This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/Ol3Cdb1XyRY6urO3sw4yVDwme94.roa File: Ol3Cdb1XyRY6urO3sw4yVDwme94.roa (raw, json) Hash identifier: tfUvfQzgGXJJiO1C8x+8AL672Tfl8NCYZs94wHKASfw= Subject key identifier: 3A:5D:C2:75:BD:57:C9:16:3A:BA:B3:B7:B3:0E:32:54:3C:26:7B:DE Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e Certificate serial: 019B7758BEF7180D513034810BAC99F8D5E2 Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/Ol3Cdb1XyRY6urO3sw4yVDwme94.roa Signing time: Thu 01 Jan 2026 02:17:43 +0000 ROA not before: Thu 01 Jan 2026 02:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.227.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:be:f7:18:0d:51:30:34:81:0b:ac:99:f8:d5:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e Validity Not Before: Jan 1 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a5dc275bd57c9163abab3b7b30e32543c267bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:13:ce:14:08:23:7d:3f:45:65:cd:75:d0:c7: 45:01:db:9b:1b:bf:0e:23:27:a6:ca:d2:1e:24:62: 33:9c:30:c8:4b:aa:50:45:f9:a3:3d:30:44:58:fb: 84:02:8f:22:21:4e:48:b3:d9:ca:8e:86:1c:f5:62: d1:95:46:e0:e0:5c:e2:0c:35:26:77:a6:58:b2:54: 39:6b:81:9b:2b:90:6f:36:42:63:67:85:1e:cb:35: 1f:01:0b:4f:64:f1:52:78:0b:95:b5:88:4a:0a:f0: 6a:59:66:bd:46:e0:47:01:90:6d:c3:d5:80:b5:73: dc:cf:9f:8f:8f:74:57:ea:28:39:6e:21:89:39:57: d2:75:49:3d:01:4a:e6:70:7d:4f:97:db:73:5f:d5: 63:b1:dc:71:9d:a4:a9:12:08:94:b1:20:1f:e6:65: 5d:eb:dc:66:e5:ac:9c:1f:2c:be:5b:ac:b3:f1:80: 0f:98:97:61:9c:e9:c2:83:11:4a:76:4a:0c:4a:12: 1f:1d:04:0c:74:90:a7:b4:22:26:ee:37:96:1b:6c: b5:26:77:68:6b:c4:eb:ad:18:5e:3d:ba:c7:f3:a2: 50:dd:67:e2:ec:ac:21:fe:9c:01:e5:b1:16:a9:82: 73:49:7a:91:e2:09:4e:b8:ab:19:ef:a2:74:d3:12: a5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5D:C2:75:BD:57:C9:16:3A:BA:B3:B7:B3:0E:32:54:3C:26:7B:DE X509v3 Authority Key Identifier: keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/Ol3Cdb1XyRY6urO3sw4yVDwme94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.75.0/24 Signature Algorithm: sha256WithRSAEncryption a6:15:54:83:74:ed:fe:7c:f9:ef:6f:0c:45:6e:e1:b6:39:30: 7c:eb:01:3c:f2:a6:0c:ba:65:a2:60:35:4b:7f:29:da:34:33: b4:fb:44:75:0b:76:45:ae:b2:7d:6e:71:20:bf:85:72:1e:88: 37:4c:f2:2e:8b:10:da:4c:b7:a8:29:89:37:28:73:d6:a0:2b: 3d:19:c3:b8:9c:9c:9a:f8:95:84:66:f5:b3:78:1d:c1:ed:88: be:ba:4a:4c:d0:d4:41:42:57:a4:c7:b5:fd:63:82:d7:6b:99: 73:62:d9:4f:c4:ac:81:48:20:54:f9:94:fc:85:a4:20:93:d3: 78:f4:c0:55:d8:ee:81:23:d1:f1:ad:2f:38:c2:9c:a0:09:a1: ad:7b:a5:fd:2c:10:99:7c:eb:14:cd:ca:53:43:88:c3:17:8c: 33:a7:23:c2:90:cf:e0:41:c5:03:01:cf:93:3e:f8:39:78:5f: 56:f7:f5:f8:74:7b:49:18:7e:d7:7b:fc:65:fc:97:73:db:b6: 29:df:d2:61:5c:a8:c7:74:4c:81:4d:5d:5e:a7:98:dd:21:83: 05:15:ae:ec:cd:6e:56:86:6d:0a:95:8d:2d:d8:9c:ff:da:c0: f5:c4:6d:ec:50:bd:00:05:d1:61:be:c7:8b:59:fe:50:a1:37: 47:a3:0e:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WL73GA1RMDSBC6yZ+NXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OGFhNmVkNGI2Y2FjNmIzYTUyOTYxYmNmYTIyOWNmZGEw MDA4MGUwHhcNMjYwMTAxMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTVkYzI3NWJkNTdjOTE2M2FiYWIzYjdiMzBlMzI1NDNjMjY3YmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBPOFAgjfT9FZc110MdFAdubG78O IyemytIeJGIznDDIS6pQRfmjPTBEWPuEAo8iIU5Is9nKjoYc9WLRlUbg4FziDDUm d6ZYslQ5a4GbK5BvNkJjZ4UeyzUfAQtPZPFSeAuVtYhKCvBqWWa9RuBHAZBtw9WA tXPcz5+Pj3RX6ig5biGJOVfSdUk9AUrmcH1Pl9tzX9VjsdxxnaSpEgiUsSAf5mVd 69xm5aycHyy+W6yz8YAPmJdhnOnCgxFKdkoMShIfHQQMdJCntCIm7jeWG2y1Jndo a8TrrRhePbrH86JQ3Wfi7Kwh/pwB5bEWqYJzSXqR4glOuKsZ76J00xKlxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDpdwnW9V8kWOrqzt7MOMlQ8JnveMB8GA1UdIwQY MBaAFDeKpu1LbKxrOlKWG8+iKc/aAAgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAt ZjRiOWRhNDgwZWUyLzEvT2wzQ2RiMVh5Ulk2dXJPM3N3NHlWRHdtZTk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAtZjRiOWRhNDgwZWUy LzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+NLMA0G CSqGSIb3DQEBCwUAA4IBAQCmFVSDdO3+fPnvbwxFbuG2OTB86wE88qYMumWiYDVL fynaNDO0+0R1C3ZFrrJ9bnEgv4VyHog3TPIuixDaTLeoKYk3KHPWoCs9GcO4nJya +JWEZvWzeB3B7Yi+ukpM0NRBQlekx7X9Y4LXa5lzYtlPxKyBSCBU+ZT8haQgk9N4 9MBV2O6BI9HxrS84wpygCaGte6X9LBCZfOsUzcpTQ4jDF4wzpyPCkM/gQcUDAc+T Pvg5eF9W9/X4dHtJGH7Xe/xl/Jdz27Yp39JhXKjHdEyBTV1ep5jdIYMFFa7szW5W hm0KlY0t2Jz/2sD1xG3sUL0ABdFhvseLWf5QoTdHow7r -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:14 2026 by rpki-client