This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/oIfjrqG_dryljjOj1ca_v7Q2RvM.roa File: oIfjrqG_dryljjOj1ca_v7Q2RvM.roa (raw, json) Hash identifier: thmy6eDbM1diNPatpw1wsv4FNzGCuylhSZcjOFihfRQ= Subject key identifier: A0:87:E3:AE:A1:BF:76:BC:A5:8E:33:A3:D5:C6:BF:BF:B4:36:46:F3 Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d Certificate serial: 019B7C1197F5C978CAD3351FB3BA0F020630 Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/oIfjrqG_dryljjOj1ca_v7Q2RvM.roa Signing time: Fri 02 Jan 2026 00:18:06 +0000 ROA not before: Fri 02 Jan 2026 00:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 143.223.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:97:f5:c9:78:ca:d3:35:1f:b3:ba:0f:02:06:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d Validity Not Before: Jan 2 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a087e3aea1bf76bca58e33a3d5c6bfbfb43646f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e1:bc:b4:ba:6e:22:64:26:bf:cb:0c:79:ca: 8f:81:05:f3:fe:d5:58:b5:91:5b:b8:6b:89:3a:80: 6e:98:96:94:21:7a:04:bc:10:37:06:c1:24:36:c0: c5:ba:27:9b:0d:ab:a3:3e:1b:dc:f3:9f:db:67:42: 7b:63:cc:53:d5:d1:e8:a4:a8:41:bd:58:24:57:6b: dd:09:47:12:2f:8f:64:57:08:f6:20:b0:d7:ca:f1: e7:68:e1:12:84:05:01:83:c7:4a:c2:cd:86:b9:0a: c2:32:1a:f5:77:fa:57:01:64:dc:60:37:1e:db:bb: 1a:9a:74:ee:61:bf:0d:38:8b:35:b8:50:7d:d4:30: cc:b8:72:15:4a:1a:27:94:60:54:c1:47:ad:4a:64: f5:7b:74:1e:65:0c:6b:7f:5b:5a:f4:32:ec:c2:41: ea:7c:48:c3:d4:bc:25:ba:58:5e:91:db:04:88:55: a8:ef:74:fa:55:45:f1:3f:79:e8:19:48:87:22:eb: 15:d7:3d:50:22:bc:ef:78:f4:cc:5f:a1:dc:75:b2: 9f:12:f0:9e:73:b4:29:80:a2:69:d2:03:3f:2d:6a: d9:9a:aa:ae:67:24:05:7a:0b:68:03:f3:47:c8:bf: c7:d5:28:5e:8b:77:40:ce:f0:58:7c:2d:53:30:54: b8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:87:E3:AE:A1:BF:76:BC:A5:8E:33:A3:D5:C6:BF:BF:B4:36:46:F3 X509v3 Authority Key Identifier: keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/oIfjrqG_dryljjOj1ca_v7Q2RvM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.223.177.0/24 Signature Algorithm: sha256WithRSAEncryption 54:0e:04:9d:92:41:2f:aa:02:76:83:96:fb:81:2e:85:30:49: d3:11:a4:45:59:6a:35:0b:d8:0f:7f:f3:78:51:c9:c8:74:ba: 5b:c6:0f:38:b4:65:d3:92:8b:4a:4e:fd:1e:81:8c:df:e4:2a: 69:57:23:6f:40:0c:f8:de:c8:78:b2:1b:f2:4a:30:aa:41:94: 41:31:98:b3:84:ef:ae:01:32:2e:48:02:3e:37:2f:e3:da:16: 5f:5c:87:25:ee:7d:c1:d5:22:b6:11:fe:c7:54:d2:45:5a:c0: bd:c4:85:b7:67:0f:71:4f:12:0b:46:67:f5:69:e9:b0:fe:d4: 0e:0a:bc:fb:65:0a:d8:1e:22:15:e9:83:c5:0e:64:d6:bf:32: 53:c9:cc:63:63:85:02:35:ee:0c:b4:c5:6d:05:2d:b9:68:69: 05:eb:73:e1:62:1d:2c:26:b4:11:29:bd:a6:78:df:b2:29:f6: 6b:e4:fe:af:5b:82:9c:16:45:0f:bf:20:da:19:72:03:9f:70: 3c:80:56:07:99:c8:52:e2:9d:50:25:15:82:3c:eb:b4:c0:15: db:22:81:c7:65:44:e8:50:05:ed:64:21:db:a3:54:90:cf:b5: 74:65:54:df:e0:42:71:4a:31:4f:64:5f:ff:b6:f0:22:27:86: 50:e9:24:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EZf1yXjK0zUfs7oPAgYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDVhY2QzMWJjY2JkMzQ1Zjk2NGFkOTA3Y2E3NzgzZDUw NDAyNmQwHhcNMjYwMTAyMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDg3ZTNhZWExYmY3NmJjYTU4ZTMzYTNkNWM2YmZiZmI0MzY0NmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+G8tLpuImQmv8sMecqPgQXz/tVY tZFbuGuJOoBumJaUIXoEvBA3BsEkNsDFuiebDaujPhvc85/bZ0J7Y8xT1dHopKhB vVgkV2vdCUcSL49kVwj2ILDXyvHnaOEShAUBg8dKws2GuQrCMhr1d/pXAWTcYDce 27samnTuYb8NOIs1uFB91DDMuHIVShonlGBUwUetSmT1e3QeZQxrf1ta9DLswkHq fEjD1LwlulhekdsEiFWo73T6VUXxP3noGUiHIusV1z1QIrzvePTMX6HcdbKfEvCe c7QpgKJp0gM/LWrZmqquZyQFegtoA/NHyL/H1Shei3dAzvBYfC1TMFS4AwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKCH466hv3a8pY4zo9XGv7+0NkbzMB8GA1UdIwQY MBaAFIRFrNMbzL00X5ZK2QfKd4PVBAJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mY2I3YWYtNTZkMC00YzU1LWE3Nzgt MDczZTNiN2FkODUwLzEvb0lmanJxR19kcnlsampPajFjYV92N1EyUnZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mY2I3YWYtNTZkMC00YzU1LWE3NzgtMDczZTNiN2FkODUw LzEvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+xMA0G CSqGSIb3DQEBCwUAA4IBAQBUDgSdkkEvqgJ2g5b7gS6FMEnTEaRFWWo1C9gPf/N4 UcnIdLpbxg84tGXTkotKTv0egYzf5CppVyNvQAz43sh4shvySjCqQZRBMZizhO+u ATIuSAI+Ny/j2hZfXIcl7n3B1SK2Ef7HVNJFWsC9xIW3Zw9xTxILRmf1aemw/tQO Crz7ZQrYHiIV6YPFDmTWvzJTycxjY4UCNe4MtMVtBS25aGkF63PhYh0sJrQRKb2m eN+yKfZr5P6vW4KcFkUPvyDaGXIDn3A8gFYHmchS4p1QJRWCPOu0wBXbIoHHZUTo UAXtZCHbo1SQz7V0ZVTf4EJxSjFPZF//tvAiJ4ZQ6SQB -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:29 2026 by rpki-client