This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/OaCi7coDoqW_riGEhMlZBNecV8E.roa File: OaCi7coDoqW_riGEhMlZBNecV8E.roa (raw, json) Hash identifier: kw8cwASGXXkuOedKfXksZTABUFf4TlTavoR1JiY/+a8= Subject key identifier: 39:A0:A2:ED:CA:03:A2:A5:BF:AE:21:84:84:C9:59:04:D7:9C:57:C1 Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4 Certificate serial: 019B7B35CA1DCCC0A8F50846E0E0E3F3363D Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/OaCi7coDoqW_riGEhMlZBNecV8E.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206283 IP address blocks: 185.26.26.0/23 maxlen: 23 2a02:f401::/32 maxlen: 32 2a02:f402::/32 maxlen: 32 2a02:f403::/32 maxlen: 32 2a02:f406:fe50::/48 maxlen: 48 2a02:f406:fe90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ca:1d:cc:c0:a8:f5:08:46:e0:e0:e3:f3:36:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4 Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39a0a2edca03a2a5bfae218484c95904d79c57c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:78:72:21:72:02:fc:37:28:0e:9c:3a:b9:5f: 08:98:c4:98:b2:73:87:a2:81:04:ae:30:1a:40:ab: 27:f0:30:b2:d3:10:34:36:f9:d7:4f:a1:22:a9:f6: 6d:7c:9b:28:ea:bc:c7:67:23:5b:b7:d3:f6:c6:48: 92:12:8f:f7:96:68:4e:1e:c7:db:3f:f6:fe:fc:19: 5b:e6:22:1d:6a:72:42:00:91:e0:24:88:5f:72:c1: c6:39:2e:ae:ef:74:01:a6:2d:26:c9:da:e8:a3:88: 06:54:aa:b1:a3:57:b4:23:82:34:37:f2:67:5e:f8: e4:bc:61:6d:77:36:df:9b:c6:22:e1:ce:3a:95:8d: e3:8a:f8:e5:e6:14:7c:61:36:bf:84:5a:35:2f:57: e1:af:b0:0a:c5:f3:29:9c:99:63:fe:b2:a7:49:19: 90:e6:30:dc:24:3e:2c:2f:2f:47:06:c0:07:57:95: d1:74:72:3b:43:3f:35:14:ed:48:e9:84:a6:08:75: e0:37:7d:4a:70:ba:3f:bc:ad:aa:a6:f8:02:8c:42: 02:8c:64:8c:bd:7d:49:e9:66:62:a2:12:99:bb:fc: f7:ac:a0:3f:30:9e:7c:22:b9:30:e0:71:fb:40:19: 6d:04:82:d9:79:ea:d5:16:32:fc:37:1e:de:5a:b7: 45:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A0:A2:ED:CA:03:A2:A5:BF:AE:21:84:84:C9:59:04:D7:9C:57:C1 X509v3 Authority Key Identifier: keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/OaCi7coDoqW_riGEhMlZBNecV8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.26.0/23 IPv6: 2a02:f401::-2a02:f403:ffff:ffff:ffff:ffff:ffff:ffff 2a02:f406:fe50::/48 2a02:f406:fe90::/48 Signature Algorithm: sha256WithRSAEncryption 25:a9:9c:00:51:5c:b3:8d:78:79:e4:37:ef:7c:6a:d1:f7:7e: ee:56:7c:36:12:46:f8:9f:9d:eb:0c:47:25:ce:f7:a4:de:df: d1:4f:fb:21:b0:6d:ab:10:9f:37:72:6e:eb:67:f4:3b:a4:6c: 9f:31:65:fa:55:6f:bb:a8:de:7e:9a:61:dd:a0:a4:41:cf:2a: a1:01:a1:f7:12:eb:7a:be:fe:8b:cf:ef:3f:cc:e5:f1:73:db: 92:47:83:28:68:21:9a:db:1e:a8:93:a3:29:48:9c:0d:57:ff: 83:8e:17:86:3a:73:27:a9:cc:c6:7f:25:38:04:ed:0f:2f:7c: 2a:30:70:66:f2:a0:df:67:e1:e1:fa:1a:b7:c1:1f:a8:e1:bb: 18:f0:51:e2:83:e9:6e:0d:7a:89:41:fd:5e:10:e0:a2:b1:5c: 60:a8:2c:e6:09:97:aa:c0:e9:9a:c3:29:04:3f:10:e4:2e:be: fe:df:58:ed:01:4a:ad:34:a0:16:96:82:c2:e0:1c:2e:36:6e: 2e:59:c4:56:f2:12:83:33:ae:5a:bb:f7:37:46:fc:ef:69:f6: b4:a1:f2:1f:4b:0f:23:e9:82:83:df:13:96:95:ce:53:d9:9a: 01:f9:d4:3b:4b:fa:c7:53:df:04:83:b2:d5:4c:18:8b:de:2f: f1:ef:7f:6b -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt7NcodzMCo9QhG4ODj8zY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzM2NGY1MDI1MzRlODc3MWEwYzYyNTk3OTRjMjZlMjZk NGJjYTQwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWEwYTJlZGNhMDNhMmE1YmZhZTIxODQ4NGM5NTkwNGQ3OWM1N2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXhyIXIC/DcoDpw6uV8ImMSYsnOH ooEErjAaQKsn8DCy0xA0NvnXT6EiqfZtfJso6rzHZyNbt9P2xkiSEo/3lmhOHsfb P/b+/Blb5iIdanJCAJHgJIhfcsHGOS6u73QBpi0mydroo4gGVKqxo1e0I4I0N/Jn XvjkvGFtdzbfm8Yi4c46lY3jivjl5hR8YTa/hFo1L1fhr7AKxfMpnJlj/rKnSRmQ 5jDcJD4sLy9HBsAHV5XRdHI7Qz81FO1I6YSmCHXgN31KcLo/vK2qpvgCjEICjGSM vX1J6WZiohKZu/z3rKA/MJ58Irkw4HH7QBltBILZeerVFjL8Nx7eWrdFMwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFDmgou3KA6Klv64hhITJWQTXnFfBMB8GA1UdIwQY MBaAFClzZPUCU06HcaDGJZeUwm4m1LykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUt MGEwZjNlNzhhNDkzLzEvT2FDaTdjb0RvcVdfcmlHRWhNbFpCTmVjVjhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUtMGEwZjNlNzhhNDkz LzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAMBAIAATAGAwQBuRoaMCgE AgACMCIwDgMFACoC9AEDBQIqAvQAAwcAKgL0Bv5QAwcAKgL0Bv6QMA0GCSqGSIb3 DQEBCwUAA4IBAQAlqZwAUVyzjXh55DfvfGrR937uVnw2Ekb4n53rDEclzvek3t/R T/shsG2rEJ83cm7rZ/Q7pGyfMWX6VW+7qN5+mmHdoKRBzyqhAaH3Eut6vv6Lz+8/ zOXxc9uSR4MoaCGa2x6ok6MpSJwNV/+DjheGOnMnqczGfyU4BO0PL3wqMHBm8qDf Z+Hh+hq3wR+o4bsY8FHig+luDXqJQf1eEOCisVxgqCzmCZeqwOmawykEPxDkLr7+ 31jtAUqtNKAWloLC4BwuNm4uWcRW8hKDM65au/c3Rvzvafa0ofIfSw8j6YKD3xOW lc5T2ZoB+dQ7S/rHU98Eg7LVTBiL3i/x739r -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:52 2026 by rpki-client