This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/ohLWgfGRLPEKw04h0DLfOIlNhog.roa File: ohLWgfGRLPEKw04h0DLfOIlNhog.roa (raw, json) Hash identifier: K98aaZcn2W9HA9Zia29dMsLJX/i+ewGU4FK1Pvj0Z10= Subject key identifier: A2:12:D6:81:F1:91:2C:F1:0A:C3:4E:21:D0:32:DF:38:89:4D:86:88 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019B77C72681D74B65472A1E28E249023A67 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/ohLWgfGRLPEKw04h0DLfOIlNhog.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26383 IP address blocks: 91.149.202.0/23 maxlen: 23 91.149.218.0/24 maxlen: 24 91.149.219.0/24 maxlen: 24 91.149.221.0/24 maxlen: 24 91.149.222.0/23 maxlen: 23 91.149.232.0/23 maxlen: 23 91.149.236.0/23 maxlen: 23 91.149.238.0/24 maxlen: 24 91.149.239.0/24 maxlen: 24 91.149.240.0/24 maxlen: 24 91.149.241.0/24 maxlen: 24 91.149.242.0/24 maxlen: 24 91.149.243.0/24 maxlen: 24 91.149.253.0/24 maxlen: 24 91.149.254.0/24 maxlen: 24 91.149.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 01:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:26:81:d7:4b:65:47:2a:1e:28:e2:49:02:3a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a212d681f1912cf10ac34e21d032df38894d8688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:d6:3e:f7:42:ea:72:07:04:c5:93:37:92: 6d:52:d8:08:cb:d8:45:24:bd:bd:90:c9:97:20:3d: df:00:9c:11:1d:c6:e9:63:3b:d6:11:02:e8:0e:cc: e1:96:8e:a1:f8:a0:ad:40:4d:a4:37:a4:88:4e:eb: b5:c8:35:0d:f4:b6:3b:79:d3:9f:3c:b0:cd:37:6f: 6b:c8:52:50:23:0c:db:2a:6e:77:5c:ab:f3:95:6d: fe:0f:fe:22:9c:32:bc:ca:f7:fe:75:8b:7c:67:fd: d9:e4:3b:96:1f:5d:cb:96:05:04:d5:53:78:70:24: 64:5c:8e:85:14:e7:6f:be:76:10:c3:46:d4:6f:6a: 06:a5:f0:a9:b1:d8:1d:f7:1b:90:3e:d6:60:a0:2d: 12:d8:3a:df:4e:e6:6f:66:64:77:60:29:fe:8f:90: e7:11:7f:04:ba:d0:e7:65:c7:a0:7a:97:13:7c:29: c2:e6:c7:da:01:3e:4c:e5:12:48:fd:23:57:88:53: 93:c4:87:4a:e5:b6:d4:31:c6:e7:75:aa:7f:40:09: a7:97:b4:c9:f1:e3:50:9a:57:0a:d2:66:cc:ae:59: b7:69:d9:c7:c5:53:f5:33:06:b7:70:6b:cf:8f:86: 36:6a:de:eb:1c:39:a8:91:17:2b:00:fa:54:6a:ad: 90:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:12:D6:81:F1:91:2C:F1:0A:C3:4E:21:D0:32:DF:38:89:4D:86:88 X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/ohLWgfGRLPEKw04h0DLfOIlNhog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.149.202.0/23 91.149.218.0/23 91.149.221.0-91.149.223.255 91.149.232.0/23 91.149.236.0-91.149.243.255 91.149.253.0-91.149.255.255 Signature Algorithm: sha256WithRSAEncryption 63:05:ed:19:85:6d:45:33:8d:5a:0a:01:ef:e9:37:f1:30:b9: e2:17:e8:88:f3:90:ca:ae:e1:a9:87:59:52:2c:64:a4:f3:5a: a7:0f:31:34:51:f8:90:35:93:b4:d4:46:fe:e3:29:50:11:57: 2b:bb:f0:83:28:53:7b:d7:a5:c4:59:db:b6:dc:73:7b:35:6e: 63:c5:a8:fc:5a:2e:b8:ac:34:3c:d0:76:6e:3d:fc:5b:77:5e: cf:cf:88:33:74:83:1d:56:ae:1b:5d:8e:c6:d6:0e:ee:02:e1: 43:ea:11:79:98:81:e5:bf:2d:c3:94:3b:94:a4:a2:93:e0:99: 8b:3d:ea:b7:d9:e5:4f:0d:59:3e:f7:c5:62:a7:e6:f3:fa:cf: ff:02:60:ed:73:08:8d:75:c6:5c:d0:ac:fc:aa:63:3e:21:48: 1b:50:9e:b4:fb:f2:92:1c:be:6b:65:8d:05:0c:04:ff:c8:fa: cd:2f:2d:80:85:38:d1:66:e0:67:20:ad:42:f5:b5:1b:68:9f: de:2a:64:ab:22:62:aa:96:1a:aa:57:91:d2:f8:91:ca:89:ed: 17:1e:8a:7d:18:95:89:51:53:02:39:d6:5d:39:ed:05:cf:e3: ac:9d:d2:a9:a8:15:c1:d7:d4:9c:f8:0b:42:20:5b:25:58:70: e3:ac:b5:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZt3xyaB10tlRyoeKOJJAjpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjEyZDY4MWYxOTEyY2YxMGFjMzRlMjFkMDMyZGYzODg5NGQ4Njg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSrWPvdC6nIHBMWTN5JtUtgIy9hF JL29kMmXID3fAJwRHcbpYzvWEQLoDszhlo6h+KCtQE2kN6SITuu1yDUN9LY7edOf PLDNN29ryFJQIwzbKm53XKvzlW3+D/4inDK8yvf+dYt8Z/3Z5DuWH13LlgUE1VN4 cCRkXI6FFOdvvnYQw0bUb2oGpfCpsdgd9xuQPtZgoC0S2DrfTuZvZmR3YCn+j5Dn EX8EutDnZcegepcTfCnC5sfaAT5M5RJI/SNXiFOTxIdK5bbUMcbndap/QAmnl7TJ 8eNQmlcK0mbMrlm3adnHxVP1Mwa3cGvPj4Y2at7rHDmokRcrAPpUaq2QCQIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFKIS1oHxkSzxCsNOIdAy3ziJTYaIMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvb2hMV2dmR1JMUEVLdzA0aDBETGZPSWxOaG9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzBBBAIAATA7AwQBW5XKAwQB W5XaMAwDBABbld0DBAVblcADBAFblegwDAMEAluV7AMEAluV8DALAwQAW5X9AwMB W5QwDQYJKoZIhvcNAQELBQADggEBAGMF7RmFbUUzjVoKAe/pN/EwueIX6IjzkMqu 4amHWVIsZKTzWqcPMTRR+JA1k7TURv7jKVARVyu78IMoU3vXpcRZ27bcc3s1bmPF qPxaLrisNDzQdm49/Ft3Xs/PiDN0gx1WrhtdjsbWDu4C4UPqEXmYgeW/LcOUO5Sk opPgmYs96rfZ5U8NWT73xWKn5vP6z/8CYO1zCI11xlzQrPyqYz4hSBtQnrT78pIc vmtljQUMBP/I+s0vLYCFONFm4GcgrUL1tRton94qZKsiYqqWGqpXkdL4kcqJ7Rce in0YlYlRUwI51l057QXP46yd0qmoFcHX1Jz4C0IgWyVYcOOstf4= -----END CERTIFICATE-----Generated at Fri Jan 9 08:22:20 2026 by rpki-client