This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/OjCZNS0V7bS6o9kNX-GazXkNt6g.roa File: OjCZNS0V7bS6o9kNX-GazXkNt6g.roa (raw, json) Hash identifier: h0RBZKwBDu9T2bG9WT98CcP4agiyp1k9fyQRDt70M9A= Subject key identifier: 3A:30:99:35:2D:15:ED:B4:BA:A3:D9:0D:5F:E1:9A:CD:79:0D:B7:A8 Certificate issuer: /CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409 Certificate serial: 019B79110479A66129361C69970346F65DC0 Authority key identifier: 58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/OjCZNS0V7bS6o9kNX-GazXkNt6g.roa Signing time: Thu 01 Jan 2026 10:18:36 +0000 ROA not before: Thu 01 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4913 IP address blocks: 79.140.194.0/24 maxlen: 24 79.140.200.0/21 maxlen: 21 79.140.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:04:79:a6:61:29:36:1c:69:97:03:46:f6:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409 Validity Not Before: Jan 1 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a3099352d15edb4baa3d90d5fe19acd790db7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:11:f5:67:67:00:75:31:15:79:f4:34:d8:8b: c1:70:61:39:85:fc:e6:bf:d1:6a:9b:be:82:ce:c5: 04:15:12:3e:f0:1a:92:9f:0b:e6:74:8e:56:8c:6f: 5f:2f:2d:84:e7:34:9b:31:7f:38:5f:bd:98:9b:e2: 8c:45:cf:5e:99:48:b5:52:f0:d1:17:d6:f5:25:11: 01:5e:ae:9a:7c:32:66:a9:58:6e:d3:4e:71:7c:99: bb:47:64:1f:3e:8e:20:8d:d0:9f:c6:ab:71:2e:83: 9e:0c:1d:d2:68:43:47:f5:a1:31:de:cc:c5:ec:e1: 60:3e:45:be:5e:20:8f:ce:28:c4:5d:e4:41:87:0b: bb:46:93:93:04:a5:de:dd:40:c0:73:e8:cd:92:0a: 6b:4e:c4:d2:1a:d5:5a:b8:19:c1:a3:4c:4a:6c:de: 7d:32:a2:07:d1:3a:3f:05:15:a4:ce:2e:fd:e4:77: 5b:b1:3e:53:1c:e4:2a:37:13:52:17:c2:31:43:0b: 46:ea:07:c7:f2:e8:81:86:ce:38:16:10:f0:56:fb: 7b:f1:b2:a8:85:cd:14:35:15:c6:45:6a:9a:66:ad: 53:5c:f7:a0:c4:4e:74:69:f2:84:4a:ea:8b:67:b4: 6a:e8:e6:d4:13:1e:be:cf:e0:45:0b:68:ba:09:59: f4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:30:99:35:2D:15:ED:B4:BA:A3:D9:0D:5F:E1:9A:CD:79:0D:B7:A8 X509v3 Authority Key Identifier: keyid:58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/OjCZNS0V7bS6o9kNX-GazXkNt6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.140.194.0/24 79.140.200.0/21 Signature Algorithm: sha256WithRSAEncryption 72:e2:aa:fb:46:ee:75:f8:11:e0:76:cd:ad:22:ab:cc:91:5d: a2:1e:9c:6b:d1:80:1f:d2:f4:0e:c0:8e:31:1a:b8:6a:a6:ad: 3e:60:1e:c3:35:1f:6f:d9:1b:39:34:44:ac:2e:a8:82:a5:ea: b1:31:b8:f5:70:98:31:fb:bb:e1:07:42:dd:24:05:bd:47:b7: 66:d5:e9:3d:9d:bc:4b:bf:06:e4:aa:ee:f9:80:1f:10:a7:24: c2:7d:b3:1c:a7:e8:cf:3b:83:94:8f:d2:b6:a1:6f:bb:69:c4: 83:65:f5:56:f0:a8:e3:91:a8:ed:d4:77:81:d3:2b:b3:3e:c5: 53:77:c6:11:31:76:40:72:c5:fe:51:1e:1b:7f:49:cb:5a:88: e9:50:c1:e3:bb:a6:b5:ee:b4:2e:22:6f:7e:1c:3d:61:bc:03: 40:dd:c6:05:47:d4:a3:3d:a4:1d:11:f5:35:5a:cd:42:e9:19: 01:e4:0b:60:9f:43:31:72:75:28:bc:3b:9d:61:4c:c3:77:39: fb:21:55:98:4f:cf:43:d7:4b:95:07:e7:de:23:eb:b3:4f:ff: 94:29:ac:24:7c:2a:d4:d5:d4:c8:a8:be:f2:bd:46:d4:c7:04: 64:05:fd:05:8b:8c:15:fd:95:d3:4a:f6:25:1b:93:47:88:70: 34:33:dd:25 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EQR5pmEpNhxplwNG9l3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4Y2JmZTA4MzRmOGU2NjUxMmY1NWJkNzhjYzA3NWI3ZWQ1 NmY0MDkwHhcNMjYwMTAxMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTMwOTkzNTJkMTVlZGI0YmFhM2Q5MGQ1ZmUxOWFjZDc5MGRiN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxH1Z2cAdTEVefQ02IvBcGE5hfzm v9Fqm76CzsUEFRI+8BqSnwvmdI5WjG9fLy2E5zSbMX84X72Ym+KMRc9emUi1UvDR F9b1JREBXq6afDJmqVhu005xfJm7R2QfPo4gjdCfxqtxLoOeDB3SaENH9aEx3szF 7OFgPkW+XiCPzijEXeRBhwu7RpOTBKXe3UDAc+jNkgprTsTSGtVauBnBo0xKbN59 MqIH0To/BRWkzi795HdbsT5THOQqNxNSF8IxQwtG6gfH8uiBhs44FhDwVvt78bKo hc0UNRXGRWqaZq1TXPegxE50afKESuqLZ7Rq6ObUEx6+z+BFC2i6CVn0wQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDowmTUtFe20uqPZDV/hms15DbeoMB8GA1UdIwQY MBaAFFjL/gg0+OZlEvVb14zAdbftVvQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV012LUNEVDQ1bVVTOVZ2WGpNQjF0LTFXOUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iZTg2M2YtYjMzYi00MzM0LWJiZDIt NDA5NDEwNjc4NmE5LzEvT2pDWk5TMFY3YlM2bzlrTlgtR2F6WGtOdDZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9iZTg2M2YtYjMzYi00MzM0LWJiZDItNDA5NDEwNjc4NmE5 LzEvV012LUNEVDQ1bVVTOVZ2WGpNQjF0LTFXOUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT4zCAwQD T4zIMA0GCSqGSIb3DQEBCwUAA4IBAQBy4qr7Ru51+BHgds2tIqvMkV2iHpxr0YAf 0vQOwI4xGrhqpq0+YB7DNR9v2Rs5NESsLqiCpeqxMbj1cJgx+7vhB0LdJAW9R7dm 1ek9nbxLvwbkqu75gB8QpyTCfbMcp+jPO4OUj9K2oW+7acSDZfVW8Kjjkajt1HeB 0yuzPsVTd8YRMXZAcsX+UR4bf0nLWojpUMHju6a17rQuIm9+HD1hvANA3cYFR9Sj PaQdEfU1Ws1C6RkB5Atgn0MxcnUovDudYUzDdzn7IVWYT89D10uVB+feI+uzT/+U KawkfCrU1dTIqL7yvUbUxwRkBf0Fi4wV/ZXTSvYlG5NHiHA0M90l -----END CERTIFICATE-----Generated at Tue Jan 20 14:39:06 2026 by rpki-client