This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/ob6pDJB_JE3UJu9H-9gufeyselQ.roa File: ob6pDJB_JE3UJu9H-9gufeyselQ.roa (raw, json) Hash identifier: xbSbO7r3hHkWAEnbnrsxUE2H3xriXhgsX8DyAPUq47c= Subject key identifier: A1:BE:A9:0C:90:7F:24:4D:D4:26:EF:47:FB:D8:2E:7D:EC:AC:7A:54 Certificate issuer: /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e Certificate serial: 019B7D5CEFA3FAE53B671C740602990C5925 Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/ob6pDJB_JE3UJu9H-9gufeyselQ.roa Signing time: Fri 02 Jan 2026 06:20:01 +0000 ROA not before: Fri 02 Jan 2026 06:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 194.42.47.64/26 maxlen: 26 194.93.123.0/26 maxlen: 26 2001:7f8:162::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ef:a3:fa:e5:3b:67:1c:74:06:02:99:0c:59:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1bea90c907f244dd426ef47fbd82e7decac7a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:ae:e7:22:25:32:b9:91:53:ea:63:9f:87: 04:3a:91:cb:88:f2:20:a0:2d:da:57:f7:2d:91:1a: c2:11:29:c2:83:7d:9c:97:50:4c:21:9a:b1:a2:e6: 33:9b:05:4d:ef:91:56:1b:3b:b9:8d:89:f6:74:18: 2d:5a:70:37:fd:79:92:7d:22:ed:25:22:be:a8:cd: 43:e7:44:fd:9d:5e:17:4d:50:05:7c:47:01:e8:8b: a0:a0:d9:cc:ee:af:04:8b:06:f1:34:8f:55:f7:ae: 7c:0d:ac:80:93:a5:34:e2:d9:36:4e:e4:a6:cd:72: 03:12:ae:8d:3a:f7:54:6a:84:8a:c0:14:fc:b8:3e: 66:db:c8:3a:12:e2:09:f1:38:db:77:5f:2e:dd:93: 1a:82:2c:23:1e:d1:af:c1:62:c8:38:56:4d:62:a7: 25:85:bb:05:38:5c:52:f1:89:77:be:d9:ce:45:8c: 84:9f:88:2b:23:a3:6d:b7:92:e9:6e:23:9d:2c:f1: b7:b9:29:84:0f:e0:61:79:5e:db:83:94:89:2d:a3: 35:0b:13:4f:2d:2a:c9:0e:a6:e7:e4:19:04:c1:0f: cb:eb:31:17:d2:96:c7:f6:ad:30:98:ff:2b:56:9b: 08:a7:69:f8:52:e0:22:a7:94:d4:c2:5a:6d:ee:43: 06:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BE:A9:0C:90:7F:24:4D:D4:26:EF:47:FB:D8:2E:7D:EC:AC:7A:54 X509v3 Authority Key Identifier: keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/ob6pDJB_JE3UJu9H-9gufeyselQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.42.47.64/26 194.93.123.0/26 IPv6: 2001:7f8:162::/48 Signature Algorithm: sha256WithRSAEncryption 52:b0:8f:72:68:d3:09:55:a3:3e:ff:dc:cf:00:45:9b:d2:5e: 39:af:51:a5:4d:e3:82:7a:55:43:71:85:fa:22:7d:3f:b4:fc: 54:0c:77:0d:9e:5f:c2:32:43:42:44:39:46:a5:4c:da:f7:0f: 1d:f5:35:2f:36:3f:b5:ee:a5:f0:1a:93:5a:a1:64:ea:fd:a4: 34:e6:0a:78:f9:97:17:4f:83:8a:a8:98:f7:5d:57:b6:7b:3d: aa:c3:47:5d:73:60:4a:98:06:49:23:34:68:d8:27:d4:67:ae: 24:c7:c3:9d:4f:e7:42:7a:16:4f:0b:c0:11:b2:b8:27:57:db: 04:88:43:aa:42:ae:06:fd:c1:76:38:5f:1b:55:aa:e5:68:7d: 4c:13:7c:50:99:f5:a0:56:8a:22:1d:52:15:e3:da:b7:bf:9e: 19:df:9b:31:50:52:7c:94:74:8d:d3:6c:d2:40:60:ec:99:76: 9e:17:f3:e6:fa:07:79:97:e6:ae:81:4a:e6:c2:e4:f5:f4:00: cb:f4:2c:95:35:68:2e:d9:75:0d:a3:81:5a:61:3e:35:a9:20: a7:5f:5b:0f:3e:66:e6:54:70:3f:b7:ce:d4:cc:e1:dc:90:62: 69:86:21:81:f3:25:d3:d2:ba:56:04:87:58:41:5e:c9:ca:01: 93:bf:ac:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9XO+j+uU7Zxx0BgKZDFklMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YmE0ZjUyYWMxYmUwNzU1ZDM0YmM1NDgzYzA2MWJkZjI5 MzQ0N2UwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWJlYTkwYzkwN2YyNDRkZDQyNmVmNDdmYmQ4MmU3ZGVjYWM3YTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno6u5yIlMrmRU+pjn4cEOpHLiPIg oC3aV/ctkRrCESnCg32cl1BMIZqxouYzmwVN75FWGzu5jYn2dBgtWnA3/XmSfSLt JSK+qM1D50T9nV4XTVAFfEcB6IugoNnM7q8EiwbxNI9V9658DayAk6U04tk2TuSm zXIDEq6NOvdUaoSKwBT8uD5m28g6EuIJ8Tjbd18u3ZMagiwjHtGvwWLIOFZNYqcl hbsFOFxS8Yl3vtnORYyEn4grI6Ntt5LpbiOdLPG3uSmED+BheV7bg5SJLaM1CxNP LSrJDqbn5BkEwQ/L6zEX0pbH9q0wmP8rVpsIp2n4UuAip5TUwlpt7kMGmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKG+qQyQfyRN1CbvR/vYLn3srHpUMB8GA1UdIwQY MBaAFCS6T1KsG+B1XTS8VIPAYb3yk0R+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxwUFVxd2I0SFZkTkx4VWc4Qmh2ZktUUkg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zOTc1NDYtZGM3Yi00NjYwLThhNTEt YmY1OWZjMWNiMjZkLzEvb2I2cERKQl9KRTNVSnU5SC05Z3VmZXlzZWxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zOTc1NDYtZGM3Yi00NjYwLThhNTEtYmY1OWZjMWNiMjZk LzEvSkxwUFVxd2I0SFZkTkx4VWc4Qmh2ZktUUkg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOAwUGwiovQAMF BsJdewAwDwQCAAIwCQMHACABB/gBYjANBgkqhkiG9w0BAQsFAAOCAQEAUrCPcmjT CVWjPv/czwBFm9JeOa9RpU3jgnpVQ3GF+iJ9P7T8VAx3DZ5fwjJDQkQ5RqVM2vcP HfU1LzY/te6l8BqTWqFk6v2kNOYKePmXF0+DiqiY911Xtns9qsNHXXNgSpgGSSM0 aNgn1GeuJMfDnU/nQnoWTwvAEbK4J1fbBIhDqkKuBv3BdjhfG1Wq5Wh9TBN8UJn1 oFaKIh1SFePat7+eGd+bMVBSfJR0jdNs0kBg7Jl2nhfz5voHeZfmroFK5sLk9fQA y/QslTVoLtl1DaOBWmE+Nakgp19bDz5m5lRwP7fO1Mzh3JBiaYYhgfMl09K6VgSH WEFeycoBk7+sgA== -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:11 2026 by rpki-client