This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ohDwkO_GIDmC_8UnbdNX15vBG8s.roa File: ohDwkO_GIDmC_8UnbdNX15vBG8s.roa (raw, json) Hash identifier: 0dEPfU27EHGFJ/4s8Ot7QYcM7w0nt3C/u0dz8AYLY8k= Subject key identifier: A2:10:F0:90:EF:C6:20:39:82:FF:C5:27:6D:D3:57:D7:9B:C1:1B:CB Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB6A7C19E47805E05818D19F2B2135 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ohDwkO_GIDmC_8UnbdNX15vBG8s.roa Signing time: Fri 02 Jan 2026 08:20:41 +0000 ROA not before: Fri 02 Jan 2026 08:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50969 IP address blocks: 195.211.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:6a:7c:19:e4:78:05:e0:58:18:d1:9f:2b:21:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a210f090efc6203982ffc5276dd357d79bc11bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5b:fb:85:13:53:2f:5a:5c:65:d2:f7:4c:7a: 6f:5b:fa:6e:48:02:60:56:e0:fc:48:0b:18:d7:d7: 53:83:87:68:c9:0b:30:54:55:6c:44:a9:0a:b1:c3: 19:ab:0e:61:c3:aa:23:80:b8:a5:26:c6:0a:00:bc: 5e:c5:27:8d:3a:7f:94:3f:84:78:18:55:40:49:54: bb:00:c0:61:2f:9f:7d:6b:a8:0c:8c:d1:26:07:1b: 00:17:1d:50:39:65:9e:fb:68:18:24:fd:eb:5e:3e: 8e:06:ab:4b:41:25:dd:a6:39:ab:48:c6:80:54:06: 37:8a:a0:3f:e5:63:c7:77:ee:32:83:79:a5:89:d7: f8:66:c8:5f:60:3e:a8:39:5f:cb:eb:df:97:4d:3a: d5:1a:d2:a6:75:0a:6c:36:23:f1:cb:7d:60:d5:59: ee:26:14:d2:6b:35:bb:4d:e4:47:35:14:0d:a4:c3: b4:d6:d6:06:3f:b0:0e:45:a4:1e:13:a5:fd:46:2f: ff:55:23:ac:2a:d4:ba:3f:33:5f:d6:1f:56:d6:8e: b1:31:da:2f:a5:25:b0:8c:68:32:f2:bb:6c:7a:25: b6:b3:cd:b6:6b:48:a0:45:e2:29:4b:c9:e4:54:16: f3:55:00:4f:67:d9:88:d5:49:88:8d:a1:0c:55:19: c0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:10:F0:90:EF:C6:20:39:82:FF:C5:27:6D:D3:57:D7:9B:C1:1B:CB X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ohDwkO_GIDmC_8UnbdNX15vBG8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.211.166.0/24 Signature Algorithm: sha256WithRSAEncryption 93:e6:de:35:b6:7f:8e:31:73:80:e4:b1:20:c6:66:8d:67:ec: e7:0c:1d:44:64:23:a0:5b:63:5c:d4:be:8b:38:5e:b7:56:42: d1:01:dc:36:f3:93:7e:b3:d1:53:6e:82:74:d6:b2:61:a6:a9: a9:af:0a:e4:40:9d:9e:ea:31:5c:aa:ae:03:9c:b4:25:14:80: 40:25:dc:6e:0e:32:e6:66:b3:8f:cb:a2:76:20:7d:67:0f:f0: 91:6c:b4:87:31:55:5a:2d:84:f8:11:27:c1:04:7a:66:0d:96: f6:ed:e6:97:e0:34:77:71:7d:5b:ac:12:91:f4:58:f6:ac:67: f1:72:aa:6e:df:34:20:3b:2b:b9:8e:df:26:74:40:3c:24:4a: f4:26:37:aa:65:25:03:b9:59:59:53:6e:af:5f:19:4e:66:d3: a7:c6:ec:8d:7b:dd:1c:17:71:26:cb:ac:90:26:35:87:3d:3b: b9:99:4d:2a:72:8d:a9:31:04:98:3f:59:f8:80:96:d5:66:a0: 6c:09:b8:42:01:ee:d5:0e:4d:d1:70:44:33:dc:3a:b0:56:81: 1b:ab:f8:9f:84:37:41:42:6a:4e:2a:e1:73:4f:15:4c:0d:99: 68:15:d3:b9:1c:28:92:a0:50:8a:cd:9e:d6:19:85:04:74:75: 4f:39:e6:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2p8GeR4BeBYGNGfKyE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjEwZjA5MGVmYzYyMDM5ODJmZmM1Mjc2ZGQzNTdkNzliYzExYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFv7hRNTL1pcZdL3THpvW/puSAJg VuD8SAsY19dTg4doyQswVFVsRKkKscMZqw5hw6ojgLilJsYKALxexSeNOn+UP4R4 GFVASVS7AMBhL599a6gMjNEmBxsAFx1QOWWe+2gYJP3rXj6OBqtLQSXdpjmrSMaA VAY3iqA/5WPHd+4yg3mlidf4ZshfYD6oOV/L69+XTTrVGtKmdQpsNiPxy31g1Vnu JhTSazW7TeRHNRQNpMO01tYGP7AORaQeE6X9Ri//VSOsKtS6PzNf1h9W1o6xMdov pSWwjGgy8rtseiW2s822a0igReIpS8nkVBbzVQBPZ9mI1UmIjaEMVRnAvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKIQ8JDvxiA5gv/FJ23TV9ebwRvLMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvb2hEd2tPX0dJRG1DXzhVbmJkTlgxNXZCRzhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9OmMA0G CSqGSIb3DQEBCwUAA4IBAQCT5t41tn+OMXOA5LEgxmaNZ+znDB1EZCOgW2Nc1L6L OF63VkLRAdw285N+s9FTboJ01rJhpqmprwrkQJ2e6jFcqq4DnLQlFIBAJdxuDjLm ZrOPy6J2IH1nD/CRbLSHMVVaLYT4ESfBBHpmDZb27eaX4DR3cX1brBKR9Fj2rGfx cqpu3zQgOyu5jt8mdEA8JEr0JjeqZSUDuVlZU26vXxlOZtOnxuyNe90cF3Emy6yQ JjWHPTu5mU0qco2pMQSYP1n4gJbVZqBsCbhCAe7VDk3RcEQz3DqwVoEbq/ifhDdB QmpOKuFzTxVMDZloFdO5HCiSoFCKzZ7WGYUEdHVPOeaD -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:21 2026 by rpki-client