This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/OAHLRbIGn34etY14DK-cVXyErdE.roa File: OAHLRbIGn34etY14DK-cVXyErdE.roa (raw, json) Hash identifier: RpXAHn8c/GoMW8d8Havcr5BsaeHjO+e+z3tLmYL9w8s= Subject key identifier: 38:01:CB:45:B2:06:9F:7E:1E:B5:8D:78:0C:AF:9C:55:7C:84:AD:D1 Certificate issuer: /CN=1792806c34f57583899dc52dca407e25cf9d3622 Certificate serial: 019B7BA44953B1B1578383A1DAD1B52593D9 Authority key identifier: 17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/OAHLRbIGn34etY14DK-cVXyErdE.roa Signing time: Thu 01 Jan 2026 22:18:42 +0000 ROA not before: Thu 01 Jan 2026 22:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20552 IP address blocks: 46.227.240.0/21 maxlen: 21 2a01:7600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.mft rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:49:53:b1:b1:57:83:83:a1:da:d1:b5:25:93:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1792806c34f57583899dc52dca407e25cf9d3622 Validity Not Before: Jan 1 22:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3801cb45b2069f7e1eb58d780caf9c557c84add1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:c2:51:99:d3:28:ce:33:44:8b:c4:77:a8: 01:9d:02:51:5b:88:65:be:ac:c4:7e:45:7d:e7:e0: 3b:04:d4:41:09:13:65:88:3e:88:15:31:c9:38:23: fd:bd:b5:5b:f8:95:79:d8:1c:23:77:0e:bf:13:9c: f2:d6:db:7b:1f:7e:d3:f8:6d:83:f5:c0:c7:4d:b2: dc:c1:d9:22:0e:32:a7:31:d9:64:e4:9e:ac:9c:41: 43:cc:6e:9f:34:19:83:fd:e3:34:c1:6c:90:5f:82: 6d:ac:6c:c1:4d:00:b0:86:27:0d:40:f7:16:8e:50: 4e:22:02:3d:73:24:0c:f5:0b:12:a0:53:24:6e:bf: 5e:e8:23:3b:6b:5f:58:25:82:34:c3:ff:7c:bc:12: 66:e4:db:1a:8b:64:80:c9:05:37:74:75:33:49:b7: 72:92:d7:71:85:8b:7c:f0:4d:cc:a0:7c:95:8d:40: 96:5f:a8:b1:92:d7:2d:bf:a2:73:d5:65:44:d4:70: cf:94:00:fa:cd:39:50:7e:63:23:e0:e5:6a:d2:7a: f7:0f:81:1c:c7:15:e9:06:5d:c0:a8:5f:f7:44:c9: d7:24:28:11:2f:1a:80:42:c9:35:bc:26:cb:fb:1e: 5b:9d:e7:f5:f1:6d:d2:dd:22:83:2d:f1:6e:ac:a2: 82:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:01:CB:45:B2:06:9F:7E:1E:B5:8D:78:0C:AF:9C:55:7C:84:AD:D1 X509v3 Authority Key Identifier: keyid:17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/OAHLRbIGn34etY14DK-cVXyErdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.240.0/21 IPv6: 2a01:7600::/32 Signature Algorithm: sha256WithRSAEncryption 58:d2:70:09:1e:89:4b:7f:04:75:59:53:b1:ba:e9:df:b1:de: de:52:1d:30:ba:db:6a:a1:97:7c:2d:d4:90:76:34:29:07:71: 0d:69:8c:f9:05:d9:09:1b:ff:ab:cf:e5:b6:69:19:6b:14:69: d9:e6:b1:8b:45:22:d0:d1:ed:11:7e:cb:ff:9e:77:b0:e8:fd: 9c:1f:bd:dd:9a:36:93:87:b4:3a:be:89:0d:b8:12:3a:a1:6a: e6:d4:5e:c8:68:5a:c6:40:e8:de:a1:b0:f9:35:0a:e0:fe:38: 85:6d:8c:db:4c:88:08:72:6a:f7:52:89:a4:69:39:24:2a:bb: d9:ce:bf:18:8c:33:ce:87:e8:88:a5:41:c8:a5:00:94:d0:02: d5:e2:e7:aa:69:1b:91:83:b0:4a:fd:c8:09:b5:56:5c:f6:cd: a7:97:98:74:76:bc:0d:66:5c:0a:c4:e0:56:be:a5:4f:39:44: b2:e9:62:14:ac:93:e3:e8:0b:a8:a2:d5:68:ef:93:c3:bd:ad: 52:3f:0f:f8:fe:52:69:47:99:e9:2e:cd:27:28:f2:09:3f:05: e1:17:4a:52:8f:72:a1:de:92:a2:a5:71:d4:7b:a9:cd:c6:e6: af:01:ae:72:68:fe:cb:bf:74:75:56:dd:21:c3:d7:94:38:c7: 70:c6:02:78 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pElTsbFXg4Oh2tG1JZPZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTI4MDZjMzRmNTc1ODM4OTlkYzUyZGNhNDA3ZTI1Y2Y5 ZDM2MjIwHhcNMjYwMTAxMjIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODAxY2I0NWIyMDY5ZjdlMWViNThkNzgwY2FmOWM1NTdjODRhZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti/CUZnTKM4zRIvEd6gBnQJRW4hl vqzEfkV95+A7BNRBCRNliD6IFTHJOCP9vbVb+JV52Bwjdw6/E5zy1tt7H37T+G2D 9cDHTbLcwdkiDjKnMdlk5J6snEFDzG6fNBmD/eM0wWyQX4JtrGzBTQCwhicNQPcW jlBOIgI9cyQM9QsSoFMkbr9e6CM7a19YJYI0w/98vBJm5Nsai2SAyQU3dHUzSbdy ktdxhYt88E3MoHyVjUCWX6ixktctv6Jz1WVE1HDPlAD6zTlQfmMj4OVq0nr3D4Ec xxXpBl3AqF/3RMnXJCgRLxqAQsk1vCbL+x5bnef18W3S3SKDLfFurKKCiQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDgBy0WyBp9+HrWNeAyvnFV8hK3RMB8GA1UdIwQY MBaAFBeSgGw09XWDiZ3FLcpAfiXPnTYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVLQWJEVDFkWU9KbmNVdHlrQi1KYy1kTmlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NjUyMGYtN2JkOC00ZmM4LThjN2Yt N2VmMmQ3MGQ3MDhmLzEvT0FITFJiSUduMzRldFkxNERLLWNWWHlFcmRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NjUyMGYtN2JkOC00ZmM4LThjN2YtN2VmMmQ3MGQ3MDhm LzEvRjVLQWJEVDFkWU9KbmNVdHlrQi1KYy1kTmlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLuPwMA0E AgACMAcDBQAqAXYAMA0GCSqGSIb3DQEBCwUAA4IBAQBY0nAJHolLfwR1WVOxuunf sd7eUh0wuttqoZd8LdSQdjQpB3ENaYz5BdkJG/+rz+W2aRlrFGnZ5rGLRSLQ0e0R fsv/nnew6P2cH73dmjaTh7Q6vokNuBI6oWrm1F7IaFrGQOjeobD5NQrg/jiFbYzb TIgIcmr3UomkaTkkKrvZzr8YjDPOh+iIpUHIpQCU0ALV4ueqaRuRg7BK/cgJtVZc 9s2nl5h0drwNZlwKxOBWvqVPOUSy6WIUrJPj6AuootVo75PDva1SPw/4/lJpR5np Ls0nKPIJPwXhF0pSj3Kh3pKipXHUe6nNxuavAa5yaP7Lv3R1Vt0hw9eUOMdwxgJ4 -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:49 2026 by rpki-client