This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oTAxorz3jTDvrfVnHJ9VcCkIqwU.roa File: oTAxorz3jTDvrfVnHJ9VcCkIqwU.roa (raw, json) Hash identifier: jBFOxPOxXsgvje5FuP7/eSD1QBOFoXP+/YsOimrVCbM= Subject key identifier: A1:30:31:A2:BC:F7:8D:30:EF:AD:F5:67:1C:9F:55:70:29:08:AB:05 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB422F7204E04C90D52A0697441596 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oTAxorz3jTDvrfVnHJ9VcCkIqwU.roa Signing time: Fri 02 Jan 2026 08:20:31 +0000 ROA not before: Fri 02 Jan 2026 08:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 151.242.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:42:2f:72:04:e0:4c:90:d5:2a:06:97:44:15:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a13031a2bcf78d30efadf5671c9f55702908ab05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:be:4c:72:95:c8:20:dd:00:03:54:bd:28: f2:32:ac:ae:9b:ba:4a:87:c1:59:a1:b7:ca:f2:d1: ef:d0:91:41:25:a9:e9:61:92:ef:6e:62:f7:85:05: 7c:24:ba:ee:d4:73:01:65:89:6d:1d:03:1c:cd:05: 70:b3:f8:ea:3d:b8:6e:59:d6:2d:c0:5e:8e:fd:bb: ff:d7:4d:d0:f5:66:0f:3d:52:5a:38:ab:b5:9f:74: 98:34:be:41:b5:4f:06:0a:0f:84:77:8e:1c:1e:af: 45:e9:e8:ab:5f:d2:70:2f:27:f0:03:ea:11:3f:30: c7:e2:dd:f0:cc:47:db:4f:42:84:eb:96:e8:c8:d8: cd:ac:ab:ec:72:77:6a:d7:44:11:01:3b:7c:27:e9: a0:24:dd:9c:be:eb:e4:64:63:a8:fb:5f:f3:8b:58: 7d:03:03:14:c0:93:03:29:c8:e7:53:27:b1:51:76: 9b:a9:a4:57:96:2a:f1:46:76:14:1e:4b:42:3d:d6: e3:1e:5f:79:d8:33:70:4f:1b:18:41:ce:87:2f:31: 14:84:7f:d4:6d:f3:56:4b:95:86:0d:fd:d5:8a:44: 4e:51:6e:a8:ed:9f:09:f3:7e:bb:f7:88:b9:65:12: 69:e9:b2:cc:6f:93:2e:fe:01:c6:95:74:39:3b:13: d1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:30:31:A2:BC:F7:8D:30:EF:AD:F5:67:1C:9F:55:70:29:08:AB:05 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oTAxorz3jTDvrfVnHJ9VcCkIqwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.208.0/23 Signature Algorithm: sha256WithRSAEncryption 92:12:c6:39:25:05:b6:de:31:f2:cf:bd:06:35:e4:da:87:a3: 52:b9:3d:04:c7:07:e5:10:09:a1:28:43:85:81:f7:e4:6d:fe: 68:b9:a8:9d:5e:a0:60:b7:28:66:3b:62:42:c5:54:08:b7:41: d0:b7:7f:f2:5b:d9:56:99:38:93:61:64:4c:c4:e6:15:16:64: 86:20:3c:6c:01:f2:81:12:26:5f:64:19:28:a2:65:8b:df:4f: 39:57:88:47:cd:c9:9b:4b:9a:83:40:78:34:72:9f:9a:c0:9e: 2a:23:a6:38:09:28:a6:e3:18:8b:c7:4c:21:21:c1:49:15:ba: b0:ff:72:4c:f6:a8:81:9e:61:6a:8e:76:20:a6:bd:8a:50:ce: 1d:82:9d:2f:71:b2:e2:08:6d:eb:0f:18:1b:33:8a:06:48:f8: 35:a9:ed:b7:48:82:37:7b:11:38:56:cb:48:20:a4:9c:c5:0d: e6:df:67:6b:9b:f3:03:7c:21:2f:ee:44:0e:4e:1d:2f:24:5f: 21:d5:12:e8:f0:84:bb:74:00:76:a3:75:9c:14:2f:17:a1:ae: c5:bf:1b:8a:98:bb:10:7e:cd:8a:c6:78:9f:bd:a2:c9:67:06: 8c:b3:fc:1b:d3:fa:42:42:ee:53:a0:a6:4f:fa:d4:ba:89:45: 6d:de:21:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0IvcgTgTJDVKgaXRBWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTMwMzFhMmJjZjc4ZDMwZWZhZGY1NjcxYzlmNTU3MDI5MDhhYjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPi+THKVyCDdAANUvSjyMqyum7pK h8FZobfK8tHv0JFBJanpYZLvbmL3hQV8JLru1HMBZYltHQMczQVws/jqPbhuWdYt wF6O/bv/103Q9WYPPVJaOKu1n3SYNL5BtU8GCg+Ed44cHq9F6eirX9JwLyfwA+oR PzDH4t3wzEfbT0KE65boyNjNrKvscndq10QRATt8J+mgJN2cvuvkZGOo+1/zi1h9 AwMUwJMDKcjnUyexUXabqaRXlirxRnYUHktCPdbjHl952DNwTxsYQc6HLzEUhH/U bfNWS5WGDf3VikROUW6o7Z8J836794i5ZRJp6bLMb5Mu/gHGlXQ5OxPRMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKEwMaK8940w7631ZxyfVXApCKsFMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvb1RBeG9yejNqVER2cmZWbkhKOVZjQ2tJcXdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/LQMA0G CSqGSIb3DQEBCwUAA4IBAQCSEsY5JQW23jHyz70GNeTah6NSuT0ExwflEAmhKEOF gffkbf5ouaidXqBgtyhmO2JCxVQIt0HQt3/yW9lWmTiTYWRMxOYVFmSGIDxsAfKB EiZfZBkoomWL3085V4hHzcmbS5qDQHg0cp+awJ4qI6Y4CSim4xiLx0whIcFJFbqw /3JM9qiBnmFqjnYgpr2KUM4dgp0vcbLiCG3rDxgbM4oGSPg1qe23SII3exE4VstI IKScxQ3m32drm/MDfCEv7kQOTh0vJF8h1RLo8IS7dAB2o3WcFC8Xoa7FvxuKmLsQ fs2KxnifvaLJZwaMs/wb0/pCQu5ToKZP+tS6iUVt3iGI -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:38 2026 by rpki-client