This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ovaw2-C0aLc15MUNM--nHeVzXAk.roa File: ovaw2-C0aLc15MUNM--nHeVzXAk.roa (raw, json) Hash identifier: k6KOhUlHQLtwN5AMkDyj19Newr/qZ7SL0hXw1sn09K8= Subject key identifier: A2:F6:B0:DB:E0:B4:68:B7:35:E4:C5:0D:33:EF:A7:1D:E5:73:5C:09 Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6C8061968DE13F90BB662CE7FF622 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ovaw2-C0aLc15MUNM--nHeVzXAk.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50321 IP address blocks: 88.151.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c8:06:19:68:de:13:f9:0b:b6:62:ce:7f:f6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2f6b0dbe0b468b735e4c50d33efa71de5735c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e3:9c:19:99:b5:af:f9:11:ea:cf:62:b3:29: 1a:fa:c9:28:52:02:34:33:c5:b8:1d:dd:7d:2c:29: 83:b8:76:26:bb:08:a2:ff:6d:d0:e6:cf:6b:4d:b2: 4d:45:e2:d3:b5:92:1f:8a:c1:e6:ba:41:2b:84:ce: 13:5c:8d:66:55:5a:f3:7d:61:04:22:18:79:7c:f9: 4a:f0:cb:af:2a:9a:1f:23:f0:9e:c3:31:23:04:e5: f8:9f:2b:a6:41:6c:e0:fc:5a:e2:da:6b:99:c3:0b: 9b:df:45:f6:23:3c:8f:18:c9:21:a7:1f:52:da:28: 4a:eb:86:86:4b:84:ce:cc:ed:ff:ba:bc:3c:ab:6f: b0:ca:d2:17:43:0f:8a:aa:de:05:81:e0:10:ef:1f: a9:01:4e:6f:bc:2b:18:d7:78:0c:4b:ff:e2:6b:b3: f4:02:2a:20:59:f1:70:90:5a:9a:c6:6c:0f:99:49: 9e:b9:ce:f6:b2:57:77:f4:38:00:72:0d:e8:1a:06: dd:f5:45:1a:b7:4e:be:49:6b:00:3f:5c:99:70:e1: 9a:d8:cd:45:96:08:15:4b:c7:d6:f7:0f:af:ba:1b: d5:c4:e4:25:ac:50:69:2f:13:97:6e:4b:48:a6:f0: 0d:4c:91:7b:83:00:a8:b4:1b:5c:42:d5:8f:ef:8a: ce:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F6:B0:DB:E0:B4:68:B7:35:E4:C5:0D:33:EF:A7:1D:E5:73:5C:09 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ovaw2-C0aLc15MUNM--nHeVzXAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.192.0/24 Signature Algorithm: sha256WithRSAEncryption 83:55:74:ee:f0:95:a3:bb:34:1a:e0:78:d5:59:4e:84:08:9c: 8b:8a:0e:a8:ee:d5:27:50:44:c9:4e:59:5b:55:cd:eb:68:55: d2:c2:34:8d:ac:b7:12:bb:46:e5:bc:27:8f:59:d4:a0:e2:11: 53:ea:d3:1f:f8:e2:d6:99:f2:5a:d2:da:c5:30:8f:d9:53:2b: d5:65:64:17:68:bf:9f:b0:9f:78:c3:16:20:aa:b5:23:d2:95: 86:72:24:f3:f2:ba:3a:1a:52:57:3e:bb:fb:f5:69:81:55:f4: ad:44:f5:e7:e7:c2:80:f2:41:cc:d7:2d:8f:bb:16:ba:60:2c: c7:56:c1:82:da:96:3c:d8:e7:bd:36:c4:bb:84:d8:01:01:b6: 6b:9a:91:6d:58:d2:8e:a4:c8:74:be:f0:81:9d:e9:95:22:6f: a0:f2:8d:67:92:e3:a3:8f:3c:4f:4e:30:eb:42:2e:37:9a:ca: b3:39:37:07:9a:fd:db:1e:e3:5b:6c:01:32:8d:30:9b:7b:ee: a8:90:b2:34:57:57:55:2d:84:9f:8f:d3:32:89:97:dd:53:17: aa:9b:07:bf:33:50:74:4a:22:70:f1:6c:09:8c:7d:85:6a:ec: f5:1a:42:c3:26:31:68:2c:46:f1:3c:4d:f2:b6:39:29:da:c5: 3d:be:87:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsgGGWjeE/kLtmLOf/YiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmY2YjBkYmUwYjQ2OGI3MzVlNGM1MGQzM2VmYTcxZGU1NzM1YzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eOcGZm1r/kR6s9isyka+skoUgI0 M8W4Hd19LCmDuHYmuwii/23Q5s9rTbJNReLTtZIfisHmukErhM4TXI1mVVrzfWEE Ihh5fPlK8MuvKpofI/CewzEjBOX4nyumQWzg/Fri2muZwwub30X2IzyPGMkhpx9S 2ihK64aGS4TOzO3/urw8q2+wytIXQw+Kqt4FgeAQ7x+pAU5vvCsY13gMS//ia7P0 AiogWfFwkFqaxmwPmUmeuc72sld39DgAcg3oGgbd9UUat06+SWsAP1yZcOGa2M1F lggVS8fW9w+vuhvVxOQlrFBpLxOXbktIpvANTJF7gwCotBtcQtWP74rOzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKL2sNvgtGi3NeTFDTPvpx3lc1wJMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvb3ZhdzItQzBhTGMxNU1VTk0tLW5IZVZ6WEFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJfAMA0G CSqGSIb3DQEBCwUAA4IBAQCDVXTu8JWjuzQa4HjVWU6ECJyLig6o7tUnUETJTllb Vc3raFXSwjSNrLcSu0blvCePWdSg4hFT6tMf+OLWmfJa0trFMI/ZUyvVZWQXaL+f sJ94wxYgqrUj0pWGciTz8ro6GlJXPrv79WmBVfStRPXn58KA8kHM1y2Puxa6YCzH VsGC2pY82Oe9NsS7hNgBAbZrmpFtWNKOpMh0vvCBnemVIm+g8o1nkuOjjzxPTjDr Qi43msqzOTcHmv3bHuNbbAEyjTCbe+6okLI0V1dVLYSfj9MyiZfdUxeqmwe/M1B0 SiJw8WwJjH2Fauz1GkLDJjFoLEbxPE3ytjkp2sU9voex -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:00 2026 by rpki-client