This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/oKA_xzTT--t6AooTQpuLKXGvlMA.roa File: oKA_xzTT--t6AooTQpuLKXGvlMA.roa (raw, json) Hash identifier: JpkJhhRx9tSQJbuGKgPlHxTIHvwgtE+H98ySPhBdIGw= Subject key identifier: A0:A0:3F:C7:34:D3:FB:EB:7A:02:8A:13:42:9B:8B:29:71:AF:94:C0 Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e Certificate serial: 019B7AC8AFF6B3E9E59504A04A5A19DCF563 Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/oKA_xzTT--t6AooTQpuLKXGvlMA.roa Signing time: Thu 01 Jan 2026 18:18:51 +0000 ROA not before: Thu 01 Jan 2026 18:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50979 IP address blocks: 195.123.208.0/21 maxlen: 21 2a02:27ac::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:af:f6:b3:e9:e5:95:04:a0:4a:5a:19:dc:f5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e Validity Not Before: Jan 1 18:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0a03fc734d3fbeb7a028a13429b8b2971af94c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:cc:c1:c1:c7:e0:de:b5:67:69:3b:93:c7: 3a:b9:41:ee:cb:b4:3c:4a:c6:b3:19:ef:45:0b:f4: b1:a6:00:89:60:31:90:32:65:84:3a:89:d4:d7:a0: fb:9c:5a:00:6b:37:f8:7b:9e:24:5b:fe:0c:4e:92: 14:a4:19:7c:26:39:db:0e:0e:c8:30:23:12:93:f9: 52:77:e2:76:18:ee:b1:1b:d9:26:a0:77:22:b6:66: 4d:18:78:92:89:64:2c:5f:7c:e3:74:63:00:a9:e0: 78:7c:84:26:50:a5:ac:f0:f8:4e:99:5c:05:10:59: 91:de:13:bd:b9:49:e7:8c:5f:6c:69:0c:1a:45:54: 9a:ad:66:3d:1d:5c:12:1e:23:22:c6:6b:b2:61:39: 15:34:2b:55:6c:ae:fe:21:bb:65:1e:d5:0d:4b:f9: e5:33:6c:3b:b7:07:ec:12:2b:25:9a:a7:73:40:d7: f1:60:53:2f:69:56:17:de:c7:09:87:5b:25:f0:11: 55:93:2f:1f:42:50:c5:ff:3d:ae:1c:59:df:3c:a5: a0:a8:fb:e7:72:10:1c:a9:ac:f6:dd:f2:7c:d0:9f: f4:77:ba:d9:03:30:f3:16:4c:7f:7c:89:2c:9f:97: cf:11:6d:fe:68:e5:2d:f4:9c:e6:4c:3e:ee:97:7b: b3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A0:3F:C7:34:D3:FB:EB:7A:02:8A:13:42:9B:8B:29:71:AF:94:C0 X509v3 Authority Key Identifier: keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/oKA_xzTT--t6AooTQpuLKXGvlMA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.123.208.0/21 IPv6: 2a02:27ac::/32 Signature Algorithm: sha256WithRSAEncryption 29:ab:16:d8:a8:45:d3:c4:a8:87:8a:9f:01:a2:75:a1:52:21: fc:f4:b0:ec:a4:1d:83:d3:4c:a5:91:26:6f:42:95:f9:4f:1b: 58:f0:10:c6:5c:06:69:c1:f5:69:16:6f:0f:17:62:54:4f:87: 28:81:71:2d:3d:c2:20:2c:b3:61:70:fb:f1:4f:ab:05:f4:48: e9:20:fc:12:ca:c0:f3:17:9c:12:26:a2:18:c3:8c:e4:ab:03: 79:d8:af:02:a1:04:bf:09:35:b1:79:08:70:a4:4a:ea:bc:96: d5:5b:07:07:86:78:82:f2:13:ca:e2:3e:ad:4e:05:0a:6d:a0: f7:a2:6b:53:61:45:f8:32:78:72:b5:75:39:db:a8:c9:e6:2b: 1e:e9:ae:47:0f:de:b8:3b:9c:d0:eb:52:e6:98:cb:17:d1:a3: 07:e8:61:22:8b:24:58:c0:bc:77:9a:0c:16:a8:85:20:e1:c1: 7e:34:b2:34:01:c4:90:df:dd:23:b4:44:43:67:8c:9a:42:59: f9:07:20:50:fa:9c:0e:88:fe:95:13:90:20:e2:a3:59:c3:00: a6:87:6f:20:5c:94:dd:89:7b:7e:57:ac:89:17:91:76:49:dc: 71:f0:12:95:e8:87:c4:b3:7c:00:d8:a1:3e:81:bc:e4:ac:0e: 20:f5:6e:21 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yK/2s+nllQSgSloZ3PVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZDk4ZThmZWM2ODA3NzVhMTU3MjY2ZTBjNmI3OGIxNDFh MzRmNWUwHhcNMjYwMTAxMTgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGEwM2ZjNzM0ZDNmYmViN2EwMjhhMTM0MjliOGIyOTcxYWY5NGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNfMwcHH4N61Z2k7k8c6uUHuy7Q8 SsazGe9FC/SxpgCJYDGQMmWEOonU16D7nFoAazf4e54kW/4MTpIUpBl8JjnbDg7I MCMSk/lSd+J2GO6xG9kmoHcitmZNGHiSiWQsX3zjdGMAqeB4fIQmUKWs8PhOmVwF EFmR3hO9uUnnjF9saQwaRVSarWY9HVwSHiMixmuyYTkVNCtVbK7+IbtlHtUNS/nl M2w7twfsEislmqdzQNfxYFMvaVYX3scJh1sl8BFVky8fQlDF/z2uHFnfPKWgqPvn chAcqaz23fJ80J/0d7rZAzDzFkx/fIksn5fPEW3+aOUt9JzmTD7ul3uzrQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKCgP8c00/vregKKE0Kbiylxr5TAMB8GA1UdIwQY MBaAFJTZjo/saAd1oVcmbgxreLFBo09eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzkt ODdkMTdkZjc0YzdlLzEvb0tBX3h6VFQtLXQ2QW9vVFFwdUxLWEd2bE1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzktODdkMTdkZjc0Yzdl LzEvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDw3vQMA0E AgACMAcDBQAqAiesMA0GCSqGSIb3DQEBCwUAA4IBAQApqxbYqEXTxKiHip8BonWh UiH89LDspB2D00ylkSZvQpX5TxtY8BDGXAZpwfVpFm8PF2JUT4cogXEtPcIgLLNh cPvxT6sF9EjpIPwSysDzF5wSJqIYw4zkqwN52K8CoQS/CTWxeQhwpErqvJbVWwcH hniC8hPK4j6tTgUKbaD3omtTYUX4MnhytXU526jJ5ise6a5HD964O5zQ61LmmMsX 0aMH6GEiiyRYwLx3mgwWqIUg4cF+NLI0AcSQ390jtERDZ4yaQln5ByBQ+pwOiP6V E5Ag4qNZwwCmh28gXJTdiXt+V6yJF5F2Sdxx8BKV6IfEs3wA2KE+gbzkrA4g9W4h -----END CERTIFICATE-----Generated at Sun Jan 25 20:36:08 2026 by rpki-client