This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/oWBB0iYZJX-W5I_Wzx5Yono3IMw.roa File: oWBB0iYZJX-W5I_Wzx5Yono3IMw.roa (raw, json) Hash identifier: 9H05WgwG0IKa6fefs9ah5b21BWk+H446mxJWL3/+bmM= Subject key identifier: A1:60:41:D2:26:19:25:7F:96:E4:8F:D6:CF:1E:58:A2:7A:37:20:CC Certificate issuer: /CN=1201cc343074102efa7f0c30f29499e1ad56e29f Certificate serial: 019B797F27ED8E9E6EAABDB13980E87B04DD Authority key identifier: 12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/oWBB0iYZJX-W5I_Wzx5Yono3IMw.roa Signing time: Thu 01 Jan 2026 12:18:55 +0000 ROA not before: Thu 01 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42442 IP address blocks: 46.167.160.0/19 maxlen: 24 46.167.169.0/24 maxlen: 32 46.167.169.20/32 maxlen: 32 46.167.173.0/24 maxlen: 32 91.208.160.0/24 maxlen: 24 130.0.72.0/21 maxlen: 32 130.0.73.0/24 maxlen: 24 130.0.77.0/24 maxlen: 24 185.165.16.0/22 maxlen: 22 194.50.164.0/24 maxlen: 32 195.137.170.0/24 maxlen: 32 195.137.170.121/32 maxlen: 32 195.137.170.122/32 maxlen: 32 2a00:f660::/32 maxlen: 32 2a03:9480::/32 maxlen: 32 2a03:9480:200::/40 maxlen: 40 2a03:9480:300::/40 maxlen: 40 2a03:9480:301::/48 maxlen: 48 2a03:9480:302::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:27:ed:8e:9e:6e:aa:bd:b1:39:80:e8:7b:04:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1201cc343074102efa7f0c30f29499e1ad56e29f Validity Not Before: Jan 1 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a16041d22619257f96e48fd6cf1e58a27a3720cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:aa:3c:2a:93:be:7e:82:f0:5a:a7:e3:e1:e3: 55:e5:d6:38:e7:6a:6f:12:c5:40:32:95:e6:12:26: 7f:e3:3b:81:84:2d:2f:6c:23:7f:65:27:83:d7:c9: 21:05:a8:56:2b:dd:a1:dc:df:0a:0d:03:32:bf:3e: e6:01:f5:3b:f1:83:95:ee:01:fe:1e:9e:9d:0e:bc: 6e:ae:d8:ec:d0:8f:1a:ad:dd:aa:85:b9:a3:2e:e4: 88:4e:a7:ab:71:ef:e1:d6:3c:72:e5:db:12:b1:1e: 4a:9d:4c:eb:e7:43:ac:ad:51:df:b0:f5:51:ef:9b: af:0f:2d:c9:97:46:bc:45:2b:79:07:b2:a9:ed:b1: 21:1e:fa:be:4d:40:d6:f8:37:35:aa:d4:45:77:96: 67:1b:6f:a3:24:fc:17:f0:3f:74:97:ac:2f:08:f8: 19:8f:b3:e7:65:e0:f8:2a:3a:b5:4f:24:1a:d2:09: 4c:24:69:27:c8:1e:15:34:a3:dc:35:96:d9:d9:92: a1:18:d3:4e:c8:b0:ba:23:4d:31:6f:24:4d:30:b1: e0:e2:51:c3:e7:45:41:f1:63:db:29:e0:e6:55:c1: 47:e1:5c:d5:ce:0a:f1:21:cf:10:4c:eb:a1:08:7d: 95:4b:08:2f:dd:3d:1c:6b:ad:df:c0:f9:89:c6:6c: e6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:60:41:D2:26:19:25:7F:96:E4:8F:D6:CF:1E:58:A2:7A:37:20:CC X509v3 Authority Key Identifier: keyid:12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/oWBB0iYZJX-W5I_Wzx5Yono3IMw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.167.160.0/19 91.208.160.0/24 130.0.72.0/21 185.165.16.0/22 194.50.164.0/24 195.137.170.0/24 IPv6: 2a00:f660::/32 2a03:9480::/32 Signature Algorithm: sha256WithRSAEncryption 85:d9:6d:ea:6e:40:1b:4f:78:33:bc:0e:14:4f:43:ad:72:cd: 66:01:ab:df:5d:07:e3:cf:05:c5:b1:3b:e2:4e:42:97:5c:3b: 96:6c:6c:b9:90:5a:9e:65:e2:79:5a:33:a3:bd:d6:dd:53:0b: c4:5e:d3:f1:3c:07:a3:5b:47:5a:1a:3a:ca:ca:b4:e7:65:96: a2:04:0b:4e:a2:e5:f8:7d:e0:10:0f:5c:48:d3:f5:de:b8:e3: 1e:bb:2b:55:58:2e:e8:b6:ae:fc:d0:03:95:a8:72:47:4b:93: c7:ac:4c:71:9f:94:11:6f:96:60:fe:a2:86:9d:b8:c2:d8:17: 35:fd:38:43:17:3c:c2:a2:95:44:8e:d6:c9:e7:47:27:c7:bd: e4:2d:a4:84:b6:84:13:a3:76:d9:32:7d:02:65:7a:be:93:3a: 7c:b1:43:19:a4:18:2e:b6:b2:4a:96:83:21:87:17:ba:07:45: fb:09:80:04:8b:0f:9f:b8:69:ae:48:c1:fe:62:0d:3e:84:df: 88:89:20:b6:1c:cc:2a:a1:00:dd:e3:81:5b:04:c8:bc:9c:6f: 36:58:c8:77:0f:55:d0:be:ff:b7:a7:d6:37:80:83:62:dd:71: 9f:4e:74:cd:b0:1a:ed:e9:91:8d:7e:63:30:fa:9c:d2:b0:1d: 79:3b:6d:9c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt5fyftjp5uqr2xOYDoewTdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMDFjYzM0MzA3NDEwMmVmYTdmMGMzMGYyOTQ5OWUxYWQ1 NmUyOWYwHhcNMjYwMTAxMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTYwNDFkMjI2MTkyNTdmOTZlNDhmZDZjZjFlNThhMjdhMzcyMGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKo8KpO+foLwWqfj4eNV5dY452pv EsVAMpXmEiZ/4zuBhC0vbCN/ZSeD18khBahWK92h3N8KDQMyvz7mAfU78YOV7gH+ Hp6dDrxurtjs0I8ard2qhbmjLuSITqerce/h1jxy5dsSsR5KnUzr50OsrVHfsPVR 75uvDy3Jl0a8RSt5B7Kp7bEhHvq+TUDW+Dc1qtRFd5ZnG2+jJPwX8D90l6wvCPgZ j7PnZeD4Kjq1TyQa0glMJGknyB4VNKPcNZbZ2ZKhGNNOyLC6I00xbyRNMLHg4lHD 50VB8WPbKeDmVcFH4VzVzgrxIc8QTOuhCH2VSwgv3T0ca63fwPmJxmzmcwIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFKFgQdImGSV/luSP1s8eWKJ6NyDMMB8GA1UdIwQY MBaAFBIBzDQwdBAu+n8MMPKUmeGtVuKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWdITU5EQjBFQzc2Znd3dzhwU1o0YTFXNHA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kMTYyOGEtMzNjOC00ZTQ3LWJmZWQt OTllZDY3MzBmODRhLzEvb1dCQjBpWVpKWC1XNUlfV3p4NVlvbm8zSU13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9kMTYyOGEtMzNjOC00ZTQ3LWJmZWQtOTllZDY3MzBmODRh LzEvRWdITU5EQjBFQzc2Znd3dzhwU1o0YTFXNHA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQFLqegAwQA W9CgAwQDggBIAwQCuaUQAwQAwjKkAwQAw4mqMBQEAgACMA4DBQAqAPZgAwUAKgOU gDANBgkqhkiG9w0BAQsFAAOCAQEAhdlt6m5AG094M7wOFE9DrXLNZgGr310H488F xbE74k5Cl1w7lmxsuZBanmXieVozo73W3VMLxF7T8TwHo1tHWho6ysq052WWogQL TqLl+H3gEA9cSNP13rjjHrsrVVgu6Lau/NADlahyR0uTx6xMcZ+UEW+WYP6ihp24 wtgXNf04Qxc8wqKVRI7WyedHJ8e95C2khLaEE6N22TJ9AmV6vpM6fLFDGaQYLray SpaDIYcXugdF+wmABIsPn7hprkjB/mINPoTfiIkgthzMKqEA3eOBWwTIvJxvNljI dw9V0L7/t6fWN4CDYt1xn050zbAa7emRjX5jMPqc0rAdeTttnA== -----END CERTIFICATE-----Generated at Mon Jan 26 13:11:06 2026 by rpki-client