This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/OAwjmIJKIKdPAQbPLOFqI6tUMQc.roa File: OAwjmIJKIKdPAQbPLOFqI6tUMQc.roa (raw, json) Hash identifier: ptXr3wrI9Ua3HiNsZCwM7CEtOaXWpO5fScxHniZRFZ8= Subject key identifier: 38:0C:23:98:82:4A:20:A7:4F:01:06:CF:2C:E1:6A:23:AB:54:31:07 Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5 Certificate serial: 019B7F1581551C521D847405EFE1075FCA0C Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/OAwjmIJKIKdPAQbPLOFqI6tUMQc.roa Signing time: Fri 02 Jan 2026 14:21:14 +0000 ROA not before: Fri 02 Jan 2026 14:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213556 IP address blocks: 78.41.59.0/24 maxlen: 24 103.152.1.0/24 maxlen: 24 2a14:4580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:81:55:1c:52:1d:84:74:05:ef:e1:07:5f:ca:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5 Validity Not Before: Jan 2 14:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=380c2398824a20a74f0106cf2ce16a23ab543107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:93:7e:bc:c9:1a:d6:31:74:40:ee:c5:f9: f6:e3:50:6f:94:04:e0:ce:a5:4f:54:72:29:16:f3: d5:a8:e7:27:b0:36:32:61:d6:3a:1f:94:89:0f:0d: d4:6a:ae:6e:e2:31:97:60:61:dd:79:76:7c:aa:8e: ef:f0:17:5e:0e:67:0a:69:fa:84:e7:97:79:d6:2b: b7:08:b1:e8:4d:00:99:44:38:2c:bf:78:2e:f6:52: 71:c5:15:0b:06:01:5e:19:4d:63:cf:cc:5f:dd:87: 30:c3:33:1f:81:18:a2:25:50:68:ac:4a:76:a1:8a: ce:ca:41:96:36:4e:bd:3c:d9:71:21:63:6d:47:b0: 22:97:b1:5b:95:45:19:f2:4f:16:4d:9f:54:5a:c8: 80:98:0d:35:12:ac:4f:08:d0:b5:11:68:7c:6e:c1: 19:78:55:78:4e:9d:17:67:93:5c:50:fb:e8:ce:a9: af:38:b4:9c:1d:55:9e:30:ed:78:c7:e7:97:88:5b: 1c:e3:19:b8:09:5f:e3:93:6c:15:8d:be:4d:fe:90: c2:18:ed:f5:6b:d4:06:45:b3:96:12:58:a5:8b:44: 99:ac:c9:84:f0:78:36:66:34:43:f5:14:37:0c:d3: 58:49:91:f1:98:a2:15:e6:79:99:fb:99:fa:bd:93: 33:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0C:23:98:82:4A:20:A7:4F:01:06:CF:2C:E1:6A:23:AB:54:31:07 X509v3 Authority Key Identifier: keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/OAwjmIJKIKdPAQbPLOFqI6tUMQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.59.0/24 103.152.1.0/24 IPv6: 2a14:4580::/29 Signature Algorithm: sha256WithRSAEncryption 86:33:60:2f:24:56:03:0d:3b:da:4e:e3:04:61:ce:3d:f2:92: 17:3c:b9:7b:18:b3:38:3f:14:13:89:d3:fd:60:e7:d6:6e:fc: 8f:60:ad:04:eb:66:72:4e:39:72:f7:82:83:f8:99:9c:86:1d: a2:66:98:b1:ac:dc:79:98:3c:1e:a1:f3:ff:41:43:4c:6d:3d: a3:58:cc:8f:b0:6e:c1:dc:f6:65:a8:56:a9:d8:d2:bd:60:44: b7:b5:16:78:07:a4:9e:fd:4f:07:00:ac:a0:ca:85:38:f9:1c: 95:16:e8:08:34:60:a2:32:a0:0e:5e:7e:f0:69:ac:42:34:ae: f4:27:51:9e:a1:2b:6f:05:c2:55:98:79:15:d3:54:44:5c:a0: 4d:69:e3:01:27:0c:f6:3c:28:3e:66:ab:42:9d:1e:05:be:39: 5b:f7:04:a7:eb:4c:77:7e:47:dd:3f:77:fd:99:1e:d6:ac:36: 18:35:7a:e7:52:ba:28:84:68:d6:94:bd:b5:69:a6:ea:67:9b: 5f:d3:2a:61:93:8f:ad:91:21:0c:6e:11:8f:d6:9a:81:d1:28: 9b:aa:07:fc:60:a2:ef:92:3b:29:e4:c4:b7:a9:bc:6b:02:b4: c1:06:54:8e:65:fd:10:2c:a2:a7:16:1e:da:4c:7a:87:17:1d: ad:8d:bb:a5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FYFVHFIdhHQF7+EHX8oMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxZDgzZmQ4ZGFiZmUxNGIxNzRjY2NkMzViMzViODA3MTMz MzRiYTUwHhcNMjYwMTAyMTQyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODBjMjM5ODgyNGEyMGE3NGYwMTA2Y2YyY2UxNmEyM2FiNTQzMTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn66TfrzJGtYxdEDuxfn241BvlATg zqVPVHIpFvPVqOcnsDYyYdY6H5SJDw3Uaq5u4jGXYGHdeXZ8qo7v8BdeDmcKafqE 55d51iu3CLHoTQCZRDgsv3gu9lJxxRULBgFeGU1jz8xf3YcwwzMfgRiiJVBorEp2 oYrOykGWNk69PNlxIWNtR7Ail7FblUUZ8k8WTZ9UWsiAmA01EqxPCNC1EWh8bsEZ eFV4Tp0XZ5NcUPvozqmvOLScHVWeMO14x+eXiFsc4xm4CV/jk2wVjb5N/pDCGO31 a9QGRbOWElili0SZrMmE8Hg2ZjRD9RQ3DNNYSZHxmKIV5nmZ+5n6vZMzUwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDgMI5iCSiCnTwEGzyzhaiOrVDEHMB8GA1UdIwQY MBaAFHHYP9jav+FLF0zM01s1uAcTM0ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAt MDY0ZDdhZGY0YmUzLzEvT0F3am1JSktJS2RQQVFiUExPRnFJNnRVTVFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAtMDY0ZDdhZGY0YmUz LzEvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQATik7AwQA Z5gBMA0EAgACMAcDBQMqFEWAMA0GCSqGSIb3DQEBCwUAA4IBAQCGM2AvJFYDDTva TuMEYc498pIXPLl7GLM4PxQTidP9YOfWbvyPYK0E62ZyTjly94KD+Jmchh2iZpix rNx5mDweofP/QUNMbT2jWMyPsG7B3PZlqFap2NK9YES3tRZ4B6Se/U8HAKygyoU4 +RyVFugINGCiMqAOXn7waaxCNK70J1GeoStvBcJVmHkV01REXKBNaeMBJwz2PCg+ ZqtCnR4Fvjlb9wSn60x3fkfdP3f9mR7WrDYYNXrnUroohGjWlL21aabqZ5tf0yph k4+tkSEMbhGP1pqB0Sibqgf8YKLvkjsp5MS3qbxrArTBBlSOZf0QLKKnFh7aTHqH Fx2tjbul -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:57 2026 by rpki-client