This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/Oj_DX3gl7r7KoLbjDsPLHJn9fvI.roa File: Oj_DX3gl7r7KoLbjDsPLHJn9fvI.roa (raw, json) Hash identifier: hZkfinGaxG52M/5/J2Jc2UXy36GPloEbpDX2tpwbSVM= Subject key identifier: 3A:3F:C3:5F:78:25:EE:BE:CA:A0:B6:E3:0E:C3:CB:1C:99:FD:7E:F2 Certificate issuer: /CN=b30d2047ff607eef85293760e9c11a6f5941d1b6 Certificate serial: 019B7B35539EE8FEB71A7D2B5A3C8BB546F8 Authority key identifier: B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/Oj_DX3gl7r7KoLbjDsPLHJn9fvI.roa Signing time: Thu 01 Jan 2026 20:17:30 +0000 ROA not before: Thu 01 Jan 2026 20:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25444 IP address blocks: 195.20.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.mft rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:53:9e:e8:fe:b7:1a:7d:2b:5a:3c:8b:b5:46:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30d2047ff607eef85293760e9c11a6f5941d1b6 Validity Not Before: Jan 1 20:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a3fc35f7825eebecaa0b6e30ec3cb1c99fd7ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e7:fb:c5:cf:75:b7:8c:97:b5:71:e8:d3:98: 1b:19:5f:9c:fe:7c:0b:d2:ff:5d:d3:b0:de:ac:92: 99:60:46:8a:ce:41:9b:e4:cf:74:fc:c5:b8:51:de: 20:af:be:9e:b1:3c:92:f9:1f:15:59:55:43:41:f5: fd:bf:54:ee:2f:f7:76:fc:ac:42:80:b7:e8:47:ae: c6:c9:9f:fd:43:60:13:b0:19:58:a0:ad:28:e6:f4: c4:93:b6:0f:40:80:2b:01:9a:52:ed:8e:3d:c2:86: b8:43:0b:f8:63:ef:80:37:6b:70:4e:9c:2a:be:ae: 46:22:02:3e:49:3c:1f:e5:2f:ff:c2:f3:77:f0:af: 98:be:b0:f6:40:a9:6b:dc:0a:f8:59:8b:89:cf:1b: 26:5d:ae:6f:49:dd:06:30:65:78:e4:85:51:bd:55: 7f:d9:0f:9e:15:16:76:bf:fa:b3:f4:f0:00:31:ad: 21:0e:de:c4:c6:84:a2:a4:a6:9a:90:fb:48:66:4f: 94:63:67:c0:0e:8c:c8:c0:c3:f7:1d:5d:a2:07:55: 3a:72:72:b1:be:19:13:7a:af:2c:4e:ae:50:99:3d: 46:a9:ae:7b:73:e8:73:79:11:aa:67:8f:f4:9f:35: c5:d8:1b:01:3c:ad:d7:59:bf:f2:a7:43:0c:df:82: 4a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3F:C3:5F:78:25:EE:BE:CA:A0:B6:E3:0E:C3:CB:1C:99:FD:7E:F2 X509v3 Authority Key Identifier: keyid:B3:0D:20:47:FF:60:7E:EF:85:29:37:60:E9:C1:1A:6F:59:41:D1:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw0gR_9gfu-FKTdg6cEab1lB0bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/Oj_DX3gl7r7KoLbjDsPLHJn9fvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/96bea2-8e6d-44e8-a809-96b451f6000c/1/sw0gR_9gfu-FKTdg6cEab1lB0bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.20.126.0/23 Signature Algorithm: sha256WithRSAEncryption 68:e3:5f:d7:81:92:9c:ad:22:f2:ea:f2:e3:15:ef:d1:8e:97: 52:06:2f:77:f7:16:08:56:e2:64:a5:ae:67:27:e1:05:0d:90: e5:0d:00:3a:03:1d:98:11:55:86:c2:e9:92:08:c3:d5:b5:9c: 89:1b:7b:22:55:b0:0f:23:4f:de:10:51:39:2a:f4:ac:71:40: 23:b1:38:d4:c1:99:e9:3d:bb:45:31:63:e3:19:92:d8:2f:19: 00:e3:78:62:bd:fb:9c:62:a8:f1:fd:c0:98:35:2a:7d:51:fe: e3:af:58:2e:06:7d:89:e5:53:d3:27:25:fc:cd:75:af:76:ab: f8:83:49:46:c8:95:22:93:99:b8:20:ef:be:3c:16:46:42:aa: b7:ee:56:76:86:41:27:95:24:d4:fa:1c:4e:77:25:4e:8c:53: 97:84:dc:73:a0:51:55:cb:88:8a:9b:d6:6e:56:8e:36:fa:a1: 85:36:75:a4:52:5b:15:f0:b2:dc:99:e6:96:18:38:58:7b:08: 4f:32:fd:68:14:80:c9:eb:0d:d5:4b:f9:bb:2b:9b:5d:57:a5: 40:0c:7e:ff:20:62:38:f7:b0:f8:cf:3d:17:79:9c:7e:d4:7b: 45:f7:7f:d6:6c:18:52:96:36:ab:22:36:0f:44:69:1a:2c:ba: bd:bd:51:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NVOe6P63Gn0rWjyLtUb4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMGQyMDQ3ZmY2MDdlZWY4NTI5Mzc2MGU5YzExYTZmNTk0 MWQxYjYwHhcNMjYwMTAxMjAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTNmYzM1Zjc4MjVlZWJlY2FhMGI2ZTMwZWMzY2IxYzk5ZmQ3ZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzef7xc91t4yXtXHo05gbGV+c/nwL 0v9d07DerJKZYEaKzkGb5M90/MW4Ud4gr76esTyS+R8VWVVDQfX9v1TuL/d2/KxC gLfoR67GyZ/9Q2ATsBlYoK0o5vTEk7YPQIArAZpS7Y49woa4Qwv4Y++AN2twTpwq vq5GIgI+STwf5S//wvN38K+YvrD2QKlr3Ar4WYuJzxsmXa5vSd0GMGV45IVRvVV/ 2Q+eFRZ2v/qz9PAAMa0hDt7ExoSipKaakPtIZk+UY2fADozIwMP3HV2iB1U6cnKx vhkTeq8sTq5QmT1Gqa57c+hzeRGqZ4/0nzXF2BsBPK3XWb/yp0MM34JKHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDo/w194Je6+yqC24w7DyxyZ/X7yMB8GA1UdIwQY MBaAFLMNIEf/YH7vhSk3YOnBGm9ZQdG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3cwZ1JfOWdmdS1GS1RkZzZjRWFiMWxCMGJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85NmJlYTItOGU2ZC00NGU4LWE4MDkt OTZiNDUxZjYwMDBjLzEvT2pfRFgzZ2w3cjdLb0xiakRzUExISm45ZnZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85NmJlYTItOGU2ZC00NGU4LWE4MDktOTZiNDUxZjYwMDBj LzEvc3cwZ1JfOWdmdS1GS1RkZzZjRWFiMWxCMGJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwxR+MA0G CSqGSIb3DQEBCwUAA4IBAQBo41/XgZKcrSLy6vLjFe/RjpdSBi939xYIVuJkpa5n J+EFDZDlDQA6Ax2YEVWGwumSCMPVtZyJG3siVbAPI0/eEFE5KvSscUAjsTjUwZnp PbtFMWPjGZLYLxkA43hivfucYqjx/cCYNSp9Uf7jr1guBn2J5VPTJyX8zXWvdqv4 g0lGyJUik5m4IO++PBZGQqq37lZ2hkEnlSTU+hxOdyVOjFOXhNxzoFFVy4iKm9Zu Vo42+qGFNnWkUlsV8LLcmeaWGDhYewhPMv1oFIDJ6w3VS/m7K5tdV6VADH7/IGI4 97D4zz0XeZx+1HtF93/WbBhSljarIjYPRGkaLLq9vVHz -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:32 2026 by rpki-client