This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/oph9L7tpSPraSSHMUNSUUs7Z0mY.roa File: oph9L7tpSPraSSHMUNSUUs7Z0mY.roa (raw, json) Hash identifier: R5tBSkoJyz/MYZ9TPqFABtYqxYHhHi1mRxsNEGxKEp4= Subject key identifier: A2:98:7D:2F:BB:69:48:FA:DA:49:21:CC:50:D4:94:52:CE:D9:D2:66 Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00 Certificate serial: 019B7B36B72B5A7FC6ABE066F8DF4795D9B3 Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/oph9L7tpSPraSSHMUNSUUs7Z0mY.roa Signing time: Thu 01 Jan 2026 20:19:01 +0000 ROA not before: Thu 01 Jan 2026 20:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208456 IP address blocks: 45.95.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b7:2b:5a:7f:c6:ab:e0:66:f8:df:47:95:d9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00 Validity Not Before: Jan 1 20:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2987d2fbb6948fada4921cc50d49452ced9d266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8a:97:f5:e5:c8:c6:ef:e9:92:93:05:27:10: f3:cb:1c:5d:74:4c:d0:9f:98:b0:c5:80:b3:7c:4d: de:57:a0:23:3a:b4:53:98:75:c9:44:26:50:33:8b: 6f:e3:87:e3:c4:a8:26:6e:24:c9:ff:2e:17:82:d0: d6:7e:8a:eb:66:89:31:82:f4:18:03:6d:2c:af:c3: c1:b8:4b:61:0d:2c:49:d7:6e:cd:f3:5a:d2:a1:44: 5a:fe:49:b0:30:79:2b:6e:3e:e3:0c:1a:c3:22:74: 11:d5:9d:b7:b8:37:90:38:ab:e8:80:a4:3c:92:1f: 53:a2:57:f7:37:12:dc:a1:81:5c:57:34:6f:7a:89: d5:c2:39:33:d3:9f:1f:8b:f0:de:c4:fe:76:c4:b2: c4:5b:89:0d:8c:33:59:0f:02:58:f4:be:f0:95:77: 5f:14:9e:6d:a8:46:bb:e7:a0:47:af:fc:55:0d:84: d1:38:73:d7:fa:2d:65:55:1c:53:16:18:4d:67:1b: 39:b1:f5:6e:bb:a2:99:c5:c9:0e:7e:72:cb:24:bc: cc:36:e3:f0:83:dd:4c:a9:54:52:bc:3d:10:a8:6e: e0:c3:33:bf:31:bc:04:7d:a1:50:2d:c8:63:03:5c: 3a:29:7b:5e:4f:42:83:6e:ae:b6:a9:1d:02:81:d9: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:98:7D:2F:BB:69:48:FA:DA:49:21:CC:50:D4:94:52:CE:D9:D2:66 X509v3 Authority Key Identifier: keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/oph9L7tpSPraSSHMUNSUUs7Z0mY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.56.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:e7:c0:15:de:e6:51:2f:84:8e:aa:cc:ec:58:3f:e9:b2:3e: 0c:05:c0:e5:12:f5:c8:a8:69:ce:eb:f5:c2:01:bd:4d:1a:b6: 7e:3a:0c:6d:5c:f5:78:10:b3:ec:d6:a6:a2:f5:f0:95:18:af: af:b4:cf:ea:5a:23:c8:a3:0b:af:f7:59:91:54:31:86:53:4b: 1e:13:15:0f:e7:44:bb:be:ab:e2:5e:90:b4:2e:ba:2d:56:5b: c0:5c:38:b8:ab:36:c7:0f:b3:40:91:f7:d2:b5:60:48:60:5f: 31:76:a3:3d:05:1c:e1:32:0e:f8:a5:34:90:3f:81:9f:7c:3d: 5b:7d:85:b8:36:35:e9:3d:82:97:eb:d4:f5:1c:74:ac:47:de: f4:5f:98:ad:11:b0:f4:65:e6:3c:5b:e9:56:54:2d:85:7e:15: 39:2d:7a:fd:78:3d:0b:9e:11:20:b1:01:8d:c0:75:d7:51:66: d2:3d:47:61:28:d8:79:4f:77:0f:60:8d:8a:cf:53:2e:12:07: cc:ea:a9:20:bb:61:93:42:78:18:19:61:c2:c3:9d:34:5e:fc: b4:47:b8:27:15:04:ae:dd:95:8f:43:cc:24:6a:3a:47:16:94: e9:5e:58:8e:68:63:65:84:84:4d:82:74:a1:37:0e:61:ce:1f: 44:4d:cf:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NrcrWn/Gq+Bm+N9HldmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNDRlYjA5MWIzYTMzYTg3YmViOGUwMDRhYjE1ZWYxNzhm YmFhMDAwHhcNMjYwMTAxMjAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjk4N2QyZmJiNjk0OGZhZGE0OTIxY2M1MGQ0OTQ1MmNlZDlkMjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroqX9eXIxu/pkpMFJxDzyxxddEzQ n5iwxYCzfE3eV6AjOrRTmHXJRCZQM4tv44fjxKgmbiTJ/y4XgtDWforrZokxgvQY A20sr8PBuEthDSxJ127N81rSoURa/kmwMHkrbj7jDBrDInQR1Z23uDeQOKvogKQ8 kh9Tolf3NxLcoYFcVzRveonVwjkz058fi/DexP52xLLEW4kNjDNZDwJY9L7wlXdf FJ5tqEa756BHr/xVDYTROHPX+i1lVRxTFhhNZxs5sfVuu6KZxckOfnLLJLzMNuPw g91MqVRSvD0QqG7gwzO/MbwEfaFQLchjA1w6KXteT0KDbq62qR0CgdkQ0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKKYfS+7aUj62kkhzFDUlFLO2dJmMB8GA1UdIwQY MBaAFKpE6wkbOjOoe+uOAEqxXvF4+6oAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjkt NzcwMGUyNWZmNzY5LzEvb3BoOUw3dHBTUHJhU1NITVVOU1VVczdaMG1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjktNzcwMGUyNWZmNzY5 LzEvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLV84MA0G CSqGSIb3DQEBCwUAA4IBAQAf58AV3uZRL4SOqszsWD/psj4MBcDlEvXIqGnO6/XC Ab1NGrZ+OgxtXPV4ELPs1qai9fCVGK+vtM/qWiPIowuv91mRVDGGU0seExUP50S7 vqviXpC0LrotVlvAXDi4qzbHD7NAkffStWBIYF8xdqM9BRzhMg74pTSQP4GffD1b fYW4NjXpPYKX69T1HHSsR970X5itEbD0ZeY8W+lWVC2FfhU5LXr9eD0LnhEgsQGN wHXXUWbSPUdhKNh5T3cPYI2Kz1MuEgfM6qkgu2GTQngYGWHCw500Xvy0R7gnFQSu 3ZWPQ8wkajpHFpTpXliOaGNlhIRNgnShNw5hzh9ETc8D -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:20 2026 by rpki-client