This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/oAirDjtYSawIz9t2W1uTMzbfgmg.roa File: oAirDjtYSawIz9t2W1uTMzbfgmg.roa (raw, json) Hash identifier: hcXXhAATQAv1P0WpVCcSM3rmQFyzufHtTmG7E5Wcw3c= Subject key identifier: A0:08:AB:0E:3B:58:49:AC:08:CF:DB:76:5B:5B:93:33:36:DF:82:68 Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59 Certificate serial: 019B7DCB1A93D7B84714F6EF50599BFF72DE Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/oAirDjtYSawIz9t2W1uTMzbfgmg.roa Signing time: Fri 02 Jan 2026 08:20:21 +0000 ROA not before: Fri 02 Jan 2026 08:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44066 IP address blocks: 37.17.224.0/21 maxlen: 21 2a00:5fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1a:93:d7:b8:47:14:f6:ef:50:59:9b:ff:72:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59 Validity Not Before: Jan 2 08:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a008ab0e3b5849ac08cfdb765b5b933336df8268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:22:4d:7a:e8:51:bf:cb:30:18:be:a5:01:a4: 0b:56:06:58:99:db:e2:fc:2c:c2:39:71:d1:4a:b3: d2:d5:27:1a:01:29:ee:66:7c:0d:6a:83:af:60:b3: 3c:eb:39:06:a3:3f:59:94:4e:8b:21:f3:e8:81:a6: 98:78:4a:3c:eb:de:7b:d3:4c:26:a6:61:29:07:e8: 61:45:9e:0f:fb:57:77:fd:ea:fd:f8:1f:71:c3:c3: 9b:32:e3:2d:ad:5d:c2:b1:1b:0e:dd:15:95:b5:09: ec:b9:a5:69:14:4e:72:90:ee:ef:43:1c:7b:2b:f1: f9:bb:99:29:14:f9:e5:1d:26:f8:52:31:4e:be:8c: e6:a6:51:13:22:e6:55:e4:7b:62:cd:ce:e0:91:68: 47:a2:d4:89:27:df:81:31:0c:f5:d2:3b:d9:9a:2e: a5:e9:d9:82:f9:bf:ff:5b:1e:1c:c1:5e:bb:5b:71: 2d:97:dc:b7:a9:34:aa:46:3e:3a:11:4e:42:20:68: c5:b6:bf:da:f9:6a:22:8d:99:b1:29:89:8d:b6:4a: fa:c0:b4:06:77:d7:4c:96:49:10:93:c4:f2:01:cd: d2:8e:82:00:07:44:77:1c:c4:73:18:fa:cc:49:45: 31:40:29:87:ee:76:a1:d6:89:46:1c:ef:71:ea:6f: 4d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:08:AB:0E:3B:58:49:AC:08:CF:DB:76:5B:5B:93:33:36:DF:82:68 X509v3 Authority Key Identifier: keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/oAirDjtYSawIz9t2W1uTMzbfgmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.17.224.0/21 IPv6: 2a00:5fc0::/32 Signature Algorithm: sha256WithRSAEncryption 4e:2e:2d:07:fb:07:cc:ef:73:f7:9c:d6:26:e3:61:33:64:a2: b0:c9:ec:a9:21:77:83:38:dd:b4:1c:f0:b5:89:8b:63:b6:cb: e3:31:b7:30:ca:8d:03:23:ff:e0:f2:9c:97:44:04:4c:2c:a3: 10:cf:1e:7e:23:1b:30:0e:f7:9d:b4:b9:fb:8a:0d:03:b2:f2: f4:36:2d:ea:9f:b1:af:68:dc:61:b4:cd:32:4f:20:25:d2:46: 81:d8:36:d2:cc:8d:8b:6c:ff:88:fd:4a:4c:da:49:d0:49:c2: 2e:5c:c5:b2:a5:d1:e9:a7:d0:0a:a8:af:96:ce:ea:f7:b9:19: 43:a5:61:8d:f8:64:22:af:68:84:37:63:92:b0:99:ab:8d:e1: 17:88:0e:2e:ea:f7:be:29:3d:f9:0c:14:c9:7b:ba:46:79:6c: b1:34:f2:d1:09:e6:d5:cb:a3:f1:fd:65:98:be:c2:97:bd:1e: 7c:18:03:33:c0:83:04:45:f2:8e:b6:28:38:3b:68:76:15:45: 50:5e:11:65:6a:9d:43:fe:31:35:42:c1:eb:77:69:5d:cd:5d: 81:db:37:97:68:05:f6:ad:92:a1:5b:71:85:b9:68:03:9b:10: eb:54:ae:35:49:0e:d1:69:84:42:c0:af:5e:51:e7:35:98:9c: 0f:a8:8d:a2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yxqT17hHFPbvUFmb/3LeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOGZiMWRlYjA5ZTcyNDI1YjMwOWExNDE0OTE3ZGFmODkz YmVmNTkwHhcNMjYwMTAyMDgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDA4YWIwZTNiNTg0OWFjMDhjZmRiNzY1YjViOTMzMzM2ZGY4MjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniJNeuhRv8swGL6lAaQLVgZYmdvi /CzCOXHRSrPS1ScaASnuZnwNaoOvYLM86zkGoz9ZlE6LIfPogaaYeEo8695700wm pmEpB+hhRZ4P+1d3/er9+B9xw8ObMuMtrV3CsRsO3RWVtQnsuaVpFE5ykO7vQxx7 K/H5u5kpFPnlHSb4UjFOvozmplETIuZV5Htizc7gkWhHotSJJ9+BMQz10jvZmi6l 6dmC+b//Wx4cwV67W3Etl9y3qTSqRj46EU5CIGjFtr/a+WoijZmxKYmNtkr6wLQG d9dMlkkQk8TyAc3SjoIAB0R3HMRzGPrMSUUxQCmH7nah1olGHO9x6m9NXQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKAIqw47WEmsCM/bdltbkzM234JoMB8GA1UdIwQY MBaAFAuPsd6wnnJCWzCaFBSRfa+JO+9ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzQteDNyQ2Vja0piTUpvVUZKRjlyNGs3NzFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYzc2M2ItODNlNi00YmQxLWI5M2Et Zjg3ODVhNTgxMDZjLzEvb0FpckRqdFlTYXdJejl0MlcxdVRNemJmZ21nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mYzc2M2ItODNlNi00YmQxLWI5M2EtZjg3ODVhNTgxMDZj LzEvQzQteDNyQ2Vja0piTUpvVUZKRjlyNGs3NzFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDJRHgMA0E AgACMAcDBQAqAF/AMA0GCSqGSIb3DQEBCwUAA4IBAQBOLi0H+wfM73P3nNYm42Ez ZKKwyeypIXeDON20HPC1iYtjtsvjMbcwyo0DI//g8pyXRARMLKMQzx5+IxswDved tLn7ig0DsvL0Ni3qn7GvaNxhtM0yTyAl0kaB2DbSzI2LbP+I/UpM2knQScIuXMWy pdHpp9AKqK+Wzur3uRlDpWGN+GQir2iEN2OSsJmrjeEXiA4u6ve+KT35DBTJe7pG eWyxNPLRCebVy6Px/WWYvsKXvR58GAMzwIMERfKOtig4O2h2FUVQXhFlap1D/jE1 QsHrd2ldzV2B2zeXaAX2rZKhW3GFuWgDmxDrVK41SQ7RaYRCwK9eUec1mJwPqI2i -----END CERTIFICATE-----Generated at Sun Jan 25 16:16:17 2026 by rpki-client