This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/ojj60KvEfIbBq__ojwSvccF3vWk.roa File: ojj60KvEfIbBq__ojwSvccF3vWk.roa (raw, json) Hash identifier: d0sPYG2tha8/FS0gE9+VMYJY8H3oZde90RvtZHcEaNI= Subject key identifier: A2:38:FA:D0:AB:C4:7C:86:C1:AB:FF:E8:8F:04:AF:71:C1:77:BD:69 Certificate issuer: /CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3 Certificate serial: 019B7DC977205B5E07C71A0ACAD4F22C6F53 Authority key identifier: 38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/ojj60KvEfIbBq__ojwSvccF3vWk.roa Signing time: Fri 02 Jan 2026 08:18:33 +0000 ROA not before: Fri 02 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3203 IP address blocks: 176.115.128.0/22 maxlen: 22 176.115.132.0/22 maxlen: 22 193.0.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:77:20:5b:5e:07:c7:1a:0a:ca:d4:f2:2c:6f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3 Validity Not Before: Jan 2 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a238fad0abc47c86c1abffe88f04af71c177bd69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a7:ec:a2:b4:4f:ef:80:f4:0f:5a:51:5f:32: f6:6f:fa:e0:9f:eb:b9:89:30:67:0c:40:53:52:f3: 9e:96:05:3e:66:63:92:54:bc:e1:70:c2:6d:e8:b2: f3:3c:5b:26:b4:17:d5:a8:58:69:56:88:fa:32:30: 00:8d:5d:b1:49:ed:fb:7c:f7:0f:e6:0c:d0:46:7c: a0:81:78:b0:b8:66:ee:8b:25:40:fb:39:59:bd:3b: 03:7f:71:3a:35:68:99:2a:a1:9c:af:b1:ba:63:23: d7:d2:3d:bd:65:07:d3:55:d5:bd:cb:c3:6e:fe:38: d2:c5:c2:3b:df:0b:e4:d3:c1:f7:6d:89:38:ca:36: 59:5e:f2:23:03:37:69:98:9c:11:a1:ca:e1:1c:57: b7:ed:6d:2e:04:8a:30:ec:8a:2a:2e:a2:2f:32:7f: 98:9e:5f:d0:28:ab:af:26:75:c0:1a:a4:51:e8:08: f4:a0:1b:31:25:bf:ff:85:89:be:b8:19:57:d8:43: 17:c7:f9:96:8a:0a:1b:4c:80:62:e1:94:45:a6:0b: 7e:b2:2e:43:9f:3b:ca:93:62:0a:c8:21:86:40:30: 5d:cc:15:22:84:ab:b2:e2:18:e8:0f:64:c3:0e:14: ee:51:b5:d3:d2:62:28:96:fb:67:c5:d6:9b:b0:63: df:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:38:FA:D0:AB:C4:7C:86:C1:AB:FF:E8:8F:04:AF:71:C1:77:BD:69 X509v3 Authority Key Identifier: keyid:38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/ojj60KvEfIbBq__ojwSvccF3vWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.115.128.0/21 193.0.132.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:a5:45:43:9e:b3:48:af:36:33:3f:8b:12:1f:4f:c2:51:d1: 0a:fa:91:30:b6:85:1d:0b:32:b5:5a:0c:2e:9e:08:53:f9:81: f1:16:56:bf:bb:28:1d:be:6f:fb:33:d2:b3:09:1e:ea:e9:da: ac:09:41:c7:90:5f:56:09:57:ae:fb:b9:bb:99:35:8e:f6:8a: 1c:07:41:99:73:c8:b0:9b:a1:aa:a5:57:5b:96:01:a9:30:5f: df:1a:19:59:77:a7:d0:dc:e3:6c:d5:c4:d2:c2:09:b4:42:ca: a8:f7:07:0a:e3:69:5e:b2:8e:3a:b3:e2:3d:98:ba:dc:d9:3b: 8c:51:66:c5:fb:03:f6:76:2b:ae:ad:bd:e3:8e:58:81:d2:8c: c3:7d:ea:c8:68:0f:10:18:89:80:74:de:f0:25:ee:ad:a6:2e: 04:ac:2b:29:3f:d1:77:f5:a6:2b:5d:67:44:60:14:15:f8:94: 4b:26:5a:86:23:a5:9c:15:1e:9f:55:56:83:61:a6:e6:1f:0e: 0d:6a:e3:4c:14:d5:ef:7c:de:ba:e2:33:e4:bc:f1:56:4e:18: 84:64:da:7a:a2:39:b9:c3:46:59:8b:8e:4f:52:db:fa:76:cc: ae:4b:4e:98:2a:83:79:cc:23:01:13:8a:31:a5:27:fe:65:39: 03:50:0d:4b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yXcgW14HxxoKytTyLG9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjViZDM5Yjc0ZjIzZDc2ODNkMTIzOGVhOWFjYTNjNjZh NjMxYTMwHhcNMjYwMTAyMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjM4ZmFkMGFiYzQ3Yzg2YzFhYmZmZTg4ZjA0YWY3MWMxNzdiZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlafsorRP74D0D1pRXzL2b/rgn+u5 iTBnDEBTUvOelgU+ZmOSVLzhcMJt6LLzPFsmtBfVqFhpVoj6MjAAjV2xSe37fPcP 5gzQRnyggXiwuGbuiyVA+zlZvTsDf3E6NWiZKqGcr7G6YyPX0j29ZQfTVdW9y8Nu /jjSxcI73wvk08H3bYk4yjZZXvIjAzdpmJwRocrhHFe37W0uBIow7IoqLqIvMn+Y nl/QKKuvJnXAGqRR6Aj0oBsxJb//hYm+uBlX2EMXx/mWigobTIBi4ZRFpgt+si5D nzvKk2IKyCGGQDBdzBUihKuy4hjoD2TDDhTuUbXT0mIolvtnxdabsGPfUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKI4+tCrxHyGwav/6I8Er3HBd71pMB8GA1UdIwQY MBaAFDi1vTm3TyPXaD0SOOqayjxmpjGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hNWYxNTAtM2Q4My00MmNiLTlhNDct ZTNjZmU2Y2VjMGFjLzEvb2pqNjBLdkVmSWJCcV9fb2p3U3ZjY0YzdldrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hNWYxNTAtM2Q4My00MmNiLTlhNDctZTNjZmU2Y2VjMGFj LzEvT0xXOU9iZFBJOWRvUFJJNDZwcktQR2FtTWFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDsHOAAwQC wQCEMA0GCSqGSIb3DQEBCwUAA4IBAQBMpUVDnrNIrzYzP4sSH0/CUdEK+pEwtoUd CzK1WgwunghT+YHxFla/uygdvm/7M9KzCR7q6dqsCUHHkF9WCVeu+7m7mTWO9ooc B0GZc8iwm6GqpVdblgGpMF/fGhlZd6fQ3ONs1cTSwgm0Qsqo9wcK42leso46s+I9 mLrc2TuMUWbF+wP2diuurb3jjliB0ozDferIaA8QGImAdN7wJe6tpi4ErCspP9F3 9aYrXWdEYBQV+JRLJlqGI6WcFR6fVVaDYabmHw4NauNMFNXvfN664jPkvPFWThiE ZNp6ojm5w0ZZi45PUtv6dsyuS06YKoN5zCMBE4oxpSf+ZTkDUA1L -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:07 2026 by rpki-client