This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/ohXc6oE7ElG-Ajtu7o45-cHtKak.roa File: ohXc6oE7ElG-Ajtu7o45-cHtKak.roa (raw, json) Hash identifier: g5o8dbjGn0yFQ7IxAtC49wzuYTWKouvuonHavYlfl2k= Subject key identifier: A2:15:DC:EA:81:3B:12:51:BE:02:3B:6E:EE:8E:39:F9:C1:ED:29:A9 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019B7F842DA6C23A1041ACFA449FB1F08055 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/ohXc6oE7ElG-Ajtu7o45-cHtKak.roa Signing time: Fri 02 Jan 2026 16:22:07 +0000 ROA not before: Fri 02 Jan 2026 16:22:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200993 IP address blocks: 178.250.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:2d:a6:c2:3a:10:41:ac:fa:44:9f:b1:f0:80:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Jan 2 16:22:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a215dcea813b1251be023b6eee8e39f9c1ed29a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:c2:e6:74:26:9c:51:39:f2:6d:a9:ea:48: 5c:ff:36:83:4f:40:ca:93:7e:b8:a7:05:6c:e1:04: 65:e1:d0:a6:f8:2f:db:ab:50:4e:29:ff:0c:c8:19: ba:21:82:7b:5b:58:e9:50:de:1b:30:df:ce:9a:8e: f6:ee:0d:d4:86:e1:cd:ef:a4:0b:c3:f5:cb:98:41: d1:40:12:3b:17:4e:43:5e:78:ac:44:bb:ef:9b:97: 78:a5:d3:33:15:d1:52:5a:64:9f:3d:30:48:ef:04: 8d:b9:44:24:b3:96:66:62:7b:6b:1f:d3:be:1a:eb: e1:84:0b:dd:c2:01:d2:cf:42:2c:a9:3c:bc:51:67: 92:4c:30:5a:46:81:0c:07:99:28:75:17:2b:3d:fc: fb:01:a7:84:39:df:e2:6f:dd:05:55:6e:0d:9b:55: 1a:3c:e8:cb:1c:60:57:40:2d:6e:97:a0:f6:47:cb: 8f:e8:de:f7:5c:5b:c0:79:c2:ed:79:54:7e:d3:14: 80:d0:0c:c2:88:c6:f0:ec:85:f1:e4:4d:7b:94:cc: 71:73:25:69:12:58:7f:16:d7:ef:d8:15:7f:41:10: 63:3c:05:34:e3:a8:54:65:36:3d:b5:ee:0d:b2:1e: 67:88:ec:46:bb:bd:36:9f:c3:4a:ad:0f:88:ea:6e: f8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:15:DC:EA:81:3B:12:51:BE:02:3B:6E:EE:8E:39:F9:C1:ED:29:A9 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/ohXc6oE7ElG-Ajtu7o45-cHtKak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.250.187.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:24:47:0a:5c:11:6d:8f:f0:e1:27:4d:17:a5:aa:ee:4f:0e: cf:de:08:31:e9:7d:b8:9e:6f:77:6a:e4:58:2c:40:72:fe:fd: 41:23:f0:bb:fe:66:e1:ce:31:5b:45:84:1a:7c:0c:8b:3b:b2: a2:1e:2a:be:17:f1:38:d9:73:da:c0:22:84:5c:10:aa:8d:e5: ee:c0:e7:e1:24:dd:d0:d8:0b:42:ba:72:5d:c1:1d:fb:b2:ec: 49:cd:b5:ae:b5:af:97:95:d1:89:20:1b:d3:95:7a:16:3d:6f: fb:6e:dd:db:56:13:56:af:73:97:f7:94:0b:61:f6:0e:7e:22: 94:89:e1:8a:39:2e:8b:95:01:0a:d5:40:49:bf:d7:b8:b3:e5: 4e:be:03:ac:a7:7b:3b:e1:2c:3c:52:5a:79:a9:7a:8e:98:24: 18:0d:b3:db:74:9e:9d:06:62:98:40:dd:1d:64:02:a2:38:a7: 6f:c1:0b:c0:a3:46:83:1c:45:18:e8:b8:b8:6b:04:3b:d1:37: e7:de:16:03:7d:64:55:96:f9:45:bc:b0:cf:ef:85:fb:85:a0: 69:f0:51:04:d2:25:01:1e:1e:fb:e6:e0:68:18:cb:02:d7:9f: 28:27:8c:39:72:5c:6c:f4:17:52:e5:23:ba:11:ef:e8:da:e3: c2:98:9a:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hC2mwjoQQaz6RJ+x8IBVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjYwMTAyMTYyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjE1ZGNlYTgxM2IxMjUxYmUwMjNiNmVlZThlMzlmOWMxZWQyOWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTXC5nQmnFE58m2p6khc/zaDT0DK k364pwVs4QRl4dCm+C/bq1BOKf8MyBm6IYJ7W1jpUN4bMN/Omo727g3UhuHN76QL w/XLmEHRQBI7F05DXnisRLvvm5d4pdMzFdFSWmSfPTBI7wSNuUQks5ZmYntrH9O+ GuvhhAvdwgHSz0IsqTy8UWeSTDBaRoEMB5kodRcrPfz7AaeEOd/ib90FVW4Nm1Ua POjLHGBXQC1ul6D2R8uP6N73XFvAecLteVR+0xSA0AzCiMbw7IXx5E17lMxxcyVp Elh/Ftfv2BV/QRBjPAU046hUZTY9te4Nsh5niOxGu702n8NKrQ+I6m74kwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKIV3OqBOxJRvgI7bu6OOfnB7SmpMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvb2hYYzZvRTdFbEctQWp0dTdvNDUtY0h0S2FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsvq7MA0G CSqGSIb3DQEBCwUAA4IBAQB+JEcKXBFtj/DhJ00XparuTw7P3ggx6X24nm93auRY LEBy/v1BI/C7/mbhzjFbRYQafAyLO7KiHiq+F/E42XPawCKEXBCqjeXuwOfhJN3Q 2AtCunJdwR37suxJzbWuta+XldGJIBvTlXoWPW/7bt3bVhNWr3OX95QLYfYOfiKU ieGKOS6LlQEK1UBJv9e4s+VOvgOsp3s74Sw8Ulp5qXqOmCQYDbPbdJ6dBmKYQN0d ZAKiOKdvwQvAo0aDHEUY6Li4awQ70Tfn3hYDfWRVlvlFvLDP74X7haBp8FEE0iUB Hh775uBoGMsC158oJ4w5clxs9BdS5SO6Ee/o2uPCmJqO -----END CERTIFICATE-----Generated at Sun Jan 25 21:15:16 2026 by rpki-client