This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/ol5o-VeacDxR8G56FJbb2bssCJU.roa File: ol5o-VeacDxR8G56FJbb2bssCJU.roa (raw, json) Hash identifier: HWf9NNfp469bQ5Wf7jn4TMJbz+S/ZW2Aq8n1tyLEU+8= Subject key identifier: A2:5E:68:F9:57:9A:70:3C:51:F0:6E:7A:14:96:DB:D9:BB:2C:08:95 Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6F7D91AFD38EEDBFA779601D13ECC Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/ol5o-VeacDxR8G56FJbb2bssCJU.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204300 IP address blocks: 95.164.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f7:d9:1a:fd:38:ee:db:fa:77:96:01:d1:3e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a25e68f9579a703c51f06e7a1496dbd9bb2c0895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:07:73:5f:74:ee:8c:d3:73:f9:f6:54:1a:e5: 01:0c:9c:d1:d2:fe:17:3a:be:66:da:d5:29:81:98: 33:31:4f:d8:a8:fb:ea:81:10:75:cd:30:98:dd:3c: c9:23:cd:da:6a:81:94:44:ff:0c:c7:68:96:63:90: 15:05:2a:5e:4a:64:11:39:cf:1e:f1:72:75:d1:f9: ac:62:94:f9:57:c8:39:0d:8a:e1:5c:fc:ca:e6:01: c0:17:98:01:fe:a8:54:72:23:6e:2e:a7:ee:86:0b: 28:1e:0a:db:a7:20:61:7c:09:bf:50:fe:2a:16:00: 3a:25:6b:93:66:2f:a6:48:0a:46:55:02:14:56:43: bd:81:67:e8:33:f2:49:40:1a:0a:fe:f0:e7:4f:0b: fe:90:7c:29:7d:71:da:9b:b4:4a:72:b1:7d:13:a6: fa:3e:b6:be:33:b3:17:54:38:0e:8d:8a:2a:96:ea: 6a:40:62:34:e9:14:ea:62:4f:03:fe:6b:38:4b:07: 41:f5:d1:2f:80:cd:4b:25:c7:c9:7f:9d:fa:6e:b0: 7c:8b:28:b1:ae:07:ef:bd:dc:a2:17:89:9f:c7:11: 21:c1:11:27:23:fa:83:a2:74:51:a5:8d:15:f5:71: 20:96:fd:7e:6a:11:1f:d2:09:e7:50:c6:2d:b0:47: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5E:68:F9:57:9A:70:3C:51:F0:6E:7A:14:96:DB:D9:BB:2C:08:95 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/ol5o-VeacDxR8G56FJbb2bssCJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.196.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:3a:f6:0d:45:34:a1:68:02:9f:b1:3c:af:c6:b7:d6:87:1f: 03:25:ba:88:d7:46:5f:ac:fe:29:2a:f2:6b:d4:81:85:86:99: 1a:e1:0e:e5:e1:6a:ea:af:17:67:40:8b:1e:3e:ce:e0:fd:41: 30:b7:2d:9c:4e:7c:24:7e:35:ce:ec:18:51:fd:c8:8a:e0:3e: bb:9a:36:61:51:18:ca:d1:13:80:63:e2:57:23:a0:81:6c:ab: bb:12:f1:60:85:66:1d:47:bb:da:3e:e8:8c:51:6b:62:6d:14: 5b:b0:fb:35:2b:9a:d3:2e:9a:a6:2f:fe:db:51:78:d4:d1:77: de:61:44:39:b3:35:d9:f1:ef:5d:bd:3c:4a:5d:b0:1f:dd:5a: cb:c6:84:6f:c6:31:29:eb:7f:1a:c7:6b:63:f9:2a:43:20:b4: f5:b2:3e:d6:7f:59:88:c4:2c:72:8e:1d:cc:d1:ee:54:cb:e9: 7a:33:6c:a2:97:f1:d7:0e:4d:f7:bd:2c:af:a8:05:ab:36:01: 9e:13:6c:4e:3f:b4:76:d2:ee:73:0f:ff:fe:08:39:b3:3a:59: 09:3d:c5:4a:32:5d:44:c0:90:ad:8a:98:36:9c:55:d4:48:2b: 97:e4:96:6b:a2:28:13:d1:ce:57:c3:84:87:09:24:5e:dd:49: 4d:55:93:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvfZGv047tv6d5YB0T7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjVlNjhmOTU3OWE3MDNjNTFmMDZlN2ExNDk2ZGJkOWJiMmMwODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgdzX3TujNNz+fZUGuUBDJzR0v4X Or5m2tUpgZgzMU/YqPvqgRB1zTCY3TzJI83aaoGURP8Mx2iWY5AVBSpeSmQROc8e 8XJ10fmsYpT5V8g5DYrhXPzK5gHAF5gB/qhUciNuLqfuhgsoHgrbpyBhfAm/UP4q FgA6JWuTZi+mSApGVQIUVkO9gWfoM/JJQBoK/vDnTwv+kHwpfXHam7RKcrF9E6b6 Pra+M7MXVDgOjYoqlupqQGI06RTqYk8D/ms4SwdB9dEvgM1LJcfJf536brB8iyix rgfvvdyiF4mfxxEhwREnI/qDonRRpY0V9XEglv1+ahEf0gnnUMYtsEeSGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKJeaPlXmnA8UfBuehSW29m7LAiVMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvb2w1by1WZWFjRHhSOEc1NkZKYmIyYnNzQ0pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX6TEMA0G CSqGSIb3DQEBCwUAA4IBAQA7OvYNRTShaAKfsTyvxrfWhx8DJbqI10ZfrP4pKvJr 1IGFhpka4Q7l4WrqrxdnQIsePs7g/UEwty2cTnwkfjXO7BhR/ciK4D67mjZhURjK 0ROAY+JXI6CBbKu7EvFghWYdR7vaPuiMUWtibRRbsPs1K5rTLpqmL/7bUXjU0Xfe YUQ5szXZ8e9dvTxKXbAf3VrLxoRvxjEp638ax2tj+SpDILT1sj7Wf1mIxCxyjh3M 0e5Uy+l6M2yil/HXDk33vSyvqAWrNgGeE2xOP7R20u5zD//+CDmzOlkJPcVKMl1E wJCtipg2nFXUSCuX5JZroigT0c5Xw4SHCSRe3UlNVZNF -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:26 2026 by rpki-client