This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0oyVJ_POjMNv7SIBdnewQ7rZUYg.roa File: 0oyVJ_POjMNv7SIBdnewQ7rZUYg.roa (raw, json) Hash identifier: b2FWXnbuCo4NzPg+JndrOqjsZhONkFPGGPBGGAxldus= Subject key identifier: D2:8C:95:27:F3:CE:8C:C3:6F:ED:22:01:76:77:B0:43:BA:D9:51:88 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80A391AE836A8AACB107F7210E819B Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0oyVJ_POjMNv7SIBdnewQ7rZUYg.roa Signing time: Fri 02 Jan 2026 02:19:23 +0000 ROA not before: Fri 02 Jan 2026 02:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48215 IP address blocks: 84.32.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a3:91:ae:83:6a:8a:ac:b1:07:f7:21:0e:81:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d28c9527f3ce8cc36fed22017677b043bad95188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6e:f1:48:58:f4:55:d1:b6:4e:08:33:6d:a2: 72:e8:88:5c:2c:54:b2:49:7d:2d:d3:de:71:82:e2: a3:14:82:d3:13:b2:57:12:df:37:12:00:43:af:b0: 16:a6:ea:88:a4:90:a2:66:18:f3:9f:66:7a:7e:6e: a1:63:16:72:b0:ea:b2:5d:00:4c:c0:db:56:7d:45: a8:07:a0:c2:13:fe:9f:d4:f1:01:02:d9:62:2a:c5: 9f:e3:b6:25:9f:3f:80:a1:0f:8d:7f:49:0c:d8:c2: f1:ab:d7:b2:03:cf:72:a9:8f:e6:0a:c7:ec:91:3c: ff:39:50:4d:f0:04:3e:8b:15:6d:7e:e1:e3:d2:b5: 09:7e:09:cc:31:84:4d:db:b4:9b:54:2b:a4:a1:fe: b3:f7:46:26:46:f3:cf:db:7f:64:4b:47:b6:73:a7: d8:08:38:79:62:66:77:7c:49:53:9f:c7:f6:e3:19: 18:77:ad:07:75:25:cb:39:60:1a:9d:6f:b9:58:f3: 08:f5:2c:ce:30:c9:30:0e:68:ad:f7:aa:65:6b:e6: 46:62:3d:52:06:b4:27:60:cf:a1:6b:5d:ed:bb:d8: 20:f6:e8:55:41:b6:a8:b4:14:ea:05:5b:66:1f:ce: 5c:77:9b:af:11:81:a4:76:3a:40:b4:89:de:eb:1c: bc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8C:95:27:F3:CE:8C:C3:6F:ED:22:01:76:77:B0:43:BA:D9:51:88 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0oyVJ_POjMNv7SIBdnewQ7rZUYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.230.0/24 Signature Algorithm: sha256WithRSAEncryption a0:63:46:a8:d5:40:39:b8:22:12:01:d8:47:2c:0a:e8:45:12: 8e:06:89:5e:75:91:3c:9f:17:d0:ba:77:96:c6:7a:c5:3d:6c: ee:b4:9d:61:35:f6:d8:b4:43:ee:24:09:88:dc:d2:ac:da:24: 0a:75:c5:02:89:74:b0:8e:aa:43:99:72:6b:58:31:8b:b9:be: 31:69:07:dc:34:2a:8a:4e:b2:05:fb:f5:03:28:2e:01:11:12: 22:5d:e3:1f:28:11:29:66:07:c5:32:bd:97:49:be:91:23:07: c4:a3:84:71:03:84:32:6e:51:70:30:ec:ea:54:92:db:9f:7e: 55:64:45:98:2e:bd:a5:b0:13:ad:16:da:d5:bb:4b:9e:88:23: 7a:72:f7:ab:71:69:f1:c3:ac:fd:ae:b1:d6:da:6e:d3:46:a1: 52:73:c4:cc:c1:b1:ef:3c:08:bc:ad:c3:f9:98:70:0d:d3:44: b2:4e:0c:be:18:13:49:bf:5d:70:65:fe:c8:6b:64:7d:8f:25: 26:36:d1:25:71:10:07:4e:32:4a:e5:dc:c8:8a:fc:00:80:1d: 91:76:4e:e3:c5:3a:12:2f:d7:9f:a5:0e:ab:8e:19:36:5d:be: b7:06:9a:79:c0:64:62:6a:ac:57:86:76:74:60:c0:b8:d5:00: 3f:40:f1:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKORroNqiqyxB/chDoGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjhjOTUyN2YzY2U4Y2MzNmZlZDIyMDE3Njc3YjA0M2JhZDk1MTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA327xSFj0VdG2TggzbaJy6IhcLFSy SX0t095xguKjFILTE7JXEt83EgBDr7AWpuqIpJCiZhjzn2Z6fm6hYxZysOqyXQBM wNtWfUWoB6DCE/6f1PEBAtliKsWf47Ylnz+AoQ+Nf0kM2MLxq9eyA89yqY/mCsfs kTz/OVBN8AQ+ixVtfuHj0rUJfgnMMYRN27SbVCukof6z90YmRvPP239kS0e2c6fY CDh5YmZ3fElTn8f24xkYd60HdSXLOWAanW+5WPMI9SzOMMkwDmit96pla+ZGYj1S BrQnYM+ha13tu9gg9uhVQbaotBTqBVtmH85cd5uvEYGkdjpAtIne6xy8PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNKMlSfzzozDb+0iAXZ3sEO62VGIMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvMG95VkpfUE9qTU52N1NJQmRuZXdRN3JaVVlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCDmMA0G CSqGSIb3DQEBCwUAA4IBAQCgY0ao1UA5uCISAdhHLAroRRKOBoledZE8nxfQuneW xnrFPWzutJ1hNfbYtEPuJAmI3NKs2iQKdcUCiXSwjqpDmXJrWDGLub4xaQfcNCqK TrIF+/UDKC4BERIiXeMfKBEpZgfFMr2XSb6RIwfEo4RxA4QyblFwMOzqVJLbn35V ZEWYLr2lsBOtFtrVu0ueiCN6cvercWnxw6z9rrHW2m7TRqFSc8TMwbHvPAi8rcP5 mHAN00SyTgy+GBNJv11wZf7Ia2R9jyUmNtElcRAHTjJK5dzIivwAgB2Rdk7jxToS L9efpQ6rjhk2Xb63Bpp5wGRiaqxXhnZ0YMC41QA/QPGR -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:05 2026 by rpki-client