxrg76/KCW1S9u5eYjJWAh51fRZy+58aio SjYR1p53CFlBcXnMcMAmF+btdMdpZy4yB9DkBmICjcH5 -----END CERTIFICATE-----Generated at Fri Jan 23 16:03:18 2026 by rpki-client