This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/OoheSSCa5I7EwzgFEnlfY2jnBjs.roa File: OoheSSCa5I7EwzgFEnlfY2jnBjs.roa (raw, json) Hash identifier: 4TrMNV+CUPEbrPuDX+5VWadJ22cCDdcCYltr8Dnb3+w= Subject key identifier: 3A:88:5E:49:20:9A:E4:8E:C4:C3:38:05:12:79:5F:63:68:E7:06:3B Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194 Certificate serial: 019B77C68491F0924C9B7EA2871676FE4E80 Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/OoheSSCa5I7EwzgFEnlfY2jnBjs.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25554 IP address blocks: 212.122.164.0/24 maxlen: 24 212.122.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:84:91:f0:92:4c:9b:7e:a2:87:16:76:fe:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a885e49209ae48ec4c3380512795f6368e7063b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:fe:36:2a:59:f1:cb:8d:e7:64:cb:c8:8b: 5b:9c:b4:2e:5b:3b:0b:84:90:0b:3c:f7:85:45:54: 23:f9:1e:31:7a:b5:95:c0:fb:a9:95:a8:f4:5a:f2: f1:e4:25:39:53:7d:fb:e0:52:e4:ea:61:d9:57:89: 28:7b:0f:4a:60:82:8e:8f:3c:7a:f4:1b:20:6e:4e: 49:1b:a5:e7:6a:13:57:fb:39:78:05:61:3e:3b:5a: fe:ee:3c:55:d0:5d:fc:ef:94:fb:6b:a8:74:7e:e7: 6b:91:76:bc:ee:2f:bb:ef:86:b9:69:80:69:0c:16: 46:20:94:94:02:12:23:39:d8:88:f3:c8:ad:f6:d8: 3e:78:13:21:f5:31:52:99:80:01:c8:61:bd:30:e0: af:c1:09:ef:01:a0:d7:10:5e:ed:ef:3d:28:23:be: bc:93:63:0f:03:76:5d:ce:93:c9:25:8c:50:24:d8: 4b:e4:98:26:34:af:4c:f3:52:a2:bf:bc:87:ee:d5: e5:b4:ec:1a:6a:e4:bd:37:72:34:a3:6a:6a:53:af: 38:8b:d4:22:96:85:e6:99:53:3a:73:8a:bf:a9:0d: 61:c2:5c:df:d5:01:6b:e7:ea:39:a2:7e:1c:04:ab: 3a:2a:d1:77:2e:5d:28:5f:b9:4f:c1:ae:7d:f7:50: f3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:88:5E:49:20:9A:E4:8E:C4:C3:38:05:12:79:5F:63:68:E7:06:3B X509v3 Authority Key Identifier: keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/OoheSSCa5I7EwzgFEnlfY2jnBjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.122.164.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:71:ea:9b:8f:3e:ad:f6:03:9d:2d:5b:fc:f9:47:f6:d2:c4: 26:5d:76:65:15:ca:76:3f:66:bc:6d:76:46:2b:d5:76:1a:36: 94:6c:de:b4:41:8e:98:74:37:81:9c:1b:67:20:16:22:b9:e0: 26:f1:53:7e:aa:55:7b:ff:6d:70:b3:a0:0a:61:05:7c:ab:f7: 2b:a2:4a:91:43:20:6d:38:3a:20:37:e6:22:56:55:2a:25:95: b1:b7:9c:09:a6:e8:bb:8b:c7:89:3c:82:79:5c:ef:4d:4f:3d: 14:76:79:5e:78:b0:a4:77:84:b8:7c:03:c2:1e:d2:06:b1:24: e6:56:0c:ab:e8:a4:af:6f:7c:83:f8:af:a9:26:84:50:de:9a: 83:ba:8e:3e:e3:79:05:7a:df:2b:19:da:ee:9d:5e:80:bc:05: 74:bc:5e:bb:e2:81:ec:9d:ff:ac:46:57:07:4e:80:2b:3f:3b: 41:2b:03:95:98:df:b7:39:41:98:ec:9d:40:0e:2a:4a:09:3f: 89:60:12:de:87:4c:43:b4:f6:a6:aa:ee:18:04:80:47:6b:68: e4:ed:c7:d0:c5:51:7d:79:7d:db:e3:b8:ea:b1:53:0e:02:ad: 5e:64:88:a2:51:b3:fc:30:bf:f7:52:67:0a:68:c8:d0:86:ed: b2:af:2f:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xoSR8JJMm36ihxZ2/k6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMjE1ZjU4MTU5ZWM1NzZhMjAyMjc3NmVhNjRmNjFjNWJi MDAxOTQwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTg4NWU0OTIwOWFlNDhlYzRjMzM4MDUxMjc5NWY2MzY4ZTcwNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V7+NipZ8cuN52TLyItbnLQuWzsL hJALPPeFRVQj+R4xerWVwPuplaj0WvLx5CU5U3374FLk6mHZV4koew9KYIKOjzx6 9Bsgbk5JG6XnahNX+zl4BWE+O1r+7jxV0F3875T7a6h0fudrkXa87i+774a5aYBp DBZGIJSUAhIjOdiI88it9tg+eBMh9TFSmYAByGG9MOCvwQnvAaDXEF7t7z0oI768 k2MPA3ZdzpPJJYxQJNhL5JgmNK9M81Kiv7yH7tXltOwaauS9N3I0o2pqU684i9Qi loXmmVM6c4q/qQ1hwlzf1QFr5+o5on4cBKs6KtF3Ll0oX7lPwa5991DzXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDqIXkkgmuSOxMM4BRJ5X2No5wY7MB8GA1UdIwQY MBaAFMwhX1gVnsV2ogIndupk9hxbsAGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAt ODQzZWVlZTBhMjYwLzEvT29oZVNTQ2E1STdFd3pnRkVubGZZMmpuQmpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAtODQzZWVlZTBhMjYw LzEvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1HqkMA0G CSqGSIb3DQEBCwUAA4IBAQArceqbjz6t9gOdLVv8+Uf20sQmXXZlFcp2P2a8bXZG K9V2GjaUbN60QY6YdDeBnBtnIBYiueAm8VN+qlV7/21ws6AKYQV8q/crokqRQyBt ODogN+YiVlUqJZWxt5wJpui7i8eJPIJ5XO9NTz0UdnleeLCkd4S4fAPCHtIGsSTm Vgyr6KSvb3yD+K+pJoRQ3pqDuo4+43kFet8rGdrunV6AvAV0vF674oHsnf+sRlcH ToArPztBKwOVmN+3OUGY7J1ADipKCT+JYBLeh0xDtPamqu4YBIBHa2jk7cfQxVF9 eX3b47jqsVMOAq1eZIiiUbP8ML/3UmcKaMjQhu2yry/N -----END CERTIFICATE-----Generated at Wed Jan 7 07:00:11 2026 by rpki-client