This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/Oj7GkZ1gosIE_T4nDeotCzCQC7s.roa File: Oj7GkZ1gosIE_T4nDeotCzCQC7s.roa (raw, json) Hash identifier: fIjNvO1HQDm8ZWSxbByrHxdGUOYQvhWGEJs5EIKuVmY= Subject key identifier: 3A:3E:C6:91:9D:60:A2:C2:04:FD:3E:27:0D:EA:2D:0B:30:90:0B:BB Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977 Certificate serial: 019B7A5A8FF0C5E7081F85EB3958AE93BEC8 Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/Oj7GkZ1gosIE_T4nDeotCzCQC7s.roa Signing time: Thu 01 Jan 2026 16:18:34 +0000 ROA not before: Thu 01 Jan 2026 16:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42907 IP address blocks: 77.245.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8f:f0:c5:e7:08:1f:85:eb:39:58:ae:93:be:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977 Validity Not Before: Jan 1 16:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a3ec6919d60a2c204fd3e270dea2d0b30900bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e9:2a:8d:7a:a7:9b:eb:ef:a0:0f:d3:03:be: 34:76:65:f0:5e:59:13:e6:3c:d4:91:70:77:4a:eb: a8:e1:dc:70:93:c6:93:57:20:f7:8e:04:52:69:a2: 7a:a2:42:09:d7:8d:66:6f:f2:f9:dd:39:37:a9:91: 58:8f:3e:65:1d:50:b1:4f:45:aa:c5:a7:b6:88:4b: d1:94:57:cb:e6:e7:4c:f1:c6:7b:6c:85:7a:52:72: 24:e8:17:5e:cc:a9:51:41:e8:49:13:ba:10:b9:7e: a5:e5:85:5f:21:91:a1:34:a3:09:eb:26:ce:03:a7: b2:0f:94:23:d2:3c:68:d3:9b:51:ca:d2:33:2d:62: 75:55:7c:6e:32:3c:5e:91:48:eb:e8:e9:94:4d:e8: 5a:47:3c:57:98:72:05:8a:8a:ac:7b:ff:d8:7e:b1: e0:db:d3:7c:98:a8:5e:4e:b4:11:8e:27:88:8f:8b: 7f:f8:72:ea:3f:52:13:2b:79:0c:a4:d7:ab:f3:2b: 06:98:89:9d:9a:a8:b4:c0:d2:e7:1e:c9:d7:a0:85: 04:bb:61:30:63:9a:d9:82:81:34:8c:9f:e5:2f:aa: 25:5b:a2:5c:de:68:ce:b7:48:08:b3:58:1f:2a:0c: dd:56:d1:70:61:55:fb:03:55:1c:59:b6:eb:26:09: 92:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3E:C6:91:9D:60:A2:C2:04:FD:3E:27:0D:EA:2D:0B:30:90:0B:BB X509v3 Authority Key Identifier: keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/Oj7GkZ1gosIE_T4nDeotCzCQC7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.245.224.0/20 Signature Algorithm: sha256WithRSAEncryption 39:fa:64:1f:24:16:b5:6b:02:62:52:07:82:15:a0:c8:e5:e2: 32:d8:79:bb:32:76:f8:e2:23:59:a2:25:bf:d6:99:cb:fc:5c: fa:06:f3:e2:a6:ef:5e:2d:06:88:40:f7:b1:be:ef:e3:bd:63: 17:51:57:d9:c8:ed:7f:ba:3c:cd:98:58:35:a2:da:b2:32:1d: 2e:56:45:dc:20:59:10:4b:c9:80:c1:3c:a0:ba:19:b1:2a:41: 48:fc:4a:53:4d:cc:70:cb:92:49:a5:b6:d0:56:fa:50:fd:f6: 1e:bb:d4:7d:af:5e:c8:66:0e:2a:0c:29:fe:19:15:a5:6e:5f: 54:e7:c9:4b:6e:68:55:e2:27:2b:1a:83:4d:4c:83:c8:31:24: 55:e1:af:c2:cd:f3:2a:26:5f:90:c8:a0:e7:b9:fe:71:ab:58: 78:d5:ae:03:0e:5b:85:f5:d8:68:e1:89:96:9f:e9:0d:da:a7: 5f:35:a3:5b:39:a0:4f:b8:76:74:d8:8d:2f:97:e6:a5:58:7a: 67:27:f8:f8:a1:55:63:d9:f4:d5:a3:3b:6a:5e:70:f6:31:3c: 3a:0d:4d:64:d9:77:4b:c8:44:45:6a:27:ca:11:0d:d7:81:28: 07:1a:4f:e9:6c:e3:65:49:7b:a7:f1:53:45:6f:31:02:c7:e2: 5e:89:5e:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wo/wxecIH4XrOViuk77IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDYwNjQxODY0OTBkOGNlYTIzNDdmZjdhM2E4MjQ5MmQx Zjc5NzcwHhcNMjYwMTAxMTYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTNlYzY5MTlkNjBhMmMyMDRmZDNlMjcwZGVhMmQwYjMwOTAwYmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlekqjXqnm+vvoA/TA740dmXwXlkT 5jzUkXB3Suuo4dxwk8aTVyD3jgRSaaJ6okIJ141mb/L53Tk3qZFYjz5lHVCxT0Wq xae2iEvRlFfL5udM8cZ7bIV6UnIk6BdezKlRQehJE7oQuX6l5YVfIZGhNKMJ6ybO A6eyD5Qj0jxo05tRytIzLWJ1VXxuMjxekUjr6OmUTehaRzxXmHIFioqse//YfrHg 29N8mKheTrQRjieIj4t/+HLqP1ITK3kMpNer8ysGmImdmqi0wNLnHsnXoIUEu2Ew Y5rZgoE0jJ/lL6olW6Jc3mjOt0gIs1gfKgzdVtFwYVX7A1UcWbbrJgmSlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDo+xpGdYKLCBP0+Jw3qLQswkAu7MB8GA1UdIwQY MBaAFNjWBkGGSQ2M6iNH/3o6gkktH3l3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83YWJkZWYtOTFhYi00NmZiLTgyZTIt NTYwODVjOWU1MjJlLzEvT2o3R2taMWdvc0lFX1Q0bkRlb3RDekNRQzdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83YWJkZWYtOTFhYi00NmZiLTgyZTItNTYwODVjOWU1MjJl LzEvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETfXgMA0G CSqGSIb3DQEBCwUAA4IBAQA5+mQfJBa1awJiUgeCFaDI5eIy2Hm7Mnb44iNZoiW/ 1pnL/Fz6BvPipu9eLQaIQPexvu/jvWMXUVfZyO1/ujzNmFg1otqyMh0uVkXcIFkQ S8mAwTyguhmxKkFI/EpTTcxwy5JJpbbQVvpQ/fYeu9R9r17IZg4qDCn+GRWlbl9U 58lLbmhV4icrGoNNTIPIMSRV4a/CzfMqJl+QyKDnuf5xq1h41a4DDluF9dho4YmW n+kN2qdfNaNbOaBPuHZ02I0vl+alWHpnJ/j4oVVj2fTVoztqXnD2MTw6DU1k2XdL yERFaifKEQ3XgSgHGk/pbONlSXun8VNFbzECx+JeiV76 -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:09 2026 by rpki-client