This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/oLoJA2OVG8IsCvWOrhvycFyybL4.roa File: oLoJA2OVG8IsCvWOrhvycFyybL4.roa (raw, json) Hash identifier: Fx75YhKE2N8oMuzu/t51L4V+dyIZMQQRO3px9ZhIIiA= Subject key identifier: A0:BA:09:03:63:95:1B:C2:2C:0A:F5:8E:AE:1B:F2:70:5C:B2:6C:BE Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCABD091A37B3E43920471F0120671C Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/oLoJA2OVG8IsCvWOrhvycFyybL4.roa Signing time: Fri 02 Jan 2026 08:19:57 +0000 ROA not before: Fri 02 Jan 2026 08:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47558 IP address blocks: 94.184.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:bd:09:1a:37:b3:e4:39:20:47:1f:01:20:67:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0ba090363951bc22c0af58eae1bf2705cb26cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:ae:d1:78:a3:7a:d2:66:5c:5a:11:0f:69: 03:3d:6d:2d:9c:3d:4d:84:5e:93:1d:29:89:51:23: 77:d3:69:35:c5:7b:e6:cc:3c:13:86:c3:f8:77:da: ae:27:6d:70:85:16:1d:fa:e9:47:60:cd:1d:8d:1b: 63:2c:c6:75:23:c6:1f:1e:a7:a7:0b:a4:b1:e5:65: 8c:f5:36:6e:4c:00:cc:03:87:50:c8:e4:b7:06:c2: 26:45:1f:e9:0f:d6:86:bd:c3:13:c4:7e:16:6a:6c: 24:49:ea:07:db:c3:8f:d8:9c:54:fe:12:8f:36:39: 9d:83:ad:56:ab:6b:84:c5:df:7c:14:76:7c:36:54: 96:85:a0:c0:ee:1a:3a:35:b8:33:44:9c:58:34:a3: 6b:fd:cb:e7:15:90:29:dd:e1:ad:be:dd:77:3b:59: 78:49:6c:c5:20:ae:af:1a:41:18:38:b0:a9:25:7e: 1c:61:71:82:eb:32:38:23:7f:0d:47:24:1e:69:90: 17:13:04:af:f8:05:6f:e4:88:f8:6d:71:f0:3e:08: 50:dc:fa:45:ff:7c:d8:65:90:5f:ac:25:e9:26:fc: 9f:65:f1:62:ea:0d:3f:f2:de:c7:96:dd:ee:18:98: e0:ff:74:5d:a6:2d:a6:65:f0:86:05:5e:70:b9:bf: ce:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BA:09:03:63:95:1B:C2:2C:0A:F5:8E:AE:1B:F2:70:5C:B2:6C:BE X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/oLoJA2OVG8IsCvWOrhvycFyybL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.184.176.0/21 Signature Algorithm: sha256WithRSAEncryption 4b:3f:06:5a:82:36:c4:eb:fd:f3:d5:0d:72:ea:9e:e0:bd:46: d4:87:aa:23:1a:77:5c:19:7a:5c:e7:cb:8f:7b:74:83:a4:82: c4:fb:46:6c:ff:f9:5b:8a:58:0a:c4:e1:be:ea:a1:39:f4:26: 35:31:82:89:f8:c4:c1:4f:0f:dd:79:60:61:62:06:71:6c:b3: c0:e9:19:30:f2:eb:6a:31:ab:ed:ba:3a:85:09:86:16:50:9e: 41:ad:2a:43:c0:5e:53:e5:8a:da:b8:89:0d:fa:19:30:d1:2a: 95:04:0d:e7:c2:be:58:11:e0:98:c3:17:e2:58:49:b0:24:a2: b5:b1:a6:da:49:ac:60:87:6e:cd:94:eb:d7:ee:c7:40:24:96: 4d:b2:b0:71:5a:98:d6:65:f7:e4:fc:6c:a6:69:e4:a2:92:a3: 2e:37:08:59:fd:a9:e0:a1:e8:c4:c8:3d:1f:a0:d9:4b:b7:38: 11:c6:dd:16:4f:7d:17:6a:0d:e1:eb:56:ed:94:7f:bd:d7:93: 37:5e:fb:33:52:47:85:2c:54:17:c9:86:df:07:d7:69:cd:17: ca:44:68:8a:1b:e5:5c:d5:72:d8:41:ac:08:d6:ac:90:0b:36: 24:d9:4d:d8:b8:39:8a:e5:5f:5e:4f:1e:4f:ef:b0:1b:5b:dd: 0e:ee:dc:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yr0JGjez5DkgRx8BIGccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGJhMDkwMzYzOTUxYmMyMmMwYWY1OGVhZTFiZjI3MDVjYjI2Y2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFmu0XijetJmXFoRD2kDPW0tnD1N hF6THSmJUSN302k1xXvmzDwThsP4d9quJ21whRYd+ulHYM0djRtjLMZ1I8YfHqen C6Sx5WWM9TZuTADMA4dQyOS3BsImRR/pD9aGvcMTxH4WamwkSeoH28OP2JxU/hKP Njmdg61Wq2uExd98FHZ8NlSWhaDA7ho6NbgzRJxYNKNr/cvnFZAp3eGtvt13O1l4 SWzFIK6vGkEYOLCpJX4cYXGC6zI4I38NRyQeaZAXEwSv+AVv5Ij4bXHwPghQ3PpF /3zYZZBfrCXpJvyfZfFi6g0/8t7Hlt3uGJjg/3Rdpi2mZfCGBV5wub/OvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKC6CQNjlRvCLAr1jq4b8nBcsmy+MB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvb0xvSkEyT1ZHOElzQ3ZXT3JodnljRnl5Ykw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXriwMA0G CSqGSIb3DQEBCwUAA4IBAQBLPwZagjbE6/3z1Q1y6p7gvUbUh6ojGndcGXpc58uP e3SDpILE+0Zs//lbilgKxOG+6qE59CY1MYKJ+MTBTw/deWBhYgZxbLPA6Rkw8utq MavtujqFCYYWUJ5BrSpDwF5T5YrauIkN+hkw0SqVBA3nwr5YEeCYwxfiWEmwJKK1 sabaSaxgh27NlOvX7sdAJJZNsrBxWpjWZffk/GymaeSikqMuNwhZ/angoejEyD0f oNlLtzgRxt0WT30Xag3h61btlH+915M3XvszUkeFLFQXyYbfB9dpzRfKRGiKG+Vc 1XLYQawI1qyQCzYk2U3YuDmK5V9eTx5P77AbW90O7tzS -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:06 2026 by rpki-client