This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/OJaCH_FRxKGvw45Z5gEomrY6by4.roa File: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (raw, json) Hash identifier: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc= Subject key identifier: 38:96:82:1F:F1:51:C4:A1:AF:C3:8E:59:E6:01:28:9A:B6:3A:6F:2E Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019BDB064D0F98FC6E09D307B971EA5D0109 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/OJaCH_FRxKGvw45Z5gEomrY6by4.roa Signing time: Tue 20 Jan 2026 10:49:41 +0000 ROA not before: Tue 20 Jan 2026 10:49:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 79.98.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:06:4d:0f:98:fc:6e:09:d3:07:b9:71:ea:5d:01:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jan 20 10:49:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3896821ff151c4a1afc38e59e601289ab63a6f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:d7:ac:b4:93:c3:99:1d:04:d5:9f:de:d4: 74:87:e2:b4:55:b6:a6:34:fa:30:b2:33:07:18:e8: 75:b2:25:9b:93:0b:57:4a:8a:f0:52:42:bd:5f:db: bf:ae:13:70:df:c3:53:b3:f3:28:aa:f2:11:21:83: 74:a5:83:86:db:7c:3e:35:2a:84:9f:7a:25:4c:4e: ab:af:31:3c:49:1e:06:38:1f:8c:18:13:bd:f5:cf: 0d:d8:26:ed:ef:9b:86:45:65:26:c7:29:ea:67:33: c5:cf:1b:4e:b1:7d:a0:0d:a3:bf:4f:96:d4:d7:c6: 20:31:8c:a3:98:cf:6d:6f:b6:43:7a:e5:e2:b1:67: 72:f4:e1:88:7a:2a:ba:4e:df:9e:99:25:31:ba:20: f2:9c:f5:fc:05:99:26:4a:4f:e3:e0:be:f2:0a:80: 01:22:13:25:e5:c6:76:3d:30:46:a0:29:ed:54:9f: f3:09:70:1b:5f:db:59:48:57:1c:91:c0:c0:82:c1: 9e:f8:87:ea:2c:79:e2:80:b4:d6:ad:ec:d2:55:1e: e3:16:c2:ba:79:06:c0:a9:97:52:c4:8b:f9:d9:92: ef:ed:15:56:b4:f3:53:d2:01:4b:43:cf:11:d6:1b: d7:a8:16:66:11:85:20:4d:95:06:be:55:6f:9a:d1: 1b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:96:82:1F:F1:51:C4:A1:AF:C3:8E:59:E6:01:28:9A:B6:3A:6F:2E X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/OJaCH_FRxKGvw45Z5gEomrY6by4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.244.0/24 Signature Algorithm: sha256WithRSAEncryption 36:ba:42:21:26:f4:b3:62:af:3a:3a:e8:c6:f3:81:88:b5:10: 6f:c4:db:9b:95:4d:78:d1:9c:d4:b0:5a:cd:b3:7b:7f:d3:b6: 51:d6:d3:d8:49:b1:04:2d:9a:d1:3c:b0:4a:c5:eb:5f:c1:79: 3f:6b:4a:a5:41:c7:72:5d:fd:b3:26:48:ed:6b:0b:bf:fe:4e: 42:02:ad:ba:d7:4b:d7:b3:91:f6:65:38:ab:4c:6e:5b:4a:27: 79:2d:5e:e9:d3:ac:a3:e2:7e:21:8f:87:ed:3f:9d:ef:1d:3a: 51:df:c4:b8:7f:54:6c:21:7c:02:48:e1:60:cd:49:cd:2a:b2: 6c:ff:38:98:74:ec:a2:7b:88:67:5a:09:c2:c5:d5:21:c5:b1: 69:d3:14:19:33:77:57:de:c2:c1:95:12:a8:a9:12:74:86:a0: 3d:71:35:2c:36:54:2e:5d:01:92:c9:38:10:15:3f:84:ba:3f: 2d:20:4b:d7:c1:ad:de:7c:48:19:a8:69:06:c2:9b:1f:7b:1f: 0f:2d:24:74:63:cc:56:7d:06:cf:43:e9:f1:01:58:2e:4d:f5: bb:e8:89:9d:b2:c8:01:5d:1b:a4:ca:5d:2c:cb:9d:e4:3f:e5: 1f:54:03:a2:1b:ed:5c:d8:4e:39:86:65:98:74:4b:99:8b:ea: f7:56:3e:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvbBk0PmPxuCdMHuXHqXQEJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMTIwMTA0OTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODk2ODIxZmYxNTFjNGExYWZjMzhlNTllNjAxMjg5YWI2M2E2ZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYjXrLSTw5kdBNWf3tR0h+K0Vbam NPowsjMHGOh1siWbkwtXSorwUkK9X9u/rhNw38NTs/MoqvIRIYN0pYOG23w+NSqE n3olTE6rrzE8SR4GOB+MGBO99c8N2Cbt75uGRWUmxynqZzPFzxtOsX2gDaO/T5bU 18YgMYyjmM9tb7ZDeuXisWdy9OGIeiq6Tt+emSUxuiDynPX8BZkmSk/j4L7yCoAB IhMl5cZ2PTBGoCntVJ/zCXAbX9tZSFcckcDAgsGe+IfqLHnigLTWrezSVR7jFsK6 eQbAqZdSxIv52ZLv7RVWtPNT0gFLQ88R1hvXqBZmEYUgTZUGvlVvmtEbBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDiWgh/xUcShr8OOWeYBKJq2Om8uMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvT0phQ0hfRlJ4S0d2dzQ1WjVnRW9tclk2Ynk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT2L0MA0G CSqGSIb3DQEBCwUAA4IBAQA2ukIhJvSzYq86OujG84GItRBvxNublU140ZzUsFrN s3t/07ZR1tPYSbEELZrRPLBKxetfwXk/a0qlQcdyXf2zJkjtawu//k5CAq2610vX s5H2ZTirTG5bSid5LV7p06yj4n4hj4ftP53vHTpR38S4f1RsIXwCSOFgzUnNKrJs /ziYdOyie4hnWgnCxdUhxbFp0xQZM3dX3sLBlRKoqRJ0hqA9cTUsNlQuXQGSyTgQ FT+Euj8tIEvXwa3efEgZqGkGwpsfex8PLSR0Y8xWfQbPQ+nxAVguTfW76ImdssgB XRukyl0sy53kP+UfVAOiG+1c2E45hmWYdEuZi+r3Vj6s -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:03 2026 by rpki-client