This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/OTX15qLfbfCg4l920b8Ycno5nLg.roa File: OTX15qLfbfCg4l920b8Ycno5nLg.roa (raw, json) Hash identifier: ztKu3mW1BZanFMNUW2qFzwnqCsd+wEElAKi2h4ZHb04= Subject key identifier: 39:35:F5:E6:A2:DF:6D:F0:A0:E2:5F:76:D1:BF:18:72:7A:39:9C:B8 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80B474C98473AB8B5CEB4A3358E6AC Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/OTX15qLfbfCg4l920b8Ycno5nLg.roa Signing time: Fri 02 Jan 2026 02:19:28 +0000 ROA not before: Fri 02 Jan 2026 02:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211373 IP address blocks: 88.216.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b4:74:c9:84:73:ab:8b:5c:eb:4a:33:58:e6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3935f5e6a2df6df0a0e25f76d1bf18727a399cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:90:09:74:50:a4:c5:a9:3b:ae:73:87:b9:56: 0b:2f:ec:b3:07:31:99:19:3a:83:2d:83:04:bf:62: c1:f3:96:73:d9:56:5a:02:0a:ad:ab:38:ba:11:82: 36:b5:83:49:f5:77:10:4a:96:83:7f:bc:5f:5e:93: fa:d9:99:e8:f9:73:48:f7:ef:eb:ab:9c:59:a9:ef: e5:e0:1d:6f:09:b5:b7:7d:72:76:e7:71:c1:89:31: ab:84:93:f1:7f:13:9b:07:a3:1f:1f:72:99:03:79: ee:c3:2b:56:54:88:ab:7f:ba:e8:c8:d8:aa:ad:79: 2d:05:e7:9c:6e:8a:5c:ff:b9:3d:4f:b5:1a:b9:59: 59:5f:e5:56:d8:00:3f:6b:b9:5d:b1:6d:c7:16:a3: f8:05:0b:5d:f2:71:db:70:df:82:57:2b:33:12:46: c7:51:16:e4:41:61:1b:43:5c:8f:9a:2f:b8:e7:02: 4f:04:98:7c:4c:74:cf:7c:60:b0:14:01:a9:92:10: 79:b5:41:bf:47:39:60:d4:98:a6:5e:2e:dd:53:7c: 0c:d7:92:3d:0d:49:e7:5a:51:28:23:10:af:9e:42: 71:17:ea:92:d1:81:08:a1:35:5f:fb:bd:43:56:d9: f8:6e:75:9f:92:c3:87:c1:fb:c7:8d:8a:51:fa:37: d0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:35:F5:E6:A2:DF:6D:F0:A0:E2:5F:76:D1:BF:18:72:7A:39:9C:B8 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/OTX15qLfbfCg4l920b8Ycno5nLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.216.34.0/24 Signature Algorithm: sha256WithRSAEncryption 54:d7:83:bb:7a:ae:f8:8a:c3:3b:36:6d:90:8b:84:ee:24:03: b1:07:02:ba:1d:b7:20:cc:35:86:b2:57:c7:82:68:bd:e9:e1: a6:d5:f8:e5:f2:0c:b3:9b:c5:fd:4e:bb:e3:90:b3:a4:73:b9: 48:b5:42:a0:c5:96:f4:f7:f7:e2:cb:36:22:15:fe:d8:0b:0f: 24:c2:8e:dc:04:7b:be:c5:05:df:00:85:67:26:f1:cb:94:91: 5f:34:0e:9d:80:13:5a:07:17:b5:02:30:05:92:75:37:15:9e: 3c:dc:5a:95:b9:ba:fc:50:8a:69:fd:02:46:89:35:75:c7:09: f3:f0:a5:8d:59:62:43:92:5b:c8:8a:04:dd:82:d8:b5:8b:3f: 36:25:ae:b6:c7:e3:97:18:17:04:56:72:9d:86:30:5b:10:e9: c1:ff:8d:d8:77:7a:ed:4d:c7:1f:ad:21:22:c6:54:20:fd:4b: 2b:19:1e:d1:9c:a1:17:55:6e:d2:c9:47:21:2e:37:c4:bd:f7: a4:cf:01:f3:09:2c:cf:93:9b:63:52:8e:60:37:49:b5:b2:dd: 40:55:be:e8:7d:42:b1:83:66:a2:d3:b5:e3:1c:f7:ca:a1:c2: 2a:7f:f3:9a:90:ef:f0:c3:96:d0:c6:e4:d6:b5:30:25:c1:1c: 6c:fb:4b:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLR0yYRzq4tc60ozWOasMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTM1ZjVlNmEyZGY2ZGYwYTBlMjVmNzZkMWJmMTg3MjdhMzk5Y2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJAJdFCkxak7rnOHuVYLL+yzBzGZ GTqDLYMEv2LB85Zz2VZaAgqtqzi6EYI2tYNJ9XcQSpaDf7xfXpP62Zno+XNI9+/r q5xZqe/l4B1vCbW3fXJ253HBiTGrhJPxfxObB6MfH3KZA3nuwytWVIirf7royNiq rXktBeecbopc/7k9T7UauVlZX+VW2AA/a7ldsW3HFqP4BQtd8nHbcN+CVyszEkbH URbkQWEbQ1yPmi+45wJPBJh8THTPfGCwFAGpkhB5tUG/Rzlg1JimXi7dU3wM15I9 DUnnWlEoIxCvnkJxF+qS0YEIoTVf+71DVtn4bnWfksOHwfvHjYpR+jfQyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDk19eai323woOJfdtG/GHJ6OZy4MB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvT1RYMTVxTGZiZkNnNGw5MjBiOFljbm81bkxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNgiMA0G CSqGSIb3DQEBCwUAA4IBAQBU14O7eq74isM7Nm2Qi4TuJAOxBwK6HbcgzDWGslfH gmi96eGm1fjl8gyzm8X9TrvjkLOkc7lItUKgxZb09/fiyzYiFf7YCw8kwo7cBHu+ xQXfAIVnJvHLlJFfNA6dgBNaBxe1AjAFknU3FZ483FqVubr8UIpp/QJGiTV1xwnz 8KWNWWJDklvIigTdgti1iz82Ja62x+OXGBcEVnKdhjBbEOnB/43Yd3rtTccfrSEi xlQg/UsrGR7RnKEXVW7SyUchLjfEvfekzwHzCSzPk5tjUo5gN0m1st1AVb7ofUKx g2ai07XjHPfKocIqf/OakO/ww5bQxuTWtTAlwRxs+0tm -----END CERTIFICATE-----Generated at Mon Jan 19 10:58:50 2026 by rpki-client