This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa File: OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa (raw, json) Hash identifier: /fFWCePAVkjb5ODL9wnIO10abW6/OG68dBuoesYNJwY= Subject key identifier: 38:9C:53:2C:35:C9:F6:9A:94:19:75:65:E3:E9:A5:D5:1F:B6:47:48 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019B7C128CB49DC8EECF504C30C79ABDF5BC Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18385 IP address blocks: 45.11.79.0/24 maxlen: 24 45.85.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8c:b4:9d:c8:ee:cf:50:4c:30:c7:9a:bd:f5:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=389c532c35c9f69a94197565e3e9a5d51fb64748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4d:31:99:79:57:f1:b6:89:18:ae:b8:8b:b5: cc:60:18:7c:3a:a5:fe:ea:16:c1:53:d1:78:03:fa: e7:19:94:df:93:15:c4:22:3d:a6:bc:f8:1c:0f:b4: a8:3d:d8:1c:92:21:cf:3e:09:53:17:5e:85:62:99: 91:7f:4d:ce:f7:2f:1f:45:52:65:75:6a:fb:e3:ea: 1f:ab:ae:4e:21:f6:81:df:cc:28:5b:cc:40:39:a0: 83:76:09:04:84:45:b5:85:22:f5:ba:53:d3:11:a2: f6:75:ef:2e:a6:79:06:d8:2f:e3:f4:ac:c0:0a:10: 9e:96:86:c3:f7:80:6f:10:2d:0f:2f:47:4b:41:a2: 36:ed:75:b0:26:34:b8:28:b0:92:a6:3d:12:57:bd: e5:3b:5c:8e:bc:6e:9c:55:ba:9e:76:19:1f:6e:3e: 7e:0f:8a:f3:5c:9d:b8:ad:28:27:ca:ab:02:7e:60: f4:08:25:77:a4:e7:8c:6e:13:f4:88:2d:37:5a:12: 31:67:d3:d0:0f:48:1f:32:93:f3:c2:18:82:e4:4b: 1e:69:48:4b:d9:2c:c6:d4:bd:15:b1:34:79:b8:50: f4:e0:71:8c:e1:7d:fa:ea:34:e2:5c:c6:83:03:86: cf:82:3f:c9:68:67:95:91:96:20:6c:e4:15:2f:39: b0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9C:53:2C:35:C9:F6:9A:94:19:75:65:E3:E9:A5:D5:1F:B6:47:48 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OJxTLDXJ9pqUGXVl4-ml1R-2R0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.79.0/24 45.85.77.0/24 Signature Algorithm: sha256WithRSAEncryption 33:55:df:8e:65:5d:e7:e7:fd:cd:a6:58:25:4a:9a:8e:79:e3: d3:10:9e:70:fd:94:12:25:28:f9:ce:5b:26:f3:31:79:58:94: 1f:fb:76:84:98:0b:c3:bf:58:90:ab:82:89:7e:59:cb:5c:e3: 2d:48:89:0f:61:64:ef:90:e7:2a:da:b2:4d:87:f9:3e:ac:84: 71:b7:8a:eb:f3:ad:c7:04:a2:46:c1:46:2d:64:bb:7c:1c:96: d4:05:16:bb:e9:a8:3b:05:54:6b:c8:5e:74:3b:28:3a:61:2f: d3:ab:34:2c:de:25:0a:37:54:9c:ea:6a:22:53:4e:d8:90:d9: 99:99:15:eb:ba:0c:26:da:11:4e:0f:e4:f9:94:55:6b:09:25: 70:f8:5b:43:ea:bc:3c:d9:e3:70:68:a1:c6:11:57:9a:98:5a: a2:0a:f8:ab:22:6c:fd:b7:54:ae:87:11:a8:a2:73:9d:c1:8c: 73:e6:80:59:2c:f4:42:5c:85:f8:34:36:89:b2:74:b5:74:cd: 55:3d:c9:3d:c6:d2:d4:a4:f4:0b:9b:9c:89:1e:2f:42:5c:b6: e7:f5:98:7f:96:11:03:19:88:ae:12:88:a8:60:90:c6:ec:64: 4f:df:c8:a1:29:d8:8c:e1:ba:16:c3:f5:0a:2f:bf:7a:a0:b1: ae:82:0c:7b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Eoy0ncjuz1BMMMeavfW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODljNTMyYzM1YzlmNjlhOTQxOTc1NjVlM2U5YTVkNTFmYjY0NzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k0xmXlX8baJGK64i7XMYBh8OqX+ 6hbBU9F4A/rnGZTfkxXEIj2mvPgcD7SoPdgckiHPPglTF16FYpmRf03O9y8fRVJl dWr74+ofq65OIfaB38woW8xAOaCDdgkEhEW1hSL1ulPTEaL2de8upnkG2C/j9KzA ChCelobD94BvEC0PL0dLQaI27XWwJjS4KLCSpj0SV73lO1yOvG6cVbqedhkfbj5+ D4rzXJ24rSgnyqsCfmD0CCV3pOeMbhP0iC03WhIxZ9PQD0gfMpPzwhiC5EseaUhL 2SzG1L0VsTR5uFD04HGM4X366jTiXMaDA4bPgj/JaGeVkZYgbOQVLzmwfQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDicUyw1yfaalBl1ZePppdUftkdIMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT0p4VExEWEo5cHFVR1hWbDQtbWwxUi0yUjBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQtPAwQA LVVNMA0GCSqGSIb3DQEBCwUAA4IBAQAzVd+OZV3n5/3NplglSpqOeePTEJ5w/ZQS JSj5zlsm8zF5WJQf+3aEmAvDv1iQq4KJflnLXOMtSIkPYWTvkOcq2rJNh/k+rIRx t4rr863HBKJGwUYtZLt8HJbUBRa76ag7BVRryF50Oyg6YS/TqzQs3iUKN1Sc6moi U07YkNmZmRXrugwm2hFOD+T5lFVrCSVw+FtD6rw82eNwaKHGEVeamFqiCvirImz9 t1SuhxGoonOdwYxz5oBZLPRCXIX4NDaJsnS1dM1VPck9xtLUpPQLm5yJHi9CXLbn 9Zh/lhEDGYiuEoioYJDG7GRP38ihKdiM4boWw/UKL796oLGuggx7 -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:13 2026 by rpki-client