This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/oj9oX7VOpSpHPa8jC4mFQUNG32g.roa File: oj9oX7VOpSpHPa8jC4mFQUNG32g.roa (raw, json) Hash identifier: Hw7z02cVTJ9+JSdnwOvxaUFM6zH/Yq09kWqzPwdi4Yg= Subject key identifier: A2:3F:68:5F:B5:4E:A5:2A:47:3D:AF:23:0B:89:85:41:43:46:DF:68 Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b Certificate serial: 019B7B368299F0B72AFDC8431FBACD8EC9F5 Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/oj9oX7VOpSpHPa8jC4mFQUNG32g.roa Signing time: Thu 01 Jan 2026 20:18:48 +0000 ROA not before: Thu 01 Jan 2026 20:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210973 IP address blocks: 212.236.9.0/24 maxlen: 24 212.236.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:82:99:f0:b7:2a:fd:c8:43:1f:ba:cd:8e:c9:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b Validity Not Before: Jan 1 20:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a23f685fb54ea52a473daf230b8985414346df68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:82:6b:51:25:15:b4:15:73:ee:a4:67:f2: 77:49:05:e2:d8:5e:8c:66:ba:34:87:bf:10:c4:44: b0:f7:18:7a:d8:e1:e3:ac:6d:b2:f8:fb:3e:41:7b: cb:62:31:4f:54:23:a7:c2:bc:2c:36:ba:82:11:24: ab:be:03:e7:ab:2b:e6:b6:0f:e2:9b:44:23:5d:6e: 8d:a5:e7:d5:97:03:d7:ab:fb:40:77:10:f3:08:84: b0:22:e9:a8:75:59:1e:17:79:e9:99:b7:c6:99:a2: 20:dd:76:89:8c:b5:8f:d0:7f:42:8f:9a:d1:b0:67: 08:e4:51:3a:10:d4:2b:65:40:3f:a5:9a:a0:cb:f8: a3:33:ad:e8:bd:8e:84:30:46:4b:94:79:61:5a:e2: 88:ea:b6:46:ff:d6:6d:2b:d2:8c:87:0b:8b:50:4b: 02:e9:62:b1:d2:4c:a2:d1:1f:bf:3d:74:55:84:fc: cb:fd:86:ed:a6:25:51:69:d1:e8:b0:6e:c2:b1:68: d7:9d:76:e5:51:a5:b4:99:cf:d4:09:f8:c8:73:01: 07:c1:bb:9f:60:af:6b:9f:79:eb:a3:cb:94:95:7e: 13:c5:35:8f:42:52:c2:59:c2:54:1c:32:fc:93:f8: 77:30:bc:ff:4a:6b:2f:c2:1b:93:d2:93:bd:4b:fa: 37:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3F:68:5F:B5:4E:A5:2A:47:3D:AF:23:0B:89:85:41:43:46:DF:68 X509v3 Authority Key Identifier: keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/oj9oX7VOpSpHPa8jC4mFQUNG32g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.236.9.0-212.236.10.255 Signature Algorithm: sha256WithRSAEncryption 49:6e:9e:39:5f:ab:8a:87:0d:f6:5c:25:b3:0c:29:03:8b:f8: 53:61:ab:f8:bc:e6:a2:97:e4:e5:71:79:a6:57:82:c3:e3:e1: 94:7d:8f:6a:e2:fd:28:9e:fe:10:16:11:69:ba:a3:6a:00:c2: 7b:94:a9:39:59:2f:a6:5c:29:35:d3:65:94:d5:69:f8:3f:35: 39:44:49:bd:36:01:93:f5:05:77:3c:4a:85:8d:f5:5a:f5:4c: 42:d1:64:b0:41:94:a7:ec:cc:62:8e:ea:da:d5:74:66:15:1f: 33:89:19:33:86:96:1f:c7:aa:8d:7b:29:2c:29:83:70:03:77: 39:e4:03:4e:36:1d:4e:f3:32:bd:f5:87:3b:b6:84:26:7f:50: fc:50:32:90:9f:42:1b:2d:c3:11:d3:2f:66:4c:37:f2:ff:95: 67:b4:a1:11:99:62:a5:c5:62:35:e7:7e:3d:0e:ae:35:d5:39: 7b:95:ca:57:55:bc:6f:49:33:66:f6:56:ff:c9:07:07:10:1a: a1:f7:fa:e5:f0:68:99:f9:42:b6:03:d6:78:4d:bc:e2:2d:16: 86:9a:2b:85:d0:79:92:33:f1:ac:9a:79:29:76:d4:41:17:7b: 9b:f3:e7:ee:bb:e6:23:73:01:1f:28:9a:17:fb:84:27:a5:ab: 6d:e0:eb:aa -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NoKZ8Lcq/chDH7rNjsn1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTgzMTM3MDQyZmM4YzQ5MjE3MDdkNGViNmRhNWY2YzRh NzlhNWIwHhcNMjYwMTAxMjAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjNmNjg1ZmI1NGVhNTJhNDczZGFmMjMwYjg5ODU0MTQzNDZkZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugKCa1ElFbQVc+6kZ/J3SQXi2F6M Zro0h78QxESw9xh62OHjrG2y+Ps+QXvLYjFPVCOnwrwsNrqCESSrvgPnqyvmtg/i m0QjXW6NpefVlwPXq/tAdxDzCISwIumodVkeF3npmbfGmaIg3XaJjLWP0H9Cj5rR sGcI5FE6ENQrZUA/pZqgy/ijM63ovY6EMEZLlHlhWuKI6rZG/9ZtK9KMhwuLUEsC 6WKx0kyi0R+/PXRVhPzL/YbtpiVRadHosG7CsWjXnXblUaW0mc/UCfjIcwEHwbuf YK9rn3nro8uUlX4TxTWPQlLCWcJUHDL8k/h3MLz/SmsvwhuT0pO9S/o3gwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKI/aF+1TqUqRz2vIwuJhUFDRt9oMB8GA1UdIwQY MBaAFPyYMTcEL8jEkhcH1OttpfbEp5pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMt MjI0ZjEwYTk4MWZlLzEvb2o5b1g3Vk9wU3BIUGE4akM0bUZRVU5HMzJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMtMjI0ZjEwYTk4MWZl LzEvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADU7AkD BADU7AowDQYJKoZIhvcNAQELBQADggEBAElunjlfq4qHDfZcJbMMKQOL+FNhq/i8 5qKX5OVxeaZXgsPj4ZR9j2ri/Sie/hAWEWm6o2oAwnuUqTlZL6ZcKTXTZZTVafg/ NTlESb02AZP1BXc8SoWN9Vr1TELRZLBBlKfszGKO6trVdGYVHzOJGTOGlh/Hqo17 KSwpg3ADdznkA042HU7zMr31hzu2hCZ/UPxQMpCfQhstwxHTL2ZMN/L/lWe0oRGZ YqXFYjXnfj0OrjXVOXuVyldVvG9JM2b2Vv/JBwcQGqH3+uXwaJn5QrYD1nhNvOIt FoaaK4XQeZIz8ayaeSl21EEXe5vz5+675iNzAR8omhf7hCelq23g66o= -----END CERTIFICATE-----Generated at Tue Jan 27 02:19:05 2026 by rpki-client