This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/Oh5NfZAAYPNWepq-IUky8lhGK3Q.roa File: Oh5NfZAAYPNWepq-IUky8lhGK3Q.roa (raw, json) Hash identifier: G68B7K3ln08i2iRP9Hn3HZxsrH3w3zUOZ6LC+Oev1Yo= Subject key identifier: 3A:1E:4D:7D:90:00:60:F3:56:7A:9A:BE:21:49:32:F2:58:46:2B:74 Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7 Certificate serial: 019B790FF77B1D467236E15EB8A82DFF4C10 Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/Oh5NfZAAYPNWepq-IUky8lhGK3Q.roa Signing time: Thu 01 Jan 2026 10:17:28 +0000 ROA not before: Thu 01 Jan 2026 10:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58154 IP address blocks: 80.65.148.0/22 maxlen: 24 185.80.31.0/24 maxlen: 24 193.218.176.0/22 maxlen: 22 2a0e:6340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:f7:7b:1d:46:72:36:e1:5e:b8:a8:2d:ff:4c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7 Validity Not Before: Jan 1 10:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a1e4d7d900060f3567a9abe214932f258462b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:75:1a:56:92:c1:18:e8:e8:3c:5e:0c:cd:95: bb:bf:88:a4:4b:05:da:83:ec:ce:c2:a6:25:93:68: 9c:9d:e3:b0:31:db:b4:2a:c0:02:bf:15:c5:a5:e4: 68:0b:33:7d:39:f4:4c:fa:94:df:5a:65:c4:cf:d8: ac:0a:e8:5a:7c:e2:45:89:77:b3:c0:c4:a6:d4:2b: 76:ff:8c:82:a4:85:7c:15:c8:ee:a2:4c:82:58:ea: 18:7b:68:89:bb:82:52:43:9b:9d:cf:d2:48:7d:d9: 38:89:cf:b5:48:c3:4b:7a:91:b4:df:0a:2b:3c:90: 06:88:14:c1:ba:f9:29:0c:05:23:19:14:07:ee:7f: d7:5b:7d:30:d7:0e:4c:0c:c1:03:0e:ba:8c:0d:14: 90:27:66:a9:35:ae:2c:a8:73:81:b4:f4:57:14:24: d9:1c:f6:b5:be:95:6b:22:70:29:a9:e6:42:4f:3d: 99:35:b7:d5:de:54:bd:f4:1b:0f:6c:03:33:a6:42: 3f:c6:8c:c1:55:79:a3:bd:e5:58:8b:a2:ff:2b:65: 25:04:6f:7a:03:95:39:c7:8c:df:a6:0f:f4:45:1c: d9:e9:86:48:4d:08:d7:a0:f8:75:e0:c4:dc:3b:e0: 84:fe:2f:d1:2d:59:8b:43:8a:e5:6c:f4:99:bb:f1: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1E:4D:7D:90:00:60:F3:56:7A:9A:BE:21:49:32:F2:58:46:2B:74 X509v3 Authority Key Identifier: keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/Oh5NfZAAYPNWepq-IUky8lhGK3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.65.148.0/22 185.80.31.0/24 193.218.176.0/22 IPv6: 2a0e:6340::/29 Signature Algorithm: sha256WithRSAEncryption 73:c3:8b:26:ec:23:a5:86:67:66:97:38:ba:b0:46:b8:44:21: c4:b8:28:b1:c6:0d:57:ab:89:5c:9c:3c:c3:a5:b4:86:b8:d6: 12:16:e7:f1:5e:c0:05:7e:60:25:96:3e:72:4f:f1:06:fd:cf: b1:9c:2b:c7:74:fb:7b:50:f8:a5:19:48:4a:87:23:f4:a5:86: 8e:31:12:e5:a4:d5:74:99:b3:a4:b6:f5:08:04:c5:0f:1a:4b: 7b:27:d3:58:0b:5c:d2:df:05:d9:f7:0d:e8:02:15:b4:5e:19: 0c:d6:e3:e9:e9:25:f6:16:8c:8e:c8:af:b2:10:aa:a1:ce:c9: 9a:4f:be:28:5a:a1:17:f4:8b:b5:59:e9:98:c2:4e:17:78:eb: 61:98:ce:32:c5:8e:a0:0b:68:73:5f:2f:7a:be:2a:1c:fa:33: 7f:00:8f:c2:7b:44:ce:09:bd:2b:ed:bb:bf:2c:02:ab:63:96: 69:91:fb:2d:91:c7:8d:16:01:3f:22:7a:57:3f:6a:c9:b8:36: 7f:40:26:49:fa:f3:e2:ff:66:6c:eb:e0:53:cd:16:7d:29:ac: 3a:fb:6d:5c:84:f5:94:ea:23:18:61:ab:b7:97:2b:34:d3:4e: fb:3a:f3:2c:ab:55:0b:13:e3:76:d9:b9:71:3e:34:71:09:f5: 43:07:08:74 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5D/d7HUZyNuFeuKgt/0wQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Y2ZhOTRmNjEzNGUzOTYwZWE1ZjMxODg0NmEzMGNmM2U5 MjJkZDcwHhcNMjYwMTAxMTAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTFlNGQ3ZDkwMDA2MGYzNTY3YTlhYmUyMTQ5MzJmMjU4NDYyYjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonUaVpLBGOjoPF4MzZW7v4ikSwXa g+zOwqYlk2icneOwMdu0KsACvxXFpeRoCzN9OfRM+pTfWmXEz9isCuhafOJFiXez wMSm1Ct2/4yCpIV8FcjuokyCWOoYe2iJu4JSQ5udz9JIfdk4ic+1SMNLepG03wor PJAGiBTBuvkpDAUjGRQH7n/XW30w1w5MDMEDDrqMDRSQJ2apNa4sqHOBtPRXFCTZ HPa1vpVrInApqeZCTz2ZNbfV3lS99BsPbAMzpkI/xozBVXmjveVYi6L/K2UlBG96 A5U5x4zfpg/0RRzZ6YZITQjXoPh14MTcO+CE/i/RLVmLQ4rlbPSZu/HtmQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFDoeTX2QAGDzVnqaviFJMvJYRit0MB8GA1UdIwQY MBaAFMbPqU9hNOOWDqXzGIRqMM8+ki3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUt ZjlhNDM3MDlkMDBiLzEvT2g1TmZaQUFZUE5XZXBxLUlVa3k4bGhHSzNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUtZjlhNDM3MDlkMDBi LzEveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCUEGUAwQA uVAfAwQCwdqwMA0EAgACMAcDBQMqDmNAMA0GCSqGSIb3DQEBCwUAA4IBAQBzw4sm 7COlhmdmlzi6sEa4RCHEuCixxg1Xq4lcnDzDpbSGuNYSFufxXsAFfmAllj5yT/EG /c+xnCvHdPt7UPilGUhKhyP0pYaOMRLlpNV0mbOktvUIBMUPGkt7J9NYC1zS3wXZ 9w3oAhW0XhkM1uPp6SX2FoyOyK+yEKqhzsmaT74oWqEX9Iu1WemYwk4XeOthmM4y xY6gC2hzXy96vioc+jN/AI/Ce0TOCb0r7bu/LAKrY5ZpkfstkceNFgE/InpXP2rJ uDZ/QCZJ+vPi/2Zs6+BTzRZ9Kaw6+21chPWU6iMYYau3lys00077OvMsq1ULE+N2 2blxPjRxCfVDBwh0 -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:19 2026 by rpki-client