This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/ova4DZPGmvsGGPiVCauJt7d6bFk.roa File: ova4DZPGmvsGGPiVCauJt7d6bFk.roa (raw, json) Hash identifier: FJLqImsR5CthuAk7jPWHhT6Jl73gBfGj24WDFfNiWgI= Subject key identifier: A2:F6:B8:0D:93:C6:9A:FB:06:18:F8:95:09:AB:89:B7:B7:7A:6C:59 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019B7910F12A430EB299E797398C39D85FEB Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/ova4DZPGmvsGGPiVCauJt7d6bFk.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12541 IP address blocks: 158.172.140.0/23 maxlen: 23 158.172.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f1:2a:43:0e:b2:99:e7:97:39:8c:39:d8:5f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2f6b80d93c69afb0618f89509ab89b7b77a6c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0f:5a:64:e0:26:1a:54:cb:46:f6:3f:26:08: e9:21:52:7d:fa:79:44:7e:70:b7:c6:30:0b:25:d4: 7d:65:1e:64:4a:ab:7f:0e:f7:0e:67:f1:eb:8d:1f: 18:c2:9e:42:ff:7d:d9:2b:7a:3f:3f:f3:f2:71:51: 82:a5:19:22:4d:cf:b8:e4:75:03:6a:bd:0f:fb:ee: 70:7c:81:af:dc:ec:6a:74:37:1b:25:ad:78:58:cf: 76:75:94:6c:9d:7e:55:2c:d9:9f:55:67:6a:ab:a9: dd:18:47:76:7a:7a:87:59:d3:93:0b:37:be:e9:da: 31:49:d3:83:6b:38:73:8a:8d:b8:3d:46:9f:53:b3: cc:cb:3d:09:3d:f9:a2:25:ec:8b:a8:06:1c:d4:42: 28:b2:06:47:b3:18:c1:45:14:7b:f1:e3:3b:0f:01: 4f:e0:00:87:c8:01:b2:a7:9d:54:22:93:fb:0f:53: c0:07:e2:70:26:27:52:e4:fd:89:d5:f7:69:65:49: ba:ea:58:39:ab:2b:75:91:1f:38:7a:f5:2d:f3:21: 4c:04:cd:32:90:e6:d7:8b:dd:10:af:47:04:cd:44: e4:27:84:9c:65:ff:3d:c6:28:f0:6d:db:68:d1:0c: e3:13:3e:ba:1d:62:ea:e9:a1:ab:a9:07:96:bf:bc: 6c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F6:B8:0D:93:C6:9A:FB:06:18:F8:95:09:AB:89:B7:B7:7A:6C:59 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/ova4DZPGmvsGGPiVCauJt7d6bFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.172.140.0-158.172.142.255 Signature Algorithm: sha256WithRSAEncryption 56:90:b9:5e:c0:6d:08:cc:b0:79:04:ac:8e:63:8e:48:35:f8: 09:27:dd:68:e9:e7:f3:18:2e:30:dd:34:71:93:77:2c:c7:65: 1e:40:f8:94:c7:81:37:2e:36:88:57:9d:77:d8:a4:11:8f:14: 96:66:81:1c:1d:19:e2:54:c8:8d:85:da:88:87:24:bb:93:31: f6:1f:bf:5e:68:81:23:2b:75:99:7c:ec:4e:29:ce:cf:f3:fc: c9:ca:f3:70:73:da:28:ff:5c:19:89:fa:f4:1e:a9:78:f2:7a: a6:f8:fd:04:6a:34:d1:3f:b1:ab:32:62:43:10:0e:3f:95:33: 76:05:1d:21:2f:8d:ea:02:7b:8c:14:9c:21:ff:a8:68:33:ae: 54:ed:6b:d8:d4:36:83:3b:ad:a9:02:93:2f:a1:1b:99:89:25: c7:1a:a5:bf:dd:d9:dd:58:c3:4b:f7:39:94:33:c0:03:bf:08: f9:d6:b7:80:03:1f:50:3e:30:65:6a:b9:0d:1a:87:b9:db:83: 75:8f:b4:22:c3:6d:d5:6f:d9:43:f9:5e:46:b5:77:3d:7f:95: 10:57:8c:11:19:65:12:b0:5c:a7:63:2e:14:a8:55:1d:c6:76: a1:79:a5:ab:6f:cd:35:60:7c:7f:d1:c5:7b:5a:08:88:31:81: bf:4e:66:9d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EPEqQw6ymeeXOYw52F/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmY2YjgwZDkzYzY5YWZiMDYxOGY4OTUwOWFiODliN2I3N2E2YzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q9aZOAmGlTLRvY/JgjpIVJ9+nlE fnC3xjALJdR9ZR5kSqt/DvcOZ/HrjR8Ywp5C/33ZK3o/P/PycVGCpRkiTc+45HUD ar0P++5wfIGv3OxqdDcbJa14WM92dZRsnX5VLNmfVWdqq6ndGEd2enqHWdOTCze+ 6doxSdODazhzio24PUafU7PMyz0JPfmiJeyLqAYc1EIosgZHsxjBRRR78eM7DwFP 4ACHyAGyp51UIpP7D1PAB+JwJidS5P2J1fdpZUm66lg5qyt1kR84evUt8yFMBM0y kObXi90Qr0cEzUTkJ4ScZf89xijwbdto0QzjEz66HWLq6aGrqQeWv7xsGQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKL2uA2Txpr7Bhj4lQmribe3emxZMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvb3ZhNERaUEdtdnNHR1BpVkNhdUp0N2Q2YkZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKerIwD BACerI4wDQYJKoZIhvcNAQELBQADggEBAFaQuV7AbQjMsHkErI5jjkg1+Akn3Wjp 5/MYLjDdNHGTdyzHZR5A+JTHgTcuNohXnXfYpBGPFJZmgRwdGeJUyI2F2oiHJLuT MfYfv15ogSMrdZl87E4pzs/z/MnK83Bz2ij/XBmJ+vQeqXjyeqb4/QRqNNE/sasy YkMQDj+VM3YFHSEvjeoCe4wUnCH/qGgzrlTta9jUNoM7rakCky+hG5mJJccapb/d 2d1Yw0v3OZQzwAO/CPnWt4ADH1A+MGVquQ0ah7nbg3WPtCLDbdVv2UP5Xka1dz1/ lRBXjBEZZRKwXKdjLhSoVR3GdqF5patvzTVgfH/RxXtaCIgxgb9OZp0= -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:49 2026 by rpki-client