This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/ojYHQmSAFTm29RLFj7gCPdYmCjg.roa File: ojYHQmSAFTm29RLFj7gCPdYmCjg.roa (raw, json) Hash identifier: 7+saW1Xd2Xb7UDM8OgcUC8MrbOvLnaAq3EyCVMvJhAo= Subject key identifier: A2:36:07:42:64:80:15:39:B6:F5:12:C5:8F:B8:02:3D:D6:26:0A:38 Certificate issuer: /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0 Certificate serial: 019B7758A1447B411FE041A5A16FB81C36D2 Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/ojYHQmSAFTm29RLFj7gCPdYmCjg.roa Signing time: Thu 01 Jan 2026 02:17:35 +0000 ROA not before: Thu 01 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20886 IP address blocks: 194.55.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a1:44:7b:41:1f:e0:41:a5:a1:6f:b8:1c:36:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0 Validity Not Before: Jan 1 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a236074264801539b6f512c58fb8023dd6260a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0f:53:a2:b8:44:3a:21:e7:34:a7:21:ad:e9: 24:30:5d:b9:55:62:8f:f7:22:3e:95:51:d7:e4:53: 8b:b4:d5:dd:b7:a4:5d:3f:99:cf:43:35:2e:26:37: e0:30:aa:81:3c:bc:58:a3:4f:eb:22:aa:44:a4:71: d2:03:26:70:3a:98:17:3c:25:bf:e1:3d:b7:59:28: 2d:a5:a0:d7:65:f5:35:9f:84:58:d1:ab:58:b3:37: ed:47:31:9c:0e:86:44:19:53:fe:1c:9b:1b:45:15: c4:8b:aa:15:91:39:ef:0c:34:d6:07:f6:55:7b:36: bf:95:34:8a:7b:16:b3:8a:bb:b6:9c:19:ba:20:97: ef:dc:c7:74:a6:ed:f8:d0:d6:f4:8a:d5:cb:88:3f: a2:f8:c5:d1:2d:d8:4f:30:35:bb:ca:a9:4a:8d:5e: ad:dd:57:6b:96:38:0c:52:07:36:af:78:49:25:5d: c1:5b:70:eb:4a:9d:d3:a0:2a:ea:9d:7a:83:3b:3f: 98:5c:71:7b:bc:6b:b3:a6:d5:67:7c:41:07:fc:1a: e7:fe:9d:cc:24:b9:16:bc:47:03:27:12:be:4e:c2: ba:47:85:95:d8:49:39:c9:43:4b:39:3a:8c:85:d4: 61:b9:c0:b7:af:af:ed:b5:85:ad:fd:ae:17:1d:f7: bb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:36:07:42:64:80:15:39:B6:F5:12:C5:8F:B8:02:3D:D6:26:0A:38 X509v3 Authority Key Identifier: keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/ojYHQmSAFTm29RLFj7gCPdYmCjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.26.0/24 Signature Algorithm: sha256WithRSAEncryption 11:a0:1f:ec:86:23:fc:9b:94:b9:e1:5b:f4:00:c9:6a:80:41: 43:42:bc:ed:89:83:83:c1:42:92:2a:2b:c9:33:2d:a1:11:9c: 5f:0f:c4:eb:f9:a2:a4:5a:82:e4:17:02:c6:a9:dd:c4:0a:77: 09:e7:1a:e7:33:29:93:29:c1:b5:58:e0:ba:b9:c1:0d:7e:e6: 0e:e4:ea:ec:63:e8:51:7e:38:79:9b:b5:9d:4f:b8:02:49:e2: 65:85:6a:9f:e7:9e:e4:34:67:0e:91:1b:cd:04:b4:97:91:82: 00:01:70:a3:9d:8c:0a:19:70:e4:55:08:7d:37:69:d3:3c:44: 88:7a:00:d6:62:d6:2c:cd:42:af:17:11:d8:b5:83:ed:66:fe: 25:de:00:a2:66:2d:00:16:5c:8a:b0:6a:eb:df:98:4e:38:c1: f2:0d:3f:f6:3f:ff:e8:a1:6b:88:d4:14:0e:b5:11:81:fe:25: 57:72:19:9b:97:5b:64:f1:bf:88:f0:18:2f:3c:56:49:5d:76: 1e:e7:32:a5:76:a9:54:7c:a8:78:30:95:6e:3a:b7:d5:4e:fc: 51:81:75:df:6b:85:85:a1:cf:5e:67:67:fd:a7:45:37:59:3c: 3d:1b:22:3e:61:bf:b8:3f:fc:36:cb:28:6f:d9:c8:64:27:76: ac:3e:41:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WKFEe0Ef4EGloW+4HDbSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDY0YzhjMTY3ZGQyYzg3YWEzZDg4YWNiZmFlNGMyMzNm Zjc3YjAwHhcNMjYwMTAxMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjM2MDc0MjY0ODAxNTM5YjZmNTEyYzU4ZmI4MDIzZGQ2MjYwYTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w9TorhEOiHnNKchrekkMF25VWKP 9yI+lVHX5FOLtNXdt6RdP5nPQzUuJjfgMKqBPLxYo0/rIqpEpHHSAyZwOpgXPCW/ 4T23WSgtpaDXZfU1n4RY0atYszftRzGcDoZEGVP+HJsbRRXEi6oVkTnvDDTWB/ZV eza/lTSKexaziru2nBm6IJfv3Md0pu340Nb0itXLiD+i+MXRLdhPMDW7yqlKjV6t 3VdrljgMUgc2r3hJJV3BW3DrSp3ToCrqnXqDOz+YXHF7vGuzptVnfEEH/Brn/p3M JLkWvEcDJxK+TsK6R4WV2Ek5yUNLOTqMhdRhucC3r6/ttYWt/a4XHfe75QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKI2B0JkgBU5tvUSxY+4Aj3WJgo4MB8GA1UdIwQY MBaAFOhGTIwWfdLIeqPYisv65MIz/3ewMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVaTWpCWjkwc2g2bzlpS3lfcmt3alBfZDdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jY2E2YzQtZWM3MC00NDA1LWE2YTgt NmVhYTU5YjBkNzUwLzEvb2pZSFFtU0FGVG0yOVJMRmo3Z0NQZFltQ2pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jY2E2YzQtZWM3MC00NDA1LWE2YTgtNmVhYTU5YjBkNzUw LzEvNkVaTWpCWjkwc2g2bzlpS3lfcmt3alBfZDdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjcaMA0G CSqGSIb3DQEBCwUAA4IBAQARoB/shiP8m5S54Vv0AMlqgEFDQrztiYODwUKSKivJ My2hEZxfD8Tr+aKkWoLkFwLGqd3ECncJ5xrnMymTKcG1WOC6ucENfuYO5OrsY+hR fjh5m7WdT7gCSeJlhWqf557kNGcOkRvNBLSXkYIAAXCjnYwKGXDkVQh9N2nTPESI egDWYtYszUKvFxHYtYPtZv4l3gCiZi0AFlyKsGrr35hOOMHyDT/2P//ooWuI1BQO tRGB/iVXchmbl1tk8b+I8BgvPFZJXXYe5zKldqlUfKh4MJVuOrfVTvxRgXXfa4WF oc9eZ2f9p0U3WTw9GyI+Yb+4P/w2yyhv2chkJ3asPkE9 -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:35 2026 by rpki-client