This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OD6pdPzRd82OTBDjEZH7YNH_bJQ.roa File: OD6pdPzRd82OTBDjEZH7YNH_bJQ.roa (raw, json) Hash identifier: ud0A7yQDK0fKAK3b011vAdhseFVVQxev9+qh0p10GUc= Subject key identifier: 38:3E:A9:74:FC:D1:77:CD:8E:4C:10:E3:11:91:FB:60:D1:FF:6C:94 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8550DB9855470C17238764201DDF61 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OD6pdPzRd82OTBDjEZH7YNH_bJQ.roa Signing time: Fri 02 Jan 2026 16:23:21 +0000 ROA not before: Fri 02 Jan 2026 16:23:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48614 IP address blocks: 194.87.112.0/23 maxlen: 23 195.133.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:50:db:98:55:47:0c:17:23:87:64:20:1d:df:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=383ea974fcd177cd8e4c10e31191fb60d1ff6c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:99:17:79:a8:54:47:f0:ad:0e:ae:ab:66:70: eb:5b:63:53:3c:67:39:86:36:f0:ac:ab:3a:35:1c: 08:03:cc:22:08:0e:b0:75:aa:11:a3:45:42:eb:42: f3:09:82:79:d9:fc:8e:7a:6b:9a:79:19:2c:a3:3b: 81:9a:99:b8:48:ea:cc:02:eb:0a:f0:79:c0:f7:59: 1b:d7:2b:86:09:5c:53:8e:f3:ad:d0:e8:5e:3e:28: 27:c6:00:84:ba:fa:ae:48:cf:9b:83:d4:8f:14:c3: bb:3a:cf:f1:74:9b:e9:d2:81:6d:c3:e8:b4:b2:c9: e0:8d:51:b4:35:84:21:7c:8d:75:95:75:06:40:d9: 0c:0e:aa:d5:ec:9a:15:3f:0d:61:07:42:43:2f:83: 42:33:dc:01:8f:97:4e:bf:62:83:88:4e:23:5a:23: 37:11:d0:e0:a2:6a:80:be:cc:87:cb:fa:36:23:1a: f3:25:77:5b:aa:17:71:84:5b:df:fb:59:f0:dd:17: 20:58:37:fa:f3:3a:67:f1:e5:1f:12:5d:df:91:51: 5f:ec:9d:f4:88:a0:ac:a2:47:f3:c2:87:a7:6c:7a: 2c:b8:a5:13:06:4e:5a:bf:be:3f:b1:f6:a7:e0:98: 88:15:d2:bd:c0:1d:ed:ff:42:fc:1f:a1:70:02:82: 66:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3E:A9:74:FC:D1:77:CD:8E:4C:10:E3:11:91:FB:60:D1:FF:6C:94 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OD6pdPzRd82OTBDjEZH7YNH_bJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.112.0/23 195.133.68.0/22 Signature Algorithm: sha256WithRSAEncryption 05:20:1f:0d:7a:3a:e8:52:bd:85:e0:f1:d6:f4:ce:4b:95:dc: 97:e8:02:a8:66:e6:81:6f:1b:4a:df:14:a8:7c:a3:81:c4:8c: 12:fd:bf:25:b2:e5:b8:e0:0e:a9:2b:c6:4b:14:51:a4:6f:3c: 64:9a:30:91:9a:04:81:29:fe:33:3e:08:b8:da:01:32:c1:7a: 4a:bb:3f:9c:fb:2f:06:73:c1:9c:b6:c3:39:11:d3:ea:2a:78: 3f:53:24:44:ef:fd:7b:a6:60:e9:4c:4a:ee:d4:99:2a:cf:97: 5e:5e:1c:25:75:6c:d4:82:62:a8:c8:f6:4d:08:2b:2c:d1:64: 25:49:98:bf:b7:5d:5b:8a:79:e1:9b:a8:15:bb:27:32:9f:a0: 3c:4b:70:8f:07:a5:a5:34:cd:b5:90:3f:9d:7f:f5:e3:15:06: 71:89:6d:77:fb:03:4f:f7:f0:98:61:71:75:6c:2b:bf:69:78: 88:9d:43:5e:31:6b:4f:75:2e:de:e8:6f:1d:f5:c8:3c:3b:d6: 57:88:68:93:45:1f:5e:d2:f0:42:70:00:5c:44:22:e7:92:44: 18:eb:f8:11:51:f5:38:fb:ef:6c:58:a7:c5:76:83:68:1b:d8: da:0d:74:08:59:b5:f3:58:cd:03:b5:4e:2e:c9:91:ab:73:10: 92:01:f7:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hVDbmFVHDBcjh2QgHd9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODNlYTk3NGZjZDE3N2NkOGU0YzEwZTMxMTkxZmI2MGQxZmY2Yzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5kXeahUR/CtDq6rZnDrW2NTPGc5 hjbwrKs6NRwIA8wiCA6wdaoRo0VC60LzCYJ52fyOemuaeRksozuBmpm4SOrMAusK 8HnA91kb1yuGCVxTjvOt0OhePignxgCEuvquSM+bg9SPFMO7Os/xdJvp0oFtw+i0 ssngjVG0NYQhfI11lXUGQNkMDqrV7JoVPw1hB0JDL4NCM9wBj5dOv2KDiE4jWiM3 EdDgomqAvsyHy/o2IxrzJXdbqhdxhFvf+1nw3RcgWDf68zpn8eUfEl3fkVFf7J30 iKCsokfzwoenbHosuKUTBk5av74/sfan4JiIFdK9wB3t/0L8H6FwAoJmPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDg+qXT80XfNjkwQ4xGR+2DR/2yUMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvT0Q2cGRQelJkODJPVEJEakVaSDdZTkhfYkpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwldwAwQC w4VEMA0GCSqGSIb3DQEBCwUAA4IBAQAFIB8NejroUr2F4PHW9M5LldyX6AKoZuaB bxtK3xSofKOBxIwS/b8lsuW44A6pK8ZLFFGkbzxkmjCRmgSBKf4zPgi42gEywXpK uz+c+y8Gc8GctsM5EdPqKng/UyRE7/17pmDpTEru1Jkqz5deXhwldWzUgmKoyPZN CCss0WQlSZi/t11binnhm6gVuycyn6A8S3CPB6WlNM21kD+df/XjFQZxiW13+wNP 9/CYYXF1bCu/aXiInUNeMWtPdS7e6G8d9cg8O9ZXiGiTRR9e0vBCcABcRCLnkkQY 6/gRUfU4++9sWKfFdoNoG9jaDXQIWbXzWM0DtU4uyZGrcxCSAfdc -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:06 2026 by rpki-client