This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ohVVcfnKobwaQ22eu1KTOgGgwHQ.roa File: ohVVcfnKobwaQ22eu1KTOgGgwHQ.roa (raw, json) Hash identifier: vk4v8xqpH9YBBN9UPjWLx67dCxT0zcYbSNSKTNHSQV0= Subject key identifier: A2:15:55:71:F9:CA:A1:BC:1A:43:6D:9E:BB:52:93:3A:01:A0:C0:74 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BBC9B67D4376CB0D6AAA0F5617A7E00E5 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ohVVcfnKobwaQ22eu1KTOgGgwHQ.roa Signing time: Wed 14 Jan 2026 13:04:19 +0000 ROA not before: Wed 14 Jan 2026 13:04:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62904 IP address blocks: 5.175.211.0/24 maxlen: 24 5.175.212.0/24 maxlen: 24 5.231.110.0/24 maxlen: 24 5.231.124.0/24 maxlen: 24 5.231.241.0/24 maxlen: 24 89.144.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:9b:67:d4:37:6c:b0:d6:aa:a0:f5:61:7a:7e:00:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 14 13:04:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2155571f9caa1bc1a436d9ebb52933a01a0c074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fc:1d:46:ac:c4:10:b0:e9:91:d6:64:71:31: 12:e8:36:75:ae:b5:8f:20:da:07:f8:bf:d2:ee:c0: 29:01:32:93:ad:48:81:cf:c9:61:6c:2c:dc:89:d5: e5:aa:16:85:dd:c1:73:5a:09:c3:bc:8c:10:d4:e3: 4c:07:6a:1c:53:40:61:9a:81:58:f6:13:61:5a:3f: 06:3a:67:e0:86:3d:66:a4:98:88:8c:41:76:65:e2: d2:8b:8c:f1:f8:5a:dd:8c:64:0c:ce:5c:f1:6d:bb: e0:62:86:4e:f0:20:78:a9:f1:d3:d9:5d:6e:ef:19: 4c:70:fd:35:4b:08:de:6c:87:fc:42:2b:9f:ef:d9: d6:fb:30:9a:b7:02:29:82:8b:12:2b:07:c3:97:38: bf:2b:0c:6d:55:16:86:7d:77:cb:ba:64:17:a6:ba: 90:4c:26:6b:f3:c9:b2:c8:d4:98:a6:d4:38:54:68: fb:16:71:07:70:a5:da:c1:23:6a:f2:69:6c:a9:98: b9:fd:3c:cd:d7:ee:15:d3:a8:cc:3a:74:b4:90:60: bb:45:ec:32:09:4c:f8:7c:1e:e3:32:c9:79:eb:95: 43:dc:40:fe:b6:26:56:48:b4:a8:de:18:de:47:7e: 90:f5:3f:59:f8:40:76:b3:d6:05:1c:d0:43:ef:ac: 2c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:15:55:71:F9:CA:A1:BC:1A:43:6D:9E:BB:52:93:3A:01:A0:C0:74 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ohVVcfnKobwaQ22eu1KTOgGgwHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.211.0-5.175.212.255 5.231.110.0/24 5.231.124.0/24 5.231.241.0/24 89.144.40.0/24 Signature Algorithm: sha256WithRSAEncryption 78:aa:aa:8d:4d:75:47:a7:03:d4:9b:6c:c7:40:9a:6c:ee:ac: 6a:40:ab:5e:24:74:08:55:a1:07:a5:a4:b4:9e:a7:ca:45:b5: f7:f7:c3:89:5e:d0:c2:68:c9:fa:4a:d4:17:e4:16:1e:e5:9e: a5:b9:88:19:4e:eb:9e:85:5e:ad:db:43:1c:e9:a0:fd:64:73: 77:cb:0e:a5:4f:b6:82:8a:c1:02:e7:5e:e5:16:c8:01:8e:0d: a8:fb:5b:88:b0:4d:37:63:8c:8f:2e:cc:e4:3a:38:85:3c:ee: f4:96:17:31:0a:59:53:8e:ad:82:31:79:59:f6:94:12:b5:27: 80:d7:38:11:c2:b4:da:87:12:24:c6:eb:8a:9a:8b:e9:0c:5a: 8c:20:b7:78:59:03:1f:67:5b:f4:19:6e:a0:f1:54:47:c7:24: 15:2a:b5:98:8f:a6:1e:15:da:68:9c:f2:95:70:0f:ef:24:09: 5c:1e:cd:ef:6d:be:a0:5f:f1:7f:b1:41:dc:8c:1b:29:05:53: 74:12:ae:8c:59:b7:79:b2:9c:3a:80:74:ad:d5:b7:ce:75:16: 84:76:17:ff:f1:06:47:68:0d:91:a6:fe:2c:e0:fa:9c:17:77: 36:b6:00:44:56:36:29:c9:6c:33:41:19:b9:51:d5:eb:66:f4: e4:f8:f2:a8 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZu8m2fUN2yw1qqg9WF6fgDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTE0MTMwNDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjE1NTU3MWY5Y2FhMWJjMWE0MzZkOWViYjUyOTMzYTAxYTBjMDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/wdRqzEELDpkdZkcTES6DZ1rrWP INoH+L/S7sApATKTrUiBz8lhbCzcidXlqhaF3cFzWgnDvIwQ1ONMB2ocU0BhmoFY 9hNhWj8GOmfghj1mpJiIjEF2ZeLSi4zx+FrdjGQMzlzxbbvgYoZO8CB4qfHT2V1u 7xlMcP01SwjebIf8Qiuf79nW+zCatwIpgosSKwfDlzi/KwxtVRaGfXfLumQXprqQ TCZr88myyNSYptQ4VGj7FnEHcKXawSNq8mlsqZi5/TzN1+4V06jMOnS0kGC7Rewy CUz4fB7jMsl565VD3ED+tiZWSLSo3hjeR36Q9T9Z+EB2s9YFHNBD76wsdwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFKIVVXH5yqG8GkNtnrtSkzoBoMB0MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvb2hWVmNmbktvYndhUTIyZXUxS1RPZ0dnd0hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAAFr9MD BAAFr9QDBAAF524DBAAF53wDBAAF5/EDBABZkCgwDQYJKoZIhvcNAQELBQADggEB AHiqqo1NdUenA9SbbMdAmmzurGpAq14kdAhVoQelpLSep8pFtff3w4le0MJoyfpK 1BfkFh7lnqW5iBlO656FXq3bQxzpoP1kc3fLDqVPtoKKwQLnXuUWyAGODaj7W4iw TTdjjI8uzOQ6OIU87vSWFzEKWVOOrYIxeVn2lBK1J4DXOBHCtNqHEiTG64qai+kM Wowgt3hZAx9nW/QZbqDxVEfHJBUqtZiPph4V2mic8pVwD+8kCVweze9tvqBf8X+x QdyMGykFU3QSroxZt3mynDqAdK3Vt851FoR2F//xBkdoDZGm/izg+pwXdza2AERW NinJbDNBGblR1etm9OT48qg= -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:12 2026 by rpki-client