This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/otTutevZuJ6eolnFpw2U1FHmlNA.roa File: otTutevZuJ6eolnFpw2U1FHmlNA.roa (raw, json) Hash identifier: MYGZzYKczjODGic9nVPSjxLsW749qLjihm8rlEBU9CQ= Subject key identifier: A2:D4:EE:B5:EB:D9:B8:9E:9E:A2:59:C5:A7:0D:94:D4:51:E6:94:D0 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019AEEF33EBBFDF9A401DD4DD388FFDA4D82 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/otTutevZuJ6eolnFpw2U1FHmlNA.roa Signing time: Fri 05 Dec 2025 14:38:29 +0000 ROA not before: Fri 05 Dec 2025 14:38:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 400039 IP address blocks: 146.19.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:f3:3e:bb:fd:f9:a4:01:dd:4d:d3:88:ff:da:4d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Dec 5 14:38:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a2d4eeb5ebd9b89e9ea259c5a70d94d451e694d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:5e:8d:65:6f:e1:3c:71:93:ee:90:61:7e: 31:88:4f:2e:61:4f:ac:e5:12:0f:0e:8f:07:31:6e: 42:d8:3a:6d:1b:1a:35:14:e3:92:b0:fb:44:ed:7d: d9:46:47:29:3d:ab:6c:c6:d6:a3:17:8e:6e:88:45: 6b:1a:a2:75:67:e1:ae:67:b1:67:14:57:06:c6:b2: e0:b3:d8:f5:dc:3d:5e:22:2d:11:6e:59:75:44:ee: 7b:9a:4f:9e:cd:9a:7d:e2:c8:22:af:ef:11:29:d7: 00:b2:ef:7b:85:e7:16:40:18:0f:fd:d8:c1:8a:0c: a0:21:db:39:36:b5:74:40:b2:51:f4:d4:ae:61:5d: ea:d1:38:f3:78:28:8a:d2:65:7a:64:8c:58:7f:56: 05:76:76:bd:82:e7:94:c3:30:dd:20:66:5c:b1:5d: df:f4:fa:62:8a:d8:61:bd:39:c0:db:8a:24:f6:7d: ea:bd:46:20:ca:62:2c:6a:49:0a:dd:aa:27:5a:f7: ad:c2:53:7f:89:ac:75:54:c2:f6:63:e4:db:05:13: 0b:f8:a3:42:66:9a:34:0e:28:32:d2:13:7f:4d:41: 85:a3:74:32:50:35:c2:5d:9e:be:1d:d7:25:8b:ca: 97:b6:c8:c7:53:ce:66:ad:7c:d9:91:8a:db:4e:6a: 6c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D4:EE:B5:EB:D9:B8:9E:9E:A2:59:C5:A7:0D:94:D4:51:E6:94:D0 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/otTutevZuJ6eolnFpw2U1FHmlNA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.92.0/24 Signature Algorithm: sha256WithRSAEncryption 55:a4:35:d0:e1:e7:cd:0d:63:e0:ef:f5:c6:ee:89:e2:58:c0: 2a:d3:64:74:05:1f:f9:6e:c6:e2:a7:90:3f:ad:58:41:f8:47: 46:60:bf:62:3a:78:02:4f:dc:d7:19:43:51:b9:10:b6:da:f7: 74:ff:04:da:70:25:82:e9:f7:e3:00:19:fc:f3:33:ad:73:53: 70:dd:f5:6b:e6:44:66:a6:c6:1e:8f:0d:83:f7:6d:6a:c2:08: c3:2c:c7:85:9f:f6:d2:a4:a5:83:3f:f2:70:15:da:73:de:c5: 92:ca:e9:26:2d:07:32:e9:65:52:7b:78:15:66:66:42:00:1c: fd:98:8e:53:95:0b:d1:08:6f:0a:f3:ff:d1:0c:5a:25:23:46: 54:e6:18:58:3b:e2:78:85:e4:8b:42:29:14:b1:63:11:47:a6: 9a:7d:6d:57:26:b2:1d:f5:77:a7:bc:b1:34:6e:bc:1e:7a:e7: 7d:1a:d5:8b:58:47:8f:aa:18:32:b0:7b:9b:90:17:b3:92:70: 14:66:5a:09:3c:09:c4:e8:69:0e:14:39:19:15:13:cd:6d:34: 97:f3:d7:4e:7b:15:34:dc:a1:00:10:12:e3:51:33:97:91:13: aa:25:f5:63:58:e2:11:56:3a:46:f0:c0:e7:70:47:ba:db:83: 34:01:a1:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZru8z67/fmkAd1N04j/2k2CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjUxMjA1MTQzODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmQ0ZWViNWViZDliODllOWVhMjU5YzVhNzBkOTRkNDUxZTY5NGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyhejWVv4Txxk+6QYX4xiE8uYU+s 5RIPDo8HMW5C2DptGxo1FOOSsPtE7X3ZRkcpPatsxtajF45uiEVrGqJ1Z+GuZ7Fn FFcGxrLgs9j13D1eIi0Rbll1RO57mk+ezZp94sgir+8RKdcAsu97hecWQBgP/djB igygIds5NrV0QLJR9NSuYV3q0TjzeCiK0mV6ZIxYf1YFdna9gueUwzDdIGZcsV3f 9PpiithhvTnA24ok9n3qvUYgymIsakkK3aonWvetwlN/iax1VML2Y+TbBRML+KNC Zpo0Digy0hN/TUGFo3QyUDXCXZ6+Hdcli8qXtsjHU85mrXzZkYrbTmps+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKLU7rXr2bienqJZxacNlNRR5pTQMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvb3RUdXRldlp1SjZlb2xuRnB3MlUxRkhtbE5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNcMA0G CSqGSIb3DQEBCwUAA4IBAQBVpDXQ4efNDWPg7/XG7oniWMAq02R0BR/5bsbip5A/ rVhB+EdGYL9iOngCT9zXGUNRuRC22vd0/wTacCWC6ffjABn88zOtc1Nw3fVr5kRm psYejw2D921qwgjDLMeFn/bSpKWDP/JwFdpz3sWSyukmLQcy6WVSe3gVZmZCABz9 mI5TlQvRCG8K8//RDFolI0ZU5hhYO+J4heSLQikUsWMRR6aafW1XJrId9XenvLE0 brweeud9GtWLWEePqhgysHubkBezknAUZloJPAnE6GkOFDkZFRPNbTSX89dOexU0 3KEAEBLjUTOXkROqJfVjWOIRVjpG8MDncEe624M0AaEw -----END CERTIFICATE-----Generated at Fri Dec 5 17:53:17 2025 by rpki-client