This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/Obp19AVz-eUE_n6Z1_9dJ4EGDeM.roa File: Obp19AVz-eUE_n6Z1_9dJ4EGDeM.roa (raw, json) Hash identifier: /UOlw8R9RHBXRNf2pHB5ILY2/31tspmHrZEY8rczLws= Subject key identifier: 39:BA:75:F4:05:73:F9:E5:04:FE:7E:99:D7:FF:5D:27:81:06:0D:E3 Certificate issuer: /CN=656cc25012e3a4c8b1626dd757c7b0510e457341 Certificate serial: 019B7D5CF0F73350EC35A360A425A5166B10 Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/Obp19AVz-eUE_n6Z1_9dJ4EGDeM.roa Signing time: Fri 02 Jan 2026 06:20:01 +0000 ROA not before: Fri 02 Jan 2026 06:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.170.188.0/24 maxlen: 24 185.170.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 15:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f0:f7:33:50:ec:35:a3:60:a4:25:a5:16:6b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341 Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39ba75f40573f9e504fe7e99d7ff5d2781060de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f1:90:8b:f1:40:cc:5c:1a:ce:46:7b:2f:1f: e9:e4:24:56:dc:89:a2:22:09:e3:80:73:8e:f2:01: 89:90:94:9a:17:d6:ec:a7:de:b9:67:de:c7:e4:89: fb:78:41:2f:59:ff:d6:64:d4:24:4b:2d:ae:d9:f6: 15:a3:fd:95:0e:30:05:c0:49:05:0f:26:f5:a4:1b: 66:dc:f9:30:73:3a:3a:ad:62:f7:2a:81:ee:bb:86: 36:c0:6e:2c:23:12:8f:dd:ff:45:a5:a4:09:c7:ba: cc:ba:be:a6:66:8a:05:5c:d4:57:63:4e:6b:1b:99: d4:e1:e2:17:0c:bf:64:cf:dd:45:5e:84:b2:b0:99: 6c:b2:b6:0d:0e:d5:34:2c:be:aa:7f:b0:50:85:75: a1:a1:e4:70:34:0b:2c:2d:5f:9f:1a:2a:82:5d:f4: ea:70:af:4b:d0:6c:66:d2:e6:cf:91:d6:a2:39:d8: 6f:5f:56:ce:c1:85:b9:30:57:93:6c:d6:f7:17:d7: c9:27:e3:fd:17:87:99:aa:5b:da:e4:1d:ca:6e:ed: 4e:ab:7c:a4:c6:ea:a4:94:63:d7:97:ec:2a:79:d5: ca:a8:3d:c3:45:16:07:ae:76:64:11:b8:4e:60:6e: af:05:7b:1e:be:64:a7:1d:bf:bd:ac:db:d1:8d:9f: 6f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BA:75:F4:05:73:F9:E5:04:FE:7E:99:D7:FF:5D:27:81:06:0D:E3 X509v3 Authority Key Identifier: keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/Obp19AVz-eUE_n6Z1_9dJ4EGDeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.170.188.0/23 Signature Algorithm: sha256WithRSAEncryption 85:91:d5:3a:64:66:92:c0:4c:ca:92:43:ec:f1:be:8b:b1:24: d6:d8:41:20:e3:68:5a:c9:96:34:ca:40:45:8d:e7:fc:22:09: 27:8a:81:ee:bb:4c:f6:40:17:98:87:f1:9d:44:33:e5:0a:f5: 46:a2:fe:62:13:9a:f2:10:d2:db:97:ea:67:8f:4a:cf:93:87: c7:e7:01:bb:7c:79:9c:15:dc:08:b9:df:16:e1:44:fe:cf:b8: 81:c9:f5:3f:26:66:ad:49:cc:31:90:7c:42:a8:d7:37:02:99: 50:36:07:25:4e:fa:fc:6e:7e:35:8d:b6:7c:62:5f:3e:9a:40: b9:fc:64:c6:c4:79:8a:49:db:4b:b5:9e:0d:e4:07:00:1d:90: 08:89:77:5b:30:79:62:3e:f9:2c:4d:1f:2b:40:fc:9e:fc:ba: a4:c8:99:00:ed:d6:77:6f:c3:ee:88:b2:fa:e6:00:ef:b3:50: 25:ed:96:95:e8:17:a7:08:c7:3b:6e:32:55:fb:93:bf:32:9c: 65:15:39:03:3e:89:3f:71:16:f3:a5:b0:cf:ad:a9:e4:e3:b5: 9f:99:c3:37:75:83:5e:cd:5d:5d:23:13:2c:55:fd:0b:8a:6c: 4a:04:fa:34:e5:92:41:6e:8f:f9:51:ab:0c:95:f8:48:12:04: 24:9a:c0:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XPD3M1DsNaNgpCWlFmsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NmNjMjUwMTJlM2E0YzhiMTYyNmRkNzU3YzdiMDUxMGU0 NTczNDEwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWJhNzVmNDA1NzNmOWU1MDRmZTdlOTlkN2ZmNWQyNzgxMDYwZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/GQi/FAzFwazkZ7Lx/p5CRW3Imi IgnjgHOO8gGJkJSaF9bsp965Z97H5In7eEEvWf/WZNQkSy2u2fYVo/2VDjAFwEkF Dyb1pBtm3Pkwczo6rWL3KoHuu4Y2wG4sIxKP3f9FpaQJx7rMur6mZooFXNRXY05r G5nU4eIXDL9kz91FXoSysJlssrYNDtU0LL6qf7BQhXWhoeRwNAssLV+fGiqCXfTq cK9L0Gxm0ubPkdaiOdhvX1bOwYW5MFeTbNb3F9fJJ+P9F4eZqlva5B3Kbu1Oq3yk xuqklGPXl+wqedXKqD3DRRYHrnZkEbhOYG6vBXsevmSnHb+9rNvRjZ9vQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDm6dfQFc/nlBP5+mdf/XSeBBg3jMB8GA1UdIwQY MBaAFGVswlAS46TIsWJt11fHsFEORXNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWld6Q1VCTGpwTWl4WW0zWFY4ZXdVUTVGYzBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ZGI0NmQtYmMyZC00NWQ3LWEyNzkt ODIwMzI1ZjUzY2NiLzEvT2JwMTlBVnotZVVFX242WjFfOWRKNEVHRGVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi82ZGI0NmQtYmMyZC00NWQ3LWEyNzktODIwMzI1ZjUzY2Ni LzEvWld6Q1VCTGpwTWl4WW0zWFY4ZXdVUTVGYzBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuaq8MA0G CSqGSIb3DQEBCwUAA4IBAQCFkdU6ZGaSwEzKkkPs8b6LsSTW2EEg42hayZY0ykBF jef8IgknioHuu0z2QBeYh/GdRDPlCvVGov5iE5ryENLbl+pnj0rPk4fH5wG7fHmc FdwIud8W4UT+z7iByfU/JmatScwxkHxCqNc3AplQNgclTvr8bn41jbZ8Yl8+mkC5 /GTGxHmKSdtLtZ4N5AcAHZAIiXdbMHliPvksTR8rQPye/LqkyJkA7dZ3b8PuiLL6 5gDvs1Al7ZaV6BenCMc7bjJV+5O/MpxlFTkDPok/cRbzpbDPrank47WfmcM3dYNe zV1dIxMsVf0LimxKBPo05ZJBbo/5UasMlfhIEgQkmsBS -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:57 2026 by rpki-client