This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/m-OH61lf9VVgWjii0PINezzjttE.roa File: m-OH61lf9VVgWjii0PINezzjttE.roa (raw, json) Hash identifier: 2GsJyhthbzFVpryryMCfZ+0hcAAlxYfWmqigOWWbj9A= Subject key identifier: 9B:E3:87:EB:59:5F:F5:55:60:5A:38:A2:D0:F2:0D:7B:3C:E3:B6:D1 Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5 Certificate serial: 019B7C126FD941083182B21EB112D1F6232D Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/m-OH61lf9VVgWjii0PINezzjttE.roa Signing time: Fri 02 Jan 2026 00:19:01 +0000 ROA not before: Fri 02 Jan 2026 00:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 139.6.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6f:d9:41:08:31:82:b2:1e:b1:12:d1:f6:23:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5 Validity Not Before: Jan 2 00:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9be387eb595ff555605a38a2d0f20d7b3ce3b6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d5:19:fe:b3:21:95:f8:ef:e7:e4:56:64:15: 9f:62:c1:ee:27:a6:ce:34:40:c3:02:b8:ee:29:5a: ce:39:d0:ca:25:8f:10:97:c4:db:70:a4:24:23:9d: 26:14:02:08:4e:25:e8:73:4e:56:2a:ac:71:1b:d6: 1c:a4:d8:67:64:e0:40:f1:07:70:c7:9b:a7:9b:18: 5c:74:4e:94:da:c3:a7:33:0d:95:3a:9d:95:b2:08: 5d:84:da:c9:d4:4d:e9:a2:12:26:57:c3:85:b4:9d: 44:9e:78:e6:17:76:17:4a:33:16:c3:7f:4a:6a:14: d5:50:cf:70:88:b7:7f:a3:4d:d7:84:fc:71:cd:0c: fa:ff:01:98:5e:86:ed:e0:9c:c7:18:b9:e8:02:f3: 15:2a:cf:c4:de:bc:13:81:95:ab:47:02:1c:1c:16: 63:77:a2:5f:54:d1:5c:0b:7e:dc:b8:29:da:97:c4: 83:c4:9f:8a:79:a3:7d:fe:a9:a0:6a:6e:dd:23:7d: 14:9d:70:c9:a4:66:f2:bb:8d:61:46:86:0c:a1:e3: 39:4c:62:c6:b0:53:51:8d:73:92:f3:85:eb:c3:b4: c7:f0:b9:05:31:e3:01:42:44:c1:b1:79:98:60:5b: 91:df:0d:88:c1:b3:c0:e9:c7:00:5b:4c:92:50:e9: 98:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E3:87:EB:59:5F:F5:55:60:5A:38:A2:D0:F2:0D:7B:3C:E3:B6:D1 X509v3 Authority Key Identifier: keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/m-OH61lf9VVgWjii0PINezzjttE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.6.0.0/16 Signature Algorithm: sha256WithRSAEncryption 05:65:51:cc:d9:42:0a:60:23:29:37:bf:f4:5e:08:be:81:bf: 61:b4:79:40:e9:cd:75:89:ed:34:fb:f0:11:29:d9:0e:52:27: 30:bc:f0:56:84:94:c9:23:3b:8d:d2:33:bb:32:3b:83:14:7c: 30:df:d1:97:f6:3b:ec:2a:36:34:d5:e8:d6:3c:7c:be:52:0f: 9a:c3:e7:b9:fe:cb:58:58:68:b5:de:b6:eb:65:91:07:ae:08: c6:38:bd:6a:46:f9:39:6b:16:68:0c:a9:ac:78:c2:86:31:1c: ef:88:f0:e5:e3:3e:24:bd:d6:e6:06:61:65:63:93:a7:81:bd: dd:d2:74:3a:9c:d7:da:92:b9:40:cb:d9:39:17:62:0f:f8:bb: 68:2a:cc:e2:d9:8f:0f:c3:27:7d:d8:ad:db:df:e4:26:8b:93: a1:ca:fa:18:9b:b7:f1:3b:e9:21:97:df:10:8b:d4:21:65:27: 5d:12:6c:24:2f:c7:44:40:0c:bd:ba:46:13:97:a9:b7:80:55: c6:f2:c5:21:b7:20:a6:98:65:39:6b:b2:82:ce:b4:81:0f:85: c8:57:09:95:5b:9b:62:7c:6a:f3:64:e1:90:27:8d:5b:14:5a: 2a:45:e6:1e:b0:0e:6a:56:57:b3:87:0e:87:f7:19:c2:51:9c: 74:0b:63:60 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt8Em/ZQQgxgrIesRLR9iMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNDJhYjE1NmQ1YWUxNTNhZDE2NTI4ZTg3ZDljODQ3OWRj MGE0YTUwHhcNMjYwMTAyMDAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmUzODdlYjU5NWZmNTU1NjA1YTM4YTJkMGYyMGQ3YjNjZTNiNmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNUZ/rMhlfjv5+RWZBWfYsHuJ6bO NEDDArjuKVrOOdDKJY8Ql8TbcKQkI50mFAIITiXoc05WKqxxG9YcpNhnZOBA8Qdw x5unmxhcdE6U2sOnMw2VOp2VsghdhNrJ1E3pohImV8OFtJ1EnnjmF3YXSjMWw39K ahTVUM9wiLd/o03XhPxxzQz6/wGYXobt4JzHGLnoAvMVKs/E3rwTgZWrRwIcHBZj d6JfVNFcC37cuCnal8SDxJ+KeaN9/qmgam7dI30UnXDJpGbyu41hRoYMoeM5TGLG sFNRjXOS84Xrw7TH8LkFMeMBQkTBsXmYYFuR3w2IwbPA6ccAW0ySUOmYBwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFJvjh+tZX/VVYFo4otDyDXs847bRMB8GA1UdIwQY MBaAFNNCqxVtWuFTrRZSjofZyEedwKSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUt MDgxYTYzN2Y3MDNlLzEvbS1PSDYxbGY5VlZnV2ppaTBQSU5lenpqdHRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUtMDgxYTYzN2Y3MDNl LzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiwYwDQYJ KoZIhvcNAQELBQADggEBAAVlUczZQgpgIyk3v/ReCL6Bv2G0eUDpzXWJ7TT78BEp 2Q5SJzC88FaElMkjO43SM7syO4MUfDDf0Zf2O+wqNjTV6NY8fL5SD5rD57n+y1hY aLXetutlkQeuCMY4vWpG+TlrFmgMqax4woYxHO+I8OXjPiS91uYGYWVjk6eBvd3S dDqc19qSuUDL2TkXYg/4u2gqzOLZjw/DJ33Yrdvf5CaLk6HK+hibt/E76SGX3xCL 1CFlJ10SbCQvx0RADL26RhOXqbeAVcbyxSG3IKaYZTlrsoLOtIEPhchXCZVbm2J8 avNk4ZAnjVsUWipF5h6wDmpWV7OHDof3GcJRnHQLY2A= -----END CERTIFICATE-----Generated at Tue Jan 27 11:27:36 2026 by rpki-client