This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/OhHUjIkXJ9Mzuhhbq9-fGdzQJTI.roa File: OhHUjIkXJ9Mzuhhbq9-fGdzQJTI.roa (raw, json) Hash identifier: FkFV1WoqQUyvgQSkNjl4jq6kNT2oECSe2YdODwHHUhY= Subject key identifier: 3A:11:D4:8C:89:17:27:D3:33:BA:18:5B:AB:DF:9F:19:DC:D0:25:32 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1349976BE5389F5FBED485BD9227F8 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/OhHUjIkXJ9Mzuhhbq9-fGdzQJTI.roa Signing time: Fri 02 Jan 2026 00:19:57 +0000 ROA not before: Fri 02 Jan 2026 00:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273301 IP address blocks: 89.42.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:49:97:6b:e5:38:9f:5f:be:d4:85:bd:92:27:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a11d48c891727d333ba185babdf9f19dcd02532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5d:0d:0d:ab:10:b8:34:27:7d:f8:e0:7d:95: 75:8d:95:4a:2f:ca:c2:b5:79:8c:54:84:b3:09:db: 2c:6b:76:de:27:a2:14:81:15:bf:b0:63:76:be:41: aa:93:b8:e1:d8:1d:69:e5:f6:ed:47:80:7c:04:26: b5:5c:79:6b:2d:71:96:4c:54:24:31:ee:84:38:d0: 10:a4:56:83:7b:64:d2:66:ac:04:97:f5:4e:5a:2d: 5b:98:8a:f0:13:e0:66:d9:55:1c:4f:bb:1f:6e:8c: e2:fd:c9:1a:85:5e:24:bb:a4:f0:7f:15:b0:9a:9e: 8c:68:ff:b8:35:a8:a9:fe:b2:10:49:cd:90:ab:62: b5:a8:c1:c7:aa:dc:16:bc:01:c2:1f:57:0a:b8:0a: c6:7f:15:4a:f5:8f:20:14:9c:cc:b1:05:31:e4:06: f1:89:fa:84:b7:79:33:4d:4a:5c:f1:31:59:ee:09: f8:17:2d:6b:7b:d5:6d:e5:9e:db:b6:d3:d2:6f:34: 8b:ad:1a:7f:a3:1a:38:93:89:cc:0b:ee:16:e1:1d: c8:3f:e4:0a:56:d9:76:8a:ce:a1:e0:80:e9:7f:d1: 3a:b0:63:3f:d9:c0:6e:e3:16:61:0d:dd:ab:ca:19: eb:7b:0b:7a:57:1b:3f:02:b4:a4:69:e8:13:3c:99: 30:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:11:D4:8C:89:17:27:D3:33:BA:18:5B:AB:DF:9F:19:DC:D0:25:32 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/OhHUjIkXJ9Mzuhhbq9-fGdzQJTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.113.0/24 Signature Algorithm: sha256WithRSAEncryption 46:0e:09:84:fc:55:4f:26:bb:2f:ed:a7:0a:99:28:af:38:d1: 0c:e6:1c:88:2f:62:33:71:c3:76:aa:bc:7a:e9:e5:6f:9f:1b: a2:93:c5:2e:ee:15:19:5e:11:d9:24:f9:c5:32:b4:ad:2c:dc: 1c:ab:eb:92:1f:e7:54:8d:ac:27:1f:46:70:82:e2:67:96:b7: 60:c3:7e:5f:54:98:af:28:2a:13:e7:84:9c:5c:2d:07:9a:e1: b6:96:1b:09:01:b5:f3:b5:e1:06:7c:19:90:c9:3d:a0:da:72: 63:7b:8a:dd:b4:0c:ad:a7:5f:85:b8:29:99:b8:5b:9f:af:98: 37:5b:81:6c:da:80:e7:f9:52:fa:f8:67:4c:8b:c1:cb:9f:50: 0a:d5:5d:10:33:c5:17:bd:52:6b:8a:71:ad:21:7b:12:e7:ee: 53:6d:a4:df:97:f4:95:c7:6f:0f:68:c7:0c:3e:41:7a:07:82: 0a:78:4d:32:1d:52:8c:b4:ef:11:56:24:16:00:93:5f:8d:b8: a0:55:4c:10:47:c0:29:0e:85:dd:1a:b7:32:29:b0:e5:c8:02: bf:67:e9:19:e4:f0:6b:ac:3e:4d:10:60:10:98:59:ba:dd:b4: 1d:6d:c2:17:38:0a:dd:14:35:23:b8:2c:83:be:c2:a5:d4:ea: b4:50:df:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0mXa+U4n1++1IW9kif4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTExZDQ4Yzg5MTcyN2QzMzNiYTE4NWJhYmRmOWYxOWRjZDAyNTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F0NDasQuDQnffjgfZV1jZVKL8rC tXmMVISzCdssa3beJ6IUgRW/sGN2vkGqk7jh2B1p5fbtR4B8BCa1XHlrLXGWTFQk Me6EONAQpFaDe2TSZqwEl/VOWi1bmIrwE+Bm2VUcT7sfbozi/ckahV4ku6TwfxWw mp6MaP+4Naip/rIQSc2Qq2K1qMHHqtwWvAHCH1cKuArGfxVK9Y8gFJzMsQUx5Abx ifqEt3kzTUpc8TFZ7gn4Fy1re9Vt5Z7bttPSbzSLrRp/oxo4k4nMC+4W4R3IP+QK Vtl2is6h4IDpf9E6sGM/2cBu4xZhDd2ryhnrewt6Vxs/ArSkaegTPJkwgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDoR1IyJFyfTM7oYW6vfnxnc0CUyMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvT2hIVWpJa1hKOU16dWhoYnE5LWZHZHpRSlRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSpxMA0G CSqGSIb3DQEBCwUAA4IBAQBGDgmE/FVPJrsv7acKmSivONEM5hyIL2IzccN2qrx6 6eVvnxuik8Uu7hUZXhHZJPnFMrStLNwcq+uSH+dUjawnH0ZwguJnlrdgw35fVJiv KCoT54ScXC0HmuG2lhsJAbXzteEGfBmQyT2g2nJje4rdtAytp1+FuCmZuFufr5g3 W4Fs2oDn+VL6+GdMi8HLn1AK1V0QM8UXvVJrinGtIXsS5+5TbaTfl/SVx28PaMcM PkF6B4IKeE0yHVKMtO8RViQWAJNfjbigVUwQR8ApDoXdGrcyKbDlyAK/Z+kZ5PBr rD5NEGAQmFm63bQdbcIXOArdFDUjuCyDvsKl1Oq0UN/X -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:37 2026 by rpki-client