This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/ovNj-lKohoqrP_7eODYlxEZb7tI.roa File: ovNj-lKohoqrP_7eODYlxEZb7tI.roa (raw, json) Hash identifier: UqfVF/Q23DbHAnK5YMvGOztKJOj8RSHzAgrS1X+sklw= Subject key identifier: A2:F3:63:FA:52:A8:86:8A:AB:3F:FE:DE:38:36:25:C4:46:5B:EE:D2 Certificate issuer: /CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7 Certificate serial: 019B79EBD3F2FC81E33F58C32305BEBFC939 Authority key identifier: 35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/ovNj-lKohoqrP_7eODYlxEZb7tI.roa Signing time: Thu 01 Jan 2026 14:17:36 +0000 ROA not before: Thu 01 Jan 2026 14:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200553 IP address blocks: 91.198.141.0/24 maxlen: 24 91.198.147.0/24 maxlen: 24 91.198.158.0/24 maxlen: 24 91.198.167.0/24 maxlen: 24 185.100.32.0/22 maxlen: 24 185.202.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:d3:f2:fc:81:e3:3f:58:c3:23:05:be:bf:c9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7 Validity Not Before: Jan 1 14:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2f363fa52a8868aab3ffede383625c4465beed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:68:dc:72:b2:ff:46:ec:96:a0:e6:25:42:9c: b0:09:0f:4e:c6:0b:7c:f7:b9:46:ef:e2:4a:65:59: 14:be:6f:ad:c1:51:bb:90:cd:d8:a1:5f:6d:47:9c: 85:52:13:ce:19:b4:08:f2:49:28:5d:4c:fe:99:0a: cb:d6:eb:da:97:bc:59:35:7b:23:7f:65:c2:0b:ff: 5a:17:30:8e:f4:57:93:34:47:f7:9a:43:70:dd:e0: 96:d1:93:52:9a:7d:dd:ec:e5:0d:63:7b:55:3c:52: df:da:a1:97:11:a9:5d:4f:ec:e2:3f:fd:28:63:2f: d8:78:c9:c7:47:5b:a0:9d:10:c0:1d:5f:d4:86:bd: 08:0a:71:4b:ca:e0:5b:01:4d:58:ad:94:af:b1:0b: d6:ea:a6:c9:2a:69:4d:94:54:a5:a4:8b:8e:4e:1f: b2:62:4a:ee:71:1f:4f:5d:79:8e:a1:aa:50:0d:c9: 5a:12:92:76:be:9e:35:88:c7:55:0e:6f:c8:e3:3a: b1:51:7e:79:a5:92:63:3c:47:6c:31:29:8b:c4:64: d3:ad:c4:69:0b:f3:8c:60:43:c7:a0:c1:6a:ba:b9: 2d:c2:ec:7c:0e:43:2b:48:e3:3e:36:63:d2:49:0e: f2:b6:6d:b1:1a:52:58:10:af:8c:3e:8d:37:bd:90: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F3:63:FA:52:A8:86:8A:AB:3F:FE:DE:38:36:25:C4:46:5B:EE:D2 X509v3 Authority Key Identifier: keyid:35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/ovNj-lKohoqrP_7eODYlxEZb7tI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.141.0/24 91.198.147.0/24 91.198.158.0/24 91.198.167.0/24 185.100.32.0/22 185.202.128.0/22 Signature Algorithm: sha256WithRSAEncryption b1:00:1e:15:39:1e:3b:7a:aa:39:74:31:a2:ba:6d:8e:c9:56: 37:57:91:58:a6:05:35:b1:cc:07:d4:f8:60:59:05:9d:90:0d: 2a:bc:f6:77:2e:9e:36:ef:e4:18:29:12:9e:42:dd:f3:44:03: 4e:e9:7c:fa:46:12:bd:f8:22:47:e5:3c:21:20:ef:56:7e:22: b8:4c:9b:16:f8:e2:eb:1a:68:5f:0c:db:d2:a3:f9:b2:5f:ae: 4b:1a:3b:c3:d0:20:39:50:d2:81:f0:58:72:3f:ba:4c:85:7d: ea:e2:ea:f9:d0:e4:12:76:4f:8f:04:78:01:b9:f2:6b:cb:b8: a3:42:4c:91:00:63:85:f4:ca:fe:e1:66:cf:cd:d6:db:b1:3b: 1d:58:08:f5:48:0c:bb:58:de:da:04:23:85:1a:23:e9:d0:f4: a8:a2:d6:8e:34:91:14:2f:e0:94:eb:bc:00:26:d3:63:c7:bf: 3c:2d:01:1c:d2:94:74:0c:78:d8:1a:06:02:12:0a:92:97:e2: fa:88:02:cd:4b:f1:e3:00:84:29:6b:41:1e:17:0c:b4:22:f2: 9c:f8:96:6f:ab:e8:23:ae:ae:54:9f:c6:27:44:66:93:b6:85: 97:04:34:57:c8:9d:85:fa:30:43:92:44:45:55:24:cc:23:68: 58:82:f6:bb -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt569Py/IHjP1jDIwW+v8k5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZDFjZGFiYTMxNTU5ZGUxMmFiMTlkNzlmMWFlMmQyMThj Mzc5ZjcwHhcNMjYwMTAxMTQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmYzNjNmYTUyYTg4NjhhYWIzZmZlZGUzODM2MjVjNDQ2NWJlZWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32jccrL/RuyWoOYlQpywCQ9Oxgt8 97lG7+JKZVkUvm+twVG7kM3YoV9tR5yFUhPOGbQI8kkoXUz+mQrL1uval7xZNXsj f2XCC/9aFzCO9FeTNEf3mkNw3eCW0ZNSmn3d7OUNY3tVPFLf2qGXEaldT+ziP/0o Yy/YeMnHR1ugnRDAHV/Uhr0ICnFLyuBbAU1YrZSvsQvW6qbJKmlNlFSlpIuOTh+y YkrucR9PXXmOoapQDclaEpJ2vp41iMdVDm/I4zqxUX55pZJjPEdsMSmLxGTTrcRp C/OMYEPHoMFqurktwux8DkMrSOM+NmPSSQ7ytm2xGlJYEK+MPo03vZB2UwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFKLzY/pSqIaKqz/+3jg2JcRGW+7SMB8GA1UdIwQY MBaAFDXRzaujFVneEqsZ158a4tIYw3n3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMWVkYzAtNjNjMS00MmI0LWEwNDAt M2ZmOTI2MDg1NTI3LzEvb3ZOai1sS29ob3FyUF83ZU9EWWx4RVpiN3RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMWVkYzAtNjNjMS00MmI0LWEwNDAtM2ZmOTI2MDg1NTI3 LzEvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAW8aNAwQA W8aTAwQAW8aeAwQAW8anAwQCuWQgAwQCucqAMA0GCSqGSIb3DQEBCwUAA4IBAQCx AB4VOR47eqo5dDGium2OyVY3V5FYpgU1scwH1PhgWQWdkA0qvPZ3Lp427+QYKRKe Qt3zRANO6Xz6RhK9+CJH5TwhIO9WfiK4TJsW+OLrGmhfDNvSo/myX65LGjvD0CA5 UNKB8FhyP7pMhX3q4ur50OQSdk+PBHgBufJry7ijQkyRAGOF9Mr+4WbPzdbbsTsd WAj1SAy7WN7aBCOFGiPp0PSootaONJEUL+CU67wAJtNjx788LQEc0pR0DHjYGgYC EgqSl+L6iALNS/HjAIQpa0EeFwy0IvKc+JZvq+gjrq5Un8YnRGaTtoWXBDRXyJ2F +jBDkkRFVSTMI2hYgva7 -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:53 2026 by rpki-client