This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/oNhBE7cWesJejfu6VNBpQvuJ7Pc.roa File: oNhBE7cWesJejfu6VNBpQvuJ7Pc.roa (raw, json) Hash identifier: eksGpiRZY4AMJcm0oeZ2OjL6HKGtTKXD/3FT0xK8N48= Subject key identifier: A0:D8:41:13:B7:16:7A:C2:5E:8D:FB:BA:54:D0:69:42:FB:89:EC:F7 Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Certificate serial: 019B78A2160450259798D28B56FD1ED069A5 Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/oNhBE7cWesJejfu6VNBpQvuJ7Pc.roa Signing time: Thu 01 Jan 2026 08:17:26 +0000 ROA not before: Thu 01 Jan 2026 08:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 146.255.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 03:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:16:04:50:25:97:98:d2:8b:56:fd:1e:d0:69:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Validity Not Before: Jan 1 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0d84113b7167ac25e8dfbba54d06942fb89ecf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:01:f6:4e:72:f2:fa:d1:f5:bd:79:9a:e0:cb: b7:69:a3:d5:b3:e8:79:3d:f8:6f:fd:a6:f5:91:6e: b6:2c:bd:77:c2:97:b9:53:c1:4c:1d:2b:03:b2:a0: 8b:89:92:22:b7:06:61:ae:f7:0e:79:26:0a:70:04: 16:00:e1:46:f1:8d:0b:fa:45:d8:12:49:f6:91:3f: f9:68:a2:55:f4:8a:39:76:49:9e:ea:4a:e1:7f:14: 57:2d:35:bd:66:f1:52:a3:66:1a:6d:bc:15:54:40: 06:bc:d9:f0:6b:4a:38:0e:69:98:37:78:89:fd:5e: 28:ea:58:a4:61:90:e8:c5:48:b4:5d:d0:39:6f:a2: ab:09:17:e5:85:71:5b:f3:b9:ac:af:f9:f1:30:d0: 80:f4:53:05:da:94:69:fd:1a:95:a2:cf:7f:73:74: 84:76:81:42:bd:5f:a2:0b:1e:bd:28:f7:36:b5:27: 02:26:f2:cc:0f:f6:a8:29:ea:85:4c:dc:ab:5a:bf: 02:5b:45:91:58:ec:34:a3:28:40:27:12:6d:a9:28: 73:f7:78:c9:e8:63:72:7b:00:fd:e8:7d:b5:64:8d: f8:ce:02:25:3c:23:ca:f7:03:07:83:46:62:72:15: 34:24:9e:8b:d0:02:7f:d5:ff:32:5d:35:84:64:fc: c5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D8:41:13:B7:16:7A:C2:5E:8D:FB:BA:54:D0:69:42:FB:89:EC:F7 X509v3 Authority Key Identifier: keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/oNhBE7cWesJejfu6VNBpQvuJ7Pc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.255.189.0/24 Signature Algorithm: sha256WithRSAEncryption 75:51:31:27:dd:b8:d3:ba:f1:ab:4a:d6:48:30:d5:82:1e:a0: 86:ba:6d:37:17:86:71:35:b4:65:50:ad:fa:79:72:dd:2a:7f: 3a:f5:cb:df:2d:79:13:23:33:20:89:64:4a:c1:df:04:20:80: 8f:8f:30:6e:f8:15:55:4e:e2:1e:b3:85:cc:a9:e5:3f:0d:ba: 23:a6:eb:63:f0:96:fa:16:57:3b:92:e8:fd:5a:ae:55:ea:09: dd:e9:79:7b:79:ea:2f:d1:26:15:b0:cc:bf:91:d4:db:f7:c4: bb:f3:3e:9e:2d:06:3a:36:aa:b3:ef:c8:d8:ed:5d:2c:cb:be: c0:d6:08:d7:bf:0b:28:07:a5:0c:3f:07:41:90:21:8b:d1:2e: d3:88:ec:65:38:25:ac:08:a2:ef:e5:30:51:e7:50:46:bc:f5: 16:ca:aa:14:32:32:0a:5d:ec:fc:1d:ef:58:22:24:30:d6:59: 3d:82:c5:30:f9:41:15:65:a8:11:c7:35:7f:43:37:5a:77:36: 17:b9:bd:be:e6:4e:fc:19:e7:b6:07:d1:e6:e0:ab:34:d8:67: 8a:87:20:79:48:36:da:6a:5c:8f:17:8e:2b:38:16:a7:0e:c5: e6:81:dd:67:32:5e:6d:7e:27:0a:ad:e2:2f:36:a2:4b:f4:aa: a9:09:e0:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ohYEUCWXmNKLVv0e0GmlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy NjhmNTQwHhcNMjYwMTAxMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGQ4NDExM2I3MTY3YWMyNWU4ZGZiYmE1NGQwNjk0MmZiODllY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgH2TnLy+tH1vXma4Mu3aaPVs+h5 Pfhv/ab1kW62LL13wpe5U8FMHSsDsqCLiZIitwZhrvcOeSYKcAQWAOFG8Y0L+kXY Ekn2kT/5aKJV9Io5dkme6krhfxRXLTW9ZvFSo2YabbwVVEAGvNnwa0o4DmmYN3iJ /V4o6likYZDoxUi0XdA5b6KrCRflhXFb87msr/nxMNCA9FMF2pRp/RqVos9/c3SE doFCvV+iCx69KPc2tScCJvLMD/aoKeqFTNyrWr8CW0WRWOw0oyhAJxJtqShz93jJ 6GNyewD96H21ZI34zgIlPCPK9wMHg0ZichU0JJ6L0AJ/1f8yXTWEZPzFLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKDYQRO3FnrCXo37ulTQaUL7iez3MB8GA1UdIwQY MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt N2FhN2ZjMzU5NjU1LzEvb05oQkU3Y1dlc0plamZ1NlZOQnBRdnVKN1BjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1 LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkv+9MA0G CSqGSIb3DQEBCwUAA4IBAQB1UTEn3bjTuvGrStZIMNWCHqCGum03F4ZxNbRlUK36 eXLdKn869cvfLXkTIzMgiWRKwd8EIICPjzBu+BVVTuIes4XMqeU/Dbojputj8Jb6 Flc7kuj9Wq5V6gnd6Xl7eeov0SYVsMy/kdTb98S78z6eLQY6Nqqz78jY7V0sy77A 1gjXvwsoB6UMPwdBkCGL0S7TiOxlOCWsCKLv5TBR51BGvPUWyqoUMjIKXez8He9Y IiQw1lk9gsUw+UEVZagRxzV/QzdadzYXub2+5k78Gee2B9Hm4Ks02GeKhyB5SDba alyPF44rOBanDsXmgd1nMl5tficKreIvNqJL9KqpCeBp -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:32 2026 by rpki-client