This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/oyHZ4sApg91Gz7x3jOX_J8EqVD8.roa File: oyHZ4sApg91Gz7x3jOX_J8EqVD8.roa (raw, json) Hash identifier: 7KkKdokdhQY6oGJ7AGPNp5aHJEGtshRkOO+e+8pjbOk= Subject key identifier: A3:21:D9:E2:C0:29:83:DD:46:CF:BC:77:8C:E5:FF:27:C1:2A:54:3F Certificate issuer: /CN=d38579e4c7da01df0465186236e9af27eb7312ed Certificate serial: 019BF9A8DCC00CCD9E918EF185F0EBA98053 Authority key identifier: D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/oyHZ4sApg91Gz7x3jOX_J8EqVD8.roa Signing time: Mon 26 Jan 2026 09:35:51 +0000 ROA not before: Mon 26 Jan 2026 09:35:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29469 IP address blocks: 178.216.12.0/23 maxlen: 23 185.38.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:a8:dc:c0:0c:cd:9e:91:8e:f1:85:f0:eb:a9:80:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d38579e4c7da01df0465186236e9af27eb7312ed Validity Not Before: Jan 26 09:35:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a321d9e2c02983dd46cfbc778ce5ff27c12a543f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:d8:cc:72:a6:58:d0:cb:3d:27:98:7f:8e: 0f:0f:a1:1b:66:83:71:fb:ec:83:b4:a3:08:e4:b1: bf:7e:c5:64:64:57:76:b2:e6:16:2c:e4:f8:72:5f: a6:82:77:3e:8d:54:9d:93:83:49:09:c4:99:09:98: 91:f2:09:a0:9b:e1:29:cc:82:c5:03:fd:87:16:7d: 92:a6:a7:43:d8:19:17:56:5f:c6:b5:54:4b:c2:de: e4:35:23:e6:f9:c5:3e:42:20:3d:c3:a4:6a:86:c4: 7f:01:12:d0:31:5d:01:c4:e1:31:5c:d7:99:72:70: 41:a1:79:bb:68:03:31:ea:bc:97:86:59:04:c2:74: 5f:a9:91:b0:41:e1:93:52:d7:7c:ce:17:00:6f:ef: 00:28:6b:79:ad:a6:35:0e:80:e0:cd:75:d5:5e:00: 8d:92:07:43:a3:98:30:46:c4:80:ca:38:1c:8b:2e: af:f3:97:2a:da:77:6a:bb:ee:6e:a4:17:ef:dd:24: 33:5f:7c:13:8f:82:d7:56:b5:2a:10:40:64:69:15: 27:50:3d:28:b1:a0:89:95:5e:7a:9d:99:b0:7a:c7: 02:4a:ba:c9:e3:ec:bb:bc:fb:0a:d7:04:38:e4:72: ea:20:f4:5d:28:52:a4:b3:4b:78:ae:24:f8:0d:22: 70:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:21:D9:E2:C0:29:83:DD:46:CF:BC:77:8C:E5:FF:27:C1:2A:54:3F X509v3 Authority Key Identifier: keyid:D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/oyHZ4sApg91Gz7x3jOX_J8EqVD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.216.12.0/23 185.38.174.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:73:2d:4b:ef:da:2a:9c:cf:10:93:2f:34:48:a0:a7:38:94: 64:de:d8:a1:2b:d2:d8:39:cf:8f:41:b7:64:38:bf:00:cb:2e: 7f:6e:6a:20:00:6f:a9:38:0d:8d:97:c1:89:47:12:da:78:31: bd:e4:e8:0a:6f:41:94:f7:68:91:07:ce:8c:04:30:84:ed:8b: f8:e1:17:53:dc:c9:6a:6d:e2:62:ca:37:d8:5c:3f:60:4a:2d: 98:8d:36:1d:9c:8c:3a:e7:db:32:71:dd:3d:df:62:b9:7a:f6: 4a:ff:f0:ce:dd:69:b5:95:0b:ca:73:04:af:bc:56:07:2b:6c: e3:ad:4b:cc:2a:b9:ba:4c:13:63:cb:33:a9:df:ac:9f:4e:5b: 6e:cd:f8:8a:c1:e0:4c:37:22:fe:b4:49:b3:23:16:d1:1f:8f: e4:8a:b8:78:96:21:08:cc:2f:c9:40:45:bb:66:cf:c7:9d:8e: c1:b7:e2:dd:cf:fe:2c:bc:d8:1d:41:46:22:0a:ae:a6:d7:56: c0:13:3a:3e:17:34:ba:2b:54:19:71:3c:d3:94:68:c0:90:ef: 59:bc:44:c1:65:0c:da:87:6b:f2:9f:f4:a8:3e:48:20:01:6f: 35:85:0b:80:81:4a:41:f4:36:29:45:ab:1d:ad:b3:fb:f2:95: 27:c1:6c:08 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZv5qNzADM2ekY7xhfDrqYBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzODU3OWU0YzdkYTAxZGYwNDY1MTg2MjM2ZTlhZjI3ZWI3 MzEyZWQwHhcNMjYwMTI2MDkzNTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzIxZDllMmMwMjk4M2RkNDZjZmJjNzc4Y2U1ZmYyN2MxMmE1NDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ3YzHKmWNDLPSeYf44PD6EbZoNx ++yDtKMI5LG/fsVkZFd2suYWLOT4cl+mgnc+jVSdk4NJCcSZCZiR8gmgm+EpzILF A/2HFn2SpqdD2BkXVl/GtVRLwt7kNSPm+cU+QiA9w6RqhsR/ARLQMV0BxOExXNeZ cnBBoXm7aAMx6ryXhlkEwnRfqZGwQeGTUtd8zhcAb+8AKGt5raY1DoDgzXXVXgCN kgdDo5gwRsSAyjgciy6v85cq2ndqu+5upBfv3SQzX3wTj4LXVrUqEEBkaRUnUD0o saCJlV56nZmwescCSrrJ4+y7vPsK1wQ45HLqIPRdKFKks0t4riT4DSJw7wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKMh2eLAKYPdRs+8d4zl/yfBKlQ/MB8GA1UdIwQY MBaAFNOFeeTH2gHfBGUYYjbpryfrcxLtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDRWNTVNZmFBZDhFWlJoaU51bXZKLXR6RXUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85NDYyMmQtYzI2ZC00Mzc2LWIwNTkt YmQ0MDU0MTliMDBkLzEvb3lIWjRzQXBnOTFHejd4M2pPWF9KOEVxVkQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC85NDYyMmQtYzI2ZC00Mzc2LWIwNTktYmQ0MDU0MTliMDBk LzEvMDRWNTVNZmFBZDhFWlJoaU51bXZKLXR6RXUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBstgMAwQA uSauMA0GCSqGSIb3DQEBCwUAA4IBAQBucy1L79oqnM8Qky80SKCnOJRk3tihK9LY Oc+PQbdkOL8Ayy5/bmogAG+pOA2Nl8GJRxLaeDG95OgKb0GU92iRB86MBDCE7Yv4 4RdT3MlqbeJiyjfYXD9gSi2YjTYdnIw659sycd0932K5evZK//DO3Wm1lQvKcwSv vFYHK2zjrUvMKrm6TBNjyzOp36yfTltuzfiKweBMNyL+tEmzIxbRH4/kirh4liEI zC/JQEW7Zs/HnY7Bt+Ldz/4svNgdQUYiCq6m11bAEzo+FzS6K1QZcTzTlGjAkO9Z vETBZQzah2vyn/SoPkggAW81hQuAgUpB9DYpRasdrbP78pUnwWwI -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:40 2026 by rpki-client