This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/ohBM3zsEzHBfzu5ZdOgEuGWV564.roa File: ohBM3zsEzHBfzu5ZdOgEuGWV564.roa (raw, json) Hash identifier: i84QGTyCQlLNMzWx6hzk7qApExrJMNQGhjePWOzMThk= Subject key identifier: A2:10:4C:DF:3B:04:CC:70:5F:CE:EE:59:74:E8:04:B8:65:95:E7:AE Certificate issuer: /CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee Certificate serial: 019B77C66D59F017C0D17272A1743CA19682 Authority key identifier: 50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/ohBM3zsEzHBfzu5ZdOgEuGWV564.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48659 IP address blocks: 195.8.52.0/23 maxlen: 23 195.8.52.0/24 maxlen: 24 195.8.53.0/24 maxlen: 24 195.46.36.0/23 maxlen: 23 195.46.36.0/24 maxlen: 24 195.46.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6d:59:f0:17:c0:d1:72:72:a1:74:3c:a1:96:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2104cdf3b04cc705fceee5974e804b86595e7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:51:9f:cc:49:8d:9e:53:66:59:93:62:a7:9b: ba:df:5a:60:8d:88:20:b7:25:7c:30:e3:0c:7c:aa: 2b:b3:d7:f4:66:9f:7f:24:e3:a4:87:ed:2b:38:13: ed:28:16:b8:b2:9b:de:4e:47:87:15:2d:2f:d0:42: 62:4e:b8:76:4e:9d:46:42:b1:51:02:15:df:e0:46: 89:4b:2a:8f:44:e4:37:47:65:71:eb:62:d5:cd:78: 2b:42:82:9d:33:9e:29:8d:8c:53:dd:56:01:5f:99: 7d:47:dd:a9:2e:c2:ba:11:3b:56:3c:99:cd:3d:fc: 55:03:ba:53:6f:75:4d:aa:bb:46:e0:6c:94:93:c9: 98:87:73:d7:55:dd:70:9b:2a:4a:53:64:25:b7:3e: 12:23:30:36:60:93:d2:e2:cd:e6:34:74:7c:11:d7: 83:9a:3f:fd:d6:01:bf:c0:35:3f:40:9c:2e:83:10: 40:4e:b4:ea:c0:0f:66:73:05:fa:ce:61:49:28:16: d0:4e:56:c2:08:ef:44:6c:12:fa:15:a2:29:16:61: ad:cf:09:5c:c4:df:4d:7c:bb:53:49:77:bf:1b:2d: 11:8b:35:55:b2:16:3a:48:30:a7:9b:50:7c:19:ca: cb:81:a9:e5:91:51:82:fa:76:6e:4c:00:31:e6:5c: 87:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:10:4C:DF:3B:04:CC:70:5F:CE:EE:59:74:E8:04:B8:65:95:E7:AE X509v3 Authority Key Identifier: keyid:50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/ohBM3zsEzHBfzu5ZdOgEuGWV564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.8.52.0/23 195.46.36.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:78:01:f8:db:b7:8f:75:b7:68:15:6e:97:96:89:df:16:7e: f0:f0:66:98:49:9e:d2:0c:ad:d3:dc:79:ca:c2:1b:ee:3d:d7: ef:19:b3:d7:cc:2e:77:6f:5c:bb:91:79:17:3f:06:29:d8:7c: 0c:56:2a:e3:00:c2:c4:d5:b0:06:ae:19:15:13:24:5f:cc:e9: 1e:87:66:05:cf:92:8d:36:0e:08:b6:52:c4:65:61:a2:d7:28: 0e:76:fd:cf:ea:dc:63:32:50:a7:88:48:f7:c3:4a:2e:ba:50: 57:d7:49:2c:00:60:57:7e:d1:b0:de:f1:d5:d8:84:f2:d0:86: d0:3d:8d:be:e9:00:e4:8b:48:a5:db:4b:d5:75:9f:b7:b0:94: 41:1d:66:24:6b:16:e4:4b:87:36:79:79:34:14:fe:f3:b6:05: e5:a1:48:27:75:a6:e9:28:21:c1:ef:c9:71:96:68:e1:66:26: 29:21:a0:41:80:65:c1:f2:e2:63:78:0c:78:c1:85:46:47:ad: 14:5c:c0:6d:d7:56:1f:54:18:61:47:8a:83:15:da:29:4e:d3: 42:6e:4f:c6:7d:f0:aa:c3:c6:b6:c8:69:2d:33:82:34:f4:80: b6:3f:19:d2:e3:aa:c4:63:6f:f7:7b:2f:f8:57:98:3f:a7:d1: 29:db:f2:b2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xm1Z8BfA0XJyoXQ8oZaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwM2Y3M2ZlZmU5ZGJkMTY1NjE0Mzc1YTE4YTM0Y2RjZmI0 YTMxZWUwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjEwNGNkZjNiMDRjYzcwNWZjZWVlNTk3NGU4MDRiODY1OTVlN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11GfzEmNnlNmWZNip5u631pgjYgg tyV8MOMMfKors9f0Zp9/JOOkh+0rOBPtKBa4spveTkeHFS0v0EJiTrh2Tp1GQrFR AhXf4EaJSyqPROQ3R2Vx62LVzXgrQoKdM54pjYxT3VYBX5l9R92pLsK6ETtWPJnN PfxVA7pTb3VNqrtG4GyUk8mYh3PXVd1wmypKU2Qltz4SIzA2YJPS4s3mNHR8EdeD mj/91gG/wDU/QJwugxBATrTqwA9mcwX6zmFJKBbQTlbCCO9EbBL6FaIpFmGtzwlc xN9NfLtTSXe/Gy0RizVVshY6SDCnm1B8GcrLganlkVGC+nZuTAAx5lyHmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKIQTN87BMxwX87uWXToBLhlleeuMB8GA1UdIwQY MBaAFFA/c/7+nb0WVhQ3WhijTNz7SjHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUQ5el92NmR2UlpXRkRkYUdLTk0zUHRLTWU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kZDU0M2QtZDFmNS00ZjQ5LTg5MGYt NTk0NGQ4ZWMyNzNjLzEvb2hCTTN6c0V6SEJmenU1WmRPZ0V1R1dWNTY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9kZDU0M2QtZDFmNS00ZjQ5LTg5MGYtNTk0NGQ4ZWMyNzNj LzEvVUQ5el92NmR2UlpXRkRkYUdLTk0zUHRLTWU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwwg0AwQB wy4kMA0GCSqGSIb3DQEBCwUAA4IBAQBdeAH427ePdbdoFW6XlonfFn7w8GaYSZ7S DK3T3HnKwhvuPdfvGbPXzC53b1y7kXkXPwYp2HwMVirjAMLE1bAGrhkVEyRfzOke h2YFz5KNNg4ItlLEZWGi1ygOdv3P6txjMlCniEj3w0ouulBX10ksAGBXftGw3vHV 2ITy0IbQPY2+6QDki0il20vVdZ+3sJRBHWYkaxbkS4c2eXk0FP7ztgXloUgndabp KCHB78lxlmjhZiYpIaBBgGXB8uJjeAx4wYVGR60UXMBt11YfVBhhR4qDFdopTtNC bk/GffCqw8a2yGktM4I09IC2PxnS46rEY2/3ey/4V5g/p9Ep2/Ky -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:00 2026 by rpki-client