This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/OyiOQQ5RXT-6W_eR_NYBstfLFGQ.roa File: OyiOQQ5RXT-6W_eR_NYBstfLFGQ.roa (raw, json) Hash identifier: cg+zDM1Nsx6Yirfpu41rhF9dShj8Jqt4XkTVhq7Ju3g= Subject key identifier: 3B:28:8E:41:0E:51:5D:3F:BA:5B:F7:91:FC:D6:01:B2:D7:CB:14:64 Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92 Certificate serial: 019B7D5C4B4C5DA77AF4F58B0641BEDA41D6 Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/OyiOQQ5RXT-6W_eR_NYBstfLFGQ.roa Signing time: Fri 02 Jan 2026 06:19:19 +0000 ROA not before: Fri 02 Jan 2026 06:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12637 IP address blocks: 77.83.64.0/24 maxlen: 24 77.83.65.0/24 maxlen: 24 77.83.66.0/24 maxlen: 24 80.241.140.0/22 maxlen: 24 80.241.142.0/24 maxlen: 24 2a05:be80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:4b:4c:5d:a7:7a:f4:f5:8b:06:41:be:da:41:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92 Validity Not Before: Jan 2 06:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b288e410e515d3fba5bf791fcd601b2d7cb1464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:61:10:f1:e1:eb:65:36:5c:c7:47:ca:ef: 5c:87:8f:f1:56:30:d7:c7:00:31:da:e4:86:5a:d3: b9:5b:cb:95:b9:58:95:2a:f8:cf:d9:ce:a5:97:c4: fc:f7:8a:64:35:76:1a:3b:51:f6:fd:a2:6a:56:17: cc:43:ac:fb:18:d9:88:98:74:7a:0f:14:21:9e:40: 85:6a:37:b3:4c:e3:96:88:96:23:9c:4e:aa:7e:65: e5:b0:4c:e9:e5:25:25:55:4d:92:f5:f9:c7:e7:6b: 62:44:3f:96:5b:dc:16:e4:fd:1a:dd:f3:46:4c:24: b2:35:8b:e6:93:42:95:22:4d:0b:fd:62:1f:e9:bd: 7c:49:d6:bb:6f:5f:ff:4a:93:37:a0:19:d3:f2:4f: 7e:73:29:c5:71:98:c5:d6:2f:e5:d9:4a:17:e1:84: 65:cf:7e:ae:3b:22:5a:ee:ac:2f:3f:69:05:51:a8: fc:04:44:80:76:77:49:bb:58:d8:a5:17:96:e3:9b: 19:93:63:ce:19:5b:0b:e3:26:a8:d5:d8:43:ae:0a: f4:a7:c5:c6:f4:51:ee:24:3b:50:ff:08:18:ce:3d: 65:52:6c:84:e7:c1:0b:27:3a:58:37:8a:6e:97:54: 09:f3:81:5b:69:65:ee:85:3e:8b:f9:19:ed:e1:07: 07:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:28:8E:41:0E:51:5D:3F:BA:5B:F7:91:FC:D6:01:B2:D7:CB:14:64 X509v3 Authority Key Identifier: keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/OyiOQQ5RXT-6W_eR_NYBstfLFGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.64.0-77.83.66.255 80.241.140.0/22 IPv6: 2a05:be80::/29 Signature Algorithm: sha256WithRSAEncryption 3c:87:81:1e:08:b6:5a:b7:0e:00:18:f8:8c:6c:80:c3:17:88: f2:25:b1:47:4c:0f:23:84:ee:e3:7a:37:86:be:a9:81:ab:bb: 39:2e:27:9b:3e:9f:91:66:ce:86:33:61:08:e7:22:cd:b8:7b: 2d:f7:7b:bf:f8:f3:34:94:65:5f:15:aa:5a:f2:6d:11:d9:ed: 8e:4a:e2:28:e9:4d:3f:b2:b5:91:b0:4f:8d:da:1d:d8:76:4b: 4f:56:2d:9b:f4:85:d1:1b:83:e3:c4:4c:61:3b:17:b0:5c:81: e5:1f:0e:13:b8:e4:e2:10:c1:c2:cd:b9:4e:d9:a0:9b:1c:8c: fd:60:53:fd:ff:b7:25:ea:cb:2b:c0:3c:91:95:e0:21:0e:40: 0a:0e:7f:e6:48:18:22:a7:1a:26:07:20:4b:3c:bd:48:2b:5f: a4:29:3b:bf:9f:33:8f:d4:8b:28:cf:2d:a0:a3:a8:83:eb:f5: d1:bb:2f:69:92:97:44:f0:fc:7b:16:7d:a5:7b:52:7b:c6:7b: 46:32:e0:56:bf:e1:50:11:2a:0e:8a:57:d3:3f:fa:04:71:44: c3:57:ca:77:61:bf:71:05:6c:33:7c:28:18:99:47:58:ac:aa: bc:7c:fa:4e:32:48:22:ac:12:30:3c:19:fe:5e:bd:1d:71:5b: 97:95:3c:6e -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt9XEtMXad69PWLBkG+2kHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDk0MjJkZTk2MjAzZTVkODczZTA5OTU1OTFhM2E2OTBk ZDNkOTIwHhcNMjYwMTAyMDYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjI4OGU0MTBlNTE1ZDNmYmE1YmY3OTFmY2Q2MDFiMmQ3Y2IxNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA9hEPHh62U2XMdHyu9ch4/xVjDX xwAx2uSGWtO5W8uVuViVKvjP2c6ll8T894pkNXYaO1H2/aJqVhfMQ6z7GNmImHR6 DxQhnkCFajezTOOWiJYjnE6qfmXlsEzp5SUlVU2S9fnH52tiRD+WW9wW5P0a3fNG TCSyNYvmk0KVIk0L/WIf6b18Sda7b1//SpM3oBnT8k9+cynFcZjF1i/l2UoX4YRl z36uOyJa7qwvP2kFUaj8BESAdndJu1jYpReW45sZk2POGVsL4yao1dhDrgr0p8XG 9FHuJDtQ/wgYzj1lUmyE58ELJzpYN4pul1QJ84FbaWXuhT6L+Rnt4QcHAQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFDsojkEOUV0/ulv3kfzWAbLXyxRkMB8GA1UdIwQY MBaAFP3ZQi3pYgPl2HPgmVWRo6aQ3T2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODkt YTE4NTUwYTY5ZjY2LzEvT3lpT1FRNVJYVC02V19lUl9OWUJzdGZMRkdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODktYTE4NTUwYTY5ZjY2 LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAZNU0AD BABNU0IDBAJQ8YwwDQQCAAIwBwMFAyoFvoAwDQYJKoZIhvcNAQELBQADggEBADyH gR4Itlq3DgAY+IxsgMMXiPIlsUdMDyOE7uN6N4a+qYGruzkuJ5s+n5FmzoYzYQjn Is24ey33e7/48zSUZV8VqlrybRHZ7Y5K4ijpTT+ytZGwT43aHdh2S09WLZv0hdEb g+PETGE7F7BcgeUfDhO45OIQwcLNuU7ZoJscjP1gU/3/tyXqyyvAPJGV4CEOQAoO f+ZIGCKnGiYHIEs8vUgrX6QpO7+fM4/UiyjPLaCjqIPr9dG7L2mSl0Tw/HsWfaV7 UnvGe0Yy4Fa/4VARKg6KV9M/+gRxRMNXyndhv3EFbDN8KBiZR1isqrx8+k4ySCKs EjA8Gf5evR1xW5eVPG4= -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:29 2026 by rpki-client