This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa File: oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa (raw, json) Hash identifier: x4rWHMLqKH59XIlxwt4nn2ewi1sXU4bSXT/IaZDvoMQ= Subject key identifier: A0:EC:7C:4E:73:19:EF:33:CD:BE:CB:BC:1D:71:B0:DF:F7:C5:AB:DF Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e Certificate serial: 019B797E7ABEC9B7BC423E0E5E9CF26F94A7 Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa Signing time: Thu 01 Jan 2026 12:18:10 +0000 ROA not before: Thu 01 Jan 2026 12:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12610 IP address blocks: 213.214.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:7a:be:c9:b7:bc:42:3e:0e:5e:9c:f2:6f:94:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e Validity Not Before: Jan 1 12:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0ec7c4e7319ef33cdbecbbc1d71b0dff7c5abdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:2a:ed:38:e6:6f:96:67:41:11:c9:15:04: 69:f7:93:2e:a2:ef:88:4d:43:36:f2:ae:61:cf:a9: c9:c5:b8:28:19:41:ea:ac:f4:16:64:20:c1:79:e7: 5a:19:7d:22:32:25:5c:a7:5d:03:71:68:ee:a4:25: 14:b9:8d:da:f8:83:f7:71:3a:c7:8a:98:6f:54:8d: 4f:2f:f2:c8:4a:d3:0a:97:de:d3:e4:76:be:4f:d0: 11:24:80:32:62:87:a2:54:e9:fd:a3:25:dc:1e:88: 66:c0:5b:1a:0a:a4:f2:0b:aa:a3:c2:da:5f:40:b9: 0d:14:68:05:4c:95:b7:9b:a4:2d:21:59:a6:cd:a5: ee:b1:d5:ce:00:48:1e:e9:6b:84:b4:21:a9:e3:d3: 56:67:e2:64:a1:78:ca:7c:ab:18:d7:28:67:6f:9a: aa:42:2a:6e:0e:96:84:e5:68:94:34:bb:74:7a:c8: 83:03:1a:c5:ea:9c:c3:f0:46:df:10:e8:1e:aa:1a: 6e:37:14:1b:6d:a2:fb:44:fb:62:5d:6c:d3:c7:54: b2:45:99:0a:9c:66:4f:77:a0:ef:a5:04:41:01:18: 51:8f:82:c7:da:be:ad:e6:c1:60:06:bb:77:75:a3: bd:e3:cf:ba:46:ea:ee:31:6d:c9:f1:b9:d9:06:7d: 89:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EC:7C:4E:73:19:EF:33:CD:BE:CB:BC:1D:71:B0:DF:F7:C5:AB:DF X509v3 Authority Key Identifier: keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/oOx8TnMZ7zPNvsu8HXGw3_fFq98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.214.24.0/21 Signature Algorithm: sha256WithRSAEncryption 58:13:4a:9d:e1:26:7b:74:7d:30:d0:6c:ea:84:3f:f2:13:42: 95:6d:d0:d7:e0:08:08:46:ce:c8:5d:9d:f6:7b:3b:3e:a4:de: 0f:75:61:76:f6:97:4b:ee:32:d5:77:0c:7b:eb:97:6a:60:9f: 9e:d0:85:a4:54:70:e9:3e:08:a0:da:7d:2a:dd:8b:31:80:82: e2:72:3e:4c:ad:ae:bd:bd:c0:bb:99:56:3c:27:43:74:e2:b0: 6a:4b:54:f6:15:e2:f3:7f:b3:33:78:a7:99:c1:2d:52:0d:19: 3f:08:44:0f:3d:e9:14:23:47:ed:9f:8e:df:ad:41:80:bf:90: bf:9a:49:89:14:9c:e2:e6:74:03:02:d8:79:29:a4:de:be:8b: 29:97:d1:c5:74:28:12:00:f6:2d:da:6d:37:6a:90:e1:fd:4f: c1:9e:b0:87:72:e6:d6:05:c9:a2:92:1b:fa:7a:2f:a6:f9:64: 3e:84:dd:00:30:94:c2:9a:99:00:77:7d:3e:3e:09:be:36:5e: 9c:de:13:02:1d:0e:d0:0f:b5:04:16:f4:8d:90:fc:cd:28:4e: af:42:47:c9:ef:b7:9c:ee:df:d3:bc:ee:5e:03:55:a7:a9:68: 2e:30:32:84:f7:4a:b0:b7:92:27:33:c3:64:ff:ab:4e:6f:93: 31:e2:13:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnq+ybe8Qj4OXpzyb5SnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTBkNThkNzdiMGZhNWRjZWM0ZjQyYWU5NmYzNDdiYzgw ZGFhM2UwHhcNMjYwMTAxMTIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGVjN2M0ZTczMTllZjMzY2RiZWNiYmMxZDcxYjBkZmY3YzVhYmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMwq7Tjmb5ZnQRHJFQRp95Muou+I TUM28q5hz6nJxbgoGUHqrPQWZCDBeedaGX0iMiVcp10DcWjupCUUuY3a+IP3cTrH iphvVI1PL/LIStMKl97T5Ha+T9ARJIAyYoeiVOn9oyXcHohmwFsaCqTyC6qjwtpf QLkNFGgFTJW3m6QtIVmmzaXusdXOAEge6WuEtCGp49NWZ+JkoXjKfKsY1yhnb5qq QipuDpaE5WiUNLt0esiDAxrF6pzD8EbfEOgeqhpuNxQbbaL7RPtiXWzTx1SyRZkK nGZPd6DvpQRBARhRj4LH2r6t5sFgBrt3daO948+6RuruMW3J8bnZBn2JTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKDsfE5zGe8zzb7LvB1xsN/3xavfMB8GA1UdIwQY MBaAFDJQ1Y13sPpdzsT0KulvNHvIDao+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iOWZjZTctMDkyNy00ODQ3LWI2MDUt M2UzMGE0YzRiODI2LzEvb094OFRuTVo3elBOdnN1OEhYR3czX2ZGcTk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iOWZjZTctMDkyNy00ODQ3LWI2MDUtM2UzMGE0YzRiODI2 LzEvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1dYYMA0G CSqGSIb3DQEBCwUAA4IBAQBYE0qd4SZ7dH0w0GzqhD/yE0KVbdDX4AgIRs7IXZ32 ezs+pN4PdWF29pdL7jLVdwx765dqYJ+e0IWkVHDpPgig2n0q3YsxgILicj5Mra69 vcC7mVY8J0N04rBqS1T2FeLzf7MzeKeZwS1SDRk/CEQPPekUI0ftn47frUGAv5C/ mkmJFJzi5nQDAth5KaTevospl9HFdCgSAPYt2m03apDh/U/BnrCHcubWBcmikhv6 ei+m+WQ+hN0AMJTCmpkAd30+Pgm+Nl6c3hMCHQ7QD7UEFvSNkPzNKE6vQkfJ77ec 7t/TvO5eA1WnqWguMDKE90qwt5InM8Nk/6tOb5Mx4hO0 -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:41 2026 by rpki-client