This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ocHcLPqIiXs39TMNmLocr_HH0to.roa File: ocHcLPqIiXs39TMNmLocr_HH0to.roa (raw, json) Hash identifier: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM= Subject key identifier: A1:C1:DC:2C:FA:88:89:7B:37:F5:33:0D:98:BA:1C:AF:F1:C7:D2:DA Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Certificate serial: 019B78A2FBEF3448EA222DF8841EDE61ED72 Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ocHcLPqIiXs39TMNmLocr_HH0to.roa Signing time: Thu 01 Jan 2026 08:18:25 +0000 ROA not before: Thu 01 Jan 2026 08:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 91.132.225.0/24 maxlen: 24 94.247.139.0/24 maxlen: 24 176.116.13.0/24 maxlen: 24 188.244.123.0/24 maxlen: 24 193.9.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fb:ef:34:48:ea:22:2d:f8:84:1e:de:61:ed:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Validity Not Before: Jan 1 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1c1dc2cfa88897b37f5330d98ba1caff1c7d2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8f:07:58:0d:1f:e4:43:ce:fe:39:2d:20:5e: d8:64:73:69:e2:15:f4:bb:7d:f7:a0:2e:51:bd:d0: 0b:c1:02:6c:10:cd:f2:26:c9:23:ff:78:23:83:58: af:a8:d7:9a:64:b3:a6:50:f2:74:6c:a4:53:2b:dc: de:18:f0:a5:cd:49:03:5c:8c:3e:18:01:e8:20:6d: 65:fc:a9:9d:a6:26:a8:48:e2:a7:65:2a:ec:56:8a: 43:10:2f:ae:1b:2b:70:7e:8e:43:8d:f8:6b:57:5e: 9e:6b:cd:60:6c:a5:11:da:08:88:01:4d:33:11:b5: 93:2f:5f:dc:ee:77:e4:ca:50:e7:f6:de:bf:9e:04: 69:5f:fe:27:27:12:73:fe:1a:f1:b4:50:e4:cd:b8: 31:b1:8f:94:ca:00:ff:f6:ec:c2:23:54:43:05:03: a9:5d:82:73:b3:18:85:c1:f8:b3:40:31:33:5e:db: f4:c3:aa:4e:e5:29:c1:be:c8:4c:25:07:48:83:47: db:22:bf:be:d5:32:68:2c:b8:73:e1:6e:8f:20:60: 24:4d:bc:c8:b8:3a:31:a5:66:8b:c3:54:6f:c4:d5: 4f:e8:5a:9f:57:16:de:b7:2d:c2:f8:be:9f:3d:de: 81:02:a5:b7:13:2d:86:eb:aa:1c:3f:78:df:6b:56: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C1:DC:2C:FA:88:89:7B:37:F5:33:0D:98:BA:1C:AF:F1:C7:D2:DA X509v3 Authority Key Identifier: keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/ocHcLPqIiXs39TMNmLocr_HH0to.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.225.0/24 94.247.139.0/24 176.116.13.0/24 188.244.123.0/24 193.9.124.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:80:0d:35:f8:0a:a3:5c:f2:3e:a5:e9:16:b4:32:22:92:11: 43:6e:99:ff:34:ce:b3:1f:98:24:9f:e8:ea:96:c7:ec:4a:86: df:ae:c1:96:15:43:8e:f4:35:6d:b6:96:ed:db:c0:5b:91:c3: 74:b3:42:68:ab:da:40:9d:7a:74:f7:81:36:fc:6e:b4:2e:b9: c2:d3:fb:c9:a1:eb:59:d9:91:68:f1:3f:48:ac:2f:ac:19:35: 3b:b9:36:21:38:50:bb:6b:bf:0c:20:d9:f9:8a:89:46:a3:95: bf:75:a6:a0:bb:95:6c:1c:06:1e:70:53:70:37:de:41:ba:b7: 33:a8:a4:c8:bd:ae:64:78:92:4a:a7:32:0e:9a:f9:37:70:86: ac:d2:01:31:13:7b:d0:98:98:2d:b0:c3:f2:79:bb:35:80:6d: c9:42:44:55:21:cf:de:26:cc:8e:41:30:71:a1:a1:54:94:22: 41:0f:7f:ff:fb:4d:65:05:3f:d0:63:25:8f:72:8c:cf:aa:1f: 3a:68:b3:91:2f:de:86:73:0b:93:94:4f:76:eb:19:48:93:8e: 35:21:c6:bd:bf:8c:82:4c:ee:6f:3b:3b:14:7c:c2:79:0c:c5: 57:44:e1:db:68:95:78:39:25:c2:16:67:24:e9:93:6c:77:78: c0:86:f5:24 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4ovvvNEjqIi34hB7eYe1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky MGMzZDkwHhcNMjYwMTAxMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWMxZGMyY2ZhODg4OTdiMzdmNTMzMGQ5OGJhMWNhZmYxYzdkMmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3I8HWA0f5EPO/jktIF7YZHNp4hX0 u333oC5RvdALwQJsEM3yJskj/3gjg1ivqNeaZLOmUPJ0bKRTK9zeGPClzUkDXIw+ GAHoIG1l/KmdpiaoSOKnZSrsVopDEC+uGytwfo5DjfhrV16ea81gbKUR2giIAU0z EbWTL1/c7nfkylDn9t6/ngRpX/4nJxJz/hrxtFDkzbgxsY+UygD/9uzCI1RDBQOp XYJzsxiFwfizQDEzXtv0w6pO5SnBvshMJQdIg0fbIr++1TJoLLhz4W6PIGAkTbzI uDoxpWaLw1RvxNVP6FqfVxbety3C+L6fPd6BAqW3Ey2G66ocP3jfa1Z6JwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKHB3Cz6iIl7N/UzDZi6HK/xx9LaMB8GA1UdIwQY MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt NGZiNTU5YjNiOWIzLzEvb2NIY0xQcUlpWHMzOVRNTm1Mb2NyX0hIMHRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAW4ThAwQA XveLAwQAsHQNAwQAvPR7AwQAwQl8MA0GCSqGSIb3DQEBCwUAA4IBAQCbgA01+Aqj XPI+pekWtDIikhFDbpn/NM6zH5gkn+jqlsfsSobfrsGWFUOO9DVttpbt28BbkcN0 s0Joq9pAnXp094E2/G60LrnC0/vJoetZ2ZFo8T9IrC+sGTU7uTYhOFC7a78MINn5 iolGo5W/daagu5VsHAYecFNwN95BurczqKTIva5keJJKpzIOmvk3cIas0gExE3vQ mJgtsMPyebs1gG3JQkRVIc/eJsyOQTBxoaFUlCJBD3//+01lBT/QYyWPcozPqh86 aLORL96GcwuTlE926xlIk441Ica9v4yCTO5vOzsUfMJ5DMVXROHbaJV4OSXCFmck 6ZNsd3jAhvUk -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:17 2026 by rpki-client