This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/oov4cuJPdfLKYWHfl9qokV9QnQU.roa File: oov4cuJPdfLKYWHfl9qokV9QnQU.roa (raw, json) Hash identifier: E3ITGLf7ZudScq31A0lgS9nCl54lydvyk2LmeSJW4V4= Subject key identifier: A2:8B:F8:72:E2:4F:75:F2:CA:61:61:DF:97:DA:A8:91:5F:50:9D:05 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E21C3A9B01989E40F25D7E396D337 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/oov4cuJPdfLKYWHfl9qokV9QnQU.roa Signing time: Thu 01 Jan 2026 12:17:47 +0000 ROA not before: Thu 01 Jan 2026 12:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 194.34.228.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:21:c3:a9:b0:19:89:e4:0f:25:d7:e3:96:d3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a28bf872e24f75f2ca6161df97daa8915f509d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:99:cf:0c:85:7c:29:f1:4d:48:b1:26:4f: 96:fc:16:ed:19:4d:21:4d:97:a9:b0:fd:04:a3:e0: 49:74:f9:b3:d4:c5:0b:09:63:fd:8e:d2:0a:4c:a5: 5a:5c:4c:a5:1f:50:a7:88:55:f1:f4:e8:7b:34:c8: 33:da:7b:e4:8a:fb:08:3b:76:51:8d:0b:6e:07:ac: c8:99:dd:13:15:e9:31:cd:a0:a8:bf:e6:0e:d3:ac: 05:51:75:09:08:5d:76:0b:f2:a0:c4:99:c6:ea:f4: d9:dd:09:31:55:fc:c4:cd:35:31:22:0b:69:45:4d: aa:26:42:19:44:d8:56:ae:90:71:f8:bc:64:df:0e: 3b:cf:56:84:95:10:b9:02:ed:28:2a:79:94:ba:12: 60:67:8c:fd:a6:7d:5a:da:7a:55:06:a1:70:94:2d: 4f:9f:bd:3b:88:60:94:c5:cc:a6:4a:dc:b6:99:1e: cf:c2:38:e8:e9:1c:c7:8d:71:44:43:fc:7b:49:c7: 2c:8f:05:4d:48:bc:59:0a:33:60:30:0a:38:8b:59: a3:4b:ba:7b:da:30:dd:6f:9a:64:28:63:66:35:7b: 10:cc:2d:1f:ab:ce:ba:cf:82:3c:9f:47:ca:85:ff: 1b:72:42:34:ea:af:d4:77:35:f2:21:41:69:07:8e: 21:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8B:F8:72:E2:4F:75:F2:CA:61:61:DF:97:DA:A8:91:5F:50:9D:05 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/oov4cuJPdfLKYWHfl9qokV9QnQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.34.228.0/24 Signature Algorithm: sha256WithRSAEncryption 48:bd:2b:cb:72:1b:83:6c:79:21:a4:0c:6d:ae:fd:66:8e:98: d7:89:c5:77:5b:61:de:da:6a:bc:43:cd:d2:a3:f6:6c:f1:ae: e4:a4:75:31:b9:7c:6c:1c:37:28:76:41:e3:cb:31:16:86:c8: 37:10:b6:70:fb:9d:41:d7:cb:b2:4c:18:14:9d:2b:af:fc:a5: dd:bc:7c:01:3e:d2:81:50:e9:5c:35:0f:05:eb:3b:ef:fa:44: 5b:26:b8:85:a0:58:c7:43:dd:35:22:55:94:55:72:4d:5c:a8: 47:e3:bf:bb:70:8e:e6:db:c7:20:bd:d8:bf:88:d6:0f:12:12: ee:29:dc:59:c6:f9:eb:37:bc:2f:bb:83:d6:b3:e1:18:6a:ec: c5:9d:39:85:62:5a:d0:fc:38:c6:e9:62:be:42:6e:9d:b4:bc: 0b:2d:f6:54:05:b9:c7:5b:cd:38:5a:f6:5e:dc:b0:cb:b7:79: 20:b9:4f:e6:02:f5:53:ca:bd:3c:79:ac:e0:a0:0e:41:0e:04: bb:ce:f2:04:c1:c6:12:3f:0c:0d:d4:86:eb:87:43:9c:4c:e1: 97:63:08:79:33:86:2e:cb:76:8d:60:03:82:61:0d:00:80:53: 6c:09:c0:15:bb:85:b1:dc:c5:40:08:3a:e4:86:75:6e:4e:74: 04:5f:b5:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fiHDqbAZieQPJdfjltM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjhiZjg3MmUyNGY3NWYyY2E2MTYxZGY5N2RhYTg5MTVmNTA5ZDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo+ZzwyFfCnxTUixJk+W/BbtGU0h TZepsP0Eo+BJdPmz1MULCWP9jtIKTKVaXEylH1CniFXx9Oh7NMgz2nvkivsIO3ZR jQtuB6zImd0TFekxzaCov+YO06wFUXUJCF12C/KgxJnG6vTZ3QkxVfzEzTUxIgtp RU2qJkIZRNhWrpBx+Lxk3w47z1aElRC5Au0oKnmUuhJgZ4z9pn1a2npVBqFwlC1P n707iGCUxcymSty2mR7Pwjjo6RzHjXFEQ/x7SccsjwVNSLxZCjNgMAo4i1mjS7p7 2jDdb5pkKGNmNXsQzC0fq866z4I8n0fKhf8bckI06q/UdzXyIUFpB44hlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKKL+HLiT3XyymFh35faqJFfUJ0FMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvb292NGN1SlBkZkxLWVdIZmw5cW9rVjlRblFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiLkMA0G CSqGSIb3DQEBCwUAA4IBAQBIvSvLchuDbHkhpAxtrv1mjpjXicV3W2He2mq8Q83S o/Zs8a7kpHUxuXxsHDcodkHjyzEWhsg3ELZw+51B18uyTBgUnSuv/KXdvHwBPtKB UOlcNQ8F6zvv+kRbJriFoFjHQ901IlWUVXJNXKhH47+7cI7m28cgvdi/iNYPEhLu KdxZxvnrN7wvu4PWs+EYauzFnTmFYlrQ/DjG6WK+Qm6dtLwLLfZUBbnHW804WvZe 3LDLt3kguU/mAvVTyr08eazgoA5BDgS7zvIEwcYSPwwN1Ibrh0OcTOGXYwh5M4Yu y3aNYAOCYQ0AgFNsCcAVu4Wx3MVACDrkhnVuTnQEX7X0 -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:38 2026 by rpki-client