This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/ojjTeCwITpsroHdqRJmBTDsfojU.roa File: ojjTeCwITpsroHdqRJmBTDsfojU.roa (raw, json) Hash identifier: VpFG7gODq/AE1339wVlEzI/S3bsYFlFzAzKyeo7uKPs= Subject key identifier: A2:38:D3:78:2C:08:4E:9B:2B:A0:77:6A:44:99:81:4C:3B:1F:A2:35 Certificate issuer: /CN=7c673daad6d9317f0101d41a042a61e57689453a Certificate serial: 019B7D5B176C1FF76983C253A904914AEB61 Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/ojjTeCwITpsroHdqRJmBTDsfojU.roa Signing time: Fri 02 Jan 2026 06:18:00 +0000 ROA not before: Fri 02 Jan 2026 06:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 203.12.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:17:6c:1f:f7:69:83:c2:53:a9:04:91:4a:eb:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a Validity Not Before: Jan 2 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a238d3782c084e9b2ba0776a4499814c3b1fa235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1e:4d:a8:f7:dd:d5:68:dd:02:13:3e:95:22: 19:7c:f2:37:27:36:46:10:02:05:78:8e:53:21:96: ab:30:ae:a6:4e:1c:51:da:65:01:6c:fe:4f:f7:66: 35:61:4c:2a:39:81:0e:95:8a:cb:1f:82:9d:e6:11: 9d:99:7d:b8:69:fd:02:2d:3c:ce:d2:be:78:2d:4f: da:c3:47:7c:e5:80:04:9d:e0:cd:a6:39:cd:44:90: c0:76:b7:8a:f5:5c:7e:29:06:a3:c1:3f:0b:ad:72: 6c:c2:da:50:39:22:86:2a:e4:80:17:2e:fe:65:73: d5:28:55:cf:d9:d4:bb:d4:d7:df:f2:d5:46:ff:08: ef:da:3e:c8:e5:74:91:eb:ce:d7:e8:ac:07:6a:06: d4:cc:38:6a:e9:d3:42:5e:10:27:40:b3:f1:c3:3d: 0a:96:f4:a6:7c:d6:20:59:0f:34:e5:a3:12:cd:db: b3:03:40:53:b5:b9:00:5d:d2:12:15:35:15:f5:6d: 2d:44:6c:4e:48:6d:8c:9e:96:b9:cc:a7:55:12:cb: a7:45:9a:6c:d1:e4:81:37:ab:a1:5f:39:1a:36:c7: d8:d2:9f:51:aa:b9:61:9f:c2:13:74:d1:07:c9:ca: b8:6e:cf:55:e6:22:98:26:1d:0d:3e:36:3f:c1:56: 4c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:38:D3:78:2C:08:4E:9B:2B:A0:77:6A:44:99:81:4C:3B:1F:A2:35 X509v3 Authority Key Identifier: keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/ojjTeCwITpsroHdqRJmBTDsfojU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.12.218.0/24 Signature Algorithm: sha256WithRSAEncryption 28:28:61:39:ce:9e:4e:b2:8a:99:68:e6:95:b9:32:7a:81:f6: d0:1d:aa:e3:34:00:8b:dc:4a:a2:88:c4:2c:6c:d7:8e:cb:e0: 31:20:56:1a:97:f4:73:ea:56:17:48:c2:23:87:b3:7c:4f:3c: 85:6b:cd:b5:c2:ef:c2:2d:61:e2:ac:d0:01:e6:ea:f9:1f:8c: cd:8a:04:1e:66:d9:70:54:c6:a3:f9:71:08:9f:65:b8:1e:db: 3e:0e:80:84:13:65:1a:ab:67:89:fc:f8:28:0e:2d:3a:61:49: cb:14:ab:88:5c:2c:56:93:eb:50:1e:75:9e:a6:dc:24:f1:77: 00:c3:67:7c:1b:dc:ca:af:d6:97:9b:6b:aa:e2:fa:45:56:a1: d3:ad:8c:29:25:73:c7:b6:62:69:08:42:0e:d8:36:02:c7:4f: 31:ed:e4:63:7f:6f:2d:28:14:ff:d1:d0:80:da:94:29:55:f1: 09:48:b2:74:a0:43:09:5d:28:53:c6:7e:99:4e:7f:cb:9f:d0: c2:05:fe:21:c5:c1:22:a9:70:99:61:01:a6:29:2b:01:a2:db: 18:19:f9:ff:8d:20:ed:e8:92:7f:bf:7a:5c:c3:40:37:24:e7: ef:8a:f6:07:f2:af:e8:94:9c:ae:77:c0:88:ee:5e:24:fc:13: d6:d1:d0:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WxdsH/dpg8JTqQSRSuthMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNjczZGFhZDZkOTMxN2YwMTAxZDQxYTA0MmE2MWU1NzY4 OTQ1M2EwHhcNMjYwMTAyMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjM4ZDM3ODJjMDg0ZTliMmJhMDc3NmE0NDk5ODE0YzNiMWZhMjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB5NqPfd1WjdAhM+lSIZfPI3JzZG EAIFeI5TIZarMK6mThxR2mUBbP5P92Y1YUwqOYEOlYrLH4Kd5hGdmX24af0CLTzO 0r54LU/aw0d85YAEneDNpjnNRJDAdreK9Vx+KQajwT8LrXJswtpQOSKGKuSAFy7+ ZXPVKFXP2dS71Nff8tVG/wjv2j7I5XSR687X6KwHagbUzDhq6dNCXhAnQLPxwz0K lvSmfNYgWQ805aMSzduzA0BTtbkAXdISFTUV9W0tRGxOSG2Mnpa5zKdVEsunRZps 0eSBN6uhXzkaNsfY0p9Rqrlhn8ITdNEHycq4bs9V5iKYJh0NPjY/wVZMGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKI403gsCE6bK6B3akSZgUw7H6I1MB8GA1UdIwQY MBaAFHxnParW2TF/AQHUGgQqYeV2iUU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkdjOXF0YlpNWDhCQWRRYUJDcGg1WGFKUlRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMDM3ZGItNzU5Mi00YjYyLWJkYWEt MDRlNDZlZjBjZDIxLzEvb2pqVGVDd0lUcHNyb0hkcVJKbUJURHNmb2pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMDM3ZGItNzU5Mi00YjYyLWJkYWEtMDRlNDZlZjBjZDIx LzEvZkdjOXF0YlpNWDhCQWRRYUJDcGg1WGFKUlRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAywzaMA0G CSqGSIb3DQEBCwUAA4IBAQAoKGE5zp5OsoqZaOaVuTJ6gfbQHarjNACL3EqiiMQs bNeOy+AxIFYal/Rz6lYXSMIjh7N8TzyFa821wu/CLWHirNAB5ur5H4zNigQeZtlw VMaj+XEIn2W4Hts+DoCEE2Uaq2eJ/PgoDi06YUnLFKuIXCxWk+tQHnWeptwk8XcA w2d8G9zKr9aXm2uq4vpFVqHTrYwpJXPHtmJpCEIO2DYCx08x7eRjf28tKBT/0dCA 2pQpVfEJSLJ0oEMJXShTxn6ZTn/Ln9DCBf4hxcEiqXCZYQGmKSsBotsYGfn/jSDt 6JJ/v3pcw0A3JOfvivYH8q/olJyud8CI7l4k/BPW0dCH -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:55 2026 by rpki-client