This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/oOaKOQAQxMgZ81PJmR6wX1wzc04.roa File: oOaKOQAQxMgZ81PJmR6wX1wzc04.roa (raw, json) Hash identifier: iXdut881dr/HYVks8rpuFyuSEdxTa4BgcYY1vJJC4/o= Subject key identifier: A0:E6:8A:39:00:10:C4:C8:19:F3:53:C9:99:1E:B0:5F:5C:33:73:4E Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C697267700E0381410C38B9192FB13 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/oOaKOQAQxMgZ81PJmR6wX1wzc04.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206077 IP address blocks: 84.236.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:97:26:77:00:e0:38:14:10:c3:8b:91:92:fb:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0e68a390010c4c819f353c9991eb05f5c33734e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:af:58:a9:60:42:06:77:7f:6a:9c:32:56:93: cd:eb:0c:0a:10:b5:bf:d8:f3:06:2a:f8:f4:22:52: 96:5d:19:3e:3e:a6:b2:bc:eb:de:f7:eb:90:9e:d9: dc:57:00:20:85:85:d5:1c:93:59:05:c2:44:fd:26: 5e:e6:2a:99:21:20:8b:12:dc:cb:4f:04:a3:f7:44: c5:36:fb:c7:2a:7f:9d:77:9e:49:ad:55:40:6c:fd: 22:db:3e:d8:61:b6:aa:57:25:95:30:a0:99:4c:41: d1:f9:7a:8d:6d:4b:89:19:be:38:e4:f8:2f:35:f2: 8f:39:fa:fc:2b:81:b7:0e:e1:88:ba:9b:ba:fa:9c: ec:bf:c8:e6:34:e6:48:7f:70:39:9d:85:02:21:bf: ea:fa:8c:9a:27:52:e1:91:ba:22:71:9f:03:da:9c: c8:44:e9:14:c6:26:be:a1:8d:b4:a7:ee:e8:e1:c5: b6:3c:e9:44:7a:1a:fd:fa:29:af:47:49:f3:7c:54: aa:9b:7e:3c:7f:06:b9:96:c0:0b:8d:78:4d:bb:b5: 72:5e:67:b5:52:e3:9c:d3:73:52:be:ca:80:3e:06: 3f:db:39:72:85:dd:b9:7c:2d:67:9c:67:75:7c:0f: ba:4a:04:cb:d0:33:05:9f:0c:7e:3d:77:43:90:a9: 34:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E6:8A:39:00:10:C4:C8:19:F3:53:C9:99:1E:B0:5F:5C:33:73:4E X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/oOaKOQAQxMgZ81PJmR6wX1wzc04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.236.245.0/24 Signature Algorithm: sha256WithRSAEncryption 76:c3:d7:69:bf:27:ef:c1:24:1a:03:c9:a2:d1:c1:d3:16:a9: 30:bb:b7:e7:37:4d:9f:e6:96:32:fc:e2:b2:0b:85:15:00:70: e6:20:c5:bd:26:aa:dd:00:8e:f4:7e:18:43:a7:c2:6b:9e:a4: 5b:79:1a:a8:ee:1b:d5:ef:0c:b6:15:fa:28:b9:db:63:92:2e: 39:ac:c6:2a:5a:f4:41:11:a3:89:23:8c:86:a6:ca:be:50:d9: 48:b1:9f:a7:c6:1a:65:b1:5f:66:50:bc:f6:b4:12:c7:ea:fe: 20:e8:9a:8d:9a:e7:dc:50:8d:a3:a9:41:e9:3e:99:d8:a5:23: b6:e4:4b:d4:45:8d:e1:47:00:0d:d2:73:e7:2b:87:d0:87:f3: 8a:47:87:2d:c1:ca:00:3b:53:fe:46:e8:d0:19:25:7d:98:a5: d0:39:01:7b:48:37:ab:47:97:db:c7:91:6f:35:17:6e:49:2d: 7d:75:9a:ea:85:a9:2e:b0:0c:44:49:ac:be:97:d9:2c:0b:50: fd:de:46:31:93:07:f7:4e:32:7a:b7:c8:7f:f9:47:0f:b0:f0: e8:15:06:a2:de:12:0e:f0:ca:b0:67:6d:98:f7:d4:31:15:f8: eb:90:5d:60:79:65:41:86:d2:ef:41:28:3a:91:65:a8:90:4c: 04:2d:5d:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpcmdwDgOBQQw4uRkvsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGU2OGEzOTAwMTBjNGM4MTlmMzUzYzk5OTFlYjA1ZjVjMzM3MzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl69YqWBCBnd/apwyVpPN6wwKELW/ 2PMGKvj0IlKWXRk+PqayvOve9+uQntncVwAghYXVHJNZBcJE/SZe5iqZISCLEtzL TwSj90TFNvvHKn+dd55JrVVAbP0i2z7YYbaqVyWVMKCZTEHR+XqNbUuJGb445Pgv NfKPOfr8K4G3DuGIupu6+pzsv8jmNOZIf3A5nYUCIb/q+oyaJ1LhkboicZ8D2pzI ROkUxia+oY20p+7o4cW2POlEehr9+imvR0nzfFSqm348fwa5lsALjXhNu7VyXme1 UuOc03NSvsqAPgY/2zlyhd25fC1nnGd1fA+6SgTL0DMFnwx+PXdDkKk0pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKDmijkAEMTIGfNTyZkesF9cM3NOMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvb09hS09RQVF4TWdaODFQSm1SNndYMXd6YzA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVOz1MA0G CSqGSIb3DQEBCwUAA4IBAQB2w9dpvyfvwSQaA8mi0cHTFqkwu7fnN02f5pYy/OKy C4UVAHDmIMW9JqrdAI70fhhDp8JrnqRbeRqo7hvV7wy2Ffooudtjki45rMYqWvRB EaOJI4yGpsq+UNlIsZ+nxhplsV9mULz2tBLH6v4g6JqNmufcUI2jqUHpPpnYpSO2 5EvURY3hRwAN0nPnK4fQh/OKR4ctwcoAO1P+RujQGSV9mKXQOQF7SDerR5fbx5Fv NRduSS19dZrqhakusAxESay+l9ksC1D93kYxkwf3TjJ6t8h/+UcPsPDoFQai3hIO 8MqwZ22Y99QxFfjrkF1geWVBhtLvQSg6kWWokEwELV00 -----END CERTIFICATE-----Generated at Sun Jan 25 10:21:24 2026 by rpki-client