This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/oDdOV619IIidVtQMM95kbm0cDIM.roa File: oDdOV619IIidVtQMM95kbm0cDIM.roa (raw, json) Hash identifier: 2Y37aAuGl7F6czPU7t6gdZkIffZAHGFmwGBIrR4PFQg= Subject key identifier: A0:37:4E:57:AD:7D:20:88:9D:56:D4:0C:33:DE:64:6E:6D:1C:0C:83 Certificate issuer: /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8 Certificate serial: 019B7CECCD9D9A6B47F580BAC8AF460A8E29 Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/oDdOV619IIidVtQMM95kbm0cDIM.roa Signing time: Fri 02 Jan 2026 04:17:32 +0000 ROA not before: Fri 02 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8596 IP address blocks: 82.150.192.0/19 maxlen: 19 185.74.0.0/22 maxlen: 22 2a02:5d8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:cd:9d:9a:6b:47:f5:80:ba:c8:af:46:0a:8e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8 Validity Not Before: Jan 2 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0374e57ad7d20889d56d40c33de646e6d1c0c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8d:d9:e8:3b:b9:60:8f:8c:22:57:20:4a:3f: 1d:e7:99:b8:98:d4:d4:51:13:91:0b:2e:15:df:51: c3:3d:59:91:34:5f:f9:c8:94:21:e3:14:b7:ab:b1: 86:86:9b:a0:1d:37:ed:6c:48:84:80:56:4c:ee:85: ac:0f:a8:50:e4:5c:1d:12:9f:79:36:bc:bb:35:d3: 08:c7:3c:5b:43:e9:3e:4e:3b:df:91:cc:04:62:48: 26:a7:e2:a6:39:d6:b9:3d:b9:45:65:b3:06:28:f0: 13:f6:86:fa:0e:cc:e1:7c:f6:da:2e:fe:46:d9:53: 2d:91:69:e2:02:1c:a6:57:22:e1:85:bc:85:66:b0: 3e:d4:c4:41:39:a0:c3:ac:53:a8:8e:ec:f8:22:65: a5:08:a3:4c:b3:22:78:cc:3b:fc:0f:07:39:dc:45: 8a:1b:ae:31:03:f6:4a:8a:d1:64:55:fd:66:46:37: 6e:5a:d6:9c:16:e8:ed:f6:c0:ba:6a:b9:88:db:94: 53:db:49:cf:4f:f4:89:31:ab:80:9f:cd:a8:6c:86: 79:29:68:a2:3d:6a:10:ed:c0:0f:78:9b:cd:74:95: 25:97:1d:1c:85:7f:10:e2:f9:72:ba:3b:32:74:78: d6:b0:e7:5a:ae:40:a7:6c:26:1c:22:51:0d:fd:08: 7d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:37:4E:57:AD:7D:20:88:9D:56:D4:0C:33:DE:64:6E:6D:1C:0C:83 X509v3 Authority Key Identifier: keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/oDdOV619IIidVtQMM95kbm0cDIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.150.192.0/19 185.74.0.0/22 IPv6: 2a02:5d8::/32 Signature Algorithm: sha256WithRSAEncryption a5:98:1b:b4:ca:13:20:37:3c:eb:30:88:1f:23:92:95:4b:05: b9:8f:2d:a4:52:f9:5d:d5:20:53:60:8b:de:99:04:f6:22:c3: d7:ed:5d:1a:3a:ec:c4:e3:89:81:38:32:dd:95:19:6a:09:d1: cd:47:5d:07:84:d4:20:2a:cd:86:94:e5:07:2a:6d:1b:20:5c: ad:75:0d:1b:72:67:83:c1:58:c1:c0:f9:e0:57:f2:8e:67:7a: c5:d8:3d:08:ce:07:2c:37:c2:c1:32:5e:62:79:d3:a8:73:e2: 6c:c0:79:e1:b2:ce:a4:0d:cf:79:ce:4f:f1:cf:6b:86:0b:6c: 82:d6:75:c1:92:53:e8:ba:6a:8d:54:d1:5d:4f:0b:45:94:4b: 7c:0e:b5:e5:95:ae:26:0d:5c:4b:c8:04:b7:04:38:25:86:51: a6:e1:92:f6:b3:a2:3c:86:4c:0b:24:d9:a0:c4:31:e3:2f:3b: 91:3d:63:30:b4:e7:6d:7c:27:80:3e:d5:bf:7c:ce:34:a3:29: 18:b1:72:4d:f9:7f:1d:80:bd:0e:61:90:99:22:5e:9a:d5:89: 97:ab:46:d5:16:d4:fc:26:9b:91:bf:76:13:b9:a4:85:5e:64: 75:34:44:c5:29:10:6e:d2:f6:35:89:f9:1b:98:b9:3f:0a:34: d3:ce:00:9b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87M2dmmtH9YC6yK9GCo4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGUzNWEwNWYyNzA3YjVhNzQxYzJhNzJmNWU0YmIzNGM5 YjA5YTgwHhcNMjYwMTAyMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDM3NGU1N2FkN2QyMDg4OWQ1NmQ0MGMzM2RlNjQ2ZTZkMWMwYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o3Z6Du5YI+MIlcgSj8d55m4mNTU URORCy4V31HDPVmRNF/5yJQh4xS3q7GGhpugHTftbEiEgFZM7oWsD6hQ5FwdEp95 Nry7NdMIxzxbQ+k+TjvfkcwEYkgmp+KmOda5PblFZbMGKPAT9ob6DszhfPbaLv5G 2VMtkWniAhymVyLhhbyFZrA+1MRBOaDDrFOojuz4ImWlCKNMsyJ4zDv8Dwc53EWK G64xA/ZKitFkVf1mRjduWtacFujt9sC6armI25RT20nPT/SJMauAn82obIZ5KWii PWoQ7cAPeJvNdJUllx0chX8Q4vlyujsydHjWsOdarkCnbCYcIlEN/Qh9TwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKA3TletfSCInVbUDDPeZG5tHAyDMB8GA1UdIwQY MBaAFDaONaBfJwe1p0HCpy9eS7NMmwmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYjU0ZDEtODkyZC00NzExLWE5Y2Yt NzZmMTM1YzRmMzExLzEvb0RkT1Y2MTlJSWlkVnRRTU05NWtibTBjRElNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9iYjU0ZDEtODkyZC00NzExLWE5Y2YtNzZmMTM1YzRmMzEx LzEvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFUpbAAwQC uUoAMA0EAgACMAcDBQAqAgXYMA0GCSqGSIb3DQEBCwUAA4IBAQClmBu0yhMgNzzr MIgfI5KVSwW5jy2kUvld1SBTYIvemQT2IsPX7V0aOuzE44mBODLdlRlqCdHNR10H hNQgKs2GlOUHKm0bIFytdQ0bcmeDwVjBwPngV/KOZ3rF2D0IzgcsN8LBMl5iedOo c+JswHnhss6kDc95zk/xz2uGC2yC1nXBklPoumqNVNFdTwtFlEt8DrXlla4mDVxL yAS3BDglhlGm4ZL2s6I8hkwLJNmgxDHjLzuRPWMwtOdtfCeAPtW/fM40oykYsXJN +X8dgL0OYZCZIl6a1YmXq0bVFtT8JpuRv3YTuaSFXmR1NETFKRBu0vY1ifkbmLk/ CjTTzgCb -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:37 2026 by rpki-client