This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/oovOX9XETodZiiuPtmCpoSGbNQc.roa File: oovOX9XETodZiiuPtmCpoSGbNQc.roa (raw, json) Hash identifier: P+TaVSkHOwUfOr3zgGexRmHGN3QYL0Fhy8MDYgpRxpU= Subject key identifier: A2:8B:CE:5F:D5:C4:4E:87:59:8A:2B:8F:B6:60:A9:A1:21:9B:35:07 Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3 Certificate serial: 019B7F1578906489C68B8AF75256FF19F97B Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/oovOX9XETodZiiuPtmCpoSGbNQc.roa Signing time: Fri 02 Jan 2026 14:21:12 +0000 ROA not before: Fri 02 Jan 2026 14:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215384 IP address blocks: 212.108.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:78:90:64:89:c6:8b:8a:f7:52:56:ff:19:f9:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3 Validity Not Before: Jan 2 14:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a28bce5fd5c44e87598a2b8fb660a9a1219b3507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:41:5d:3f:3a:c5:77:53:39:25:dc:03:47:fa: f8:b1:7f:a9:dc:37:f3:37:7d:1d:ca:db:e6:d5:be: 74:33:f4:1e:e2:2c:e5:e3:c7:0e:97:d5:d8:42:ee: f5:0c:46:2a:54:ba:06:cf:b0:ad:63:60:7d:84:cb: 8a:4a:fc:32:ee:2d:e1:e2:5e:75:71:07:e3:c5:3a: 38:73:7f:c0:91:49:2a:57:bf:18:19:66:6f:a1:bf: 62:93:3b:43:6d:99:72:32:4a:65:d3:3c:2c:b4:9f: a6:f5:37:d8:2f:03:25:f3:9c:ef:fa:cf:42:fa:13: 0f:6a:30:2d:57:8a:e5:79:f5:2d:9c:83:11:94:da: d2:e5:5d:c5:5b:a7:af:cd:e6:58:18:09:aa:1d:31: 5d:e6:01:e1:68:62:1c:2f:2a:8d:97:65:ea:0a:96: 58:fb:a3:ef:10:df:7f:51:56:a1:43:2f:be:c6:98: 4b:24:96:89:0d:b4:a1:83:4f:bf:c3:0b:b4:d7:90: b6:0b:1e:70:1d:35:02:24:ac:67:fc:a1:5d:89:2e: 4e:06:7c:80:ae:96:4f:bd:ed:17:15:8e:07:4f:32: df:ff:38:c6:53:c6:96:22:4a:21:90:b0:11:78:4c: 2f:3d:7f:55:02:24:bb:a0:df:f6:21:b9:f1:72:42: 5b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8B:CE:5F:D5:C4:4E:87:59:8A:2B:8F:B6:60:A9:A1:21:9B:35:07 X509v3 Authority Key Identifier: keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/oovOX9XETodZiiuPtmCpoSGbNQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.108.122.0/24 Signature Algorithm: sha256WithRSAEncryption 46:fa:9c:a1:c5:3b:2e:65:98:e7:d1:4e:73:8d:9e:a6:75:7d: 9c:ec:6d:51:64:f3:8f:21:5c:26:bd:32:92:11:bf:bf:fd:dc: 4e:8b:f5:f3:aa:c1:2a:08:b5:ac:01:7a:ab:27:c8:4a:8a:dc: 81:dc:15:ec:aa:43:ba:26:15:61:ff:af:a5:1c:f1:69:1b:24: 35:9d:a5:55:dd:51:59:6d:65:7c:47:9a:59:08:f0:6b:af:8e: 5c:6a:51:c3:b4:97:77:ec:1f:bd:b7:98:6d:69:b0:a0:41:ab: 8c:84:67:dd:48:f2:43:f1:c5:8d:20:26:c4:ef:73:25:22:55: 6a:4c:95:29:a2:c0:b2:b2:b6:b2:58:9e:18:7a:35:5c:20:b7: da:c2:de:e4:55:ae:65:66:10:d0:01:7f:07:86:ed:73:4f:a4: d6:88:19:50:fb:32:b5:a7:fc:5e:54:ce:d4:22:a3:c6:68:81: 23:ca:5d:f2:f4:74:d6:09:66:23:79:c8:34:4a:57:8a:25:06: 3f:af:22:6b:5c:5a:49:ec:8e:2c:51:36:2c:bc:2a:dd:c3:17: af:02:8e:e4:93:25:b8:22:61:53:f6:fa:d6:b8:c4:48:ae:f3: f1:51:7c:c1:75:b3:ba:da:bf:5b:54:62:8e:be:04:c4:30:5f: f4:f5:5d:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FXiQZInGi4r3Ulb/Gfl7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2ZkYzRiZjMzYmQ4MGZlMTI4ZDc1Njg0M2Y2MGIzOWQ1 YmVlZTMwHhcNMjYwMTAyMTQyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjhiY2U1ZmQ1YzQ0ZTg3NTk4YTJiOGZiNjYwYTlhMTIxOWIzNTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUFdPzrFd1M5JdwDR/r4sX+p3Dfz N30dytvm1b50M/Qe4izl48cOl9XYQu71DEYqVLoGz7CtY2B9hMuKSvwy7i3h4l51 cQfjxTo4c3/AkUkqV78YGWZvob9ikztDbZlyMkpl0zwstJ+m9TfYLwMl85zv+s9C +hMPajAtV4rlefUtnIMRlNrS5V3FW6evzeZYGAmqHTFd5gHhaGIcLyqNl2XqCpZY +6PvEN9/UVahQy++xphLJJaJDbShg0+/wwu015C2Cx5wHTUCJKxn/KFdiS5OBnyA rpZPve0XFY4HTzLf/zjGU8aWIkohkLAReEwvPX9VAiS7oN/2IbnxckJbxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKKLzl/VxE6HWYorj7ZgqaEhmzUHMB8GA1UdIwQY MBaAFN8/3EvzO9gP4SjXVoQ/YLOdW+7jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMt YTQ3M2VjNTQxMGMzLzEvb292T1g5WEVUb2RaaWl1UHRtQ3BvU0diTlFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMtYTQ3M2VjNTQxMGMz LzEvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Gx6MA0G CSqGSIb3DQEBCwUAA4IBAQBG+pyhxTsuZZjn0U5zjZ6mdX2c7G1RZPOPIVwmvTKS Eb+//dxOi/XzqsEqCLWsAXqrJ8hKityB3BXsqkO6JhVh/6+lHPFpGyQ1naVV3VFZ bWV8R5pZCPBrr45calHDtJd37B+9t5htabCgQauMhGfdSPJD8cWNICbE73MlIlVq TJUposCysrayWJ4YejVcILfawt7kVa5lZhDQAX8Hhu1zT6TWiBlQ+zK1p/xeVM7U IqPGaIEjyl3y9HTWCWYjecg0SleKJQY/ryJrXFpJ7I4sUTYsvCrdwxevAo7kkyW4 ImFT9vrWuMRIrvPxUXzBdbO62r9bVGKOvgTEMF/09V3L -----END CERTIFICATE-----Generated at Sun Jan 25 08:51:45 2026 by rpki-client