This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/ohbKePXamXXPoWhEA80w3vW0W64.roa File: ohbKePXamXXPoWhEA80w3vW0W64.roa (raw, json) Hash identifier: WchU4jIcRGIq8VSZ7wgyxWpSYmpMduybSatF0MFZlUQ= Subject key identifier: A2:16:CA:78:F5:DA:99:75:CF:A1:68:44:03:CD:30:DE:F5:B4:5B:AE Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Certificate serial: 019BDA920783AB5B1295E662A31FBE41F514 Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/ohbKePXamXXPoWhEA80w3vW0W64.roa Signing time: Tue 20 Jan 2026 08:42:41 +0000 ROA not before: Tue 20 Jan 2026 08:42:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214576 IP address blocks: 193.169.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:92:07:83:ab:5b:12:95:e6:62:a3:1f:be:41:f5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Validity Not Before: Jan 20 08:42:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a216ca78f5da9975cfa1684403cd30def5b45bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:29:93:b5:76:63:c2:f2:24:9c:a6:2e:ac:25: 3b:3a:1b:d9:00:f8:2a:72:3b:3c:6c:f3:93:b1:f8: f6:3a:45:4d:68:b8:c0:45:80:63:3f:db:9a:85:01: dc:08:41:cb:35:6c:68:ad:e6:67:1c:ef:c6:a7:dc: 2e:34:24:8d:b6:5e:c9:4d:78:cb:a8:63:50:b3:9a: 31:11:97:bf:98:c5:ed:f4:12:b0:bb:e1:49:42:a7: 34:fa:c3:6a:fb:2c:fd:dc:b2:ea:62:03:69:93:d2: 07:d1:ce:6f:df:f2:ef:b9:a4:af:37:47:dd:a9:61: 79:e0:0a:1a:68:b4:f7:0b:1c:fe:07:f4:71:49:60: 87:0d:46:92:ad:c3:9b:8a:b2:76:70:42:79:97:e9: c7:af:01:fd:b8:2f:a5:59:18:2c:d3:38:ae:bd:6d: 08:79:ef:49:45:bb:7f:1b:77:d0:2f:81:30:3c:f6: f4:f4:36:69:a3:48:c5:9d:ff:80:0b:b2:61:2d:8b: b2:05:e6:ac:f4:c4:3d:c3:bd:be:35:7b:90:83:67: 44:e0:23:bf:db:06:03:fa:a5:36:f5:bb:90:35:62: 99:1d:85:20:81:87:16:ed:76:33:c0:6e:43:bb:f0: 70:39:9d:2d:c9:2f:41:3c:31:7f:47:2a:9e:3a:6c: 91:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:16:CA:78:F5:DA:99:75:CF:A1:68:44:03:CD:30:DE:F5:B4:5B:AE X509v3 Authority Key Identifier: keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/ohbKePXamXXPoWhEA80w3vW0W64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.194.0/23 Signature Algorithm: sha256WithRSAEncryption 77:05:85:3c:61:1e:59:c7:69:ab:69:29:cc:7b:4b:13:c4:d1: a4:63:44:62:af:70:6b:de:df:d5:95:17:be:2c:2a:c2:3d:65: f2:b3:7a:b4:3d:17:0a:9c:43:00:77:03:c6:93:f9:9c:07:ad: 31:d3:cd:4f:a7:73:9b:d3:c0:a5:ac:b5:73:fd:5e:7e:03:08: ae:6e:4e:f3:7b:ad:68:74:fc:1e:6f:68:ee:83:c1:9f:22:0a: 81:d3:a3:0b:47:fa:af:8f:d2:0e:ac:32:27:bf:18:d1:13:4a: b8:4e:1c:27:85:dd:75:0a:c0:c7:bc:cb:9f:de:30:ad:23:75: 72:e5:0b:73:31:60:61:d1:b6:d2:97:3c:7f:d4:c7:b3:16:43: e4:45:bb:21:85:55:1c:cd:3f:e6:e2:41:7d:3c:a8:dd:97:5c: ed:fb:6d:d3:1e:f0:17:88:cb:9b:8e:c2:1e:db:0d:0a:96:9a: 64:ba:66:3c:2e:18:0e:96:64:e0:b1:dd:e3:de:67:1e:6a:df: 12:65:ff:f3:17:30:0a:9f:33:f1:55:b7:db:05:d6:2e:c1:51: 51:bf:6d:bf:2b:9f:9c:e5:43:f5:9f:54:9a:2b:aa:ec:fa:b6: 51:68:0d:f7:2c:0d:36:2b:54:7a:85:1a:a5:3f:42:05:57:c8: b3:ab:2d:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvakgeDq1sSleZiox++QfUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzJlMGQzZmRjMjE1YTM4OWM3MDQzY2E1YTFhMDZiZTJj NTU4ZWYwHhcNMjYwMTIwMDg0MjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjE2Y2E3OGY1ZGE5OTc1Y2ZhMTY4NDQwM2NkMzBkZWY1YjQ1YmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ymTtXZjwvIknKYurCU7OhvZAPgq cjs8bPOTsfj2OkVNaLjARYBjP9uahQHcCEHLNWxoreZnHO/Gp9wuNCSNtl7JTXjL qGNQs5oxEZe/mMXt9BKwu+FJQqc0+sNq+yz93LLqYgNpk9IH0c5v3/LvuaSvN0fd qWF54AoaaLT3Cxz+B/RxSWCHDUaSrcObirJ2cEJ5l+nHrwH9uC+lWRgs0ziuvW0I ee9JRbt/G3fQL4EwPPb09DZpo0jFnf+AC7JhLYuyBeas9MQ9w72+NXuQg2dE4CO/ 2wYD+qU29buQNWKZHYUggYcW7XYzwG5Du/BwOZ0tyS9BPDF/RyqeOmyRrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKIWynj12pl1z6FoRAPNMN71tFuuMB8GA1UdIwQY MBaAFObC4NP9whWjiccEPKWhoGvixVjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQt ZjNlMDUyYmFiMTQ0LzEvb2hiS2VQWGFtWFhQb1doRUE4MHczdlcwVzY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQtZjNlMDUyYmFiMTQ0 LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwanCMA0G CSqGSIb3DQEBCwUAA4IBAQB3BYU8YR5Zx2mraSnMe0sTxNGkY0Rir3Br3t/VlRe+ LCrCPWXys3q0PRcKnEMAdwPGk/mcB60x081Pp3Ob08ClrLVz/V5+Awiubk7ze61o dPweb2jug8GfIgqB06MLR/qvj9IOrDInvxjRE0q4Thwnhd11CsDHvMuf3jCtI3Vy 5QtzMWBh0bbSlzx/1MezFkPkRbshhVUczT/m4kF9PKjdl1zt+23THvAXiMubjsIe 2w0KlppkumY8LhgOlmTgsd3j3mceat8SZf/zFzAKnzPxVbfbBdYuwVFRv22/K5+c 5UP1n1SaK6rs+rZRaA33LA02K1R6hRqlP0IFV8izqy05 -----END CERTIFICATE-----Generated at Wed Jan 21 09:56:53 2026 by rpki-client