This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/x-OBlWIDoxJzk9n3qIK5bxq0czg.roa File: x-OBlWIDoxJzk9n3qIK5bxq0czg.roa (raw, json) Hash identifier: n99uK/u/qI2ZbC6v4GJQFprtnxUCtKuaAwuUcJrCOMY= Subject key identifier: C7:E3:81:95:62:03:A3:12:73:93:D9:F7:A8:82:B9:6F:1A:B4:73:38 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77596CA34ECBF93605F161D384CA4C2C Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/x-OBlWIDoxJzk9n3qIK5bxq0czg.roa Signing time: Thu 01 Jan 2026 02:18:27 +0000 ROA not before: Thu 01 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204157 IP address blocks: 77.81.99.0/24 maxlen: 24 89.45.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6c:a3:4e:cb:f9:36:05:f1:61:d3:84:ca:4c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7e381956203a3127393d9f7a882b96f1ab47338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:61:4d:87:21:e2:3d:34:66:0c:d9:9e:47:44: 0c:ea:eb:d3:7b:65:45:23:50:23:5f:ee:a0:39:26: 77:de:e6:5d:c5:3c:de:f6:de:eb:d7:e8:ed:67:31: d7:8e:8e:43:81:52:88:42:3d:59:d6:25:89:b6:10: 0e:ed:25:74:12:3c:75:e5:f2:95:bc:78:2d:f8:70: 29:c5:2a:05:9f:1a:d9:e1:7c:25:0b:60:fc:91:7b: 58:d3:99:81:fb:a2:22:26:e0:af:83:19:cc:48:e4: 29:85:ea:e4:d5:ea:97:01:87:45:b4:1a:c3:7b:9f: 52:0c:81:0f:5e:f0:d6:35:a5:e9:ac:ba:de:e3:cd: 1f:7e:23:a5:e8:45:16:7f:af:2a:8d:8f:02:fe:7b: 98:ad:cd:10:6a:11:f9:d7:11:46:d5:d0:5e:18:f8: 8c:59:97:c2:2e:14:2d:fd:64:39:36:d6:03:bf:25: 0d:37:38:6f:fb:12:0c:2d:15:1b:91:cd:fc:a6:4b: f7:a1:52:03:09:94:62:1e:1b:76:9d:fc:ca:d9:5a: c6:cc:6e:78:b7:82:73:6f:a9:ce:76:a4:88:fb:a4: 1d:7e:88:f0:ca:87:ca:1c:d8:a1:85:74:fc:2a:88: ae:4b:00:2d:ad:f1:8d:84:df:ca:39:1d:40:ec:f2: c9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E3:81:95:62:03:A3:12:73:93:D9:F7:A8:82:B9:6F:1A:B4:73:38 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/x-OBlWIDoxJzk9n3qIK5bxq0czg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.99.0/24 89.45.91.0/24 Signature Algorithm: sha256WithRSAEncryption ae:ca:a3:c2:67:b1:09:22:fc:e4:97:b5:00:05:47:02:fe:0c: 66:fe:14:99:9e:6a:18:d1:f4:c8:ec:9b:9e:ed:1f:ec:d0:b2: fe:90:1b:39:f4:06:f1:6d:fc:56:45:05:a9:94:03:13:4b:db: c9:87:31:6c:64:ae:27:7f:a8:a9:ef:77:35:44:a6:06:2a:5a: 39:2e:1e:e8:ca:82:3b:1c:1b:ea:67:49:a6:f6:db:5a:84:32: 7f:d1:3d:2c:2d:b0:52:1d:81:a3:c0:ed:2c:44:fe:6f:b0:04: da:66:63:f4:bb:49:66:48:89:03:3b:98:1d:3e:a9:62:93:c7: 93:f1:85:bb:82:d8:9b:a9:4f:7b:b6:33:a6:63:df:50:94:c9: 9d:e2:70:1b:6e:c4:17:db:97:7e:35:6e:7e:a5:b9:8f:85:b2: 21:7a:b1:2e:1c:a8:25:e2:bd:3d:82:04:ee:0d:f8:0b:92:d2: 81:ff:8c:a6:cc:31:37:79:dd:8a:0c:2c:48:cf:9e:3f:4d:11: cb:64:5b:b8:8a:d9:27:5c:e5:f6:3a:b2:21:c1:93:32:e9:63: 89:15:c6:c5:1a:fe:dc:d1:02:d4:99:93:df:89:10:64:ef:1a: 37:a6:39:8d:78:28:f2:00:2d:d2:85:00:16:1e:8b:1e:a5:4b: 54:2c:11:dd -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WWyjTsv5NgXxYdOEykwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2UzODE5NTYyMDNhMzEyNzM5M2Q5ZjdhODgyYjk2ZjFhYjQ3MzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGFNhyHiPTRmDNmeR0QM6uvTe2VF I1AjX+6gOSZ33uZdxTze9t7r1+jtZzHXjo5DgVKIQj1Z1iWJthAO7SV0Ejx15fKV vHgt+HApxSoFnxrZ4XwlC2D8kXtY05mB+6IiJuCvgxnMSOQpherk1eqXAYdFtBrD e59SDIEPXvDWNaXprLre480ffiOl6EUWf68qjY8C/nuYrc0QahH51xFG1dBeGPiM WZfCLhQt/WQ5NtYDvyUNNzhv+xIMLRUbkc38pkv3oVIDCZRiHht2nfzK2VrGzG54 t4Jzb6nOdqSI+6QdfojwyofKHNihhXT8KoiuSwAtrfGNhN/KOR1A7PLJsQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMfjgZViA6MSc5PZ96iCuW8atHM4MB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL3gtT0JsV0lEb3hKems5bjNxSUs1YnhxMGN6Zy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABNUWMD BABZLVswDQYJKoZIhvcNAQELBQADggEBAK7Ko8JnsQki/OSXtQAFRwL+DGb+FJme ahjR9Mjsm57tH+zQsv6QGzn0BvFt/FZFBamUAxNL28mHMWxkrid/qKnvdzVEpgYq WjkuHujKgjscG+pnSab221qEMn/RPSwtsFIdgaPA7SxE/m+wBNpmY/S7SWZIiQM7 mB0+qWKTx5PxhbuC2JupT3u2M6Zj31CUyZ3icBtuxBfbl341bn6luY+FsiF6sS4c qCXivT2CBO4N+AuS0oH/jKbMMTd53YoMLEjPnj9NEctkW7iK2Sdc5fY6siHBkzLp Y4kVxsUa/tzRAtSZk9+JEGTvGjemOY14KPIALdKFABYeix6lS1QsEd0= -----END CERTIFICATE-----Generated at Tue Jan 13 12:05:22 2026 by rpki-client