This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ohU1cnvjNfxWuepVkjRa06OJfuU.roa File: ohU1cnvjNfxWuepVkjRa06OJfuU.roa (raw, json) Hash identifier: 30e5bsuiYaaP9kH7j7NGuQ8fKIB7hM+APPzNsaPzyUo= Subject key identifier: A2:15:35:72:7B:E3:35:FC:56:B9:EA:55:92:34:5A:D3:A3:89:7E:E5 Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8 Certificate serial: 019B7EA73BB5D89DD99DDE7F4259FE42C953 Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ohU1cnvjNfxWuepVkjRa06OJfuU.roa Signing time: Fri 02 Jan 2026 12:20:47 +0000 ROA not before: Fri 02 Jan 2026 12:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34871 IP address blocks: 185.240.148.0/23 maxlen: 23 185.240.148.0/24 maxlen: 24 185.240.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3b:b5:d8:9d:d9:9d:de:7f:42:59:fe:42:c9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8 Validity Not Before: Jan 2 12:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a21535727be335fc56b9ea5592345ad3a3897ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:18:fb:8f:da:ab:75:c7:14:13:8a:b7:d8: a1:5a:eb:46:85:59:e1:92:c2:19:b5:c0:d1:28:f5: 83:7e:e3:f6:4f:32:a6:30:4f:00:ab:ac:ba:2b:fc: 8a:e2:e6:0a:56:37:ad:61:07:7d:11:b9:c6:63:44: 52:f1:e2:bb:f1:65:eb:a3:79:fb:81:77:79:ee:75: 3f:84:38:30:41:5a:55:e3:e3:4e:8d:65:a8:e6:4a: 0d:9d:a5:86:2a:89:b9:a0:ab:de:5f:10:39:6e:0e: b3:93:9e:2e:95:05:55:83:b7:b2:32:24:0c:89:a4: de:64:82:95:d9:4d:7f:28:39:74:b3:35:06:3f:c9: 93:db:f0:71:1d:da:eb:7c:65:66:a0:98:c8:cb:b0: bc:00:94:41:0e:18:58:8d:f3:6d:b6:37:d5:16:82: e5:3f:7e:69:e5:c7:33:8f:14:8c:0c:e7:02:18:9f: 0a:66:ac:80:4e:a5:f4:3f:a9:87:9b:6f:b5:e8:5f: ec:81:ba:e4:44:9e:2f:7c:ab:e9:00:62:d9:a8:49: 58:99:50:2a:d2:9c:e5:78:40:ce:66:cc:d0:88:ca: 14:0b:17:29:45:4f:91:70:3c:9f:a4:60:2c:14:b1: 9d:ff:ea:36:a8:27:29:dc:9b:84:43:73:72:7a:59: 92:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:15:35:72:7B:E3:35:FC:56:B9:EA:55:92:34:5A:D3:A3:89:7E:E5 X509v3 Authority Key Identifier: keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ohU1cnvjNfxWuepVkjRa06OJfuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.148.0/23 185.240.151.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:f8:01:61:5b:4a:76:8e:52:c3:3b:82:54:55:4c:e3:47:9f: af:69:25:97:80:45:5c:43:81:bc:4f:94:93:fa:b3:66:83:25: da:27:9f:26:38:f0:37:9c:f5:a7:99:c4:4e:b0:4f:39:fe:27: d7:4e:be:31:28:74:55:84:e6:87:04:22:22:a3:21:ee:23:4c: d7:b8:d0:fc:47:e7:96:fb:fd:36:4e:bc:29:d3:39:cd:85:87: 30:28:55:f4:40:e9:6d:a7:3d:96:8b:0d:4d:2b:1c:e1:c3:fa: a2:9f:ce:88:95:02:f4:79:fb:0f:22:a6:49:cb:79:23:0e:36: b3:16:12:2c:13:fc:4c:b3:8f:df:4b:2a:45:cc:11:6d:22:c3: de:a3:01:6c:e5:e2:cc:f4:45:82:c8:b1:38:8c:56:10:eb:05: 6a:19:14:ec:9e:14:23:a8:f2:60:4e:a5:1e:60:09:57:f0:f3: d9:91:39:03:b0:16:61:99:a0:7f:c3:68:71:40:80:39:13:1a: fb:c9:e4:de:ba:0d:d6:2a:7d:31:5f:96:34:96:6e:19:65:e6: fa:fe:2c:c3:b8:c4:9c:20:df:f4:95:65:0c:41:78:1b:fc:f0: 53:cb:d1:6b:98:28:9a:94:f3:0c:26:e7:79:38:04:cb:66:3f: dd:13:a8:54 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pzu12J3Znd5/Qln+QslTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk ZmQ5YTgwHhcNMjYwMTAyMTIyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjE1MzU3MjdiZTMzNWZjNTZiOWVhNTU5MjM0NWFkM2EzODk3ZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob0Y+4/aq3XHFBOKt9ihWutGhVnh ksIZtcDRKPWDfuP2TzKmME8Aq6y6K/yK4uYKVjetYQd9EbnGY0RS8eK78WXro3n7 gXd57nU/hDgwQVpV4+NOjWWo5koNnaWGKom5oKveXxA5bg6zk54ulQVVg7eyMiQM iaTeZIKV2U1/KDl0szUGP8mT2/BxHdrrfGVmoJjIy7C8AJRBDhhYjfNttjfVFoLl P35p5cczjxSMDOcCGJ8KZqyATqX0P6mHm2+16F/sgbrkRJ4vfKvpAGLZqElYmVAq 0pzleEDOZszQiMoUCxcpRU+RcDyfpGAsFLGd/+o2qCcp3JuEQ3NyelmSNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKIVNXJ74zX8VrnqVZI0WtOjiX7lMB8GA1UdIwQY MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt MThkMWE0MDZhYWVkLzEvb2hVMWNudmpOZnhXdWVwVmtqUmEwNk9KZnVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBufCUAwQA ufCXMA0GCSqGSIb3DQEBCwUAA4IBAQAv+AFhW0p2jlLDO4JUVUzjR5+vaSWXgEVc Q4G8T5ST+rNmgyXaJ58mOPA3nPWnmcROsE85/ifXTr4xKHRVhOaHBCIioyHuI0zX uND8R+eW+/02Trwp0znNhYcwKFX0QOltpz2Wiw1NKxzhw/qin86IlQL0efsPIqZJ y3kjDjazFhIsE/xMs4/fSypFzBFtIsPeowFs5eLM9EWCyLE4jFYQ6wVqGRTsnhQj qPJgTqUeYAlX8PPZkTkDsBZhmaB/w2hxQIA5Exr7yeTeug3WKn0xX5Y0lm4ZZeb6 /izDuMScIN/0lWUMQXgb/PBTy9FrmCialPMMJud5OATLZj/dE6hU -----END CERTIFICATE-----Generated at Mon Jan 26 05:55:33 2026 by rpki-client