This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/ojw89ipECfNK0o3tg1j0zRPKcaM.roa File: ojw89ipECfNK0o3tg1j0zRPKcaM.roa (raw, json) Hash identifier: FSv58Wl2HG8wLBIFZ4BFsujV62O75weLt0XkIwvzp8s= Subject key identifier: A2:3C:3C:F6:2A:44:09:F3:4A:D2:8D:ED:83:58:F4:CD:13:CA:71:A3 Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3 Certificate serial: 019B7F84A31AF91F66BC7F2A42CBACBA2D9A Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/ojw89ipECfNK0o3tg1j0zRPKcaM.roa Signing time: Fri 02 Jan 2026 16:22:37 +0000 ROA not before: Fri 02 Jan 2026 16:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21215 IP address blocks: 89.207.192.0/21 maxlen: 21 176.109.136.0/21 maxlen: 21 185.13.8.0/22 maxlen: 22 185.18.12.0/22 maxlen: 22 185.20.36.0/22 maxlen: 22 185.81.60.0/22 maxlen: 22 213.244.208.0/20 maxlen: 20 2a03:dd80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a3:1a:f9:1f:66:bc:7f:2a:42:cb:ac:ba:2d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a23c3cf62a4409f34ad28ded8358f4cd13ca71a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:cd:c8:e7:0c:44:f8:a5:c0:2c:d9:3f:c5: d1:ba:90:60:63:f0:9f:7a:a9:f7:aa:f0:27:12:a2: 12:41:6f:93:a3:1b:45:3c:2c:3a:76:06:0b:fa:f2: 89:36:f3:1a:23:5b:b6:47:18:70:35:39:c6:d7:0c: 28:3d:b3:1e:0f:39:2d:27:c4:a9:81:1b:0c:48:04: c8:75:3b:d4:99:02:c5:88:4e:a6:43:98:47:37:a7: b4:1d:20:ed:05:f0:80:87:f1:38:51:ad:f9:82:34: 38:05:48:7a:2f:9f:ee:97:8c:14:87:37:4b:e6:73: 4c:fa:09:b1:84:b6:f1:2e:a7:d7:4d:00:ff:f6:f6: b6:b0:2c:a6:ce:eb:67:b8:7a:70:0a:60:c0:92:bd: 13:ae:90:f3:9c:61:cd:17:67:13:ba:7b:4a:1a:27: 9f:4a:84:2c:1a:93:68:1d:f1:1a:04:22:16:07:6a: 07:dc:29:f0:43:ed:04:bf:b7:72:ed:b2:5e:44:c6: 73:a4:7b:cb:96:de:8b:0c:37:da:ae:29:34:15:5e: 2d:28:ee:8a:66:25:ea:fb:89:27:17:a7:20:d6:51: eb:eb:fc:97:5a:b1:4a:3f:1a:bb:81:9d:1c:99:fd: 09:c1:a7:e6:39:42:a4:3f:2e:c2:f4:18:00:46:c7: 0e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3C:3C:F6:2A:44:09:F3:4A:D2:8D:ED:83:58:F4:CD:13:CA:71:A3 X509v3 Authority Key Identifier: keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/ojw89ipECfNK0o3tg1j0zRPKcaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.192.0/21 176.109.136.0/21 185.13.8.0/22 185.18.12.0/22 185.20.36.0/22 185.81.60.0/22 213.244.208.0/20 IPv6: 2a03:dd80::/29 Signature Algorithm: sha256WithRSAEncryption 89:be:77:2f:47:77:d6:ff:e0:ae:19:1a:be:b9:b2:c5:11:97: ed:f6:a1:f2:f1:21:39:55:51:80:56:b8:8b:f9:2c:e5:60:74: 2e:ed:2d:67:74:a1:c8:fc:dd:bc:8c:8c:98:7b:72:80:03:3d: c1:51:0e:64:3b:09:4a:21:80:78:ca:7b:43:59:7a:b9:5a:68: 0c:fb:6e:7d:27:e6:44:35:3c:f6:68:8e:8c:2a:fd:c5:dc:ca: 81:90:50:1a:92:24:bb:00:2e:53:83:b6:29:fa:43:a1:53:9f: a9:54:a1:5d:5d:86:3d:08:c9:75:3b:2b:4a:22:2d:c3:09:4b: c4:dd:bb:76:5b:51:36:bd:85:51:c2:0f:9d:1a:6a:e1:cf:bc: 04:da:8e:39:2b:51:8b:4b:79:2c:9e:19:13:ab:b8:35:f0:ad: b9:3e:1f:07:22:21:8f:4c:6a:0f:d1:f9:85:0d:c0:ad:81:f3: 6e:52:85:fe:12:c7:0d:08:6f:d1:0e:22:a9:90:c4:d4:c7:fa: 5e:0a:03:00:20:67:35:f9:e3:0d:80:fe:fc:f7:ae:b5:84:d9: b9:f9:a2:f4:7d:42:24:2e:fb:56:ac:54:85:b2:a5:89:f1:fa: 89:60:74:a4:cc:c4:f1:61:47:ea:b4:aa:de:b2:42:1e:56:b8: 7c:bf:64:59 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt/hKMa+R9mvH8qQsusui2aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZDE4NjUzZmJmYjZmZDU3MzJkYzk0MGMxZDY1ZDc3YWIw YmJmYTMwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjNjM2NmNjJhNDQwOWYzNGFkMjhkZWQ4MzU4ZjRjZDEzY2E3MWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+HNyOcMRPilwCzZP8XRupBgY/Cf eqn3qvAnEqISQW+ToxtFPCw6dgYL+vKJNvMaI1u2RxhwNTnG1wwoPbMeDzktJ8Sp gRsMSATIdTvUmQLFiE6mQ5hHN6e0HSDtBfCAh/E4Ua35gjQ4BUh6L5/ul4wUhzdL 5nNM+gmxhLbxLqfXTQD/9va2sCymzutnuHpwCmDAkr0TrpDznGHNF2cTuntKGief SoQsGpNoHfEaBCIWB2oH3CnwQ+0Ev7dy7bJeRMZzpHvLlt6LDDfarik0FV4tKO6K ZiXq+4knF6cg1lHr6/yXWrFKPxq7gZ0cmf0JwafmOUKkPy7C9BgARscOMQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFKI8PPYqRAnzStKN7YNY9M0TynGjMB8GA1UdIwQY MBaAFMbRhlP7+2/Vcy3JQMHWXXerC7+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHRHR1VfdjdiOVZ6TGNsQXdkWmRkNnNMdjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZDY5NDMtY2E3NS00MzcyLWI3N2Yt NWM2NTAyYmZmYTFmLzEvb2p3ODlpcEVDZk5LMG8zdGcxajB6UlBLY2FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84ZDY5NDMtY2E3NS00MzcyLWI3N2YtNWM2NTAyYmZmYTFm LzEveHRHR1VfdjdiOVZ6TGNsQXdkWmRkNnNMdjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDWc/AAwQD sG2IAwQCuQ0IAwQCuRIMAwQCuRQkAwQCuVE8AwQE1fTQMA0EAgACMAcDBQMqA92A MA0GCSqGSIb3DQEBCwUAA4IBAQCJvncvR3fW/+CuGRq+ubLFEZft9qHy8SE5VVGA VriL+SzlYHQu7S1ndKHI/N28jIyYe3KAAz3BUQ5kOwlKIYB4yntDWXq5WmgM+259 J+ZENTz2aI6MKv3F3MqBkFAakiS7AC5Tg7Yp+kOhU5+pVKFdXYY9CMl1OytKIi3D CUvE3bt2W1E2vYVRwg+dGmrhz7wE2o45K1GLS3ksnhkTq7g18K25Ph8HIiGPTGoP 0fmFDcCtgfNuUoX+EscNCG/RDiKpkMTUx/peCgMAIGc1+eMNgP789661hNm5+aL0 fUIkLvtWrFSFsqWJ8fqJYHSkzMTxYUfqtKreskIeVrh8v2RZ -----END CERTIFICATE-----Generated at Tue Feb 10 10:09:45 2026 by rpki-client