This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/OtGcmTXxtlAndkCENkgPfZ5qkpY.roa File: OtGcmTXxtlAndkCENkgPfZ5qkpY.roa (raw, json) Hash identifier: /n2XdyxLOIwoRSagcNtXKkIFcsp0vWI29IPSu/5Oazw= Subject key identifier: 3A:D1:9C:99:35:F1:B6:50:27:76:40:84:36:48:0F:7D:9E:6A:92:96 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C809F874DFB51D36170E89AF5EEC03D Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/OtGcmTXxtlAndkCENkgPfZ5qkpY.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 86.106.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9f:87:4d:fb:51:d3:61:70:e8:9a:f5:ee:c0:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ad19c9935f1b6502776408436480f7d9e6a9296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:86:5e:2e:75:d2:a9:37:43:b9:47:43:fa:c3: fc:30:25:44:4f:22:81:d8:6e:f7:d0:27:d6:f9:b2: 02:3b:dd:af:d9:48:e3:9a:33:0c:d2:c3:e2:a0:65: 07:50:1c:65:54:18:fe:36:7c:a0:1e:93:b4:1d:b0: 5d:61:51:e5:a8:a9:7b:80:35:52:75:4b:2c:ab:5c: da:09:c9:d0:77:06:c2:ff:de:4f:d6:c4:a1:a7:be: ab:d6:ee:70:1d:dd:3e:e0:4d:ba:eb:13:1f:ce:0d: 3b:0f:1a:2d:58:00:30:01:70:ee:a8:04:c8:8d:82: ed:06:83:13:6e:6f:1a:16:84:a9:7a:54:d2:d6:ff: 30:60:f3:90:4c:da:95:76:c3:a1:0c:2f:5a:17:52: 4c:36:00:94:bc:6d:11:2a:38:ac:67:1a:f7:77:3a: 05:8f:4c:07:54:7d:38:ce:e7:5b:e1:8a:a0:58:e1: 0c:99:5e:b7:39:2f:55:92:8d:62:72:a2:d6:13:dc: 32:f7:f7:05:91:cd:57:4b:49:79:b2:ea:37:a7:7a: 5c:88:e2:9f:7d:f5:9c:90:37:92:aa:4f:70:6d:d9: 68:6e:13:b8:88:9d:12:a4:b8:f1:22:71:2c:21:33: d4:06:b2:4b:3a:95:7c:8b:32:1d:ef:15:d5:f6:39: bb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D1:9C:99:35:F1:B6:50:27:76:40:84:36:48:0F:7D:9E:6A:92:96 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/OtGcmTXxtlAndkCENkgPfZ5qkpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.97.0/24 Signature Algorithm: sha256WithRSAEncryption 51:bd:af:b5:00:62:7e:1f:c0:9b:8e:0a:c8:b6:a0:79:93:98: 68:c3:a0:b5:0a:ad:4f:68:31:97:51:ac:bd:c1:60:9a:a9:46: 14:dc:8a:6c:ce:ff:c4:aa:5b:1f:58:32:7a:87:21:ee:31:9f: b5:ee:09:4d:29:e5:db:56:57:a2:82:86:74:ba:63:1c:e1:17: 2b:96:a4:eb:c4:5e:83:eb:b3:96:f3:1b:6f:19:e1:81:6c:92: e8:d2:1e:47:20:1b:f1:5b:e5:40:bd:8e:dd:22:6a:19:e2:af: 82:06:ec:be:14:a8:0f:4c:6e:06:e1:1f:f6:69:42:5b:00:0a: cb:0b:c6:dc:ff:0c:c4:34:bf:f0:fa:79:a5:78:f1:4d:36:77: ac:b2:4a:da:e5:21:8e:29:2d:fa:97:1b:b4:69:42:c4:9f:19: 62:54:a4:50:a1:08:75:a0:02:72:13:48:f6:75:6c:52:ed:7e: 7c:78:bb:3f:26:5a:20:35:7e:e6:10:90:02:a0:14:7a:89:41: 7c:15:ed:83:e3:b4:ee:9e:d6:e1:1c:64:29:de:ac:76:a9:06: e7:2d:68:fa:14:10:4b:5f:57:42:13:10:cc:74:9c:8f:a1:c9: 04:1a:38:b2:aa:33:d0:bb:81:06:d3:87:ed:2e:9b:97:34:9f: c8:81:47:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJ+HTftR02Fw6Jr17sA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWQxOWM5OTM1ZjFiNjUwMjc3NjQwODQzNjQ4MGY3ZDllNmE5Mjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYZeLnXSqTdDuUdD+sP8MCVETyKB 2G730CfW+bICO92v2UjjmjMM0sPioGUHUBxlVBj+NnygHpO0HbBdYVHlqKl7gDVS dUssq1zaCcnQdwbC/95P1sShp76r1u5wHd0+4E266xMfzg07DxotWAAwAXDuqATI jYLtBoMTbm8aFoSpelTS1v8wYPOQTNqVdsOhDC9aF1JMNgCUvG0RKjisZxr3dzoF j0wHVH04zudb4YqgWOEMmV63OS9Vko1icqLWE9wy9/cFkc1XS0l5suo3p3pciOKf ffWckDeSqk9wbdlobhO4iJ0SpLjxInEsITPUBrJLOpV8izId7xXV9jm7cwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDrRnJk18bZQJ3ZAhDZID32eapKWMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvT3RHY21UWHh0bEFuZGtDRU5rZ1BmWjVxa3BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmphMA0G CSqGSIb3DQEBCwUAA4IBAQBRva+1AGJ+H8CbjgrItqB5k5how6C1Cq1PaDGXUay9 wWCaqUYU3Ipszv/EqlsfWDJ6hyHuMZ+17glNKeXbVleigoZ0umMc4RcrlqTrxF6D 67OW8xtvGeGBbJLo0h5HIBvxW+VAvY7dImoZ4q+CBuy+FKgPTG4G4R/2aUJbAArL C8bc/wzENL/w+nmlePFNNnesskra5SGOKS36lxu0aULEnxliVKRQoQh1oAJyE0j2 dWxS7X58eLs/JlogNX7mEJACoBR6iUF8Fe2D47TuntbhHGQp3qx2qQbnLWj6FBBL X1dCExDMdJyPockEGjiyqjPQu4EG04ftLpuXNJ/IgUcN -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:40 2026 by rpki-client