This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/obgVf-JtsYpCUbCziUNUZUCJX0s.roa File: obgVf-JtsYpCUbCziUNUZUCJX0s.roa (raw, json) Hash identifier: elZk4GLccy9BtoLZB3Moi/HhDxse12ofYTVsYp+AUXM= Subject key identifier: A1:B8:15:7F:E2:6D:B1:8A:42:51:B0:B3:89:43:54:65:40:89:5F:4B Certificate issuer: /CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14 Certificate serial: 019B77587A14F5A6F261EB90194A10E91350 Authority key identifier: 30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/obgVf-JtsYpCUbCziUNUZUCJX0s.roa Signing time: Thu 01 Jan 2026 02:17:25 +0000 ROA not before: Thu 01 Jan 2026 02:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50277 IP address blocks: 195.5.180.0/24 maxlen: 24 2001:67c:1580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7a:14:f5:a6:f2:61:eb:90:19:4a:10:e9:13:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f90d2520ad619ac3060b39fbd2c204e29a2a14 Validity Not Before: Jan 1 02:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1b8157fe26db18a4251b0b38943546540895f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0b:82:ee:0b:0b:ac:a7:54:2f:86:a0:4f:f5: 27:84:a2:40:9d:f4:c3:d9:6e:08:39:55:86:47:bd: 28:93:16:9e:8b:88:97:b2:6a:21:77:5a:5c:a3:a9: 1d:79:b1:3a:0b:c7:9e:5f:13:8b:50:e3:62:f8:e7: a5:e6:98:7a:4e:f9:32:85:80:d1:3f:27:a3:68:49: f2:f0:27:1d:cf:b4:21:cf:29:22:22:92:ff:67:1a: 36:53:ca:b5:09:9d:e1:ca:93:ac:5d:cc:e5:36:be: 86:27:44:b6:30:00:0a:e3:b5:7d:a5:43:e7:88:1d: b5:6f:07:2f:68:9d:5b:9f:d3:2b:53:61:84:40:f8: 31:a3:0b:97:72:d8:aa:7f:e9:a9:9c:d8:6a:61:37: b0:14:f3:e8:e7:e9:ca:2d:f9:fd:04:43:9b:14:8a: 43:d6:c8:12:fa:2f:da:98:b7:7e:d5:97:12:50:3f: a4:4a:a1:6e:36:91:6e:41:2f:05:77:7a:69:ab:8d: 40:85:e9:05:0e:80:27:88:12:68:a0:2a:1c:f3:7f: e0:5a:93:b0:55:0b:72:df:19:25:f3:43:ed:eb:3c: f0:3f:20:16:8a:f0:65:0a:62:d6:1d:6c:3c:0a:8b: 28:c2:2b:98:ce:89:f3:fc:73:9d:18:4e:58:91:60: 6b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B8:15:7F:E2:6D:B1:8A:42:51:B0:B3:89:43:54:65:40:89:5F:4B X509v3 Authority Key Identifier: keyid:30:F9:0D:25:20:AD:61:9A:C3:06:0B:39:FB:D2:C2:04:E2:9A:2A:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/obgVf-JtsYpCUbCziUNUZUCJX0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/db5101-015c-40c5-905b-657b3a7d9676/1/MPkNJSCtYZrDBgs5-9LCBOKaKhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.5.180.0/24 IPv6: 2001:67c:1580::/48 Signature Algorithm: sha256WithRSAEncryption 3b:9c:68:e6:20:b4:74:f5:0e:aa:60:3b:fa:7d:8e:eb:f0:55: 75:b5:4b:dc:56:51:ca:e1:d9:b2:e5:d9:3a:94:76:fa:3a:f2: 51:f9:09:5a:44:98:c1:4a:75:2f:cf:eb:f7:67:88:d9:d4:24: 56:c5:5d:24:7f:7c:41:9f:31:63:2f:d0:66:06:72:c4:22:dd: f4:17:33:09:ab:52:6a:c1:91:4a:f1:81:6a:cb:47:66:02:86: 7a:8b:ec:fb:ea:1f:42:3f:06:86:07:fa:8a:80:4d:a4:fc:48: 24:9e:7d:08:2e:0a:ea:c5:c6:aa:81:52:ba:6b:49:09:dd:7d: 83:41:9c:bf:55:34:c6:f5:0f:d9:89:16:14:2b:99:33:cc:a1: f9:b5:17:d7:a8:f3:59:4d:91:6a:b8:18:5c:ce:f3:56:33:70: ce:1b:7c:1f:64:15:95:79:83:5b:a8:b3:e3:1f:ce:5c:93:7d: 4d:4b:c3:7a:a1:9b:92:6c:1a:e3:07:c7:6c:d7:01:03:21:a2: 58:b6:c1:50:6d:0d:02:f3:71:31:ed:05:26:3c:71:f6:a3:63: 47:22:14:6d:9e:9e:c5:9c:e3:c1:68:6f:6e:70:16:3e:96:ca: 02:00:1e:21:f4:5b:ca:2d:d0:b3:39:d8:96:a7:aa:4c:f5:e6: 49:a7:e9:7e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WHoU9abyYeuQGUoQ6RNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjkwZDI1MjBhZDYxOWFjMzA2MGIzOWZiZDJjMjA0ZTI5 YTJhMTQwHhcNMjYwMTAxMDIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWI4MTU3ZmUyNmRiMThhNDI1MWIwYjM4OTQzNTQ2NTQwODk1ZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtguC7gsLrKdUL4agT/UnhKJAnfTD 2W4IOVWGR70okxaei4iXsmohd1pco6kdebE6C8eeXxOLUONi+Oel5ph6TvkyhYDR PyejaEny8Ccdz7QhzykiIpL/Zxo2U8q1CZ3hypOsXczlNr6GJ0S2MAAK47V9pUPn iB21bwcvaJ1bn9MrU2GEQPgxowuXctiqf+mpnNhqYTewFPPo5+nKLfn9BEObFIpD 1sgS+i/amLd+1ZcSUD+kSqFuNpFuQS8Fd3ppq41AhekFDoAniBJooCoc83/gWpOw VQty3xkl80Pt6zzwPyAWivBlCmLWHWw8CosowiuYzonz/HOdGE5YkWBrIQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKG4FX/ibbGKQlGws4lDVGVAiV9LMB8GA1UdIwQY MBaAFDD5DSUgrWGawwYLOfvSwgTimioUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBrTkpTQ3RZWnJEQmdzNS05TENCT0thS2hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kYjUxMDEtMDE1Yy00MGM1LTkwNWIt NjU3YjNhN2Q5Njc2LzEvb2JnVmYtSnRzWXBDVWJDemlVTlVaVUNKWDBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kYjUxMDEtMDE1Yy00MGM1LTkwNWItNjU3YjNhN2Q5Njc2 LzEvTVBrTkpTQ3RZWnJEQmdzNS05TENCT0thS2hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwwW0MA8E AgACMAkDBwAgAQZ8FYAwDQYJKoZIhvcNAQELBQADggEBADucaOYgtHT1DqpgO/p9 juvwVXW1S9xWUcrh2bLl2TqUdvo68lH5CVpEmMFKdS/P6/dniNnUJFbFXSR/fEGf MWMv0GYGcsQi3fQXMwmrUmrBkUrxgWrLR2YChnqL7PvqH0I/BoYH+oqATaT8SCSe fQguCurFxqqBUrprSQndfYNBnL9VNMb1D9mJFhQrmTPMofm1F9eo81lNkWq4GFzO 81YzcM4bfB9kFZV5g1uos+MfzlyTfU1Lw3qhm5JsGuMHx2zXAQMholi2wVBtDQLz cTHtBSY8cfajY0ciFG2ensWc48Fob25wFj6WygIAHiH0W8ot0LM52Janqkz15kmn 6X4= -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:27 2026 by rpki-client