This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/oznJuafsTGfx9j9j8MwnyxajHW0.roa File: oznJuafsTGfx9j9j8MwnyxajHW0.roa (raw, json) Hash identifier: 18/YtfjRCiI3S6huzdUp+fE0IIQuW88lNLK/i9pNSN8= Subject key identifier: A3:39:C9:B9:A7:EC:4C:67:F1:F6:3F:63:F0:CC:27:CB:16:A3:1D:6D Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019BE5A7FD67B47DFA0F8157D18274874936 Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/oznJuafsTGfx9j9j8MwnyxajHW0.roa Signing time: Thu 22 Jan 2026 12:22:30 +0000 ROA not before: Thu 22 Jan 2026 12:22:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205220 IP address blocks: 31.22.75.0/24 maxlen: 24 194.117.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:a7:fd:67:b4:7d:fa:0f:81:57:d1:82:74:87:49:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Jan 22 12:22:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a339c9b9a7ec4c67f1f63f63f0cc27cb16a31d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0e:d4:2b:6c:23:2f:a2:b2:f6:dd:21:df:73: 70:c2:c0:a0:ab:c3:bd:0b:a3:6a:8b:7b:ca:fa:7a: 39:57:2c:d9:cc:07:65:76:29:a2:b2:db:d3:60:b0: bb:57:fd:35:0e:e6:fb:59:df:a7:5c:63:42:1f:e0: c4:ae:e3:c7:11:f5:35:91:11:5c:14:66:1c:e4:20: d6:23:25:6e:9a:d7:50:85:3d:29:58:d6:54:94:3f: 93:6c:4f:d9:1c:81:2b:88:09:67:7f:4d:aa:37:e9: 63:5e:8d:c5:73:75:b6:5a:68:25:20:44:8e:64:ea: 5e:5c:1b:51:00:8b:5a:d6:7c:dd:2c:cc:8e:24:ec: 25:a6:b9:68:36:8a:59:46:ea:e5:b0:ab:6f:3c:d9: e1:88:58:4e:e5:de:ee:81:d5:28:66:03:61:e8:35: 97:28:14:af:1c:b2:b9:42:3d:1b:4b:f3:5f:8e:32: f1:48:f8:ee:ee:b9:f9:f1:93:fe:33:60:f9:3d:08: 89:2b:82:1a:06:94:d9:0f:f6:16:cf:85:ae:5e:9b: fe:fb:16:e3:00:42:45:3c:05:10:7f:36:b5:40:26: f5:88:a9:cd:bd:52:72:f3:44:67:a7:6a:bd:4c:2c: 95:57:51:d2:a4:11:bf:4f:72:a4:64:53:55:c5:73: a8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:39:C9:B9:A7:EC:4C:67:F1:F6:3F:63:F0:CC:27:CB:16:A3:1D:6D X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/oznJuafsTGfx9j9j8MwnyxajHW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.75.0/24 194.117.225.0/24 Signature Algorithm: sha256WithRSAEncryption 93:9a:63:b4:d1:e5:7a:ef:53:02:58:5c:e8:4b:1b:16:1d:8c: 9e:e6:53:13:f7:97:16:c3:ec:8b:47:62:6a:bf:3b:b8:ce:3d: 9d:5c:aa:e3:a0:bb:e5:1a:a0:de:b2:0b:bd:3c:05:d1:75:90: 81:8b:30:fc:23:7c:d2:b8:ca:73:cc:d6:3c:4e:c9:86:14:46: fa:26:3d:2d:34:75:dd:21:9a:e1:53:a4:c1:85:cb:02:53:e9: 3b:41:65:d5:97:eb:b3:d1:88:41:5b:54:2c:13:08:86:d6:00: ba:5e:ba:12:ba:38:27:a3:af:2a:68:7b:a4:cc:58:1a:99:6e: d0:66:de:10:d9:37:a1:7b:f8:f9:d7:cc:75:69:f3:7e:f3:64: 68:07:dd:9c:94:f7:4c:6c:12:c3:b0:38:fe:d9:f7:1a:16:bf: da:a3:f2:24:fa:4c:89:89:08:2b:7d:db:7e:93:70:84:5a:52: fa:58:1f:4d:01:23:86:a0:fe:ca:46:f6:5a:42:00:b8:b6:85: a0:22:9c:79:48:c8:80:3d:a4:5b:71:ce:67:ab:af:81:57:2d: 3b:5a:2b:a3:f7:14:d2:a9:b8:04:88:ac:dd:14:fb:01:f7:7a: 10:21:8a:41:a7:c5:46:bb:d7:73:ac:9d:69:b8:e4:de:e7:e5: 27:2b:b7:01 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvlp/1ntH36D4FX0YJ0h0k2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjYwMTIyMTIyMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzM5YzliOWE3ZWM0YzY3ZjFmNjNmNjNmMGNjMjdjYjE2YTMxZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A7UK2wjL6Ky9t0h33NwwsCgq8O9 C6Nqi3vK+no5VyzZzAdldimistvTYLC7V/01Dub7Wd+nXGNCH+DEruPHEfU1kRFc FGYc5CDWIyVumtdQhT0pWNZUlD+TbE/ZHIEriAlnf02qN+ljXo3Fc3W2WmglIESO ZOpeXBtRAIta1nzdLMyOJOwlprloNopZRurlsKtvPNnhiFhO5d7ugdUoZgNh6DWX KBSvHLK5Qj0bS/NfjjLxSPju7rn58ZP+M2D5PQiJK4IaBpTZD/YWz4WuXpv++xbj AEJFPAUQfza1QCb1iKnNvVJy80Rnp2q9TCyVV1HSpBG/T3KkZFNVxXOo/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKM5ybmn7Exn8fY/Y/DMJ8sWox1tMB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvb3puSnVhZnNUR2Z4OWo5ajhNd255eGFqSFcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHxZLAwQA wnXhMA0GCSqGSIb3DQEBCwUAA4IBAQCTmmO00eV671MCWFzoSxsWHYye5lMT95cW w+yLR2Jqvzu4zj2dXKrjoLvlGqDesgu9PAXRdZCBizD8I3zSuMpzzNY8TsmGFEb6 Jj0tNHXdIZrhU6TBhcsCU+k7QWXVl+uz0YhBW1QsEwiG1gC6XroSujgno68qaHuk zFgamW7QZt4Q2Tehe/j518x1afN+82RoB92clPdMbBLDsDj+2fcaFr/ao/Ik+kyJ iQgrfdt+k3CEWlL6WB9NASOGoP7KRvZaQgC4toWgIpx5SMiAPaRbcc5nq6+BVy07 Wiuj9xTSqbgEiKzdFPsB93oQIYpBp8VGu9dzrJ1puOTe5+UnK7cB -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:54 2026 by rpki-client