This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/tSSezEPk1zw4FHeAOjRajNErevI.roa File: tSSezEPk1zw4FHeAOjRajNErevI.roa (raw, json) Hash identifier: Nj1Gw9k/uGYMhLU1YKXKzkpNp1VQVTn7dSlrlz0+N5M= Subject key identifier: B5:24:9E:CC:43:E4:D7:3C:38:14:77:80:3A:34:5A:8C:D1:2B:7A:F2 Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0 Certificate serial: 019B797EF9B555A4B56C937C4F88C8DCB3FF Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/tSSezEPk1zw4FHeAOjRajNErevI.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25091 IP address blocks: 94.158.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f9:b5:55:a4:b5:6c:93:7c:4f:88:c8:dc:b3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0 Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5249ecc43e4d73c381477803a345a8cd12b7af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cf:98:3e:d1:54:bc:e5:ea:81:fe:dd:92:f8: 56:83:4a:5f:c4:5a:cd:8a:3c:f6:53:f5:e3:5a:86: 80:00:85:47:71:4e:43:5b:26:44:a0:1c:11:9c:75: 51:cd:07:17:ec:a2:2a:b0:04:63:4a:4c:b8:35:0b: fa:9f:ad:72:6f:21:3a:b3:56:f6:ea:45:26:c9:fc: 61:24:69:de:de:b0:42:d5:dd:5d:00:62:ca:ea:1a: 3e:ab:fd:69:0d:84:09:91:f3:e3:6b:68:10:ce:20: 85:89:ed:11:fe:3b:57:1a:ce:2d:2f:63:1c:5c:45: af:63:bf:e3:7f:99:f9:84:7a:73:aa:e6:c4:34:42: d6:96:8a:f0:c9:72:fc:33:1d:b2:bb:77:80:76:50: 3f:71:01:fb:29:a6:d3:ce:e5:74:5e:80:ab:4a:5a: 63:6d:0e:bc:45:8a:4a:2f:7b:48:64:ab:82:17:c8: 48:32:e5:bc:9d:3e:da:2a:77:36:d1:1e:b8:0a:33: 89:04:92:c3:6d:e8:c3:32:cb:6b:3f:02:d7:fd:42: af:d6:23:7e:5d:8b:b2:6b:bf:a6:c8:e4:8e:a1:dc: fe:9d:03:46:4a:38:d0:5f:f7:27:b5:4e:1a:72:4d: 4e:90:90:6c:6f:06:61:24:e3:5b:f2:5c:4d:07:4a: 07:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:24:9E:CC:43:E4:D7:3C:38:14:77:80:3A:34:5A:8C:D1:2B:7A:F2 X509v3 Authority Key Identifier: keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/tSSezEPk1zw4FHeAOjRajNErevI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.158.28.0/22 Signature Algorithm: sha256WithRSAEncryption b7:e6:3e:52:62:61:d9:85:00:54:3f:15:77:36:8c:d9:c8:99: 11:4c:1d:af:47:8d:23:56:1b:4b:6e:b6:5c:fa:4c:61:ce:65: 0d:34:3d:e3:ac:d5:d8:fe:30:6b:c2:a3:f4:9e:11:06:74:f5: a7:c7:64:1c:75:ce:b9:8d:33:bc:6c:cf:92:d8:8c:60:e7:7c: 46:b0:ec:38:c0:89:9d:6a:12:3d:d7:d5:20:9f:ff:6d:1f:61: d1:dc:38:f5:c8:9b:8f:af:61:30:cb:a7:44:0a:95:a4:26:f3: 2a:e4:0e:f5:e4:fe:35:19:22:b6:12:0a:c7:24:b3:32:29:12: 60:58:4c:d4:42:54:c8:3c:92:7a:de:c3:9e:29:a5:fa:ad:8d: a8:ff:2c:67:d8:a6:26:7a:ce:b4:c7:c3:bc:95:0f:96:23:04: f2:e4:01:1d:38:8b:0e:16:83:5c:48:72:fe:b9:16:86:39:37: 9d:8d:3c:f4:f8:fe:d6:db:68:17:f6:f3:75:5e:66:93:ed:ca: 43:a8:5c:8e:aa:f3:71:c0:9a:d4:5c:b7:d4:2e:bb:e8:42:81: 26:69:78:3c:e6:56:03:a3:c8:b6:a1:b3:ac:24:5e:94:cb:b1: 42:79:78:cd:a0:4b:46:bc:2c:2a:3b:5c:d8:ba:84:2d:e2:40: 9a:a3:4b:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvm1VaS1bJN8T4jI3LP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMWViNDA3Zjc2Y2ZhNWM3ZGExNTIxODM5N2IzYzQzMTc3 NjJhYzAwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTI0OWVjYzQzZTRkNzNjMzgxNDc3ODAzYTM0NWE4Y2QxMmI3YWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4M+YPtFUvOXqgf7dkvhWg0pfxFrN ijz2U/XjWoaAAIVHcU5DWyZEoBwRnHVRzQcX7KIqsARjSky4NQv6n61ybyE6s1b2 6kUmyfxhJGne3rBC1d1dAGLK6ho+q/1pDYQJkfPja2gQziCFie0R/jtXGs4tL2Mc XEWvY7/jf5n5hHpzqubENELWlorwyXL8Mx2yu3eAdlA/cQH7KabTzuV0XoCrSlpj bQ68RYpKL3tIZKuCF8hIMuW8nT7aKnc20R64CjOJBJLDbejDMstrPwLX/UKv1iN+ XYuya7+myOSOodz+nQNGSjjQX/cntU4ack1OkJBsbwZhJONb8lxNB0oHwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLUknsxD5Nc8OBR3gDo0WozRK3ryMB8GA1UdIwQY MBaAFKIetAf3bPpcfaFSGDl7PEMXdirAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2g2MEJfZHMtbHg5b1ZJWU9YczhReGQyS3NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85OGIyNzgtMDY4YS00NjhmLWFjZDct MjZjZDM4NzFmMzY1LzEvdFNTZXpFUGsxenc0RkhlQU9qUmFqTkVyZXZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85OGIyNzgtMDY4YS00NjhmLWFjZDctMjZjZDM4NzFmMzY1 LzEvb2g2MEJfZHMtbHg5b1ZJWU9YczhReGQyS3NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXp4cMA0G CSqGSIb3DQEBCwUAA4IBAQC35j5SYmHZhQBUPxV3NozZyJkRTB2vR40jVhtLbrZc +kxhzmUNND3jrNXY/jBrwqP0nhEGdPWnx2Qcdc65jTO8bM+S2Ixg53xGsOw4wImd ahI919Ugn/9tH2HR3Dj1yJuPr2Ewy6dECpWkJvMq5A715P41GSK2EgrHJLMyKRJg WEzUQlTIPJJ63sOeKaX6rY2o/yxn2KYmes60x8O8lQ+WIwTy5AEdOIsOFoNcSHL+ uRaGOTedjTz0+P7W22gX9vN1XmaT7cpDqFyOqvNxwJrUXLfULrvoQoEmaXg85lYD o8i2obOsJF6Uy7FCeXjNoEtGvCwqO1zYuoQt4kCao0sT -----END CERTIFICATE-----Generated at Sun Jan 18 20:55:44 2026 by rpki-client