This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/owFAH0NKfrDfBAQ47nRF-1LRX94.roa File: owFAH0NKfrDfBAQ47nRF-1LRX94.roa (raw, json) Hash identifier: 6BKNs0dwhnDq9JD+6JoLqVbhZ9HujbIAeFvlo4c+lAs= Subject key identifier: A3:01:40:1F:43:4A:7E:B0:DF:04:04:38:EE:74:45:FB:52:D1:5F:DE Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77595027820E4CAF03E543467ED729E5 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/owFAH0NKfrDfBAQ47nRF-1LRX94.roa Signing time: Thu 01 Jan 2026 02:18:20 +0000 ROA not before: Thu 01 Jan 2026 02:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47388 IP address blocks: 94.176.42.0/23 maxlen: 24 188.215.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:50:27:82:0e:4c:af:03:e5:43:46:7e:d7:29:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a301401f434a7eb0df040438ee7445fb52d15fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:e3:cd:0b:76:c2:14:b8:60:83:46:3b:ff: 65:27:19:26:a1:dc:70:92:82:27:80:db:7c:02:84: ac:ae:fa:32:b0:75:f1:c7:88:3f:b7:15:5b:f5:cb: ed:5f:c5:10:a2:0b:bd:28:df:d9:b2:a0:6b:70:6a: f8:ca:3d:50:ff:97:75:d6:7d:09:37:fa:a3:32:15: 26:4b:36:67:e5:6c:ad:9f:86:d3:23:1b:36:4d:40: 6f:46:ba:70:6f:1f:b0:ae:16:14:41:90:46:e0:cb: 6e:9a:82:d4:ee:bc:29:0d:12:9c:a4:7a:b1:da:cd: 46:f8:5e:9f:1e:5e:11:79:d7:f1:82:01:41:df:18: f7:ac:4b:cf:b4:d2:96:a3:a1:9b:e3:1e:52:f5:9a: 37:31:bf:03:36:5c:98:3a:02:dc:98:60:ea:e7:f2: 18:e2:a1:ba:2b:8d:b6:75:11:78:f4:e1:52:93:a3: 93:2c:8b:2d:a7:ab:8c:8a:32:c5:cd:d4:35:d6:44: 5d:3d:bc:1c:84:3d:2e:18:61:3e:f0:dd:d9:a5:8a: 03:06:c5:5b:1a:26:65:a6:78:e8:2d:84:36:51:50: df:59:f6:8b:c1:ef:b6:51:c5:c3:f8:11:c6:73:37: 6f:55:cc:ff:30:e5:ff:79:bb:fb:cc:a0:c5:8d:7f: 7a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:01:40:1F:43:4A:7E:B0:DF:04:04:38:EE:74:45:FB:52:D1:5F:DE X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/owFAH0NKfrDfBAQ47nRF-1LRX94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.176.42.0/23 188.215.93.0/24 Signature Algorithm: sha256WithRSAEncryption 90:dc:f4:0a:f6:44:91:eb:d9:3f:59:1e:2e:ea:39:5f:8a:49: 35:d3:a7:3f:b0:49:2d:33:64:9c:b4:78:58:79:65:43:5a:b1: a6:53:59:50:1d:68:bc:a5:81:67:8a:d3:43:f5:e6:36:98:e8: 99:37:09:c8:d7:59:87:cf:f2:71:b5:bc:75:ee:b3:11:64:0e: 49:81:08:9c:a1:5f:b5:b4:46:e7:ad:f7:6c:72:8f:42:d4:50: d2:1a:00:fb:66:c7:19:c1:bd:64:08:9c:38:6c:5a:1d:1c:8d: ca:b7:43:da:20:a5:29:7f:26:e2:7d:a7:c6:92:d7:20:13:01: 5c:1a:c0:3f:30:76:4c:38:9e:fe:df:55:4a:5b:3c:74:24:c2: 33:d6:e2:48:41:02:2d:c1:92:08:bd:a1:ea:a3:01:62:c2:8e: 01:e2:6c:19:5c:06:94:88:43:9e:ae:10:d0:eb:53:42:73:18: f2:28:78:bb:80:e5:5c:69:7a:17:87:ed:17:58:8c:2b:11:cb: f9:2a:d4:2f:1b:a7:7d:76:28:be:70:5c:bd:02:35:6f:06:1c: de:a2:26:8e:73:70:d4:ed:bd:81:31:93:33:fc:a2:ed:a0:7f: f5:6c:6c:32:7c:06:f7:e7:3d:49:95:bc:ce:04:d9:e1:e7:d3: 08:1d:c4:11 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WVAngg5MrwPlQ0Z+1ynlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzAxNDAxZjQzNGE3ZWIwZGYwNDA0MzhlZTc0NDVmYjUyZDE1ZmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp93jzQt2whS4YINGO/9lJxkmodxw koIngNt8AoSsrvoysHXxx4g/txVb9cvtX8UQogu9KN/ZsqBrcGr4yj1Q/5d11n0J N/qjMhUmSzZn5Wytn4bTIxs2TUBvRrpwbx+wrhYUQZBG4MtumoLU7rwpDRKcpHqx 2s1G+F6fHl4RedfxggFB3xj3rEvPtNKWo6Gb4x5S9Zo3Mb8DNlyYOgLcmGDq5/IY 4qG6K422dRF49OFSk6OTLIstp6uMijLFzdQ11kRdPbwchD0uGGE+8N3ZpYoDBsVb GiZlpnjoLYQ2UVDfWfaLwe+2UcXD+BHGczdvVcz/MOX/ebv7zKDFjX96ZwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKMBQB9DSn6w3wQEOO50RftS0V/eMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL293RkFIME5LZnJEZkJBUTQ3blJGLTFMUlg5NC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAFesCoD BAC8110wDQYJKoZIhvcNAQELBQADggEBAJDc9Ar2RJHr2T9ZHi7qOV+KSTXTpz+w SS0zZJy0eFh5ZUNasaZTWVAdaLylgWeK00P15jaY6Jk3CcjXWYfP8nG1vHXusxFk DkmBCJyhX7W0Ruet92xyj0LUUNIaAPtmxxnBvWQInDhsWh0cjcq3Q9ogpSl/JuJ9 p8aS1yATAVwawD8wdkw4nv7fVUpbPHQkwjPW4khBAi3Bkgi9oeqjAWLCjgHibBlc BpSIQ56uENDrU0JzGPIoeLuA5VxpeheH7RdYjCsRy/kq1C8bp312KL5wXL0CNW8G HN6iJo5zcNTtvYExkzP8ou2gf/VsbDJ8BvfnPUmVvM4E2eHn0wgdxBE= -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:27 2026 by rpki-client