This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/OA7ua6CV1NawowKipRihY67EFIg.roa File: OA7ua6CV1NawowKipRihY67EFIg.roa (raw, json) Hash identifier: xqJsWriHrPd8Qn5lT9pYETlcfFbLKXpXQUl+bRYJP2M= Subject key identifier: 38:0E:EE:6B:A0:95:D4:D6:B0:A3:02:A2:A5:18:A1:63:AE:C4:14:88 Certificate issuer: /CN=fc8269f42e46441ab1ed994c89f747baa554e320 Certificate serial: 019B7F838A3F0681FB3DFD7D4D9705A641B8 Authority key identifier: FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/OA7ua6CV1NawowKipRihY67EFIg.roa Signing time: Fri 02 Jan 2026 16:21:25 +0000 ROA not before: Fri 02 Jan 2026 16:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209571 IP address blocks: 141.98.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:8a:3f:06:81:fb:3d:fd:7d:4d:97:05:a6:41:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc8269f42e46441ab1ed994c89f747baa554e320 Validity Not Before: Jan 2 16:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=380eee6ba095d4d6b0a302a2a518a163aec41488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:19:0d:a9:c9:c1:7c:ac:c6:a8:a8:1a:5d:6d: d7:b5:d0:26:af:d9:e5:cc:65:22:b8:91:19:55:7d: 84:9e:23:03:4e:c5:15:25:be:ca:9a:b2:10:88:25: 6a:b3:f6:ec:15:02:95:f2:06:af:f7:d0:87:04:a1: 41:09:df:7f:67:95:45:37:67:af:4a:05:46:b1:61: 61:02:5a:6d:6a:06:eb:6a:8a:ff:84:69:46:1a:ea: 84:89:c6:9c:91:16:d1:88:a7:2a:5e:b3:40:38:d7: cf:ec:ed:c1:0c:26:60:4a:e9:68:29:14:dd:96:72: e2:49:1a:e3:2a:7d:02:f8:33:6b:6c:67:eb:e2:40: 1b:d5:83:4d:91:05:d5:17:64:8f:8c:1b:d5:95:56: 98:c9:35:00:ea:12:87:cf:84:19:16:fb:70:6f:09: 79:4a:ba:ea:c4:3c:92:70:57:b2:c2:25:d5:1e:aa: 78:57:e9:79:91:93:fc:3c:10:11:a1:3c:2c:e4:73: 7e:a8:ef:be:4b:e7:78:54:5a:c7:eb:50:97:a7:a1: f0:c5:81:44:1a:af:eb:30:a2:82:f2:0d:23:5b:2d: 87:97:0e:58:65:2d:50:c4:1e:07:c9:cb:94:7f:a7: f4:b6:17:04:be:4f:3c:34:9a:89:62:ca:7d:7b:3b: 78:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0E:EE:6B:A0:95:D4:D6:B0:A3:02:A2:A5:18:A1:63:AE:C4:14:88 X509v3 Authority Key Identifier: keyid:FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/OA7ua6CV1NawowKipRihY67EFIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.224.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:c2:5f:e5:89:51:3c:18:01:68:ae:8d:93:66:48:99:a7:c7: ff:d7:84:d8:65:37:15:8a:34:3b:94:a7:04:86:99:18:d9:3a: 3e:7f:f6:35:b5:00:c2:11:87:c7:8d:a6:89:0e:61:c0:58:f6: e3:99:13:d6:2c:cb:72:b9:50:84:76:31:fd:b3:19:61:75:ed: 8d:1c:9d:94:76:eb:c1:56:2c:08:9d:d0:ff:cb:8c:e2:8a:21: 28:26:db:8c:3a:46:cd:14:5f:60:d2:b9:b0:5e:29:aa:8e:ce: 6f:2d:64:76:5d:34:28:50:dd:3b:01:8c:3f:59:6d:d3:38:e2: c2:13:32:e4:09:26:bd:19:a4:79:63:19:0a:a7:44:63:db:71: f5:b3:0c:14:cf:41:8d:dd:df:89:ea:91:8f:f2:48:f6:a1:d6: 2d:5d:a2:0c:f6:6a:68:f3:30:26:ad:65:5a:8c:a2:02:75:90: c9:00:0a:f0:f4:eb:73:30:c6:42:8c:b2:2e:3d:e2:7f:04:c2: 84:73:67:f6:1d:c5:c4:29:82:68:fa:27:2e:3e:65:51:fc:4b: 8e:77:d4:c2:b9:21:a3:4a:ab:c1:da:52:e2:e7:cf:a4:8c:c1: 88:85:65:b5:3d:ae:95:a8:b6:d7:b2:36:ed:34:bb:cd:2b:fa: 29:6f:d3:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g4o/BoH7Pf19TZcFpkG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjODI2OWY0MmU0NjQ0MWFiMWVkOTk0Yzg5Zjc0N2JhYTU1 NGUzMjAwHhcNMjYwMTAyMTYyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODBlZWU2YmEwOTVkNGQ2YjBhMzAyYTJhNTE4YTE2M2FlYzQxNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxkNqcnBfKzGqKgaXW3XtdAmr9nl zGUiuJEZVX2EniMDTsUVJb7KmrIQiCVqs/bsFQKV8gav99CHBKFBCd9/Z5VFN2ev SgVGsWFhAlptagbraor/hGlGGuqEicackRbRiKcqXrNAONfP7O3BDCZgSuloKRTd lnLiSRrjKn0C+DNrbGfr4kAb1YNNkQXVF2SPjBvVlVaYyTUA6hKHz4QZFvtwbwl5 SrrqxDyScFeywiXVHqp4V+l5kZP8PBARoTws5HN+qO++S+d4VFrH61CXp6HwxYFE Gq/rMKKC8g0jWy2Hlw5YZS1QxB4HycuUf6f0thcEvk88NJqJYsp9ezt4XwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDgO7mugldTWsKMCoqUYoWOuxBSIMB8GA1UdIwQY MBaAFPyCafQuRkQase2ZTIn3R7qlVOMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0lKcDlDNUdSQnF4N1psTWlmZEh1cVZVNHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80NWM0ZmQtNDI5NC00NTE2LWE3NGQt ZDZjZDU3Mjg3ZjljLzEvT0E3dWE2Q1YxTmF3b3dLaXBSaWhZNjdFRklnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80NWM0ZmQtNDI5NC00NTE2LWE3NGQtZDZjZDU3Mjg3Zjlj LzEvX0lKcDlDNUdSQnF4N1psTWlmZEh1cVZVNHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjWLgMA0G CSqGSIb3DQEBCwUAA4IBAQA/wl/liVE8GAForo2TZkiZp8f/14TYZTcVijQ7lKcE hpkY2To+f/Y1tQDCEYfHjaaJDmHAWPbjmRPWLMtyuVCEdjH9sxlhde2NHJ2UduvB ViwIndD/y4ziiiEoJtuMOkbNFF9g0rmwXimqjs5vLWR2XTQoUN07AYw/WW3TOOLC EzLkCSa9GaR5YxkKp0Rj23H1swwUz0GN3d+J6pGP8kj2odYtXaIM9mpo8zAmrWVa jKICdZDJAArw9OtzMMZCjLIuPeJ/BMKEc2f2HcXEKYJo+icuPmVR/EuOd9TCuSGj SqvB2lLi58+kjMGIhWW1Pa6VqLbXsjbtNLvNK/opb9PZ -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:11 2026 by rpki-client