This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/cOIA2l5yQWyobF09hWUJkOBpDho.roa File: cOIA2l5yQWyobF09hWUJkOBpDho.roa (raw, json) Hash identifier: 8kdvtWkN2BQUfcekDIq5DMRgrEAmtfmnnsAU8vpbwwI= Subject key identifier: 70:E2:00:DA:5E:72:41:6C:A8:6C:5D:3D:85:65:09:90:E0:69:0E:1A Certificate issuer: /CN=330fe971b3e36b16a92be85f59985be45968b864 Certificate serial: 019B7F15AE66AEB5A3AE0096A2D8A92C7A41 Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/cOIA2l5yQWyobF09hWUJkOBpDho.roa Signing time: Fri 02 Jan 2026 14:21:25 +0000 ROA not before: Fri 02 Jan 2026 14:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47886 IP address blocks: 5.175.80.0/21 maxlen: 21 94.103.16.0/20 maxlen: 20 159.255.216.0/21 maxlen: 21 185.170.92.0/22 maxlen: 22 2a03:6980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ae:66:ae:b5:a3:ae:00:96:a2:d8:a9:2c:7a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864 Validity Not Before: Jan 2 14:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70e200da5e72416ca86c5d3d85650990e0690e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:2d:49:2b:85:c2:26:ed:a4:cb:62:b1:48: df:20:9a:d7:4f:47:63:b2:a9:cd:4e:3f:6d:02:b3: 52:b9:91:95:1a:2d:6f:f0:f8:eb:6b:14:1b:7c:2e: a1:4d:b8:48:c1:69:4b:37:9d:ec:e3:53:ea:8c:b8: 28:1a:83:b9:d6:69:d3:a4:ae:71:c0:1a:13:cb:3a: 19:66:51:00:ba:24:23:66:b4:53:17:eb:06:8d:5e: e1:3e:f6:d3:c7:e1:2a:d7:58:53:32:59:e9:47:b6: 72:36:b9:5b:b8:cf:79:bd:e9:e1:44:ff:ce:f6:c1: 6e:43:2a:7f:b1:c7:ac:9e:6c:a8:cd:f5:be:b9:57: 88:63:18:16:5c:40:07:b3:c0:a9:c0:fe:cc:18:cf: f0:61:68:e6:62:a3:77:e6:f6:36:17:4f:fb:6d:3f: 95:72:ed:b8:86:f2:2a:d6:db:b1:92:2b:64:80:a0: 3b:f5:62:b9:0d:06:1a:16:21:74:0f:61:8a:8c:71: 47:2b:46:b8:15:c1:53:56:5c:49:3a:00:9b:8e:7e: f7:62:46:10:bb:a6:eb:c3:70:c2:21:27:55:67:f6: 76:27:27:23:6b:70:13:7d:39:ab:ea:10:d4:b5:d9: 4f:27:a3:eb:92:ee:51:c7:e6:b4:7f:81:a4:e9:ee: bb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E2:00:DA:5E:72:41:6C:A8:6C:5D:3D:85:65:09:90:E0:69:0E:1A X509v3 Authority Key Identifier: keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/cOIA2l5yQWyobF09hWUJkOBpDho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.80.0/21 94.103.16.0/20 159.255.216.0/21 185.170.92.0/22 IPv6: 2a03:6980::/32 Signature Algorithm: sha256WithRSAEncryption 46:16:fb:13:2c:32:2c:b3:a2:f9:f8:e3:45:0b:51:ee:d6:15: 4c:6f:ce:d8:ed:c9:9b:99:82:1b:01:4b:a0:6a:d0:f0:c1:96: ce:cb:05:28:0d:4b:e5:db:71:5b:8e:5c:d4:e4:bf:ef:c5:e3: 7f:53:5f:e1:a9:0c:ed:dd:40:76:3c:77:5a:97:31:dc:6b:42: 76:ec:c2:d7:c6:54:c2:ee:3a:31:e7:3e:56:35:3f:43:43:7f: d7:61:33:61:e1:25:d8:3c:cf:ee:f3:5e:78:aa:1f:7b:2a:10: eb:d4:01:cf:cd:4e:c1:a6:f2:a5:75:cc:e2:ca:f2:89:f5:7f: 33:1d:60:c3:e2:ee:58:e0:7e:05:6d:7e:41:fa:51:b9:20:91: f6:20:6e:6a:81:ff:1e:7c:b3:0d:5b:10:e1:e9:6d:82:c3:89: 2f:0c:31:d5:e6:43:47:1a:74:bb:30:ea:fb:55:50:c7:9d:4e: 4b:34:17:05:f3:ed:ea:7f:0a:c7:12:c9:20:39:d5:55:a0:ac: 36:34:4c:75:46:03:f2:22:3b:19:b9:36:fc:f1:36:18:96:b3: 5e:31:81:be:ba:d0:90:bd:07:c4:ef:8f:9e:98:a5:57:67:07: 83:50:e2:ac:e8:d9:67:c6:7d:4f:ed:65:01:73:e2:50:aa:a3: 3d:96:4a:c2 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/Fa5mrrWjrgCWotipLHpBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMGZlOTcxYjNlMzZiMTZhOTJiZTg1ZjU5OTg1YmU0NTk2 OGI4NjQwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGUyMDBkYTVlNzI0MTZjYTg2YzVkM2Q4NTY1MDk5MGUwNjkwZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYctSSuFwibtpMtisUjfIJrXT0dj sqnNTj9tArNSuZGVGi1v8PjraxQbfC6hTbhIwWlLN53s41PqjLgoGoO51mnTpK5x wBoTyzoZZlEAuiQjZrRTF+sGjV7hPvbTx+Eq11hTMlnpR7ZyNrlbuM95venhRP/O 9sFuQyp/scesnmyozfW+uVeIYxgWXEAHs8CpwP7MGM/wYWjmYqN35vY2F0/7bT+V cu24hvIq1tuxkitkgKA79WK5DQYaFiF0D2GKjHFHK0a4FcFTVlxJOgCbjn73YkYQ u6brw3DCISdVZ/Z2Jycja3ATfTmr6hDUtdlPJ6Prku5Rx+a0f4Gk6e670wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFHDiANpeckFsqGxdPYVlCZDgaQ4aMB8GA1UdIwQY MBaAFDMP6XGz42sWqSvoX1mYW+RZaLhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXdfcGNiUGpheGFwSy1oZldaaGI1RmxvdUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hMzg2OTMtY2ZhMC00M2U4LWE1MWIt MTFlOWU5ZjAxMzQzLzEvY09JQTJsNXlRV3lvYkYwOWhXVUprT0JwRGhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9hMzg2OTMtY2ZhMC00M2U4LWE1MWItMTFlOWU5ZjAxMzQz LzEvTXdfcGNiUGpheGFwSy1oZldaaGI1RmxvdUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDBa9QAwQE XmcQAwQDn//YAwQCuapcMA0EAgACMAcDBQAqA2mAMA0GCSqGSIb3DQEBCwUAA4IB AQBGFvsTLDIss6L5+ONFC1Hu1hVMb87Y7cmbmYIbAUugatDwwZbOywUoDUvl23Fb jlzU5L/vxeN/U1/hqQzt3UB2PHdalzHca0J27MLXxlTC7jox5z5WNT9DQ3/XYTNh 4SXYPM/u8154qh97KhDr1AHPzU7BpvKldcziyvKJ9X8zHWDD4u5Y4H4FbX5B+lG5 IJH2IG5qgf8efLMNWxDh6W2Cw4kvDDHV5kNHGnS7MOr7VVDHnU5LNBcF8+3qfwrH EskgOdVVoKw2NEx1RgPyIjsZuTb88TYYlrNeMYG+utCQvQfE74+emKVXZweDUOKs 6Nlnxn1P7WUBc+JQqqM9lkrC -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:33 2026 by rpki-client