This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/Oj4ufYEDH_buXhb2Mkfbbooqsvs.roa File: Oj4ufYEDH_buXhb2Mkfbbooqsvs.roa (raw, json) Hash identifier: 9JNuQjJcdTyhj25S/g29VKqkgUtwlLq3bIBUYpj+fVA= Subject key identifier: 3A:3E:2E:7D:81:03:1F:F6:EE:5E:16:F6:32:47:DB:6E:8A:2A:B2:FB Certificate issuer: /CN=4e622bc550687b6d0ef60788ceadb0fc820a381f Certificate serial: 019B797E8C64634E031408815C93EAB061B8 Authority key identifier: 4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/Oj4ufYEDH_buXhb2Mkfbbooqsvs.roa Signing time: Thu 01 Jan 2026 12:18:15 +0000 ROA not before: Thu 01 Jan 2026 12:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13113 IP address blocks: 5.172.208.0/21 maxlen: 24 5.198.224.0/20 maxlen: 24 37.60.32.0/21 maxlen: 24 87.253.96.0/19 maxlen: 24 93.88.112.0/20 maxlen: 24 109.75.112.0/20 maxlen: 24 185.3.252.0/22 maxlen: 24 185.145.84.0/22 maxlen: 24 213.144.64.0/19 maxlen: 24 2a03:3d80::/29 maxlen: 48 2a0c:8a80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.mft rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:8c:64:63:4e:03:14:08:81:5c:93:ea:b0:61:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e622bc550687b6d0ef60788ceadb0fc820a381f Validity Not Before: Jan 1 12:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a3e2e7d81031ff6ee5e16f63247db6e8a2ab2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:72:1d:bf:38:e4:8a:03:56:51:bb:52:46:ec: f0:01:9b:f5:80:32:bc:17:f6:df:6f:d5:d2:13:69: 49:1d:70:7f:e6:cb:57:c4:cc:42:b6:6a:0d:db:e8: 1b:2b:6f:fe:fd:8b:7f:6a:ca:3f:2f:aa:dd:34:6c: ca:da:23:1a:fc:2a:14:b2:bc:3a:93:d2:19:b2:99: 8b:75:54:91:8c:cd:ee:08:99:3d:52:29:79:89:41: b1:53:87:ab:c9:a2:41:70:cb:84:f0:19:33:ed:e9: 8c:40:82:76:79:60:6e:59:67:73:9c:09:8e:dc:21: 34:aa:f4:3e:eb:66:0e:1c:4e:28:4f:fa:b0:be:ef: 45:2f:bc:3b:70:3a:68:d4:a6:13:33:55:29:0e:d0: 10:97:5a:35:b6:dc:49:6c:0a:51:30:e2:95:cb:96: de:88:b2:d5:12:8e:57:e5:8a:e5:1d:fb:58:c3:ac: b7:1f:25:88:0d:76:13:6d:6d:93:52:43:37:1d:82: 84:30:27:8f:e9:07:a9:0f:f6:9f:50:4b:ac:2b:86: 85:57:43:31:63:b9:3d:eb:ac:48:c3:d0:22:cb:59: 6c:db:47:4b:3e:c9:21:d1:9b:f9:f7:cc:53:d5:8a: c2:18:f4:8b:22:e0:2f:2e:e8:52:70:b8:2c:71:fe: ec:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3E:2E:7D:81:03:1F:F6:EE:5E:16:F6:32:47:DB:6E:8A:2A:B2:FB X509v3 Authority Key Identifier: keyid:4E:62:2B:C5:50:68:7B:6D:0E:F6:07:88:CE:AD:B0:FC:82:0A:38:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmIrxVBoe20O9geIzq2w_IIKOB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/Oj4ufYEDH_buXhb2Mkfbbooqsvs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca4c34-2704-4f82-bff8-a7ccd0098477/1/TmIrxVBoe20O9geIzq2w_IIKOB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.208.0/21 5.198.224.0/20 37.60.32.0/21 87.253.96.0/19 93.88.112.0/20 109.75.112.0/20 185.3.252.0/22 185.145.84.0/22 213.144.64.0/19 IPv6: 2a03:3d80::/29 2a0c:8a80::/29 Signature Algorithm: sha256WithRSAEncryption a1:76:b2:7d:da:e6:04:d1:64:c5:38:5e:3c:7e:94:b1:26:5d: b6:cc:03:2c:24:bd:dc:cb:ec:97:17:a9:f0:32:6c:b0:db:5b: 03:3b:35:63:09:a3:51:59:5b:38:fa:a4:9a:d9:5c:96:07:d5: 0b:54:31:57:7d:80:c1:02:84:d3:53:78:c8:5f:a7:a7:1d:7a: 83:a7:4e:a5:5e:fa:f3:d4:18:d6:8f:1e:cb:13:49:7f:0f:95: c8:c5:ec:84:b3:c2:bd:76:58:36:a2:8a:44:7f:ae:3d:30:23: 38:09:a8:89:3d:95:a7:46:e6:0a:c7:a1:27:1c:0c:e1:e4:e2: 10:d8:dc:ca:a6:34:2c:3d:d1:02:f1:91:f9:15:81:3b:6a:4d: 9a:a9:33:0c:b3:55:db:68:77:71:db:e7:a8:d9:12:a1:51:b1: 62:f7:a2:11:db:7e:17:cd:68:18:c3:11:af:78:1b:54:46:54: 48:47:ca:dc:4c:1b:4b:d7:68:5c:12:4c:09:4a:ab:70:55:1f: 1d:5a:5c:fe:0a:e0:9a:3f:2e:fa:14:57:62:65:9b:2f:6c:6c: 0f:7c:ed:41:a5:cd:5a:a1:24:d9:d7:1e:ee:31:53:8f:2b:db: 64:0d:93:82:e3:1c:7e:96:3d:83:0c:d9:60:d6:b3:d5:79:f0: 87:cb:f5:6d -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt5foxkY04DFAiBXJPqsGG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNjIyYmM1NTA2ODdiNmQwZWY2MDc4OGNlYWRiMGZjODIw YTM4MWYwHhcNMjYwMTAxMTIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTNlMmU3ZDgxMDMxZmY2ZWU1ZTE2ZjYzMjQ3ZGI2ZThhMmFiMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnIdvzjkigNWUbtSRuzwAZv1gDK8 F/bfb9XSE2lJHXB/5stXxMxCtmoN2+gbK2/+/Yt/aso/L6rdNGzK2iMa/CoUsrw6 k9IZspmLdVSRjM3uCJk9Uil5iUGxU4eryaJBcMuE8Bkz7emMQIJ2eWBuWWdznAmO 3CE0qvQ+62YOHE4oT/qwvu9FL7w7cDpo1KYTM1UpDtAQl1o1ttxJbApRMOKVy5be iLLVEo5X5YrlHftYw6y3HyWIDXYTbW2TUkM3HYKEMCeP6QepD/afUEusK4aFV0Mx Y7k966xIw9Aiy1ls20dLPskh0Zv598xT1YrCGPSLIuAvLuhScLgscf7sEwIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFDo+Ln2BAx/27l4W9jJH226KKrL7MB8GA1UdIwQY MBaAFE5iK8VQaHttDvYHiM6tsPyCCjgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYTRjMzQtMjcwNC00ZjgyLWJmZjgt YTdjY2QwMDk4NDc3LzEvT2o0dWZZRURIX2J1WGhiMk1rZmJib29xc3ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jYTRjMzQtMjcwNC00ZjgyLWJmZjgtYTdjY2QwMDk4NDc3 LzEvVG1JcnhWQm9lMjBPOWdlSXpxMndfSUlLT0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDA8BAIAATA2AwQDBazQAwQE BcbgAwQDJTwgAwQFV/1gAwQEXVhwAwQEbUtwAwQCuQP8AwQCuZFUAwQF1ZBAMBQE AgACMA4DBQMqAz2AAwUDKgyKgDANBgkqhkiG9w0BAQsFAAOCAQEAoXayfdrmBNFk xThePH6UsSZdtswDLCS93Mvslxep8DJssNtbAzs1YwmjUVlbOPqkmtlclgfVC1Qx V32AwQKE01N4yF+npx16g6dOpV7689QY1o8eyxNJfw+VyMXshLPCvXZYNqKKRH+u PTAjOAmoiT2Vp0bmCsehJxwM4eTiENjcyqY0LD3RAvGR+RWBO2pNmqkzDLNV22h3 cdvnqNkSoVGxYveiEdt+F81oGMMRr3gbVEZUSEfK3EwbS9doXBJMCUqrcFUfHVpc /grgmj8u+hRXYmWbL2xsD3ztQaXNWqEk2dce7jFTjyvbZA2TguMcfpY9gwzZYNaz 1Xnwh8v1bQ== -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:57 2026 by rpki-client