This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/OmjdAjVWAeN7nazvaN8tyky8gB4.roa File: OmjdAjVWAeN7nazvaN8tyky8gB4.roa (raw, json) Hash identifier: oILOHbkx48Up7aMbK7MsGxijo68OXba8v88+kgI/k8w= Subject key identifier: 3A:68:DD:02:35:56:01:E3:7B:9D:AC:EF:68:DF:2D:CA:4C:BC:80:1E Certificate issuer: /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26 Certificate serial: 019B7DCA44FD5FF19F2BF90E5A1E6A5DB50D Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/OmjdAjVWAeN7nazvaN8tyky8gB4.roa Signing time: Fri 02 Jan 2026 08:19:26 +0000 ROA not before: Fri 02 Jan 2026 08:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44949 IP address blocks: 194.116.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:44:fd:5f:f1:9f:2b:f9:0e:5a:1e:6a:5d:b5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26 Validity Not Before: Jan 2 08:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a68dd02355601e37b9dacef68df2dca4cbc801e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:41:61:eb:f3:97:37:bf:3d:b0:2f:4a:66: e1:a8:44:27:b2:0e:7f:55:3a:c3:a0:0c:a1:5c:11: 73:b4:fd:4d:79:a3:60:52:dd:ca:3f:3e:d9:d9:b3: 99:27:d3:0f:35:ac:c4:84:f2:b6:9f:66:36:53:0e: f7:b4:23:47:a4:48:d6:fb:73:93:2e:ce:58:bc:8c: cd:6b:d7:7d:25:a8:40:38:21:55:59:3d:40:69:92: 87:6f:23:a9:53:e1:ea:35:d4:38:ac:5f:cc:2b:5e: c4:28:ee:bf:c6:0f:80:9b:ef:8f:76:01:06:f9:97: 94:8b:42:7f:da:67:20:3e:4d:b9:f3:44:56:8a:e4: 64:39:79:07:18:98:e3:01:74:8a:7c:03:3a:b7:96: 69:00:02:37:80:0c:22:25:d9:05:e1:ba:50:3d:34: 4b:87:86:ec:67:a8:6e:80:48:8b:b9:38:80:7d:b5: e7:a0:69:91:d8:f1:ab:d5:41:52:c1:01:81:a3:0e: 2e:13:6e:36:95:8e:32:1e:8b:a1:f8:b8:dd:71:bc: 05:ba:17:6a:13:b2:c0:1e:a9:7d:63:b9:62:f0:ac: 6e:7e:1d:aa:3e:02:32:28:be:8e:9e:fc:fb:e4:42: e6:d8:da:d6:59:a7:1e:ad:75:65:08:6c:ff:6a:51: d3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:68:DD:02:35:56:01:E3:7B:9D:AC:EF:68:DF:2D:CA:4C:BC:80:1E X509v3 Authority Key Identifier: keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/OmjdAjVWAeN7nazvaN8tyky8gB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.116.150.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:0b:b4:0a:48:da:c3:9f:ef:df:a7:93:f3:46:40:47:dc:4a: 66:c4:7f:1c:bb:96:84:29:72:55:f6:a1:bb:b9:02:b9:14:0f: 51:16:ec:91:f8:57:f7:fa:0a:bf:c6:70:be:ff:6a:66:d1:b0: 18:91:ad:d1:80:54:3b:3d:9e:76:9a:1b:1f:24:d5:29:63:dd: 17:4b:0b:e6:83:4e:a5:e0:b7:a8:1a:f4:11:a3:de:dd:da:60: c0:f3:c2:5b:5a:b3:19:07:71:d3:43:bb:ed:1b:95:49:24:94: 0c:c5:e5:d2:ff:db:0a:bb:23:a8:58:3e:2b:53:7b:67:6d:bb: 28:f4:7a:d4:8e:7d:70:5f:67:35:02:b6:ff:d6:07:40:33:0c: 1e:22:8a:be:3d:74:a6:d3:58:e1:69:84:23:60:d8:ca:42:f5: c1:62:fa:ff:3d:0d:03:d3:5b:b2:d3:e7:9d:df:7f:8c:e4:35: 24:ce:8d:50:6a:77:17:ea:22:f3:d9:d4:77:01:a1:a8:7f:6a: bd:e3:ea:ce:7e:8c:b8:c9:ef:ab:7f:98:c2:8d:69:55:66:8b: 26:cd:8f:bd:03:e4:a2:32:d7:2b:cd:e1:e1:31:13:d4:7c:27: 0e:a3:e2:2e:d9:9d:0a:dc:ec:b9:ca:e4:e0:bc:7e:16:70:3c: f0:64:82:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ykT9X/GfK/kOWh5qXbUNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZWUzZjM4MjA3M2YyYzNlNGZjY2ZmY2EzODRjNWIwY2Q4 MjZjMjYwHhcNMjYwMTAyMDgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTY4ZGQwMjM1NTYwMWUzN2I5ZGFjZWY2OGRmMmRjYTRjYmM4MDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH1BYevzlze/PbAvSmbhqEQnsg5/ VTrDoAyhXBFztP1NeaNgUt3KPz7Z2bOZJ9MPNazEhPK2n2Y2Uw73tCNHpEjW+3OT Ls5YvIzNa9d9JahAOCFVWT1AaZKHbyOpU+HqNdQ4rF/MK17EKO6/xg+Am++PdgEG +ZeUi0J/2mcgPk2580RWiuRkOXkHGJjjAXSKfAM6t5ZpAAI3gAwiJdkF4bpQPTRL h4bsZ6hugEiLuTiAfbXnoGmR2PGr1UFSwQGBow4uE242lY4yHouh+LjdcbwFuhdq E7LAHql9Y7li8Kxufh2qPgIyKL6Onvz75ELm2NrWWacerXVlCGz/alHThwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDpo3QI1VgHje52s72jfLcpMvIAeMB8GA1UdIwQY MBaAFH/uPzggc/LD5PzP/KOExbDNgmwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84Y2NlYmYtZjlmYS00YzQ2LWFlZTgt Y2NiZmE3MzQyNGE3LzEvT21qZEFqVldBZU43bmF6dmFOOHR5a3k4Z0I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84Y2NlYmYtZjlmYS00YzQ2LWFlZTgtY2NiZmE3MzQyNGE3 LzEvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwnSWMA0G CSqGSIb3DQEBCwUAA4IBAQBaC7QKSNrDn+/fp5PzRkBH3EpmxH8cu5aEKXJV9qG7 uQK5FA9RFuyR+Ff3+gq/xnC+/2pm0bAYka3RgFQ7PZ52mhsfJNUpY90XSwvmg06l 4LeoGvQRo97d2mDA88JbWrMZB3HTQ7vtG5VJJJQMxeXS/9sKuyOoWD4rU3tnbbso 9HrUjn1wX2c1Arb/1gdAMwweIoq+PXSm01jhaYQjYNjKQvXBYvr/PQ0D01uy0+ed 33+M5DUkzo1QancX6iLz2dR3AaGof2q94+rOfoy4ye+rf5jCjWlVZosmzY+9A+Si MtcrzeHhMRPUfCcOo+Iu2Z0K3Oy5yuTgvH4WcDzwZILW -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:18 2026 by rpki-client