This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/OsHfm5IcRp6wCajw-NE1iWNH7Z8.roa File: OsHfm5IcRp6wCajw-NE1iWNH7Z8.roa (raw, json) Hash identifier: oS3FUlduEB7YSg+361aWK05LocqnWlc3lIUtH4BZyko= Subject key identifier: 3A:C1:DF:9B:92:1C:46:9E:B0:09:A8:F0:F8:D1:35:89:63:47:ED:9F Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db Certificate serial: 019B7F837E4AE294694874041E045596F1A8 Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/OsHfm5IcRp6wCajw-NE1iWNH7Z8.roa Signing time: Fri 02 Jan 2026 16:21:22 +0000 ROA not before: Fri 02 Jan 2026 16:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215742 IP address blocks: 195.184.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:7e:4a:e2:94:69:48:74:04:1e:04:55:96:f1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db Validity Not Before: Jan 2 16:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ac1df9b921c469eb009a8f0f8d135896347ed9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d4:88:cf:44:cd:9d:e7:76:df:82:4e:3d:7c: 8f:e4:c2:fc:6e:32:eb:b4:84:6a:4b:80:5d:81:50: 6d:c1:f3:75:6a:d4:40:ef:61:ee:87:a0:ec:2f:03: 66:bd:46:14:2b:7c:ff:b5:04:c2:0b:09:f3:61:6a: 29:47:f2:79:0e:8f:01:a2:8f:8c:a8:c4:df:ad:03: a4:89:79:04:84:58:fa:32:87:5f:31:49:e9:a6:f5: 2e:c0:4b:d1:60:57:61:e7:1a:f5:f7:c7:7f:af:fd: b3:f3:2a:47:fc:45:b9:a2:b8:65:45:4c:5f:1f:c2: 12:c5:77:db:8e:76:e0:ca:1d:d9:00:b0:76:f3:ab: 78:cc:66:f8:29:15:d0:7f:ee:1c:fd:21:fb:b0:f2: 73:c1:c7:96:ec:5d:ba:75:ed:d3:09:d6:c1:08:19: 1d:cd:8c:d3:b2:08:aa:6c:32:44:4e:d9:ea:e8:f0: 84:7f:27:b6:67:d3:0e:ea:d9:f9:6e:f4:50:d8:23: e2:ea:34:8c:7b:bb:05:a9:bc:ee:17:94:59:96:f3: ed:cf:77:14:1c:dd:9e:d4:f5:85:d2:e2:62:fb:cb: 62:10:f8:44:d6:5f:b2:1c:f2:f0:de:0a:4a:8b:6e: 5b:e2:bd:dd:a0:07:42:4b:18:da:87:d1:2f:e3:bb: 6a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C1:DF:9B:92:1C:46:9E:B0:09:A8:F0:F8:D1:35:89:63:47:ED:9F X509v3 Authority Key Identifier: keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/OsHfm5IcRp6wCajw-NE1iWNH7Z8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.184.238.0/24 Signature Algorithm: sha256WithRSAEncryption 31:03:21:dc:6c:70:b8:04:8f:fa:2d:e0:6d:8d:d3:cd:3b:52: 2a:bc:88:c2:41:3a:44:a2:b8:f4:b8:bb:e1:4e:6c:b3:88:f0: 91:ba:ad:45:49:fb:ff:a9:29:f0:81:f1:9f:75:e7:61:ac:6a: b4:11:5a:b5:1d:6c:d9:fc:25:6d:34:07:63:40:8c:46:09:91: fb:57:7a:51:96:ea:dc:b4:09:15:02:7f:53:c0:71:13:bb:b2: 50:71:54:49:e5:c2:7c:2b:af:5a:e8:92:c3:b9:d9:9d:6a:ce: 79:be:d7:94:08:5f:c9:bb:5c:22:83:e5:86:47:2a:72:d6:9e: 44:c1:7c:77:c7:52:5a:cc:2f:63:8b:7f:6c:68:6e:42:c7:b2: 94:c6:fb:15:ab:f0:c7:89:a5:d6:0c:a7:a4:d3:57:24:7b:fd: 80:57:b1:9a:c5:ab:a6:3f:5c:8f:40:b8:0e:16:6d:44:2f:de: c6:67:28:fb:c5:3b:60:1d:a5:16:29:c5:e8:94:ad:25:5d:3d: c3:68:99:54:d6:9a:c5:73:0e:da:cb:75:da:b7:01:e9:3e:ef: 5e:5c:61:59:66:0b:2e:5b:fa:6c:f2:a4:81:62:99:2e:ee:af: e7:9c:04:4e:09:e8:10:47:13:47:e5:27:7f:8b:22:54:98:6b: 85:98:91:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g35K4pRpSHQEHgRVlvGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MGIyMWY3OWI5ZWEyZjNkMDQyMzc0NzE0ODY3ZDEyNDAx OTk1ZGIwHhcNMjYwMTAyMTYyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWMxZGY5YjkyMWM0NjllYjAwOWE4ZjBmOGQxMzU4OTYzNDdlZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNSIz0TNned234JOPXyP5ML8bjLr tIRqS4BdgVBtwfN1atRA72Huh6DsLwNmvUYUK3z/tQTCCwnzYWopR/J5Do8Boo+M qMTfrQOkiXkEhFj6ModfMUnppvUuwEvRYFdh5xr198d/r/2z8ypH/EW5orhlRUxf H8ISxXfbjnbgyh3ZALB286t4zGb4KRXQf+4c/SH7sPJzwceW7F26de3TCdbBCBkd zYzTsgiqbDJETtnq6PCEfye2Z9MO6tn5bvRQ2CPi6jSMe7sFqbzuF5RZlvPtz3cU HN2e1PWF0uJi+8tiEPhE1l+yHPLw3gpKi25b4r3doAdCSxjah9Ev47tqRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDrB35uSHEaesAmo8PjRNYljR+2fMB8GA1UdIwQY MBaAFEkLIfebnqLz0EI3RxSGfRJAGZXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2Mt NDgwYzMyZjQwMGUxLzEvT3NIZm01SWNScDZ3Q2Fqdy1ORTFpV05IN1o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2MtNDgwYzMyZjQwMGUx LzEvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7juMA0G CSqGSIb3DQEBCwUAA4IBAQAxAyHcbHC4BI/6LeBtjdPNO1IqvIjCQTpEorj0uLvh TmyziPCRuq1FSfv/qSnwgfGfdedhrGq0EVq1HWzZ/CVtNAdjQIxGCZH7V3pRlurc tAkVAn9TwHETu7JQcVRJ5cJ8K69a6JLDudmdas55vteUCF/Ju1wig+WGRypy1p5E wXx3x1JazC9ji39saG5Cx7KUxvsVq/DHiaXWDKek01cke/2AV7GaxaumP1yPQLgO Fm1EL97GZyj7xTtgHaUWKcXolK0lXT3DaJlU1prFcw7ay3XatwHpPu9eXGFZZgsu W/ps8qSBYpku7q/nnAROCegQRxNH5Sd/iyJUmGuFmJGx -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:32 2026 by rpki-client