This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/OhY8iioWFoGV_gNBKSk4X8sRbuk.roa File: OhY8iioWFoGV_gNBKSk4X8sRbuk.roa (raw, json) Hash identifier: 4vq6Ky/r1novGDL62rq4JfVtcvb5rhPQ6KChaQx7Zvk= Subject key identifier: 3A:16:3C:8A:2A:16:16:81:95:FE:03:41:29:29:38:5F:CB:11:6E:E9 Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb Certificate serial: 019B7F858523911B6F4C24575A65CA11043A Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/OhY8iioWFoGV_gNBKSk4X8sRbuk.roa Signing time: Fri 02 Jan 2026 16:23:35 +0000 ROA not before: Fri 02 Jan 2026 16:23:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25238 IP address blocks: 195.234.204.0/22 maxlen: 22 195.234.204.0/23 maxlen: 23 195.234.204.0/24 maxlen: 24 195.234.205.0/24 maxlen: 24 195.234.206.0/23 maxlen: 23 195.234.206.0/24 maxlen: 24 195.234.207.0/24 maxlen: 24 2001:67c:2620::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:85:23:91:1b:6f:4c:24:57:5a:65:ca:11:04:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb Validity Not Before: Jan 2 16:23:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a163c8a2a16168195fe03412929385fcb116ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3f:4e:e3:9c:ec:68:ae:9a:9a:20:f5:35:85: e9:9e:99:9f:de:7b:73:e6:08:01:fc:5a:a7:f6:36: 69:6c:99:36:96:2c:12:ad:f6:b5:2a:1a:36:93:f9: c8:ec:25:46:9b:a2:e2:08:18:0b:45:de:d5:d1:8e: c5:91:2c:ce:60:e0:35:38:1b:e2:6e:05:71:29:c2: ae:fb:5b:91:1e:d3:74:fe:26:ba:ea:86:c5:5f:e9: 34:ee:10:21:47:e4:92:51:1d:2b:65:c3:4a:42:c0: 4a:49:30:37:dd:80:75:ea:8e:cd:8c:ca:8f:8c:ee: 4c:0a:6a:2a:07:4e:82:53:67:38:66:dd:ac:4d:fd: 21:3a:3f:b5:60:94:de:11:2f:fd:2e:27:50:5e:d7: bf:85:04:9f:54:8a:68:61:fb:d1:66:0b:8d:16:bf: bf:29:7c:e7:22:f5:b9:e2:46:ff:b5:ce:9f:fe:c9: e9:17:fe:52:2f:e7:8e:e3:7e:cb:29:23:a2:6b:1b: 4a:7b:ff:0b:ea:e4:98:86:08:ff:ae:ba:9f:b1:d9: c0:24:f1:82:46:a6:3c:53:2f:35:b8:2a:70:95:2a: d4:24:c7:4b:0a:88:d2:d9:3f:d5:5d:d1:e0:c0:b3: 7b:46:24:89:82:e9:85:34:01:ba:cf:e4:71:d6:ac: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:16:3C:8A:2A:16:16:81:95:FE:03:41:29:29:38:5F:CB:11:6E:E9 X509v3 Authority Key Identifier: keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/OhY8iioWFoGV_gNBKSk4X8sRbuk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.204.0/22 IPv6: 2001:67c:2620::/48 Signature Algorithm: sha256WithRSAEncryption 2a:a6:61:73:b9:dc:44:0c:10:62:9f:cd:b2:61:b1:e6:2f:98: d5:1f:16:82:29:02:3d:66:92:48:9f:3b:f3:f5:1d:a8:0c:b3: 63:5f:d8:57:b9:4e:9d:45:cb:81:b9:45:41:e5:43:6e:c0:99: 61:2f:fe:f2:b2:ec:c1:77:90:e5:96:01:a2:87:7a:6e:e7:78: f6:fe:c5:73:99:c0:a7:4d:61:32:cd:c6:9e:5a:12:ac:6e:f5: 4a:9f:f1:a5:84:54:a5:44:10:75:66:60:f0:70:fe:9e:47:fa: d8:97:95:9d:62:e5:4d:74:89:ef:fc:d4:85:bd:90:32:69:dd: f9:0f:d4:d6:13:d7:91:47:0f:fb:fd:65:a2:b6:68:1f:d0:6c: f5:5f:d9:fc:37:60:f3:c5:5f:d1:e8:e2:28:1c:44:4b:4d:3a: 3a:97:ae:23:df:99:fe:d0:42:11:fd:5f:5e:60:5d:a9:94:18: c3:d6:54:06:76:b6:a1:ad:5f:ec:33:14:96:82:31:61:8d:7f: 5f:62:d1:40:bd:45:56:61:7f:0b:12:01:90:7f:2a:cf:4f:a6: ff:82:81:dd:d2:2c:52:98:49:aa:82:72:2c:7b:18:20:d5:8a: d9:80:7d:56:45:a4:c9:d2:71:57:a4:2f:af:b6:f4:32:a7:d2: ba:56:7a:a2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/hYUjkRtvTCRXWmXKEQQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MGEwODFmYmE4ZmIzM2VmYjQ2MjU5ZWY5M2Y2ODc4ZDcw MTUwZWIwHhcNMjYwMTAyMTYyMzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTE2M2M4YTJhMTYxNjgxOTVmZTAzNDEyOTI5Mzg1ZmNiMTE2ZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD9O45zsaK6amiD1NYXpnpmf3ntz 5ggB/Fqn9jZpbJk2liwSrfa1Kho2k/nI7CVGm6LiCBgLRd7V0Y7FkSzOYOA1OBvi bgVxKcKu+1uRHtN0/ia66obFX+k07hAhR+SSUR0rZcNKQsBKSTA33YB16o7NjMqP jO5MCmoqB06CU2c4Zt2sTf0hOj+1YJTeES/9LidQXte/hQSfVIpoYfvRZguNFr+/ KXznIvW54kb/tc6f/snpF/5SL+eO437LKSOiaxtKe/8L6uSYhgj/rrqfsdnAJPGC RqY8Uy81uCpwlSrUJMdLCojS2T/VXdHgwLN7RiSJgumFNAG6z+Rx1qxLZwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDoWPIoqFhaBlf4DQSkpOF/LEW7pMB8GA1UdIwQY MBaAFKQKCB+6j7M++0Ylnvk/aHjXAVDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEt YWU5MWU0NjYyZDkzLzEvT2hZOGlpb1dGb0dWX2dOQktTazRYOHNSYnVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jYjI3YTAtOTRkMi00OWFhLTg1ZWEtYWU5MWU0NjYyZDkz LzEvcEFvSUg3cVBzejc3UmlXZS1UOW9lTmNCVU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCw+rMMA8E AgACMAkDBwAgAQZ8JiAwDQYJKoZIhvcNAQELBQADggEBACqmYXO53EQMEGKfzbJh seYvmNUfFoIpAj1mkkifO/P1HagMs2Nf2Fe5Tp1Fy4G5RUHlQ27AmWEv/vKy7MF3 kOWWAaKHem7nePb+xXOZwKdNYTLNxp5aEqxu9Uqf8aWEVKVEEHVmYPBw/p5H+tiX lZ1i5U10ie/81IW9kDJp3fkP1NYT15FHD/v9ZaK2aB/QbPVf2fw3YPPFX9Ho4igc REtNOjqXriPfmf7QQhH9X15gXamUGMPWVAZ2tqGtX+wzFJaCMWGNf19i0UC9RVZh fwsSAZB/Ks9Ppv+Cgd3SLFKYSaqCcix7GCDVitmAfVZFpMnScVekL6+29DKn0rpW eqI= -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:38 2026 by rpki-client