This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/OHHaGHrJUG4Z7QEZTM3vHVpbnVE.roa File: OHHaGHrJUG4Z7QEZTM3vHVpbnVE.roa (raw, json) Hash identifier: nJnrlEE8x/srGp0O1q5atoaBywa0T1yFutOMsJNy5B0= Subject key identifier: 38:71:DA:18:7A:C9:50:6E:19:ED:01:19:4C:CD:EF:1D:5A:5B:9D:51 Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0 Certificate serial: 019B7E38579326F1181DA9A85D21F08A0051 Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/OHHaGHrJUG4Z7QEZTM3vHVpbnVE.roa Signing time: Fri 02 Jan 2026 10:19:40 +0000 ROA not before: Fri 02 Jan 2026 10:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52177 IP address blocks: 194.26.208.0/24 maxlen: 24 2a12:5800::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:57:93:26:f1:18:1d:a9:a8:5d:21:f0:8a:00:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0 Validity Not Before: Jan 2 10:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3871da187ac9506e19ed01194ccdef1d5a5b9d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e4:9f:91:42:14:c7:11:0c:37:2a:00:21:29: 2e:7e:7b:8e:69:ab:c2:4c:87:85:00:94:63:84:af: 73:5a:29:e8:58:95:2c:7f:b3:69:10:6b:7d:40:c9: 05:6f:cf:d7:e0:d3:7d:0a:87:4e:e5:fa:79:3f:92: 54:d8:b7:e2:b2:fb:54:b6:25:7d:00:12:db:0a:98: f0:ac:1a:00:15:4c:67:07:2a:c2:35:99:c0:da:25: 78:e9:f8:58:e2:f3:4b:f3:2f:2c:1b:8d:1d:18:f1: 6c:ab:b2:95:51:a4:3e:53:09:f5:d5:d1:c6:c2:2a: e8:1b:dd:69:24:5a:78:7f:1a:e6:67:9d:42:9f:9c: a4:5b:65:83:ae:6c:5d:7d:6c:54:bc:0a:e0:d4:fc: e3:87:be:f5:80:f4:39:26:93:84:07:2a:28:5d:ef: 6e:e2:0b:67:be:d5:8f:28:19:56:41:a2:82:5a:99: 99:5b:16:46:e0:91:56:5b:a2:da:83:26:53:56:f8: 92:a3:ab:c2:a2:1c:41:d0:11:47:49:2f:b6:af:90: d5:e3:db:80:b5:bf:04:ef:dc:2f:6b:ef:b0:f7:09: 38:85:b0:ce:44:16:fa:c8:7e:46:a5:3f:9c:ff:7b: 09:6d:4f:e1:39:56:95:2c:74:83:25:93:b9:cd:c5: 5c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:71:DA:18:7A:C9:50:6E:19:ED:01:19:4C:CD:EF:1D:5A:5B:9D:51 X509v3 Authority Key Identifier: keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/OHHaGHrJUG4Z7QEZTM3vHVpbnVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.208.0/24 IPv6: 2a12:5800::/29 Signature Algorithm: sha256WithRSAEncryption 53:45:cb:79:e1:21:9b:bc:5c:1f:f7:06:f5:44:6f:8f:7a:22: f1:39:f1:a7:33:65:3a:50:57:73:30:f4:d6:e0:cc:47:3a:9f: 32:09:51:70:3a:1e:59:16:46:52:8a:9a:a4:da:46:fd:e1:68: b5:cb:f7:fa:75:4a:c2:9b:fc:42:35:77:a9:ad:b3:ff:bf:40: c2:e3:e2:8a:4a:40:61:13:1a:99:47:e5:62:bd:98:46:a9:1c: 1a:42:bc:1d:c0:dd:35:b6:45:d0:a9:d2:80:5e:dd:00:ad:ee: 99:19:a3:9c:dd:7a:04:cc:7a:38:a3:d2:11:4b:b3:f1:a7:fc: 29:77:3f:bb:02:30:8a:9f:d9:94:b1:23:6a:b6:c6:84:33:c8: 7e:20:56:ef:93:8c:4e:cf:a0:64:04:4f:28:3a:b0:65:c6:85: 21:94:3a:03:d2:82:1d:4a:8e:1f:0b:98:60:67:eb:f0:25:f8: fb:a8:83:81:e4:63:ed:b7:9e:f8:75:e2:02:0f:3c:0f:e8:b8: f8:7a:d2:5a:e1:b8:3e:ca:28:db:63:07:1e:ab:d1:08:9c:02: 3e:79:62:34:87:ce:34:04:fc:ec:99:75:42:42:2f:35:30:12: c0:63:bd:3c:77:84:1d:5d:b7:54:00:ee:55:ba:88:49:90:e1: 8b:a1:2c:a7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OFeTJvEYHamoXSHwigBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NTg3M2FlMjM1MGQwZTNlOGMzNTUzYmY5MDY0NjExMjc2 NGUxYzAwHhcNMjYwMTAyMTAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODcxZGExODdhYzk1MDZlMTllZDAxMTk0Y2NkZWYxZDVhNWI5ZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeSfkUIUxxEMNyoAISkufnuOaavC TIeFAJRjhK9zWinoWJUsf7NpEGt9QMkFb8/X4NN9CodO5fp5P5JU2LfisvtUtiV9 ABLbCpjwrBoAFUxnByrCNZnA2iV46fhY4vNL8y8sG40dGPFsq7KVUaQ+Uwn11dHG wiroG91pJFp4fxrmZ51Cn5ykW2WDrmxdfWxUvArg1Pzjh771gPQ5JpOEByooXe9u 4gtnvtWPKBlWQaKCWpmZWxZG4JFWW6LagyZTVviSo6vCohxB0BFHSS+2r5DV49uA tb8E79wva++w9wk4hbDORBb6yH5GpT+c/3sJbU/hOVaVLHSDJZO5zcVcmQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDhx2hh6yVBuGe0BGUzN7x1aW51RMB8GA1UdIwQY MBaAFCZYc64jUNDj6MNVO/kGRhEnZOHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUt ZmNkNGY3OTdkMzU2LzEvT0hIYUdIckpVRzRaN1FFWlRNM3ZIVnBiblZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUtZmNkNGY3OTdkMzU2 LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwhrQMA0E AgACMAcDBQMqElgAMA0GCSqGSIb3DQEBCwUAA4IBAQBTRct54SGbvFwf9wb1RG+P eiLxOfGnM2U6UFdzMPTW4MxHOp8yCVFwOh5ZFkZSipqk2kb94Wi1y/f6dUrCm/xC NXeprbP/v0DC4+KKSkBhExqZR+VivZhGqRwaQrwdwN01tkXQqdKAXt0Are6ZGaOc 3XoEzHo4o9IRS7Pxp/wpdz+7AjCKn9mUsSNqtsaEM8h+IFbvk4xOz6BkBE8oOrBl xoUhlDoD0oIdSo4fC5hgZ+vwJfj7qIOB5GPtt574deICDzwP6Lj4etJa4bg+yijb Ywceq9EInAI+eWI0h840BPzsmXVCQi81MBLAY708d4QdXbdUAO5VuohJkOGLoSyn -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:09 2026 by rpki-client