This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/OBjM2iKRMxSjqa98ychsixD6X5g.roa File: OBjM2iKRMxSjqa98ychsixD6X5g.roa (raw, json) Hash identifier: q2aIFop5k0Cp3GYeaHHvGFWE530UcdAx8s7zzr0tPgM= Subject key identifier: 38:18:CC:DA:22:91:33:14:A3:A9:AF:7C:C9:C8:6C:8B:10:FA:5F:98 Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20 Certificate serial: 019B7B365DDA728BF4F7D1D565E966F70903 Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/OBjM2iKRMxSjqa98ychsixD6X5g.roa Signing time: Thu 01 Jan 2026 20:18:39 +0000 ROA not before: Thu 01 Jan 2026 20:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42546 IP address blocks: 178.214.192.0/21 maxlen: 21 194.150.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5d:da:72:8b:f4:f7:d1:d5:65:e9:66:f7:09:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20 Validity Not Before: Jan 1 20:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3818ccda22913314a3a9af7cc9c86c8b10fa5f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:87:d8:ce:96:43:e3:4c:67:f6:51:29:a5:90: 21:18:6f:d3:cf:5e:8f:61:51:6e:32:26:9b:2f:59: fb:73:35:a1:fe:be:3f:ff:80:74:4d:6d:a9:c2:56: a0:ec:af:36:19:3c:b9:e3:c0:42:d9:5e:d6:c5:24: c0:1a:35:27:86:88:e9:54:73:c5:d5:db:97:59:08: 96:dc:ae:f1:b4:0d:65:07:cd:51:b4:29:b4:38:a9: 5c:f8:81:58:58:04:21:07:e6:00:5f:27:ac:19:3e: 29:0e:ec:78:ff:3c:6b:5a:3f:98:31:6d:3b:62:95: 64:59:95:a4:b3:5d:62:df:c7:f5:a4:91:0f:92:07: 26:e5:25:c7:20:6a:fb:3c:b9:aa:51:c1:3b:31:4e: 98:85:95:38:05:f2:e3:07:66:ca:e6:9d:63:39:b5: a4:52:1d:63:c1:06:e5:00:02:ea:ba:0c:cb:13:99: 65:c7:5f:91:2a:82:84:9a:f3:ab:5f:fd:6b:5b:0e: 9a:e4:5d:a8:ef:63:0d:1d:14:37:a0:5f:74:19:61: 40:03:a5:a1:41:81:f1:21:5c:4a:f5:4f:ef:be:1d: 83:c6:bb:7b:6e:40:3e:6b:0a:2d:fa:d5:79:37:d5: a7:bd:f1:45:53:9c:98:77:e8:68:7d:46:40:7c:1b: 7c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:18:CC:DA:22:91:33:14:A3:A9:AF:7C:C9:C8:6C:8B:10:FA:5F:98 X509v3 Authority Key Identifier: keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/OBjM2iKRMxSjqa98ychsixD6X5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.214.192.0/21 194.150.232.0/23 Signature Algorithm: sha256WithRSAEncryption 61:2c:a7:3b:5e:00:c2:88:98:ce:b2:ee:66:33:b6:b9:dd:01: e6:61:8d:76:e5:f3:91:a3:78:07:6a:2e:94:a7:02:3b:f6:22: ac:40:f8:bb:60:94:8b:d2:dd:74:92:25:d9:3b:44:29:e1:57: 40:56:37:d4:86:dc:a9:b3:30:26:72:89:0b:6e:40:43:c7:e2: b4:b5:97:f6:8e:65:d9:28:3c:68:e4:8f:d8:6e:b3:32:18:59: a0:99:d0:bc:bf:0a:75:ee:2f:3d:c9:bc:78:4d:e6:92:13:47: 43:3c:4a:36:e6:df:de:54:4c:3a:7a:e4:0d:a7:6a:4f:90:1c: 78:62:07:8d:4c:fe:0b:43:8d:52:31:a7:ae:b8:68:7e:2c:03: 9a:bd:62:05:d6:f8:a8:e5:57:57:45:16:f1:5c:a4:a5:1c:2e: f1:b8:31:54:77:91:4a:6f:65:b3:56:fb:8b:9e:2f:66:5b:c0: 46:e6:f8:0c:3b:7c:6f:91:39:20:af:39:1f:22:35:bb:85:6f: 25:03:04:8b:76:14:c1:88:1c:f9:58:5d:42:c9:e2:00:83:29: 1d:ef:0d:71:75:a6:19:97:34:cd:7d:d3:66:3e:aa:da:b4:dd: 1d:2a:37:b4:7e:bd:d9:ab:fa:1a:24:f3:92:c3:65:c8:00:db: a9:f9:6c:62 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Nl3acov099HVZelm9wkDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMDE3Zjg3ODQzMmIyZmUzMWY1ODE1M2I0NGE4MTY1OWQ1 MGJhMjAwHhcNMjYwMTAxMjAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODE4Y2NkYTIyOTEzMzE0YTNhOWFmN2NjOWM4NmM4YjEwZmE1Zjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4fYzpZD40xn9lEppZAhGG/Tz16P YVFuMiabL1n7czWh/r4//4B0TW2pwlag7K82GTy548BC2V7WxSTAGjUnhojpVHPF 1duXWQiW3K7xtA1lB81RtCm0OKlc+IFYWAQhB+YAXyesGT4pDux4/zxrWj+YMW07 YpVkWZWks11i38f1pJEPkgcm5SXHIGr7PLmqUcE7MU6YhZU4BfLjB2bK5p1jObWk Uh1jwQblAALqugzLE5llx1+RKoKEmvOrX/1rWw6a5F2o72MNHRQ3oF90GWFAA6Wh QYHxIVxK9U/vvh2Dxrt7bkA+awot+tV5N9WnvfFFU5yYd+hofUZAfBt8rQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDgYzNoikTMUo6mvfMnIbIsQ+l+YMB8GA1UdIwQY MBaAFP8Bf4eEMrL+MfWBU7RKgWWdULogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3dGX2g0UXlzdjR4OVlGVHRFcUJaWjFRdWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YTRmZmItMDI4OS00NjZjLWEyZjUt MzAyMDc3NzNmNzYwLzEvT0JqTTJpS1JNeFNqcWE5OHljaHNpeEQ2WDVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YTRmZmItMDI4OS00NjZjLWEyZjUtMzAyMDc3NzNmNzYw LzEvX3dGX2g0UXlzdjR4OVlGVHRFcUJaWjFRdWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDstbAAwQB wpboMA0GCSqGSIb3DQEBCwUAA4IBAQBhLKc7XgDCiJjOsu5mM7a53QHmYY125fOR o3gHai6UpwI79iKsQPi7YJSL0t10kiXZO0Qp4VdAVjfUhtypszAmcokLbkBDx+K0 tZf2jmXZKDxo5I/YbrMyGFmgmdC8vwp17i89ybx4TeaSE0dDPEo25t/eVEw6euQN p2pPkBx4YgeNTP4LQ41SMaeuuGh+LAOavWIF1vio5VdXRRbxXKSlHC7xuDFUd5FK b2WzVvuLni9mW8BG5vgMO3xvkTkgrzkfIjW7hW8lAwSLdhTBiBz5WF1CyeIAgykd 7w1xdaYZlzTNfdNmPqratN0dKje0fr3Zq/oaJPOSw2XIANup+Wxi -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:32 2026 by rpki-client