This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/oh_jXAUA6eq6kRHS-lvxyPnXftw.roa File: oh_jXAUA6eq6kRHS-lvxyPnXftw.roa (raw, json) Hash identifier: On9ueJxxpQ0Fb6Lyu24tOOZZ+faCe3+N4gXPxM4+qsY= Subject key identifier: A2:1F:E3:5C:05:00:E9:EA:BA:91:11:D2:FA:5B:F1:C8:F9:D7:7E:DC Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E38FF9BD78914FF40DE6A33C1E62B6D Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/oh_jXAUA6eq6kRHS-lvxyPnXftw.roa Signing time: Fri 02 Jan 2026 10:20:23 +0000 ROA not before: Fri 02 Jan 2026 10:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6874 IP address blocks: 82.179.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ff:9b:d7:89:14:ff:40:de:6a:33:c1:e6:2b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a21fe35c0500e9eaba9111d2fa5bf1c8f9d77edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:14:1c:6f:53:50:b6:6e:3b:9b:24:29:76:44: 79:1b:ba:f2:8c:1b:89:f3:b4:74:6e:37:f7:4d:41: 1f:91:f5:16:da:c7:15:88:e1:0b:57:a1:27:ae:f2: e8:42:ef:17:e2:be:db:91:5a:7c:4e:58:57:bb:aa: 8a:cd:16:07:9d:f3:e4:7c:45:78:dd:2c:88:31:9e: 88:17:b5:cd:2f:f1:5b:c9:2f:95:fb:e5:65:56:92: 6d:7a:fe:ba:36:07:5d:7d:c3:39:bf:c0:4a:24:85: 65:8d:83:b6:6d:88:37:8c:c6:97:df:07:cd:59:99: 87:e8:fa:b9:f0:39:98:79:6e:77:93:48:16:4e:0e: 40:cb:a5:c6:ce:59:eb:34:e0:4f:91:d9:79:2b:05: f0:cf:1c:09:eb:18:05:0d:07:65:ef:86:34:d1:4d: a1:9c:85:2c:42:20:e7:58:bb:ed:9e:81:a8:5b:ca: ed:1b:e0:72:46:05:db:c0:f6:62:ca:fa:a0:54:58: 78:30:49:19:36:b2:1f:33:be:6e:4d:ac:e1:35:7c: bc:9c:ba:9c:3a:fe:df:0e:93:78:65:41:6b:ef:d7: f3:94:8b:79:f7:7e:2a:7a:d6:49:fc:98:d7:3b:ee: 28:4e:5f:4a:2b:05:7e:18:81:70:80:56:70:f1:75: 12:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1F:E3:5C:05:00:E9:EA:BA:91:11:D2:FA:5B:F1:C8:F9:D7:7E:DC X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/oh_jXAUA6eq6kRHS-lvxyPnXftw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.179.112.0/20 Signature Algorithm: sha256WithRSAEncryption 70:60:cb:8f:48:f4:cf:5c:8c:c1:f8:17:5b:e1:11:31:b2:67: 80:f2:8a:e9:c0:e6:7a:44:a6:be:bb:4a:fd:89:0e:19:52:72: fa:f0:ae:1d:06:ad:71:94:72:11:ad:c6:1d:2c:1c:c9:8c:83: f3:a9:a7:44:51:19:6d:11:61:a3:26:62:11:bc:73:10:e5:c7: 3b:1f:9c:62:79:67:3a:eb:e7:2e:07:ba:03:05:6a:11:63:2f: 0f:01:33:2d:ab:97:72:0b:50:4a:1f:66:83:e0:78:7b:81:8c: 61:b3:25:9d:75:66:9b:f4:3f:db:78:3e:b4:07:31:64:53:cc: a7:74:bb:ea:fd:33:89:51:62:1a:1c:d9:a2:49:97:bf:a6:c3: c2:b5:e9:64:b8:47:ed:00:e0:7b:2c:d5:57:d1:77:d7:e0:26: 26:6d:c6:68:9a:d0:36:96:ff:f8:63:1f:d0:37:b7:66:f7:d6: dc:85:32:2a:ee:1d:12:c6:ca:e9:5e:c6:b3:c0:00:02:a0:63: f7:e3:77:15:08:f8:9c:f5:e1:42:8b:c7:5a:c8:fd:0a:aa:1a: 9b:a5:f2:21:64:c9:61:9c:af:4f:bb:89:76:d7:8a:ec:09:f0: 4c:9c:27:77:2e:81:d0:b2:8d:3a:b3:32:46:3d:df:98:ee:1c: a4:eb:7c:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OP+b14kU/0DeajPB5ittMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjFmZTM1YzA1MDBlOWVhYmE5MTExZDJmYTViZjFjOGY5ZDc3ZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBQcb1NQtm47myQpdkR5G7ryjBuJ 87R0bjf3TUEfkfUW2scViOELV6EnrvLoQu8X4r7bkVp8TlhXu6qKzRYHnfPkfEV4 3SyIMZ6IF7XNL/FbyS+V++VlVpJtev66NgddfcM5v8BKJIVljYO2bYg3jMaX3wfN WZmH6Pq58DmYeW53k0gWTg5Ay6XGzlnrNOBPkdl5KwXwzxwJ6xgFDQdl74Y00U2h nIUsQiDnWLvtnoGoW8rtG+ByRgXbwPZiyvqgVFh4MEkZNrIfM75uTazhNXy8nLqc Ov7fDpN4ZUFr79fzlIt5934qetZJ/JjXO+4oTl9KKwV+GIFwgFZw8XUSXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKIf41wFAOnqupER0vpb8cj5137cMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvb2hfalhBVUE2ZXE2a1JIUy1sdnh5UG5YZnR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUrNwMA0G CSqGSIb3DQEBCwUAA4IBAQBwYMuPSPTPXIzB+Bdb4RExsmeA8orpwOZ6RKa+u0r9 iQ4ZUnL68K4dBq1xlHIRrcYdLBzJjIPzqadEURltEWGjJmIRvHMQ5cc7H5xieWc6 6+cuB7oDBWoRYy8PATMtq5dyC1BKH2aD4Hh7gYxhsyWddWab9D/beD60BzFkU8yn dLvq/TOJUWIaHNmiSZe/psPCtelkuEftAOB7LNVX0XfX4CYmbcZomtA2lv/4Yx/Q N7dm99bchTIq7h0SxsrpXsazwAACoGP343cVCPic9eFCi8dayP0KqhqbpfIhZMlh nK9Pu4l214rsCfBMnCd3LoHQso06szJGPd+Y7hyk63w1 -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:47 2026 by rpki-client