This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oHTKl1BDUVQv5BZ9d1o41D8SmFg.roa File: oHTKl1BDUVQv5BZ9d1o41D8SmFg.roa (raw, json) Hash identifier: OZrzmSaMIO4XTjvZmhAaJ6ipcXJYLxmtmBRfg4r1PS4= Subject key identifier: A0:74:CA:97:50:43:51:54:2F:E4:16:7D:77:5A:38:D4:3F:12:98:58 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F844169E56287C05D1AC8C79FA04A02 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oHTKl1BDUVQv5BZ9d1o41D8SmFg.roa Signing time: Fri 02 Jan 2026 16:22:12 +0000 ROA not before: Fri 02 Jan 2026 16:22:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 2a0b:3c41:2::/48 maxlen: 48 2a0c:9e02::/32 maxlen: 40 2a0e:cbc4::/32 maxlen: 32 2a0e:cbc5::/32 maxlen: 32 2a0e:cbc6::/32 maxlen: 32 2a0e:cbc7::/32 maxlen: 32 2a0e:eb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:41:69:e5:62:87:c0:5d:1a:c8:c7:9f:a0:4a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a074ca97504351542fe4167d775a38d43f129858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:90:57:ee:09:8d:bf:b1:76:e0:7f:c3:f2: 69:e5:ce:19:d3:58:f7:b8:1a:20:28:d5:8e:22:7a: be:45:67:32:91:52:02:a0:4a:fe:dc:43:d6:c1:c6: c4:5a:eb:b1:9d:6c:10:2f:3e:6f:d6:c3:11:64:33: 25:c7:7e:7e:56:86:76:3c:fc:05:e2:73:a8:c6:fa: cd:aa:5e:6c:8d:df:e6:4b:38:7a:65:cf:92:32:48: ef:07:3d:b0:4d:a3:a7:d6:da:c4:36:97:73:8b:7f: 43:60:7c:0a:32:2e:24:3b:c6:38:2b:cf:be:d4:df: 10:54:69:43:ac:e1:da:75:e1:37:de:fa:10:e4:28: 27:2c:cc:f3:96:1c:4d:6a:69:88:0a:b6:cf:6f:8e: 6d:02:e5:41:f3:e7:83:33:4c:e6:aa:1c:52:ea:8c: d9:ea:b1:2b:24:be:e1:a9:4b:49:ab:c3:32:69:fb: f6:a9:e0:0c:8d:06:53:84:c3:ff:4d:f6:43:ca:28: 5d:16:3a:7f:8a:bf:c4:26:66:3d:88:de:d8:b6:46: 19:86:37:c3:bf:45:2d:1a:a1:36:c3:f6:14:09:7d: f8:bc:a6:57:22:1d:8e:70:71:53:c4:59:dd:fd:30: ab:fb:f0:0d:29:3d:4d:92:a5:37:98:aa:e9:cd:b1: 83:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:74:CA:97:50:43:51:54:2F:E4:16:7D:77:5A:38:D4:3F:12:98:58 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oHTKl1BDUVQv5BZ9d1o41D8SmFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:3c41:2::/48 2a0c:9e02::/32 2a0e:cbc4::/30 2a0e:eb40::/32 Signature Algorithm: sha256WithRSAEncryption b4:ec:30:8d:cc:34:f5:65:6e:e9:55:b0:10:55:5c:4f:09:88: dd:3c:24:63:83:aa:b0:ba:c6:36:04:43:ad:15:81:d0:5d:2d: 17:c0:a8:6a:0b:5e:61:e3:2a:70:30:2a:e4:fc:e0:07:75:96: e9:b8:04:cc:e6:7e:ea:b2:78:8f:1e:d4:86:96:78:32:2d:94: 94:18:0e:fa:08:dc:78:39:b1:3e:63:12:80:1b:94:f4:44:46: f9:32:04:3f:25:5f:eb:f8:a6:49:0e:49:63:ab:86:f6:14:e5: cb:d7:8b:9a:ff:18:e0:c0:ff:a7:4c:f5:46:a9:45:37:91:c6: 7f:28:4f:d3:d6:55:ce:9b:cb:33:59:26:52:67:dc:d9:0d:d0: 4c:96:44:9f:71:b7:c1:80:99:80:26:05:91:75:89:78:3f:bb: 7a:9e:c9:38:07:e8:71:df:bc:59:ac:2d:00:2d:66:fe:8a:3b: 69:dc:b7:12:e4:91:e8:f0:4b:11:5f:59:e7:82:63:79:7b:85: 24:d2:fd:ae:d9:b8:e6:6c:69:b1:5a:b0:c0:9c:62:2b:f2:2e: 8d:cd:69:e4:96:d9:dc:ea:ce:9c:8e:28:95:2c:ee:56:33:74: 50:8f:80:38:10:d0:ba:1d:dc:06:bb:5f:44:22:55:7d:d6:e8: 2c:e3:b4:d8 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/hEFp5WKHwF0ayMefoEoCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDc0Y2E5NzUwNDM1MTU0MmZlNDE2N2Q3NzVhMzhkNDNmMTI5ODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO6QV+4Jjb+xduB/w/Jp5c4Z01j3 uBogKNWOInq+RWcykVICoEr+3EPWwcbEWuuxnWwQLz5v1sMRZDMlx35+VoZ2PPwF 4nOoxvrNql5sjd/mSzh6Zc+SMkjvBz2wTaOn1trENpdzi39DYHwKMi4kO8Y4K8++ 1N8QVGlDrOHadeE33voQ5CgnLMzzlhxNammICrbPb45tAuVB8+eDM0zmqhxS6ozZ 6rErJL7hqUtJq8Myafv2qeAMjQZThMP/TfZDyihdFjp/ir/EJmY9iN7YtkYZhjfD v0UtGqE2w/YUCX34vKZXIh2OcHFTxFnd/TCr+/ANKT1NkqU3mKrpzbGDbwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKB0ypdQQ1FUL+QWfXdaONQ/EphYMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvb0hUS2wxQkRVVlF2NUJaOWQxbzQxRDhTbUZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAAjAeAwcAKgs8QQAC AwUAKgyeAgMFAioOy8QDBQAqDutAMA0GCSqGSIb3DQEBCwUAA4IBAQC07DCNzDT1 ZW7pVbAQVVxPCYjdPCRjg6qwusY2BEOtFYHQXS0XwKhqC15h4ypwMCrk/OAHdZbp uATM5n7qsniPHtSGlngyLZSUGA76CNx4ObE+YxKAG5T0REb5MgQ/JV/r+KZJDklj q4b2FOXL14ua/xjgwP+nTPVGqUU3kcZ/KE/T1lXOm8szWSZSZ9zZDdBMlkSfcbfB gJmAJgWRdYl4P7t6nsk4B+hx37xZrC0ALWb+ijtp3LcS5JHo8EsRX1nngmN5e4Uk 0v2u2bjmbGmxWrDAnGIr8i6NzWnkltnc6s6cjiiVLO5WM3RQj4A4ENC6HdwGu19E IlV91ugs47TY -----END CERTIFICATE-----Generated at Mon Jan 19 11:50:05 2026 by rpki-client