This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/Oyzshlci-9jPVV78Pg3C9EqgWpQ.roa File: Oyzshlci-9jPVV78Pg3C9EqgWpQ.roa (raw, json) Hash identifier: bjeZr+jgrrjOajuuWHyD7Sxiyz43CZIWH0Yks80/PvM= Subject key identifier: 3B:2C:EC:86:57:22:FB:D8:CF:55:5E:FC:3E:0D:C2:F4:4A:A0:5A:94 Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff Certificate serial: 019B7C7F7FCE4DDE4E29AC7FEEEFF65434C5 Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/Oyzshlci-9jPVV78Pg3C9EqgWpQ.roa Signing time: Fri 02 Jan 2026 02:18:09 +0000 ROA not before: Fri 02 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.44.176.0/24 maxlen: 24 185.44.177.0/24 maxlen: 24 209.127.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:7f:ce:4d:de:4e:29:ac:7f:ee:ef:f6:54:34:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff Validity Not Before: Jan 2 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b2cec865722fbd8cf555efc3e0dc2f44aa05a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:69:37:6a:38:6a:23:51:f1:eb:a6:e7:f9:22: 69:95:55:1a:30:91:37:61:5e:c9:7b:1b:c4:7e:ae: 57:d0:62:87:db:cc:43:51:f2:a7:74:51:eb:dc:55: 4d:11:48:46:8d:1b:10:c2:ea:de:e9:0c:d9:42:95: f2:8b:a1:5c:f9:5d:f5:54:64:9d:ed:a5:bb:20:3a: b6:dc:f3:1e:56:c8:8a:16:45:9a:13:41:4f:72:02: ec:52:d0:31:ab:03:b5:21:5a:2f:45:95:db:c9:8a: bd:1c:12:2b:72:7c:38:26:dd:a0:4a:f5:85:38:91: 50:15:0d:5f:6c:51:b5:4f:f8:f0:db:9d:9f:5a:48: 39:cd:59:81:e9:f4:f7:15:6d:a6:39:b8:f5:c1:a2: 0b:8a:cc:fe:b0:17:a2:5e:a7:c4:e1:a2:44:e4:9e: e8:9e:98:ef:91:94:8c:6e:f9:89:94:95:a1:fe:bf: 41:0f:72:f8:6a:f9:ce:5f:8d:43:0f:ea:57:4d:aa: f5:c9:51:77:0b:aa:0d:53:9c:d6:06:53:7e:59:ae: 11:f2:b5:99:15:ac:f4:57:e0:ae:0c:38:96:46:fe: 22:fd:ca:b9:e9:dc:09:53:bb:e1:20:ba:26:28:a2: 6b:99:4d:76:59:ba:ac:87:26:54:80:a7:b3:32:46: 32:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2C:EC:86:57:22:FB:D8:CF:55:5E:FC:3E:0D:C2:F4:4A:A0:5A:94 X509v3 Authority Key Identifier: keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/Oyzshlci-9jPVV78Pg3C9EqgWpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.176.0/23 209.127.220.0/24 Signature Algorithm: sha256WithRSAEncryption 30:95:2d:8b:92:8d:ec:de:eb:08:9a:48:0f:f0:6e:34:67:d4: 2a:99:e7:25:b6:96:37:74:c8:d1:48:84:c6:81:7e:13:24:8e: 19:80:92:7f:56:c4:eb:8f:bd:d0:41:e5:2c:5b:9d:8b:38:77: a8:e7:bb:21:5c:a8:b2:1c:ff:04:e9:d5:5e:6b:47:66:b5:fe: 89:66:63:66:4f:10:f3:4b:5c:84:cd:a0:8d:dc:cb:a0:f3:6d: a6:5c:d4:8d:a1:90:e3:25:d7:60:b3:52:b8:df:34:d7:ac:59: a8:3e:40:1e:9a:68:f6:08:56:00:2a:53:9e:8a:b4:70:7e:9b: be:7c:62:2e:ca:42:2a:c4:bf:5b:54:39:a0:60:de:19:6d:91: f1:4e:64:06:d3:e3:81:0f:cc:2e:ce:7d:9e:5c:bf:1e:63:e7: 6b:a0:1c:fc:f6:87:07:92:aa:d8:fa:8d:16:08:f7:62:70:d1: da:6b:61:94:ed:6d:01:ed:d6:ce:80:22:67:f7:ce:8a:e6:bc: e0:77:5a:61:58:89:6e:f0:69:05:58:4a:b9:6d:8d:fa:d1:f7: db:1b:d3:34:6e:72:c9:17:8c:0e:67:58:5d:77:79:80:89:b3: eb:89:3d:82:92:33:d1:e2:11:d6:35:76:77:f6:58:66:8d:a4: c3:08:7b:21 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8f3/OTd5OKax/7u/2VDTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiY2RmYzFhN2M1MjBjZjhkMTc3MjkyMDhlODVlOGIxOTdj NGFkZmYwHhcNMjYwMTAyMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjJjZWM4NjU3MjJmYmQ4Y2Y1NTVlZmMzZTBkYzJmNDRhYTA1YTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmk3ajhqI1Hx66bn+SJplVUaMJE3 YV7JexvEfq5X0GKH28xDUfKndFHr3FVNEUhGjRsQwure6QzZQpXyi6Fc+V31VGSd 7aW7IDq23PMeVsiKFkWaE0FPcgLsUtAxqwO1IVovRZXbyYq9HBIrcnw4Jt2gSvWF OJFQFQ1fbFG1T/jw252fWkg5zVmB6fT3FW2mObj1waILisz+sBeiXqfE4aJE5J7o npjvkZSMbvmJlJWh/r9BD3L4avnOX41DD+pXTar1yVF3C6oNU5zWBlN+Wa4R8rWZ Faz0V+CuDDiWRv4i/cq56dwJU7vhILomKKJrmU12WbqshyZUgKezMkYylwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDss7IZXIvvYz1Ve/D4NwvRKoFqUMB8GA1UdIwQY MBaAFKvN/Bp8Ugz40XcpII6F6LGXxK3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYt MmJiODJhODM3YjdiLzEvT3l6c2hsY2ktOWpQVlY3OFBnM0M5RXFnV3BRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYtMmJiODJhODM3Yjdi LzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuSywAwQA 0X/cMA0GCSqGSIb3DQEBCwUAA4IBAQAwlS2Lko3s3usImkgP8G40Z9QqmecltpY3 dMjRSITGgX4TJI4ZgJJ/VsTrj73QQeUsW52LOHeo57shXKiyHP8E6dVea0dmtf6J ZmNmTxDzS1yEzaCN3Mug822mXNSNoZDjJddgs1K43zTXrFmoPkAemmj2CFYAKlOe irRwfpu+fGIuykIqxL9bVDmgYN4ZbZHxTmQG0+OBD8wuzn2eXL8eY+droBz89ocH kqrY+o0WCPdicNHaa2GU7W0B7dbOgCJn986K5rzgd1phWIlu8GkFWEq5bY360ffb G9M0bnLJF4wOZ1hdd3mAibPriT2CkjPR4hHWNXZ39lhmjaTDCHsh -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:04 2026 by rpki-client