This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/ODJrKCxhZJXL46-GyJpCGE1A_QM.roa File: ODJrKCxhZJXL46-GyJpCGE1A_QM.roa (raw, json) Hash identifier: +3sffUArpiGjIESwpid7XyaHYYYvbrxKYnkoG38bS64= Subject key identifier: 38:32:6B:28:2C:61:64:95:CB:E3:AF:86:C8:9A:42:18:4D:40:FD:03 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019B7F836147571C380203FB671D82CAF3E9 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/ODJrKCxhZJXL46-GyJpCGE1A_QM.roa Signing time: Fri 02 Jan 2026 16:21:15 +0000 ROA not before: Fri 02 Jan 2026 16:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57093 IP address blocks: 109.237.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:61:47:57:1c:38:02:03:fb:67:1d:82:ca:f3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Jan 2 16:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38326b282c616495cbe3af86c89a42184d40fd03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:31:dd:22:cd:15:d4:0f:80:c3:b1:41:fc:5a: ac:f1:a9:bb:62:7c:27:22:b1:b0:e2:56:40:6f:14: d9:41:ec:23:04:ac:9b:ef:77:47:96:e9:56:8c:61: cc:ac:b0:a8:05:7c:59:08:c0:0a:ea:5d:e9:38:e2: 50:0c:17:44:7c:98:92:0f:b8:8c:29:77:a2:13:1e: f3:be:70:75:a0:2f:6a:d2:4b:2a:bc:29:0a:c1:c8: 9c:62:f1:c6:97:e8:da:10:ed:5e:b3:44:f9:6d:fa: 47:cf:1c:b9:5b:4c:c3:65:36:c4:85:50:9c:6a:f2: 40:89:97:95:a8:1d:59:3d:07:ed:69:23:c2:48:dd: 30:1c:b1:94:2e:02:99:92:36:56:8f:e4:74:11:e8: d1:4f:09:96:10:57:58:0b:04:82:a8:a4:fb:d2:18: 97:26:57:12:a5:2c:f4:34:92:42:b3:66:08:d5:6c: 67:68:bd:56:6b:97:1d:30:b2:00:4a:2e:99:1b:6e: 97:07:82:fe:eb:60:ba:34:45:47:e7:f3:f3:4c:79: 58:28:e1:5b:a5:51:32:4c:e7:5d:bf:17:d8:ae:9d: a9:86:1a:ee:a2:c5:1e:71:e3:a4:83:b8:28:a4:31: d1:ab:60:b2:3f:d0:28:23:a7:02:4f:39:e1:81:30: 80:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:32:6B:28:2C:61:64:95:CB:E3:AF:86:C8:9A:42:18:4D:40:FD:03 X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/ODJrKCxhZJXL46-GyJpCGE1A_QM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.237.100.0/22 Signature Algorithm: sha256WithRSAEncryption ba:cf:6f:54:92:f5:ab:66:55:67:61:0e:43:ec:43:f7:0d:ad: 28:91:8f:b5:3b:c1:aa:0e:fe:59:6b:0b:e4:45:4b:8b:93:e7: 5e:44:ce:96:e8:e7:5a:b8:43:a4:4c:3c:83:da:8d:cf:32:00: 5e:4c:71:c6:fa:d9:f6:02:d2:85:54:ba:76:9f:a8:e2:d4:46: 35:12:3e:02:0a:ae:52:2f:40:d4:e7:8b:9f:d6:9c:df:6f:cc: 03:af:ea:3c:31:75:62:a7:ac:56:c7:b4:3c:ac:f4:2e:c9:86: 87:b8:4c:b5:87:2a:e4:59:10:ce:09:50:d7:6c:20:2d:9d:1d: 8c:ef:d5:27:9b:e2:bc:8c:0d:13:38:cd:8d:ae:5b:26:5b:e6: 9f:2b:63:49:85:a7:49:d2:45:ca:b2:84:2e:de:24:2e:d2:4f: 2d:18:54:bf:27:6e:25:9f:d4:c7:23:4b:c0:c2:a3:20:75:c8: 2e:39:11:5e:f5:d0:8d:c4:3f:f2:d5:f3:48:1d:b8:ab:7d:3f: 51:64:dc:2e:1e:b5:fb:e6:2b:4d:24:c3:1a:a9:ed:21:88:59: 4f:2b:61:87:1f:de:61:87:af:c5:cf:b1:76:6d:df:56:04:3d: 96:2f:3c:66:6e:de:2e:2b:a3:b2:fa:8f:b7:fd:e0:48:7f:60: fa:b2:76:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g2FHVxw4AgP7Zx2CyvPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjYwMTAyMTYyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODMyNmIyODJjNjE2NDk1Y2JlM2FmODZjODlhNDIxODRkNDBmZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjHdIs0V1A+Aw7FB/Fqs8am7Ynwn IrGw4lZAbxTZQewjBKyb73dHlulWjGHMrLCoBXxZCMAK6l3pOOJQDBdEfJiSD7iM KXeiEx7zvnB1oC9q0ksqvCkKwcicYvHGl+jaEO1es0T5bfpHzxy5W0zDZTbEhVCc avJAiZeVqB1ZPQftaSPCSN0wHLGULgKZkjZWj+R0EejRTwmWEFdYCwSCqKT70hiX JlcSpSz0NJJCs2YI1WxnaL1Wa5cdMLIASi6ZG26XB4L+62C6NEVH5/PzTHlYKOFb pVEyTOddvxfYrp2phhruosUeceOkg7gopDHRq2CyP9AoI6cCTznhgTCAcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDgyaygsYWSVy+OvhsiaQhhNQP0DMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvT0RKcktDeGhaSlhMNDYtR3lKcENHRTFBX1FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbe1kMA0G CSqGSIb3DQEBCwUAA4IBAQC6z29UkvWrZlVnYQ5D7EP3Da0okY+1O8GqDv5Zawvk RUuLk+deRM6W6OdauEOkTDyD2o3PMgBeTHHG+tn2AtKFVLp2n6ji1EY1Ej4CCq5S L0DU54uf1pzfb8wDr+o8MXVip6xWx7Q8rPQuyYaHuEy1hyrkWRDOCVDXbCAtnR2M 79Unm+K8jA0TOM2NrlsmW+afK2NJhadJ0kXKsoQu3iQu0k8tGFS/J24ln9THI0vA wqMgdcguORFe9dCNxD/y1fNIHbirfT9RZNwuHrX75itNJMMaqe0hiFlPK2GHH95h h6/Fz7F2bd9WBD2WLzxmbt4uK6Oy+o+3/eBIf2D6snYG -----END CERTIFICATE-----Generated at Sun Jan 25 21:15:17 2026 by rpki-client