This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ojsjf-NPcJu8YOAiwCABNHClj8A.roa File: ojsjf-NPcJu8YOAiwCABNHClj8A.roa (raw, json) Hash identifier: BdxisMsqcak0dRALeB9HUtxCYiTxxK6VVobdUh42wjM= Subject key identifier: A2:3B:23:7F:E3:4F:70:9B:BC:60:E0:22:C0:20:01:34:70:A5:8F:C0 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B79108463A2B3C65DA9C7412220131072 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ojsjf-NPcJu8YOAiwCABNHClj8A.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206592 IP address blocks: 45.131.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:84:63:a2:b3:c6:5d:a9:c7:41:22:20:13:10:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a23b237fe34f709bbc60e022c020013470a58fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:bc:95:f3:4d:dd:c8:05:e9:64:5e:f5:18: b8:38:be:15:0c:4e:c7:ab:71:e8:0b:6c:91:34:dd: 8d:92:00:f8:6d:84:85:a7:55:1e:5c:e4:5d:2b:bd: 97:47:0b:d6:c1:a8:8b:d1:34:7e:0d:6c:2e:73:b1: 01:7a:65:5d:d1:81:b7:78:b5:ca:33:7b:1d:f1:a3: 90:82:46:b7:71:27:6f:c5:55:44:e4:9c:b3:3d:f9: a4:a5:0d:91:99:03:f5:4c:ff:4d:fd:24:8f:32:b9: 24:41:05:16:9c:91:dd:a2:28:ca:bb:8b:dc:70:bf: 5a:cd:d9:93:84:32:37:c3:48:d8:e5:27:ea:3e:11: 94:de:44:89:7c:3f:61:67:b1:0d:99:14:e6:da:c3: f6:a5:2f:9f:53:4a:d5:f6:15:47:3d:f9:0f:20:42: 2d:9f:45:b2:43:20:13:e1:0b:78:59:a8:61:51:1d: 92:49:1b:ec:54:ec:93:da:44:76:fe:21:0b:3c:e7: d8:9c:5f:56:7b:cb:7a:20:5f:91:2c:f1:88:e1:5e: a1:30:05:b4:1b:e9:6a:b8:51:32:fd:7a:9a:c6:47: ed:f2:13:b2:fa:48:98:3f:b3:47:28:be:a2:96:70: 77:4a:b1:c1:ff:dd:ba:14:99:ff:bd:46:d1:5a:55: 4f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3B:23:7F:E3:4F:70:9B:BC:60:E0:22:C0:20:01:34:70:A5:8F:C0 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ojsjf-NPcJu8YOAiwCABNHClj8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.2.0/24 Signature Algorithm: sha256WithRSAEncryption a9:d5:2d:ac:b3:04:d9:e5:fe:f7:cc:a6:fb:0d:77:35:7f:b5: 20:b6:0b:4a:56:0a:7c:47:db:10:eb:be:13:9f:83:09:b0:42: e7:09:3f:b8:5b:54:5b:81:97:b5:e1:02:f5:64:00:28:43:c1: e7:fd:38:cb:f7:a4:f1:45:a0:7c:8c:27:38:83:f8:13:82:49: 9a:7e:a0:6c:2a:cc:1f:68:1c:3a:89:0f:65:08:33:61:90:d9: 9f:b8:01:8b:1d:cc:08:a3:ae:8f:15:2a:ff:1c:0a:d7:80:6e: f0:14:a4:d5:26:a0:23:3a:04:9c:e8:43:e5:af:a6:3d:6f:fb: 6c:61:09:f7:eb:f9:fe:c3:de:21:1a:95:21:53:a1:ae:65:2f: 4f:84:63:a5:ad:7d:20:be:65:7b:5d:22:30:07:bb:8e:12:e5: c6:aa:26:8a:c7:ad:fc:ec:83:04:c5:49:11:75:ee:44:8d:01: b6:03:e1:a0:fe:7c:29:19:25:d5:4e:30:ca:86:ca:98:1b:0e: cd:41:3f:f7:59:e2:0d:e7:eb:b3:1a:9c:0a:15:e5:80:a6:c1: 2a:74:41:f9:97:ed:8b:ee:05:cc:d5:28:11:ee:30:c9:20:9f: 34:d3:97:91:fe:fa:91:11:7f:c9:3a:99:a0:3e:95:de:59:67: 18:c0:5b:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EIRjorPGXanHQSIgExByMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjNiMjM3ZmUzNGY3MDliYmM2MGUwMjJjMDIwMDEzNDcwYTU4ZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY+8lfNN3cgF6WRe9Ri4OL4VDE7H q3HoC2yRNN2NkgD4bYSFp1UeXORdK72XRwvWwaiL0TR+DWwuc7EBemVd0YG3eLXK M3sd8aOQgka3cSdvxVVE5JyzPfmkpQ2RmQP1TP9N/SSPMrkkQQUWnJHdoijKu4vc cL9azdmThDI3w0jY5SfqPhGU3kSJfD9hZ7ENmRTm2sP2pS+fU0rV9hVHPfkPIEIt n0WyQyAT4Qt4WahhUR2SSRvsVOyT2kR2/iELPOfYnF9We8t6IF+RLPGI4V6hMAW0 G+lquFEy/Xqaxkft8hOy+kiYP7NHKL6ilnB3SrHB/926FJn/vUbRWlVPDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKI7I3/jT3CbvGDgIsAgATRwpY/AMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvb2pzamYtTlBjSnU4WU9BaXdDQUJOSENsajhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYMCMA0G CSqGSIb3DQEBCwUAA4IBAQCp1S2sswTZ5f73zKb7DXc1f7UgtgtKVgp8R9sQ674T n4MJsELnCT+4W1RbgZe14QL1ZAAoQ8Hn/TjL96TxRaB8jCc4g/gTgkmafqBsKswf aBw6iQ9lCDNhkNmfuAGLHcwIo66PFSr/HArXgG7wFKTVJqAjOgSc6EPlr6Y9b/ts YQn36/n+w94hGpUhU6GuZS9PhGOlrX0gvmV7XSIwB7uOEuXGqiaKx6387IMExUkR de5EjQG2A+Gg/nwpGSXVTjDKhsqYGw7NQT/3WeIN5+uzGpwKFeWApsEqdEH5l+2L 7gXM1SgR7jDJIJ8005eR/vqREX/JOpmgPpXeWWcYwFvy -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:12 2026 by rpki-client