This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/OdO1hcbdWYz_Iw6xZ112ZRiYkk8.roa File: OdO1hcbdWYz_Iw6xZ112ZRiYkk8.roa (raw, json) Hash identifier: 4Z+DfcMImSYQjotfAvXCJO8hXTfYciHRXkQJqaBymoc= Subject key identifier: 39:D3:B5:85:C6:DD:59:8C:FF:23:0E:B1:67:5D:76:65:18:98:92:4F Certificate issuer: /CN=898825d2f064989b38c781f2a8535189a26928c3 Certificate serial: 019B77596161A5434FE97FA1417903A862DE Authority key identifier: 89:88:25:D2:F0:64:98:9B:38:C7:81:F2:A8:53:51:89:A2:69:28:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/OdO1hcbdWYz_Iw6xZ112ZRiYkk8.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28831 IP address blocks: 62.169.32.0/21 maxlen: 21 62.169.40.0/21 maxlen: 21 62.169.42.0/24 maxlen: 24 62.169.48.0/21 maxlen: 21 62.169.49.0/24 maxlen: 24 62.169.56.0/21 maxlen: 21 62.169.60.0/24 maxlen: 24 62.169.63.0/24 maxlen: 24 185.107.148.0/23 maxlen: 23 185.107.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:61:61:a5:43:4f:e9:7f:a1:41:79:03:a8:62:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=898825d2f064989b38c781f2a8535189a26928c3 Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39d3b585c6dd598cff230eb1675d76651898924f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:53:7e:f6:da:d0:2d:1e:9f:59:a3:ec:5b:ca: f1:d3:0b:d1:6c:63:08:92:66:65:9d:b5:b6:7d:25: 5d:c2:e9:ce:4a:ba:7d:18:48:a9:b3:94:0e:73:55: d3:24:2c:d3:c6:11:77:1c:79:2b:79:c9:c9:b7:c1: a4:aa:c8:85:ae:5b:f2:f1:d0:d8:f5:6c:d3:41:6a: 9e:25:ff:bd:16:5d:3d:a3:e2:e2:a9:41:08:31:0f: 1e:64:4f:87:dd:89:9f:3a:eb:70:18:fc:07:14:36: 29:7d:6c:72:30:a4:80:74:e9:da:8a:5e:ae:bb:4d: 16:e9:82:d9:27:5e:7a:bb:e4:25:4a:1e:e3:8a:f3: 04:a8:34:71:92:48:37:50:0e:7a:43:bf:e1:cf:89: 72:78:34:e9:17:58:c3:41:d6:c4:1b:bc:a1:2d:fd: 95:96:6f:57:d8:e3:d2:bd:d6:f1:24:62:a9:be:d2: 3a:ea:f7:9a:fb:1a:c7:ed:bb:cd:d1:0c:51:d0:ea: a8:0f:35:24:85:2a:78:20:93:5a:91:64:54:83:ab: 8f:90:c5:ba:a1:39:64:2a:7f:79:a2:90:39:f0:7d: 47:a8:50:24:3a:cd:b3:d9:ab:bc:5e:37:86:ac:20: 79:59:dd:cd:17:c7:74:ba:a2:76:7c:63:57:8d:d8: cd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D3:B5:85:C6:DD:59:8C:FF:23:0E:B1:67:5D:76:65:18:98:92:4F X509v3 Authority Key Identifier: keyid:89:88:25:D2:F0:64:98:9B:38:C7:81:F2:A8:53:51:89:A2:69:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/OdO1hcbdWYz_Iw6xZ112ZRiYkk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.169.32.0/19 185.107.148.0/22 Signature Algorithm: sha256WithRSAEncryption 16:02:8c:88:b9:69:a6:bb:81:47:31:a2:1d:1a:fd:d4:dd:0b: e2:70:84:99:83:8b:d6:2f:28:4d:d7:9d:6e:22:c6:5a:f3:0f: e1:02:ab:0c:63:a8:7b:98:3e:95:bd:58:1a:42:b7:ce:71:61: 20:59:65:c5:c8:84:49:cd:5b:37:7c:f9:a3:3b:9b:4f:a5:38: 37:36:15:87:04:11:ee:cc:ed:82:d3:99:25:b5:b2:e2:2b:03: 26:ea:9b:44:f1:1c:5c:9c:8a:72:1f:ae:29:01:be:6c:3d:49: c4:7c:5b:1d:0d:88:32:d2:a6:a2:5e:1a:9a:b8:99:f0:4f:c8: de:52:3b:d1:59:47:cc:17:60:49:84:a6:69:0e:84:ac:2d:b1: 9d:1b:66:48:eb:be:9e:9e:e0:3b:d5:7d:91:d4:92:81:f1:27: b7:1e:b7:33:63:74:17:bd:83:91:30:02:cf:81:85:5f:6d:80: 1b:fa:6f:56:4a:cc:d2:87:fa:27:f8:2f:a8:fe:91:48:bc:c1: b1:67:db:69:24:68:bd:61:c3:2e:57:c6:4b:9f:0d:2d:fe:40: 1f:f6:95:54:b4:40:e2:5c:a0:f2:10:c0:e5:c5:ea:3b:74:05: 79:5e:87:f8:7d:e7:fc:52:96:b0:0b:de:d6:6e:08:5c:44:69: c5:e4:fa:9d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WWFhpUNP6X+hQXkDqGLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ODgyNWQyZjA2NDk4OWIzOGM3ODFmMmE4NTM1MTg5YTI2 OTI4YzMwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWQzYjU4NWM2ZGQ1OThjZmYyMzBlYjE2NzVkNzY2NTE4OTg5MjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVN+9trQLR6fWaPsW8rx0wvRbGMI kmZlnbW2fSVdwunOSrp9GEips5QOc1XTJCzTxhF3HHkrecnJt8GkqsiFrlvy8dDY 9WzTQWqeJf+9Fl09o+LiqUEIMQ8eZE+H3YmfOutwGPwHFDYpfWxyMKSAdOnail6u u00W6YLZJ156u+QlSh7jivMEqDRxkkg3UA56Q7/hz4lyeDTpF1jDQdbEG7yhLf2V lm9X2OPSvdbxJGKpvtI66vea+xrH7bvN0QxR0OqoDzUkhSp4IJNakWRUg6uPkMW6 oTlkKn95opA58H1HqFAkOs2z2au8XjeGrCB5Wd3NF8d0uqJ2fGNXjdjNKQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDnTtYXG3VmM/yMOsWdddmUYmJJPMB8GA1UdIwQY MBaAFImIJdLwZJibOMeB8qhTUYmiaSjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVlnbDB2QmttSnM0eDRIeXFGTlJpYUpwS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wYWE0ZDAtMDVlNC00ODAyLTk5ZDgt ZWNhZTQxNDQ2Yjc3LzEvT2RPMWhjYmRXWXpfSXc2eFoxMTJaUmlZa2s4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wYWE0ZDAtMDVlNC00ODAyLTk5ZDgtZWNhZTQxNDQ2Yjc3 LzEvaVlnbDB2QmttSnM0eDRIeXFGTlJpYUpwS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFPqkgAwQC uWuUMA0GCSqGSIb3DQEBCwUAA4IBAQAWAoyIuWmmu4FHMaIdGv3U3QvicISZg4vW LyhN151uIsZa8w/hAqsMY6h7mD6VvVgaQrfOcWEgWWXFyIRJzVs3fPmjO5tPpTg3 NhWHBBHuzO2C05kltbLiKwMm6ptE8RxcnIpyH64pAb5sPUnEfFsdDYgy0qaiXhqa uJnwT8jeUjvRWUfMF2BJhKZpDoSsLbGdG2ZI676enuA71X2R1JKB8Se3HrczY3QX vYORMALPgYVfbYAb+m9WSszSh/on+C+o/pFIvMGxZ9tpJGi9YcMuV8ZLnw0t/kAf 9pVUtEDiXKDyEMDlxeo7dAV5Xof4fef8UpawC97WbghcRGnF5Pqd -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:34 2026 by rpki-client