This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/_OTzMV2rChEKOe6EQENv97dsl1U.roa File: _OTzMV2rChEKOe6EQENv97dsl1U.roa (raw, json) Hash identifier: 7nL8A5gb8+P3YcITNFm2f0VLai2fLH11JBAUP9CV0/4= Subject key identifier: FC:E4:F3:31:5D:AB:0A:11:0A:39:EE:84:40:43:6F:F7:B7:6C:97:55 Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751 Certificate serial: 019B7AC826D9474FB16CDD992BF3BB9FCBE8 Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/_OTzMV2rChEKOe6EQENv97dsl1U.roa Signing time: Thu 01 Jan 2026 18:18:16 +0000 ROA not before: Thu 01 Jan 2026 18:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200852 IP address blocks: 185.93.196.0/22 maxlen: 22 185.93.196.0/23 maxlen: 23 185.93.197.0/24 maxlen: 24 185.93.198.0/23 maxlen: 23 193.239.208.0/24 maxlen: 24 212.46.63.0/24 maxlen: 24 2a02:ea00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:26:d9:47:4f:b1:6c:dd:99:2b:f3:bb:9f:cb:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751 Validity Not Before: Jan 1 18:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fce4f3315dab0a110a39ee8440436ff7b76c9755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:36:5e:1b:e8:be:d4:21:5c:17:f0:f4:cf:8c: ce:dd:65:48:85:71:a0:48:39:13:a9:f9:fd:91:e1: d7:48:89:6f:aa:fb:3c:78:6e:b0:6e:8d:47:6a:13: c8:49:cf:37:63:d2:55:bf:a8:bd:bb:04:b9:b6:2a: 9e:ea:9e:fa:a8:65:06:ec:51:a8:b1:50:10:29:4b: b5:ee:7d:5f:8d:9b:9e:6c:19:9f:50:e7:d1:6f:0a: 29:33:99:94:4a:3a:84:35:b6:15:47:a0:26:cb:f3: d9:49:20:4f:7e:79:17:62:3b:8a:02:52:95:8a:87: 76:7a:a7:94:b0:ef:af:16:30:80:36:12:03:ad:9b: fa:4a:1f:22:de:bc:da:d8:e6:9f:5f:3c:6f:de:b7: 41:ff:d3:e8:96:22:9b:94:b1:68:00:33:7f:4e:ff: e7:68:ed:ef:d5:32:16:1a:c5:41:2f:cd:b2:9e:c7: ac:31:cd:84:55:a5:d3:98:30:89:37:47:b6:8f:8b: 22:8e:99:eb:6f:ed:c8:e4:b4:23:8f:67:e4:6b:32: df:ab:68:8a:2f:5b:00:d9:52:0c:c4:e9:a3:6a:8d: 9d:2c:cf:dd:c0:44:e2:43:95:e6:05:9c:83:0c:fd: 75:ca:e8:cf:8a:c6:81:9b:da:dc:3a:23:3b:bf:4f: 3e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E4:F3:31:5D:AB:0A:11:0A:39:EE:84:40:43:6F:F7:B7:6C:97:55 X509v3 Authority Key Identifier: keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/_OTzMV2rChEKOe6EQENv97dsl1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.196.0/22 193.239.208.0/24 212.46.63.0/24 IPv6: 2a02:ea00::/29 Signature Algorithm: sha256WithRSAEncryption 42:68:fa:32:f5:16:ae:e6:ec:22:d0:a6:68:a6:f1:a9:e1:c2: 59:c2:58:17:3b:9f:a7:b9:35:dd:e8:4e:fc:95:2f:1a:10:73: aa:4b:bb:80:db:e8:e3:84:71:ba:76:04:38:39:d6:0b:c4:81: b3:e2:76:3a:20:66:b2:5e:c6:d9:6d:6c:9b:2d:73:6f:1c:e7: 5e:fc:7c:b5:6d:0d:5d:e7:82:4c:83:dd:d9:d9:cf:47:52:1d: 63:25:ce:5e:91:75:6c:4e:8b:00:4a:18:88:c7:47:82:f4:83: 54:e9:a9:eb:91:92:03:ea:fb:64:21:8d:2a:8f:af:66:22:de: 50:25:db:61:9f:a2:4a:f4:33:92:61:8e:0e:bd:bc:ca:70:13: 7f:d1:97:2c:80:21:2a:77:f3:88:7f:dc:f9:ac:ea:34:cd:fd: 2d:e4:0b:46:66:1c:05:f6:0f:19:a5:16:cc:4e:a4:20:51:cd: 11:06:87:23:fc:71:57:ec:b2:2a:76:c9:8f:5e:d5:b8:61:85: bd:26:bf:4e:6f:18:d1:e7:33:dc:52:bb:48:7a:2a:3d:e7:4d: d9:02:6c:63:b8:6a:c9:65:86:c6:ef:29:ec:ec:10:b6:cd:ae: 79:22:36:c3:04:5a:3e:1b:52:ab:44:b0:6d:13:29:4e:56:9b: f5:8a:d0:9a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6yCbZR0+xbN2ZK/O7n8voMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOTcyZDQ0Mjc2ZWE0MTAyZWY2YWVkMzBmMmFlNThlOTli M2U3NTEwHhcNMjYwMTAxMTgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2U0ZjMzMTVkYWIwYTExMGEzOWVlODQ0MDQzNmZmN2I3NmM5NzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/TZeG+i+1CFcF/D0z4zO3WVIhXGg SDkTqfn9keHXSIlvqvs8eG6wbo1HahPISc83Y9JVv6i9uwS5tiqe6p76qGUG7FGo sVAQKUu17n1fjZuebBmfUOfRbwopM5mUSjqENbYVR6Amy/PZSSBPfnkXYjuKAlKV iod2eqeUsO+vFjCANhIDrZv6Sh8i3rza2OafXzxv3rdB/9PoliKblLFoADN/Tv/n aO3v1TIWGsVBL82ynsesMc2EVaXTmDCJN0e2j4sijpnrb+3I5LQjj2fkazLfq2iK L1sA2VIMxOmjao2dLM/dwETiQ5XmBZyDDP11yujPisaBm9rcOiM7v08+JwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFPzk8zFdqwoRCjnuhEBDb/e3bJdVMB8GA1UdIwQY MBaAFL2XLUQnbqQQLvau0w8q5Y6Zs+dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80MTlkMWItNThiMC00NDgzLTkyZDIt ODZjMWVlMmE5ZWJhLzEvX09Uek1WMnJDaEVLT2U2RVFFTnY5N2RzbDFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS80MTlkMWItNThiMC00NDgzLTkyZDItODZjMWVlMmE5ZWJh LzEvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuV3EAwQA we/QAwQA1C4/MA0EAgACMAcDBQMqAuoAMA0GCSqGSIb3DQEBCwUAA4IBAQBCaPoy 9Rau5uwi0KZopvGp4cJZwlgXO5+nuTXd6E78lS8aEHOqS7uA2+jjhHG6dgQ4OdYL xIGz4nY6IGayXsbZbWybLXNvHOde/Hy1bQ1d54JMg93Z2c9HUh1jJc5ekXVsTosA ShiIx0eC9INU6anrkZID6vtkIY0qj69mIt5QJdthn6JK9DOSYY4OvbzKcBN/0Zcs gCEqd/OIf9z5rOo0zf0t5AtGZhwF9g8ZpRbMTqQgUc0RBocj/HFX7LIqdsmPXtW4 YYW9Jr9ObxjR5zPcUrtIeio9503ZAmxjuGrJZYbG7yns7BC2za55IjbDBFo+G1Kr RLBtEylOVpv1itCa -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:37 2026 by rpki-client