This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/D-OhIFYDtU_Cd-e4wB1EEbfz2ZY.roa File: D-OhIFYDtU_Cd-e4wB1EEbfz2ZY.roa (raw, json) Hash identifier: NEAvke3XuRiHlogwVc4RcyWVQUznukeff4gqiKDQn+U= Subject key identifier: 0F:E3:A1:20:56:03:B5:4F:C2:77:E7:B8:C0:1D:44:11:B7:F3:D9:96 Certificate issuer: /CN=414915cdd322bfe39472536955464a5ff67117c3 Certificate serial: 019B7E38769E011EFFFE5D68FEBC18D70F21 Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/D-OhIFYDtU_Cd-e4wB1EEbfz2ZY.roa Signing time: Fri 02 Jan 2026 10:19:48 +0000 ROA not before: Fri 02 Jan 2026 10:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9044 IP address blocks: 195.137.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:76:9e:01:1e:ff:fe:5d:68:fe:bc:18:d7:0f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3 Validity Not Before: Jan 2 10:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fe3a1205603b54fc277e7b8c01d4411b7f3d996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:0e:a5:8b:44:d5:22:ac:12:78:0f:77:b6: d1:98:68:cc:26:84:7e:23:9e:67:ee:95:53:cb:20: 0e:f7:50:d2:7a:2e:6e:8a:24:6f:cf:64:7b:67:68: 3e:12:43:04:b6:17:1e:93:28:70:bd:ac:7b:e6:2c: d2:04:9d:0b:ad:43:56:dc:4f:ba:76:c6:88:26:e4: ce:a9:e3:47:71:ea:7b:f9:f4:33:d1:ec:6a:1e:a0: 10:81:84:7e:db:b8:e1:3a:a1:77:f7:b8:93:b2:77: ec:c4:f1:e0:ca:ab:0d:bc:3d:6e:d5:75:11:0d:90: 7d:4d:bd:5c:ce:93:57:f4:09:26:44:b4:bf:17:93: 74:66:cc:4f:7a:16:66:e4:21:c6:49:ee:92:44:15: bb:f4:b8:4c:b5:40:c8:84:33:c9:14:c8:b3:86:27: 61:2c:95:1a:ac:a6:ae:f2:69:f9:b7:63:9e:05:da: 10:b4:79:da:9e:20:76:40:9a:f4:59:2b:1d:19:2b: c9:cc:dc:34:a6:0f:85:16:8e:76:5f:23:45:c5:1d: 9f:af:a7:b1:76:91:26:8b:45:65:38:6d:eb:ed:e9: 37:de:7b:bc:f3:33:8a:36:d0:15:71:f1:91:ae:83: af:b3:3e:ed:2e:3b:85:eb:3f:98:a0:d5:d5:36:62: e1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E3:A1:20:56:03:B5:4F:C2:77:E7:B8:C0:1D:44:11:B7:F3:D9:96 X509v3 Authority Key Identifier: keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/D-OhIFYDtU_Cd-e4wB1EEbfz2ZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.137.175.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:4e:49:01:f5:4a:c4:12:93:e2:83:7d:5e:f5:b3:f8:a8:e3: 6e:8f:c5:b3:7b:37:fc:66:64:cf:6b:a4:eb:f2:d4:7d:a8:37: 0e:ea:60:fe:fd:57:c2:82:fd:cb:cb:24:cd:e9:1f:60:c4:77: 42:90:1e:5d:22:29:be:0d:3d:92:e4:af:f4:72:a8:01:a9:b5: 27:b1:3c:aa:95:d1:56:4f:6e:b0:e3:e7:df:8f:36:9f:b1:76: 53:9a:ab:92:97:5f:e5:7f:f7:bb:22:94:16:fe:5d:da:37:86: 6d:67:b7:03:57:6c:26:13:aa:31:97:66:f5:9d:da:54:c0:16: be:cb:d8:90:02:80:52:cf:34:d6:d0:a1:09:ce:19:62:06:20: 4b:5c:55:9b:2e:47:72:67:ec:b5:dd:12:73:0a:82:eb:fb:25: 04:bd:96:10:47:80:d6:b3:bc:b6:67:ca:f2:8a:e8:e8:f0:fc: d8:29:ec:75:f7:6b:46:f3:f8:fc:32:41:8f:50:57:56:4a:e4: ae:10:bd:d4:d1:60:f1:35:88:47:e2:56:9e:f4:36:f3:ff:fd: 6c:65:fe:b9:7b:45:5b:de:4d:9d:ff:eb:59:7d:9a:9b:50:86: 23:fc:1a:f3:dc:d1:a2:dc:b0:7a:af:4b:8b:50:9c:7a:c1:75: 3d:ef:a2:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHaeAR7//l1o/rwY1w8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNDkxNWNkZDMyMmJmZTM5NDcyNTM2OTU1NDY0YTVmZjY3 MTE3YzMwHhcNMjYwMTAyMTAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmUzYTEyMDU2MDNiNTRmYzI3N2U3YjhjMDFkNDQxMWI3ZjNkOTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukIOpYtE1SKsEngPd7bRmGjMJoR+ I55n7pVTyyAO91DSei5uiiRvz2R7Z2g+EkMEthcekyhwvax75izSBJ0LrUNW3E+6 dsaIJuTOqeNHcep7+fQz0exqHqAQgYR+27jhOqF397iTsnfsxPHgyqsNvD1u1XUR DZB9Tb1czpNX9AkmRLS/F5N0ZsxPehZm5CHGSe6SRBW79LhMtUDIhDPJFMizhidh LJUarKau8mn5t2OeBdoQtHnaniB2QJr0WSsdGSvJzNw0pg+FFo52XyNFxR2fr6ex dpEmi0VlOG3r7ek33nu88zOKNtAVcfGRroOvsz7tLjuF6z+YoNXVNmLhAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA/joSBWA7VPwnfnuMAdRBG389mWMB8GA1UdIwQY MBaAFEFJFc3TIr/jlHJTaVVGSl/2cRfDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVVrVnpkTWl2LU9VY2xOcFZVWktYX1p4RjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yODMyMzQtYTUyYS00NTU2LWIzY2It ZjFkNWNhOTZhN2Q2LzEvRC1PaElGWUR0VV9DZC1lNHdCMUVFYmZ6MlpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8yODMyMzQtYTUyYS00NTU2LWIzY2ItZjFkNWNhOTZhN2Q2 LzEvUVVrVnpkTWl2LU9VY2xOcFZVWktYX1p4RjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4mvMA0G CSqGSIb3DQEBCwUAA4IBAQAvTkkB9UrEEpPig31e9bP4qONuj8Wzezf8ZmTPa6Tr 8tR9qDcO6mD+/VfCgv3LyyTN6R9gxHdCkB5dIim+DT2S5K/0cqgBqbUnsTyqldFW T26w4+ffjzafsXZTmquSl1/lf/e7IpQW/l3aN4ZtZ7cDV2wmE6oxl2b1ndpUwBa+ y9iQAoBSzzTW0KEJzhliBiBLXFWbLkdyZ+y13RJzCoLr+yUEvZYQR4DWs7y2Z8ry iujo8PzYKex192tG8/j8MkGPUFdWSuSuEL3U0WDxNYhH4lae9Dbz//1sZf65e0Vb 3k2d/+tZfZqbUIYj/Brz3NGi3LB6r0uLUJx6wXU976IJ -----END CERTIFICATE-----Generated at Mon Jan 26 19:17:17 2026 by rpki-client