This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/ovxLd3-R8YHUP-795BmS15YxMz4.roa File: ovxLd3-R8YHUP-795BmS15YxMz4.roa (raw, json) Hash identifier: ihtlHUZTymcC/9UwMeLjxx7SKoFJMvGJaK2E/0fEXh8= Subject key identifier: A2:FC:4B:77:7F:91:F1:81:D4:3F:EE:FD:E4:19:92:D7:96:31:33:3E Certificate issuer: /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394 Certificate serial: 019B77587B097B613B74903378FE21E9028A Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/ovxLd3-R8YHUP-795BmS15YxMz4.roa Signing time: Thu 01 Jan 2026 02:17:25 +0000 ROA not before: Thu 01 Jan 2026 02:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39190 IP address blocks: 194.147.124.0/24 maxlen: 24 194.147.125.0/24 maxlen: 24 194.147.126.0/24 maxlen: 24 194.147.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7b:09:7b:61:3b:74:90:33:78:fe:21:e9:02:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394 Validity Not Before: Jan 1 02:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2fc4b777f91f181d43feefde41992d79631333e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:45:80:94:f7:36:f1:4a:1f:a7:36:56:c2: e5:6d:43:07:f3:7d:c1:1b:27:c6:2d:b6:30:e8:e3: 71:94:5d:ab:f8:b7:b7:5e:b7:e4:ec:7a:d3:79:3a: 8c:b7:a0:97:ce:3b:32:8d:f5:9b:d7:fc:49:89:3e: fc:a2:02:f4:d5:ca:d7:96:af:3f:50:fc:e0:5c:02: a2:5c:a9:b4:19:97:aa:f1:5b:5b:06:e9:38:f5:26: 79:93:a0:07:58:38:bd:75:c4:40:2e:ce:1e:a5:49: b8:ec:f5:cc:da:53:ab:03:38:60:bd:14:21:ac:c6: 25:0f:eb:04:ce:95:a3:5e:c4:ef:d6:15:c3:20:56: 18:bf:a3:e6:bb:d3:41:86:36:22:b2:bc:a6:19:e0: 99:4b:a9:d2:54:37:e2:33:5b:af:2a:8c:fe:02:81: 2d:b3:ee:1b:c7:f1:ae:e5:0c:10:a7:0d:0f:8b:7e: d0:e6:ac:3c:62:c6:a8:c1:24:7c:f8:73:a9:64:c4: bd:e4:68:ac:d6:64:27:b9:65:01:d4:c9:41:77:99: fb:71:96:7e:cc:24:d5:29:c9:78:5e:59:db:db:84: 0c:b5:4b:57:54:c4:99:d5:9e:fa:bd:16:65:ac:41: a7:b5:3f:df:56:d6:1c:3b:d4:d3:e3:02:f3:32:ee: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FC:4B:77:7F:91:F1:81:D4:3F:EE:FD:E4:19:92:D7:96:31:33:3E X509v3 Authority Key Identifier: keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/ovxLd3-R8YHUP-795BmS15YxMz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.124.0/22 Signature Algorithm: sha256WithRSAEncryption a6:b1:9b:d0:3b:59:d4:ce:c4:b0:20:a8:e5:7b:87:c9:b8:43: 16:f3:57:0f:d6:74:99:f2:9d:a2:3b:43:c3:77:8d:fc:03:e2: a0:ff:94:a7:ac:8c:21:b8:87:d6:51:67:51:bd:b5:30:29:04: cc:69:3b:cc:4f:48:82:24:64:a8:25:58:ec:d3:ba:c1:cf:f4: 42:88:ed:db:7e:7f:1a:05:25:dc:a3:68:37:8c:34:e6:1f:42: 3e:3f:82:d7:d0:cf:39:8b:f4:b0:5f:61:49:b0:f0:ae:0b:5b: a9:dd:5c:a5:35:1e:18:ac:3f:e4:93:3a:7d:e6:ed:42:da:17: 57:c8:6c:c4:6f:c1:39:aa:79:70:0f:cf:2e:92:06:a4:56:bd: c0:08:00:87:25:10:8f:e4:2a:92:89:ff:bd:26:a7:b3:01:ca: e7:b3:d7:fe:25:9e:84:48:f4:9c:4c:0f:8b:2b:15:c2:ac:4a: 49:ad:6f:19:a0:39:67:9b:ac:63:e2:18:af:72:1b:08:90:07: 5f:72:28:b7:47:b2:8d:b8:c4:6b:ce:cd:fc:db:fa:33:3a:65: 80:0d:6c:fa:19:d7:72:d0:9a:99:77:50:c1:f0:c0:78:53:f6: d5:41:f0:a8:51:c9:3c:32:8e:7f:9c:15:42:9a:08:26:54:61: 45:13:30:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WHsJe2E7dJAzeP4h6QKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZWFlZGVkYTEwNWQ3ZTkxMjlhOWIwY2U1NmI5YmZjYjlj NjczOTQwHhcNMjYwMTAxMDIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmZjNGI3NzdmOTFmMTgxZDQzZmVlZmRlNDE5OTJkNzk2MzEzMzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUlFgJT3NvFKH6c2VsLlbUMH833B GyfGLbYw6ONxlF2r+Le3Xrfk7HrTeTqMt6CXzjsyjfWb1/xJiT78ogL01crXlq8/ UPzgXAKiXKm0GZeq8VtbBuk49SZ5k6AHWDi9dcRALs4epUm47PXM2lOrAzhgvRQh rMYlD+sEzpWjXsTv1hXDIFYYv6Pmu9NBhjYisrymGeCZS6nSVDfiM1uvKoz+AoEt s+4bx/Gu5QwQpw0Pi37Q5qw8YsaowSR8+HOpZMS95Gis1mQnuWUB1MlBd5n7cZZ+ zCTVKcl4Xlnb24QMtUtXVMSZ1Z76vRZlrEGntT/fVtYcO9TT4wLzMu7VcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKL8S3d/kfGB1D/u/eQZkteWMTM+MB8GA1UdIwQY MBaAFD3q7e2hBdfpEpqbDOVrm/y5xnOUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jYzRlYjMtNzY4YS00ZjkxLTg4MmMt MGRiMTA4NTBjNzk0LzEvb3Z4TGQzLVI4WUhVUC03OTVCbVMxNVl4TXo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9jYzRlYjMtNzY4YS00ZjkxLTg4MmMtMGRiMTA4NTBjNzk0 LzEvUGVydDdhRUYxLWtTbXBzTTVXdWJfTG5HYzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwpN8MA0G CSqGSIb3DQEBCwUAA4IBAQCmsZvQO1nUzsSwIKjle4fJuEMW81cP1nSZ8p2iO0PD d438A+Kg/5SnrIwhuIfWUWdRvbUwKQTMaTvMT0iCJGSoJVjs07rBz/RCiO3bfn8a BSXco2g3jDTmH0I+P4LX0M85i/SwX2FJsPCuC1up3VylNR4YrD/kkzp95u1C2hdX yGzEb8E5qnlwD88ukgakVr3ACACHJRCP5CqSif+9JqezAcrns9f+JZ6ESPScTA+L KxXCrEpJrW8ZoDlnm6xj4hivchsIkAdfcii3R7KNuMRrzs382/ozOmWADWz6Gddy 0JqZd1DB8MB4U/bVQfCoUck8Mo5/nBVCmggmVGFFEzDk -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:14 2026 by rpki-client