This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/s_Oj6JBKTNB4x3fb0XdQ9zvwP1o.roa File: s_Oj6JBKTNB4x3fb0XdQ9zvwP1o.roa (raw, json) Hash identifier: 0jQdDlhdIZaz2WGN97YHIXqbtv/kRGloASKQBe2397Q= Subject key identifier: B3:F3:A3:E8:90:4A:4C:D0:78:C7:77:DB:D1:77:50:F7:3B:F0:3F:5A Certificate issuer: /CN=68d425cc7b1b7880a875f76beda80fe3109319ed Certificate serial: 019B79ED271328580D083C997D2E2140D455 Authority key identifier: 68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/s_Oj6JBKTNB4x3fb0XdQ9zvwP1o.roa Signing time: Thu 01 Jan 2026 14:19:03 +0000 ROA not before: Thu 01 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31673 IP address blocks: 185.181.84.0/22 maxlen: 22 2a0a:c780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:27:13:28:58:0d:08:3c:99:7d:2e:21:40:d4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68d425cc7b1b7880a875f76beda80fe3109319ed Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3f3a3e8904a4cd078c777dbd17750f73bf03f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d7:19:3e:9a:40:1b:90:02:d2:51:ed:b4:1e: 07:26:3c:46:31:47:35:c2:dc:54:ef:15:b1:4c:10: fe:3f:57:f2:37:7f:f8:eb:34:63:42:5f:c0:ac:aa: 6d:65:7c:ac:01:fe:97:ae:60:f8:1c:cd:a3:2e:2e: 35:c8:98:60:6d:32:b5:f9:13:07:b3:02:0d:70:94: 91:d0:80:33:a1:fd:34:21:3b:d0:4d:02:dc:94:2f: 29:b2:6a:81:33:11:27:5b:f5:f8:66:e6:5c:a2:60: a3:f5:35:98:e2:7c:e9:9e:8e:ee:86:0e:40:73:33: 92:dc:4d:7f:d8:9e:d2:14:bf:6e:9b:d4:2f:00:4c: 92:f8:01:99:0a:fc:86:ae:76:df:ee:5d:fd:5f:46: b6:7d:02:1c:18:07:0a:90:72:db:5c:de:ca:26:30: 3c:05:55:ae:ef:10:b2:ef:11:3e:e7:94:b8:5b:a7: 29:c5:7b:c5:c1:af:ee:21:d2:dc:8b:dc:ff:3b:84: 0d:f8:a7:4d:4b:7d:b4:a4:2b:8a:52:96:11:c1:45: 5d:40:99:db:39:d3:fd:c2:e1:54:dd:94:0f:86:7f: 34:17:77:66:9a:60:0d:6a:09:7d:b9:3e:d8:49:03: df:99:7e:6b:48:32:3e:7a:4f:ba:d2:ae:0c:23:41: fd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F3:A3:E8:90:4A:4C:D0:78:C7:77:DB:D1:77:50:F7:3B:F0:3F:5A X509v3 Authority Key Identifier: keyid:68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/s_Oj6JBKTNB4x3fb0XdQ9zvwP1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.84.0/22 IPv6: 2a0a:c780::/29 Signature Algorithm: sha256WithRSAEncryption 3b:59:e5:57:09:e6:db:05:4a:28:4a:4e:14:24:21:85:f6:6b: 7d:ab:7f:e9:c2:d4:e2:35:5d:08:dd:6f:0b:52:01:d9:6d:1b: 13:cb:48:d9:8e:0f:e4:64:84:df:f1:27:ae:94:06:f2:0a:1f: 01:e7:e9:fd:08:14:dc:a5:09:35:f3:a4:2a:22:ad:6a:40:81: 97:42:ad:92:94:04:37:ae:15:f6:e8:46:d0:75:b2:60:dd:2a: d7:6d:66:82:d3:95:c9:d3:96:40:5e:48:25:f3:d9:ff:90:63: b8:3c:34:eb:94:2c:01:84:06:c0:b2:b7:38:8f:76:a4:82:51: d3:86:f5:79:4b:fb:fa:bb:00:fa:c0:1e:06:23:a8:a6:50:4e: 06:9c:8f:e6:b8:98:20:e2:fe:a7:24:55:97:0e:c7:7b:d0:4b: 1e:13:59:9e:fe:2f:4d:cb:ce:9e:0a:77:0e:57:2b:76:30:25: bf:49:1b:5b:7f:f6:0e:71:d4:45:74:04:0b:42:bb:e4:e0:53: 3f:38:50:ed:f1:53:f4:c8:1a:25:0d:a1:b8:5d:90:61:81:39: 35:4d:3f:17:85:14:51:28:76:f8:e6:61:c2:00:a7:b3:54:cb: 72:0b:22:0f:b8:27:2c:2a:85:85:55:bc:48:86:4e:7a:fc:f4: 81:f1:44:b1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57ScTKFgNCDyZfS4hQNRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZDQyNWNjN2IxYjc4ODBhODc1Zjc2YmVkYTgwZmUzMTA5 MzE5ZWQwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2YzYTNlODkwNGE0Y2QwNzhjNzc3ZGJkMTc3NTBmNzNiZjAzZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdcZPppAG5AC0lHttB4HJjxGMUc1 wtxU7xWxTBD+P1fyN3/46zRjQl/ArKptZXysAf6XrmD4HM2jLi41yJhgbTK1+RMH swINcJSR0IAzof00ITvQTQLclC8psmqBMxEnW/X4ZuZcomCj9TWY4nzpno7uhg5A czOS3E1/2J7SFL9um9QvAEyS+AGZCvyGrnbf7l39X0a2fQIcGAcKkHLbXN7KJjA8 BVWu7xCy7xE+55S4W6cpxXvFwa/uIdLci9z/O4QN+KdNS320pCuKUpYRwUVdQJnb OdP9wuFU3ZQPhn80F3dmmmANagl9uT7YSQPfmX5rSDI+ek+60q4MI0H98QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLPzo+iQSkzQeMd329F3UPc78D9aMB8GA1UdIwQY MBaAFGjUJcx7G3iAqHX3a+2oD+MQkxntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5RbHpIc2JlSUNvZGZkcjdhZ1A0eENUR2UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMGY3ZTMtNjNiOS00YTVmLTk2Y2Et NWM0NWI2MThmOTkwLzEvc19PajZKQktUTkI0eDNmYjBYZFE5enZ3UDFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9jMGY3ZTMtNjNiOS00YTVmLTk2Y2EtNWM0NWI2MThmOTkw LzEvYU5RbHpIc2JlSUNvZGZkcjdhZ1A0eENUR2UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubVUMA0E AgACMAcDBQMqCseAMA0GCSqGSIb3DQEBCwUAA4IBAQA7WeVXCebbBUooSk4UJCGF 9mt9q3/pwtTiNV0I3W8LUgHZbRsTy0jZjg/kZITf8SeulAbyCh8B5+n9CBTcpQk1 86QqIq1qQIGXQq2SlAQ3rhX26EbQdbJg3SrXbWaC05XJ05ZAXkgl89n/kGO4PDTr lCwBhAbAsrc4j3akglHThvV5S/v6uwD6wB4GI6imUE4GnI/muJgg4v6nJFWXDsd7 0EseE1me/i9Ny86eCncOVyt2MCW/SRtbf/YOcdRFdAQLQrvk4FM/OFDt8VP0yBol DaG4XZBhgTk1TT8XhRRRKHb45mHCAKezVMtyCyIPuCcsKoWFVbxIhk56/PSB8USx -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:17 2026 by rpki-client