This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/OjeVFAg212uWEJPR4j0wAB5XdcE.roa File: OjeVFAg212uWEJPR4j0wAB5XdcE.roa (raw, json) Hash identifier: NgMhCybIfen0bwNj/HLLxxGGd68yCqKlN9cakd8bl48= Subject key identifier: 3A:37:95:14:08:36:D7:6B:96:10:93:D1:E2:3D:30:00:1E:57:75:C1 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019B7C128BE2BF41CCDE30C4C6153241560B Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/OjeVFAg212uWEJPR4j0wAB5XdcE.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212835 IP address blocks: 87.251.67.0/24 maxlen: 24 130.49.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8b:e2:bf:41:cc:de:30:c4:c6:15:32:41:56:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a3795140836d76b961093d1e23d30001e5775c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:79:2d:aa:4e:e9:0e:dd:b1:10:30:6d:f5:1f: 12:eb:30:b9:68:8c:18:80:4f:61:a3:4c:99:9c:d5: 76:67:aa:6a:07:45:8d:bd:d1:55:bb:c6:09:16:8e: 44:9c:01:87:98:be:bd:94:0b:b4:12:6e:32:00:91: 15:42:8b:57:33:dd:8b:9b:7c:77:9a:b9:7f:be:9e: ff:21:c2:21:1d:78:0d:1e:9d:36:f0:7c:8e:bd:09: 11:a9:ea:7b:33:6f:13:d4:90:0c:db:dd:96:01:55: c8:1e:6e:b3:79:65:a1:a4:02:8b:3f:b8:c8:5d:f0: 0c:7e:a6:24:51:d4:34:79:f9:74:8c:5d:0e:d7:7e: c7:b2:10:a2:fb:c3:6e:f0:af:56:bd:05:93:a0:4a: 95:ed:06:2d:e6:b8:a9:ae:e6:cd:50:6e:8a:98:37: 5d:41:c0:f8:a4:cd:fc:6a:d4:1a:93:c0:6d:a4:3c: 56:cc:28:87:0a:82:93:ab:80:1a:be:d4:04:fc:df: 50:d3:c3:b8:a0:55:d1:a0:c4:50:06:9f:b7:15:dc: 38:03:ff:5a:d7:69:50:32:33:7e:e1:0b:b2:86:85: 4e:e0:d9:38:34:29:dc:3d:34:bd:30:d7:3d:a9:f8: 0c:6d:45:da:f4:e3:21:dc:95:09:e0:6d:18:4f:3f: f0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:37:95:14:08:36:D7:6B:96:10:93:D1:E2:3D:30:00:1E:57:75:C1 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/OjeVFAg212uWEJPR4j0wAB5XdcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.251.67.0/24 130.49.215.0/24 Signature Algorithm: sha256WithRSAEncryption 22:f4:75:e4:d7:f9:c4:5f:ea:ef:a4:58:8b:3d:62:88:1d:83: e7:ca:a5:9f:9a:76:66:3b:d6:be:50:3e:90:2c:fc:13:17:9a: d1:25:e3:2e:2a:b0:7a:7a:fa:05:1b:b4:fe:80:56:50:28:cb: 0f:d8:1f:e0:17:72:77:7c:2c:ab:f7:2c:76:22:c1:3b:8f:cc: 23:a1:28:c0:7a:9b:fd:c0:5b:94:32:8d:e0:04:6f:5d:e0:5e: af:9a:b8:c8:e4:54:f1:50:05:68:23:8d:d8:ea:0c:27:4a:b1: bb:9d:db:df:6c:b9:9b:63:95:55:e0:77:04:ee:b6:0d:a4:fb: 86:4b:23:14:05:a4:78:09:22:1e:51:d4:4b:a3:7d:a2:c7:23: 55:48:a5:4a:7b:09:27:af:4d:dd:d4:1a:c0:4b:86:dc:4c:97: 85:0b:86:3d:fe:52:ee:2b:3e:32:69:d9:d9:cc:4b:37:34:c1: 39:83:8e:eb:1f:4a:f1:8d:d0:e4:29:9f:fc:b1:26:39:e6:cb: 30:88:2f:8a:38:ae:5e:58:d2:6b:48:6c:b6:d6:45:52:e2:ab: ae:73:d8:14:9d:c6:4b:43:ea:b8:8b:92:97:a5:d6:81:c7:60: 20:74:23:20:76:ec:ab:2b:6c:c6:b7:14:9f:86:71:d2:23:64: 74:8e:66:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Eoviv0HM3jDExhUyQVYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTM3OTUxNDA4MzZkNzZiOTYxMDkzZDFlMjNkMzAwMDFlNTc3NWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Hktqk7pDt2xEDBt9R8S6zC5aIwY gE9ho0yZnNV2Z6pqB0WNvdFVu8YJFo5EnAGHmL69lAu0Em4yAJEVQotXM92Lm3x3 mrl/vp7/IcIhHXgNHp028HyOvQkRqep7M28T1JAM292WAVXIHm6zeWWhpAKLP7jI XfAMfqYkUdQ0efl0jF0O137HshCi+8Nu8K9WvQWToEqV7QYt5riprubNUG6KmDdd QcD4pM38atQak8BtpDxWzCiHCoKTq4AavtQE/N9Q08O4oFXRoMRQBp+3Fdw4A/9a 12lQMjN+4QuyhoVO4Nk4NCncPTS9MNc9qfgMbUXa9OMh3JUJ4G0YTz/wwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDo3lRQINtdrlhCT0eI9MAAeV3XBMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvT2plVkZBZzIxMnVXRUpQUjRqMHdBQjVYZGNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/tDAwQA gjHXMA0GCSqGSIb3DQEBCwUAA4IBAQAi9HXk1/nEX+rvpFiLPWKIHYPnyqWfmnZm O9a+UD6QLPwTF5rRJeMuKrB6evoFG7T+gFZQKMsP2B/gF3J3fCyr9yx2IsE7j8wj oSjAepv9wFuUMo3gBG9d4F6vmrjI5FTxUAVoI43Y6gwnSrG7ndvfbLmbY5VV4HcE 7rYNpPuGSyMUBaR4CSIeUdRLo32ixyNVSKVKewknr03d1BrAS4bcTJeFC4Y9/lLu Kz4yadnZzEs3NME5g47rH0rxjdDkKZ/8sSY55sswiC+KOK5eWNJrSGy21kVS4quu c9gUncZLQ+q4i5KXpdaBx2AgdCMgduyrK2zGtxSfhnHSI2R0jmas -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:44 2026 by rpki-client