This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/rohoPa7H5eROnECvnzSmNSccPI4.roa File: rohoPa7H5eROnECvnzSmNSccPI4.roa (raw, json) Hash identifier: hsIiKsnLQB+zqpRT/mG7sZiQLtCG2VGljVJkJLmEpaA= Subject key identifier: AE:88:68:3D:AE:C7:E5:E4:4E:9C:40:AF:9F:34:A6:35:27:1C:3C:8E Certificate issuer: /CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee Certificate serial: 019B77C70201615EF1122ED23C40A9A5FA3F Authority key identifier: 4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/rohoPa7H5eROnECvnzSmNSccPI4.roa Signing time: Thu 01 Jan 2026 04:18:09 +0000 ROA not before: Thu 01 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58172 IP address blocks: 45.135.131.0/24 maxlen: 24 91.213.49.0/24 maxlen: 24 94.131.224.0/24 maxlen: 24 94.131.225.0/24 maxlen: 24 94.131.226.0/23 maxlen: 23 94.131.226.0/24 maxlen: 24 94.131.227.0/24 maxlen: 24 94.131.228.0/24 maxlen: 24 94.131.229.0/24 maxlen: 24 94.131.230.0/24 maxlen: 24 94.131.231.0/24 maxlen: 24 94.131.232.0/24 maxlen: 24 94.131.233.0/24 maxlen: 24 94.131.234.0/23 maxlen: 23 94.131.234.0/24 maxlen: 24 94.131.235.0/24 maxlen: 24 94.131.236.0/23 maxlen: 23 94.131.236.0/24 maxlen: 24 94.131.237.0/24 maxlen: 24 94.131.239.0/24 maxlen: 24 185.191.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.mft rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:02:01:61:5e:f1:12:2e:d2:3c:40:a9:a5:fa:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3c665e51cc4cb5caf05b8294843e2733a13dee Validity Not Before: Jan 1 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae88683daec7e5e44e9c40af9f34a635271c3c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ae:d0:b8:86:25:37:e4:17:9e:2f:11:7a:76: f3:26:a3:18:30:f6:9f:19:fa:99:9f:6b:6f:34:f9: f5:82:83:63:f2:86:dc:30:7e:fa:fe:b4:73:8d:aa: ff:bb:d9:33:6c:e1:be:f1:d0:69:dc:1f:cf:c3:4c: 87:fe:e7:f1:db:00:07:13:c8:df:91:e2:ea:61:7f: cd:09:73:dc:de:85:19:c1:ed:de:f7:d4:90:c6:6a: 4f:65:29:46:3d:35:ad:f6:38:fd:0f:67:88:e7:55: 48:83:ae:79:ea:de:65:23:4d:54:63:01:11:1e:6e: db:3b:a0:61:f2:e2:36:66:5a:24:fe:b3:65:1a:ec: f5:11:fa:63:18:25:23:cc:23:aa:6c:39:05:ee:f7: 6e:79:2d:53:36:a8:68:34:78:2a:8f:ce:bc:0d:3c: 1a:5c:a1:39:15:95:2a:78:a7:50:96:0e:ce:79:e3: 5a:83:0e:56:2b:c3:f0:2c:ef:d4:83:f4:94:4d:e6: 84:4e:47:7a:1b:6b:f1:c6:e2:04:01:78:bd:b3:8b: d7:cf:24:b2:8e:ef:58:25:19:cb:6b:86:b2:83:f5: 2a:10:e8:11:af:1e:a8:33:7e:6c:1f:22:5d:26:13: 55:6b:a6:a0:77:fb:f0:9e:a2:21:d5:85:bd:ed:60: 78:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:88:68:3D:AE:C7:E5:E4:4E:9C:40:AF:9F:34:A6:35:27:1C:3C:8E X509v3 Authority Key Identifier: keyid:4C:3C:66:5E:51:CC:4C:B5:CA:F0:5B:82:94:84:3E:27:33:A1:3D:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDxmXlHMTLXK8FuClIQ-JzOhPe4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/rohoPa7H5eROnECvnzSmNSccPI4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6b66b4-064c-42ee-a5ee-1a65b91bee58/1/TDxmXlHMTLXK8FuClIQ-JzOhPe4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.131.0/24 91.213.49.0/24 94.131.224.0-94.131.237.255 94.131.239.0/24 185.191.212.0/24 Signature Algorithm: sha256WithRSAEncryption 62:7d:56:fe:30:20:dd:93:46:68:7f:b9:67:66:b4:40:3e:52: 08:c9:0d:e7:c7:0d:c2:8f:2d:b5:09:5a:08:8a:60:5d:73:51: 27:f0:be:2d:19:08:e4:42:ba:43:d1:5d:ba:34:ee:47:8a:12: 08:14:6b:79:b3:8e:5f:7d:e2:96:00:bf:14:2d:48:b2:e4:81: b2:ce:cd:80:a8:30:37:ee:1f:53:41:3b:ab:94:ee:90:6a:87: 39:09:db:1f:fe:7e:53:4d:78:e4:ec:a0:ec:da:80:85:c9:cc: a7:c1:25:57:d8:bd:8d:ce:c3:01:7c:42:83:a5:7a:72:3b:66: 0e:2b:59:64:63:4b:be:48:d3:db:d8:47:c9:bb:eb:cc:49:3a: 86:6d:c2:cc:ad:6c:b8:06:7a:d1:76:31:79:3c:e3:14:1c:b3: fa:d8:4e:64:ba:9a:7b:11:54:09:84:55:bc:bf:9f:d3:22:bc: 45:48:d1:07:a6:02:d0:9c:b3:c4:b2:3f:45:4b:34:03:d7:4e: 9b:3d:7a:8b:d0:59:be:75:c4:01:a6:5c:cc:b2:6d:2c:cd:e8: 78:25:bb:99:8d:5d:ca:dc:6f:fd:46:68:8b:2e:6e:e6:5c:24: 07:9e:00:68:cb:0c:5d:dd:30:a2:6c:32:29:57:57:69:86:f0: 39:8f:fb:a4 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt3xwIBYV7xEi7SPECppfo/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjM2M2NjVlNTFjYzRjYjVjYWYwNWI4Mjk0ODQzZTI3MzNh MTNkZWUwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTg4NjgzZGFlYzdlNWU0NGU5YzQwYWY5ZjM0YTYzNTI3MWMzYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK7QuIYlN+QXni8RenbzJqMYMPaf GfqZn2tvNPn1goNj8obcMH76/rRzjar/u9kzbOG+8dBp3B/Pw0yH/ufx2wAHE8jf keLqYX/NCXPc3oUZwe3e99SQxmpPZSlGPTWt9jj9D2eI51VIg6556t5lI01UYwER Hm7bO6Bh8uI2Zlok/rNlGuz1EfpjGCUjzCOqbDkF7vdueS1TNqhoNHgqj868DTwa XKE5FZUqeKdQlg7OeeNagw5WK8PwLO/Ug/SUTeaETkd6G2vxxuIEAXi9s4vXzySy ju9YJRnLa4ayg/UqEOgRrx6oM35sHyJdJhNVa6agd/vwnqIh1YW97WB4hQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFK6IaD2ux+XkTpxAr580pjUnHDyOMB8GA1UdIwQY MBaAFEw8Zl5RzEy1yvBbgpSEPiczoT3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUt MWE2NWI5MWJlZTU4LzEvcm9ob1BhN0g1ZVJPbkVDdm56U21OU2NjUEk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS82YjY2YjQtMDY0Yy00MmVlLWE1ZWUtMWE2NWI5MWJlZTU4 LzEvVER4bVhsSE1UTFhLOEZ1Q2xJUS1Kek9oUGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQALYeDAwQA W9UxMAwDBAVeg+ADBAFeg+wDBABeg+8DBAC5v9QwDQYJKoZIhvcNAQELBQADggEB AGJ9Vv4wIN2TRmh/uWdmtEA+UgjJDefHDcKPLbUJWgiKYF1zUSfwvi0ZCORCukPR Xbo07keKEggUa3mzjl994pYAvxQtSLLkgbLOzYCoMDfuH1NBO6uU7pBqhzkJ2x/+ flNNeOTsoOzagIXJzKfBJVfYvY3OwwF8QoOlenI7Zg4rWWRjS75I09vYR8m768xJ OoZtwsytbLgGetF2MXk84xQcs/rYTmS6mnsRVAmEVby/n9MivEVI0QemAtCcs8Sy P0VLNAPXTps9eovQWb51xAGmXMyybSzN6Hglu5mNXcrcb/1GaIsubuZcJAeeAGjL DF3dMKJsMilXV2mG8DmP+6Q= -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:13 2026 by rpki-client