This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/OhqmFIGIvINLi29go-GBo9V89h0.roa File: OhqmFIGIvINLi29go-GBo9V89h0.roa (raw, json) Hash identifier: 2mKCCY2dNPMKK3cxtc1UfN7vUi2jnLAoSCa9h6Ix5GE= Subject key identifier: 3A:1A:A6:14:81:88:BC:83:4B:8B:6F:60:A3:E1:81:A3:D5:7C:F6:1D Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A321DA5952D181EC023C6B275E6AF5 Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/OhqmFIGIvINLi29go-GBo9V89h0.roa Signing time: Thu 01 Jan 2026 08:18:35 +0000 ROA not before: Thu 01 Jan 2026 08:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57369 IP address blocks: 109.205.193.0/24 maxlen: 24 2a01:fb01::/32 maxlen: 32 2a01:fb05:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:21:da:59:52:d1:81:ec:02:3c:6b:27:5e:6a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a1aa6148188bc834b8b6f60a3e181a3d57cf61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7c:18:b2:91:9b:17:98:53:94:d9:1f:15:ad: 76:d4:ab:c2:2d:8c:44:8e:38:9e:c7:45:e2:5d:91: f8:8f:51:4f:4d:8e:b5:1d:ce:96:30:f3:f0:65:5f: bb:14:29:bf:c1:b4:4f:84:c2:32:68:07:b5:d0:d3: 39:eb:f9:46:cd:45:bd:b2:37:4d:d8:ac:c5:c5:e4: 45:10:3b:32:89:e6:91:fa:e2:6d:0e:cf:b3:3a:5d: 04:30:98:c8:a0:34:e6:f6:09:71:ec:90:9c:c5:01: 6f:90:10:5c:f2:61:92:a3:2d:69:a6:85:bd:54:76: cb:17:5d:7f:7e:e2:81:15:89:ce:49:c3:e1:9e:0f: 8a:cf:e4:60:c6:e2:84:27:6d:0a:78:e2:65:5c:bd: f0:e5:83:de:e6:b6:29:d4:a0:7f:19:58:e1:9c:8d: 34:54:87:20:b8:86:0e:51:e2:00:81:1a:c3:fd:da: fc:7c:6b:80:c8:74:8a:23:3d:43:e8:a2:04:77:61: 2a:26:16:3d:84:a1:9e:8d:a2:46:47:97:6f:ed:0f: 90:99:cc:ee:b7:aa:55:0a:db:9e:57:30:a6:10:cb: b8:7a:88:b6:2c:66:29:92:f2:91:2b:c1:ec:c2:27: ae:af:63:3b:db:49:b0:b2:d7:c3:6c:52:23:52:1e: 2f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1A:A6:14:81:88:BC:83:4B:8B:6F:60:A3:E1:81:A3:D5:7C:F6:1D X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/OhqmFIGIvINLi29go-GBo9V89h0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 IPv6: 2a01:fb01::/32 2a01:fb05:9000::/36 Signature Algorithm: sha256WithRSAEncryption 10:40:4f:30:43:6e:e5:ba:57:36:b3:6b:f5:8e:d2:02:11:76: 43:94:a7:06:8e:67:d9:e3:21:f3:35:d2:e6:22:2e:05:5c:14: c7:48:f0:ca:79:0d:82:46:af:e7:a8:15:2d:32:33:9f:1f:65: 34:7d:f1:77:4c:b1:ea:ea:b3:09:6d:6e:dd:7a:ba:09:b1:49: 05:39:45:3d:39:9a:a9:4b:d7:16:67:da:fb:db:81:e0:6e:f5: 86:f7:ea:65:14:a9:76:69:86:69:59:36:e9:fe:e1:9a:34:5e: ba:91:68:38:00:0c:26:a2:00:6e:23:22:90:68:05:38:c8:ab: 65:16:44:0a:30:1f:aa:e9:73:2d:fa:f9:bc:85:48:28:bb:fe: fb:21:ee:7a:61:87:f4:f5:24:89:e1:e3:21:5a:e9:88:fe:72: 85:01:05:73:b1:35:48:a8:04:df:13:25:ed:18:f9:8c:74:42: eb:8d:b8:11:1a:c0:6c:40:dc:97:c4:45:f3:41:b4:6c:87:88: b8:4a:85:b8:a8:7e:4b:59:e3:ad:f0:3f:96:a3:40:67:6f:bc: 1c:d6:6e:23:a0:d2:a7:06:f7:ad:f1:92:96:85:5a:75:91:c5: 3d:12:95:25:34:36:3e:57:ba:68:bc:cf:e8:73:18:b7:ad:4b: b9:16:6f:97 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4oyHaWVLRgewCPGsnXmr1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTFhYTYxNDgxODhiYzgzNGI4YjZmNjBhM2UxODFhM2Q1N2NmNjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHwYspGbF5hTlNkfFa121KvCLYxE jjiex0XiXZH4j1FPTY61Hc6WMPPwZV+7FCm/wbRPhMIyaAe10NM56/lGzUW9sjdN 2KzFxeRFEDsyieaR+uJtDs+zOl0EMJjIoDTm9glx7JCcxQFvkBBc8mGSoy1ppoW9 VHbLF11/fuKBFYnOScPhng+Kz+RgxuKEJ20KeOJlXL3w5YPe5rYp1KB/GVjhnI00 VIcguIYOUeIAgRrD/dr8fGuAyHSKIz1D6KIEd2EqJhY9hKGejaJGR5dv7Q+Qmczu t6pVCtueVzCmEMu4eoi2LGYpkvKRK8Hswieur2M720mwstfDbFIjUh4vxQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFDoaphSBiLyDS4tvYKPhgaPVfPYdMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvT2hxbUZJR0l2SU5MaTI5Z28tR0JvOVY4OWgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAMBAIAATAGAwQAbc3BMBUE AgACMA8DBQAqAfsBAwYEKgH7BZAwDQYJKoZIhvcNAQELBQADggEBABBATzBDbuW6 Vzaza/WO0gIRdkOUpwaOZ9njIfM10uYiLgVcFMdI8Mp5DYJGr+eoFS0yM58fZTR9 8XdMserqswltbt16ugmxSQU5RT05mqlL1xZn2vvbgeBu9Yb36mUUqXZphmlZNun+ 4Zo0XrqRaDgADCaiAG4jIpBoBTjIq2UWRAowH6rpcy36+byFSCi7/vsh7nphh/T1 JInh4yFa6Yj+coUBBXOxNUioBN8TJe0Y+Yx0QuuNuBEawGxA3JfERfNBtGyHiLhK hbiofktZ463wP5ajQGdvvBzWbiOg0qcG963xkpaFWnWRxT0SlSU0Nj5Xumi8z+hz GLetS7kWb5c= -----END CERTIFICATE-----Generated at Mon Jan 19 14:43:30 2026 by rpki-client