This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/obhZjPoFU0GF5aoDtx8pszyeQNo.roa File: obhZjPoFU0GF5aoDtx8pszyeQNo.roa (raw, json) Hash identifier: DtLP/BpnbtJiMnxxKHcSTdBX7T/DtG/NN3abv8oUzzM= Subject key identifier: A1:B8:59:8C:FA:05:53:41:85:E5:AA:03:B7:1F:29:B3:3C:9E:40:DA Certificate issuer: /CN=24504c74c7127090a4cff85001f443149e128e60 Certificate serial: 019B7CEE2AC989AEE785678EEC2A6323CADB Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/obhZjPoFU0GF5aoDtx8pszyeQNo.roa Signing time: Fri 02 Jan 2026 04:19:01 +0000 ROA not before: Fri 02 Jan 2026 04:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203929 IP address blocks: 89.37.56.0/24 maxlen: 24 91.199.220.0/24 maxlen: 24 146.19.147.0/24 maxlen: 24 185.124.33.0/24 maxlen: 24 185.124.34.0/24 maxlen: 24 185.124.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2a:c9:89:ae:e7:85:67:8e:ec:2a:63:23:ca:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24504c74c7127090a4cff85001f443149e128e60 Validity Not Before: Jan 2 04:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1b8598cfa05534185e5aa03b71f29b33c9e40da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:9f:5f:0e:2f:35:7b:c8:55:39:e1:f3:b8: a4:14:68:f2:45:f4:4a:52:03:1b:1b:08:0a:89:b5: 9b:7d:91:83:c9:d7:22:2e:29:0e:bd:2f:55:f2:1c: c0:8e:7b:a4:62:88:c6:7b:e5:17:f9:55:ea:52:db: ab:78:25:6a:d8:96:2c:34:36:36:79:c9:99:98:6f: d1:5c:62:2f:f4:8a:d2:eb:b1:27:6c:77:5b:fb:c8: ea:2a:59:51:0d:31:14:45:15:9a:c2:fa:ad:07:a4: 40:a1:ba:e7:de:b2:95:59:30:e6:3c:ec:6a:36:d0: db:ae:b5:e3:f6:4f:31:2c:ac:21:97:57:db:ce:a7: e1:66:88:a7:34:84:6c:0f:9f:aa:b1:58:b9:0b:66: 47:25:b7:a7:ef:ad:fa:5a:0c:91:9f:50:8a:ee:a9: a3:e3:aa:ee:4f:f9:f7:1c:f6:2d:95:1c:10:fb:67: f7:2c:26:42:59:53:2f:c1:c1:2c:0a:08:cc:e9:c5: f8:9d:8f:71:bf:aa:08:20:c0:df:de:cf:3c:5d:f2: 03:dc:f2:f7:fd:cc:01:b8:12:a6:24:1c:e8:67:99: b7:7d:f0:47:d4:06:e7:37:bd:e2:b9:20:f9:15:aa: 01:a6:76:39:e4:71:52:4c:56:b2:1e:44:95:d2:bb: 0f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B8:59:8C:FA:05:53:41:85:E5:AA:03:B7:1F:29:B3:3C:9E:40:DA X509v3 Authority Key Identifier: keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/obhZjPoFU0GF5aoDtx8pszyeQNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.37.56.0/24 91.199.220.0/24 146.19.147.0/24 185.124.33.0-185.124.35.255 Signature Algorithm: sha256WithRSAEncryption a7:e7:33:c2:94:68:77:d4:e0:90:e2:e2:41:aa:b1:d1:4f:1e: bc:9d:cf:e4:4b:d7:38:78:d3:3c:8c:f4:cb:d9:49:b1:39:8e: d1:a0:dd:b3:ed:a4:4d:87:ba:a0:b7:b3:8a:b9:14:92:45:2e: c1:66:d7:aa:f5:63:b6:fb:ae:6e:fb:3a:1a:23:80:c8:27:d3: 33:a9:2e:f5:8b:62:34:da:aa:df:eb:43:d7:f3:93:51:fd:16: 27:77:e3:6c:da:2d:e9:e3:d2:60:ae:15:45:2c:9a:49:45:c6: d1:c5:03:81:a9:3d:71:19:89:e9:ea:22:49:53:7b:56:b5:32: 4f:93:78:fe:38:9d:70:18:46:3d:8b:7f:80:b2:2f:11:db:b1: ba:d8:b4:18:f4:12:5e:27:c1:ec:76:c2:74:04:85:e0:b0:23: 2c:2b:64:d7:24:d8:9f:31:97:ca:3f:2a:96:6b:0e:8a:06:d9: 3d:cd:6c:ca:3d:e3:23:4a:b8:44:bb:98:ed:4d:86:63:15:db: ac:bb:38:d5:93:d8:62:1f:ab:6d:c1:01:1d:ff:5a:d3:bb:ab: e8:79:b6:72:cf:d6:38:fd:c6:68:b4:0d:54:d4:11:67:dd:a7: c8:23:26:ae:94:61:5a:b5:5a:8e:6f:3d:98:89:f4:0f:a5:b7: 61:41:27:05 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt87irJia7nhWeO7CpjI8rbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTA0Yzc0YzcxMjcwOTBhNGNmZjg1MDAxZjQ0MzE0OWUx MjhlNjAwHhcNMjYwMTAyMDQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWI4NTk4Y2ZhMDU1MzQxODVlNWFhMDNiNzFmMjliMzNjOWU0MGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5ifXw4vNXvIVTnh87ikFGjyRfRK UgMbGwgKibWbfZGDydciLikOvS9V8hzAjnukYojGe+UX+VXqUtureCVq2JYsNDY2 ecmZmG/RXGIv9IrS67EnbHdb+8jqKllRDTEURRWawvqtB6RAobrn3rKVWTDmPOxq NtDbrrXj9k8xLKwhl1fbzqfhZoinNIRsD5+qsVi5C2ZHJben7636WgyRn1CK7qmj 46ruT/n3HPYtlRwQ+2f3LCZCWVMvwcEsCgjM6cX4nY9xv6oIIMDf3s88XfID3PL3 /cwBuBKmJBzoZ5m3ffBH1AbnN73iuSD5FaoBpnY55HFSTFayHkSV0rsPFwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFKG4WYz6BVNBheWqA7cfKbM8nkDaMB8GA1UdIwQY MBaAFCRQTHTHEnCQpM/4UAH0QxSeEo5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZCTWRNY1NjSkNrel9oUUFmUkRGSjRTam1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zOTZlOGItNzFkMy00NmJmLWEyNDQt ZDA2MjJjNGNkNDhkLzEvb2JoWmpQb0ZVMEdGNWFvRHR4OHBzenllUU5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zOTZlOGItNzFkMy00NmJmLWEyNDQtZDA2MjJjNGNkNDhk LzEvSkZCTWRNY1NjSkNrel9oUUFmUkRGSjRTam1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAWSU4AwQA W8fcAwQAkhOTMAwDBAC5fCEDBAK5fCAwDQYJKoZIhvcNAQELBQADggEBAKfnM8KU aHfU4JDi4kGqsdFPHrydz+RL1zh40zyM9MvZSbE5jtGg3bPtpE2HuqC3s4q5FJJF LsFm16r1Y7b7rm77OhojgMgn0zOpLvWLYjTaqt/rQ9fzk1H9Fid342zaLenj0mCu FUUsmklFxtHFA4GpPXEZienqIklTe1a1Mk+TeP44nXAYRj2Lf4CyLxHbsbrYtBj0 El4nwex2wnQEheCwIywrZNck2J8xl8o/KpZrDooG2T3NbMo94yNKuES7mO1NhmMV 26y7ONWT2GIfq23BAR3/WtO7q+h5tnLP1jj9xmi0DVTUEWfdp8gjJq6UYVq1Wo5v PZiJ9A+lt2FBJwU= -----END CERTIFICATE-----Generated at Tue Jan 27 04:40:58 2026 by rpki-client