This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/OcFwuq-p9HfjXsFdJJy-918eeGE.roa File: OcFwuq-p9HfjXsFdJJy-918eeGE.roa (raw, json) Hash identifier: ZCJKUc/KJIf9lC3fGgSPAtb279PGc32c5MBKffe5v3I= Subject key identifier: 39:C1:70:BA:AF:A9:F4:77:E3:5E:C1:5D:24:9C:BE:F7:5F:1E:78:61 Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681 Certificate serial: 019B7D5C78A7667932D6BA1714BA81264DB2 Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/OcFwuq-p9HfjXsFdJJy-918eeGE.roa Signing time: Fri 02 Jan 2026 06:19:30 +0000 ROA not before: Fri 02 Jan 2026 06:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211500 IP address blocks: 176.118.160.0/22 maxlen: 22 212.23.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:78:a7:66:79:32:d6:ba:17:14:ba:81:26:4d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681 Validity Not Before: Jan 2 06:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39c170baafa9f477e35ec15d249cbef75f1e7861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9d:d1:13:ff:a3:86:c4:c2:c0:89:5b:ce:6f: ed:1b:83:0b:46:88:1f:ba:51:81:98:af:a8:e8:5a: f7:0b:a1:77:04:a6:82:11:2c:3b:a1:d7:af:af:68: 70:e9:d2:18:85:3e:bd:b7:77:6f:a7:86:85:b1:1d: 55:80:b7:53:32:c7:0d:68:09:16:36:fc:64:b9:a1: f4:b0:e9:c6:1a:16:f6:79:e4:d9:6e:7b:e1:61:f2: d6:f3:7f:eb:ef:9e:3b:ef:89:41:88:35:fb:9c:3e: c7:e4:03:66:a8:de:1d:f5:6a:f2:47:b4:1f:39:78: 60:d0:57:ca:6e:ab:58:02:ce:eb:9d:a9:73:54:66: 4c:dc:d1:4b:d4:89:3e:41:0b:44:a5:c0:ac:7e:c2: 4e:1e:e7:79:9d:da:b3:95:fe:13:e2:ef:e4:85:8c: 81:ac:73:9f:a9:fe:d6:4c:d7:b0:fc:3c:7c:93:0e: d6:da:2a:22:8a:fc:3d:45:3e:fe:f2:03:d5:80:e1: 9d:04:58:72:b1:34:d5:48:1c:58:3a:8e:c8:a9:dd: c8:0f:f1:b4:5f:e6:22:43:75:49:d1:55:a2:d0:cc: 4b:b6:6d:af:ac:3d:1c:f2:c3:ea:30:36:b1:5b:dc: 2b:77:6b:9a:14:56:b5:dd:73:88:21:34:0a:32:99: 61:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C1:70:BA:AF:A9:F4:77:E3:5E:C1:5D:24:9C:BE:F7:5F:1E:78:61 X509v3 Authority Key Identifier: keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/OcFwuq-p9HfjXsFdJJy-918eeGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.118.160.0/22 212.23.204.0/24 Signature Algorithm: sha256WithRSAEncryption 75:bc:08:80:a2:ae:e7:bb:c3:76:8c:76:d9:36:15:ef:95:e9: e4:ad:e1:c2:e5:a6:65:6d:33:3b:b0:94:43:40:02:5f:26:30: 6f:96:07:8c:76:56:37:71:1d:86:d9:85:7a:6e:b8:d5:3d:86: 3e:33:b8:6e:18:46:ca:24:ac:27:61:f9:6b:ca:7c:db:42:3e: 9b:78:d7:67:dd:f4:a3:d4:6e:db:11:86:fd:ac:eb:0c:16:05: 23:07:71:07:99:5f:e3:9b:1b:e0:d2:86:29:b1:fc:db:2a:67: 29:75:4a:45:d1:a5:17:0a:ec:3c:39:9f:e1:10:8e:f7:1d:f8: a2:dd:dd:a9:47:55:08:14:fe:67:76:5d:fc:4f:2e:cc:3b:44: e0:ee:69:96:1d:5d:20:48:23:f2:60:83:75:c3:bc:4f:be:1f: 12:90:39:51:40:17:f7:3f:b8:d4:e7:f3:8a:aa:bd:12:85:0a: f6:6c:20:17:88:5c:fa:31:c8:29:9d:b1:48:dd:ef:df:b9:b1: 69:9e:ba:1f:34:cc:5f:18:98:31:50:27:9f:12:c2:ad:34:c2: 46:6b:65:16:0b:07:9c:c1:69:a7:63:95:14:38:36:66:88:d1: 65:82:46:b9:b7:d4:82:3f:ae:80:28:d5:a7:a0:5f:88:b3:db: 55:c0:c0:7b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XHinZnky1roXFLqBJk2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1 YmE2ODEwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWMxNzBiYWFmYTlmNDc3ZTM1ZWMxNWQyNDljYmVmNzVmMWU3ODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn53RE/+jhsTCwIlbzm/tG4MLRogf ulGBmK+o6Fr3C6F3BKaCESw7odevr2hw6dIYhT69t3dvp4aFsR1VgLdTMscNaAkW NvxkuaH0sOnGGhb2eeTZbnvhYfLW83/r754774lBiDX7nD7H5ANmqN4d9WryR7Qf OXhg0FfKbqtYAs7rnalzVGZM3NFL1Ik+QQtEpcCsfsJOHud5ndqzlf4T4u/khYyB rHOfqf7WTNew/Dx8kw7W2ioiivw9RT7+8gPVgOGdBFhysTTVSBxYOo7Iqd3ID/G0 X+YiQ3VJ0VWi0MxLtm2vrD0c8sPqMDaxW9wrd2uaFFa13XOIITQKMplhKQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDnBcLqvqfR3417BXSScvvdfHnhhMB8GA1UdIwQY MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt YTg3NzNkZTc2OGY3LzEvT2NGd3VxLXA5SGZqWHNGZEpKeS05MThlZUdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3 LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsHagAwQA 1BfMMA0GCSqGSIb3DQEBCwUAA4IBAQB1vAiAoq7nu8N2jHbZNhXvlenkreHC5aZl bTM7sJRDQAJfJjBvlgeMdlY3cR2G2YV6brjVPYY+M7huGEbKJKwnYflrynzbQj6b eNdn3fSj1G7bEYb9rOsMFgUjB3EHmV/jmxvg0oYpsfzbKmcpdUpF0aUXCuw8OZ/h EI73Hfii3d2pR1UIFP5ndl38Ty7MO0Tg7mmWHV0gSCPyYIN1w7xPvh8SkDlRQBf3 P7jU5/OKqr0ShQr2bCAXiFz6McgpnbFI3e/fubFpnrofNMxfGJgxUCefEsKtNMJG a2UWCwecwWmnY5UUODZmiNFlgka5t9SCP66AKNWnoF+Is9tVwMB7 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:31 2026 by rpki-client