This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/olLV4SbqUJ3z5a7HJ7Eva4wXMo8.roa File: olLV4SbqUJ3z5a7HJ7Eva4wXMo8.roa (raw, json) Hash identifier: DvzOagp2lGIceeK3FkMPLVn9xoT8VD4iuom7PdIZAFg= Subject key identifier: A2:52:D5:E1:26:EA:50:9D:F3:E5:AE:C7:27:B1:2F:6B:8C:17:32:8F Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d Certificate serial: 019B7AC77ACD6599755A0D119212B2B887EE Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/olLV4SbqUJ3z5a7HJ7Eva4wXMo8.roa Signing time: Thu 01 Jan 2026 18:17:32 +0000 ROA not before: Thu 01 Jan 2026 18:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57000 IP address blocks: 176.241.84.0/24 maxlen: 24 176.241.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:7a:cd:65:99:75:5a:0d:11:92:12:b2:b8:87:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d Validity Not Before: Jan 1 18:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a252d5e126ea509df3e5aec727b12f6b8c17328f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f2:a8:31:a4:f9:00:95:1f:11:da:2c:e6:9a: d6:cc:ad:6b:1c:b6:4b:4a:6f:bd:5e:08:01:e1:ac: 74:4b:c4:13:19:a0:45:bf:ef:61:22:27:a1:63:bc: b9:44:19:2b:fc:17:0c:d6:61:a1:de:8b:8d:ce:ad: 1e:ef:e2:ee:df:94:1b:4d:6e:a9:5f:09:be:a2:a4: ed:62:42:29:8d:81:37:2e:53:40:b0:9c:43:c2:56: 73:7c:c1:e9:06:31:0a:a1:3d:8f:6d:79:59:00:77: 85:de:24:e7:dd:f2:85:b8:22:f0:95:b0:6b:bb:12: 0d:74:21:6a:7f:5b:33:08:c9:0f:ed:a4:d3:4b:f5: 2a:5a:a5:f0:bd:4b:1a:37:56:ca:f9:55:ca:c6:7b: 29:d0:44:61:5e:41:56:44:40:79:8e:e4:06:6c:e3: 4c:9e:07:af:a3:0d:db:d5:b9:d7:04:81:d3:24:57: d5:41:03:63:35:c9:a7:61:5c:aa:19:fe:ad:41:35: 40:ab:e4:15:71:0d:8b:32:54:ba:94:82:ce:ce:a9: 9b:49:31:65:af:fc:fc:4a:88:d2:3b:ee:b5:73:fb: 21:ae:47:69:f2:36:29:27:4d:bc:b5:93:e6:c2:61: 0e:4a:86:7e:32:3c:e7:97:d5:91:61:31:7f:22:80: 65:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:52:D5:E1:26:EA:50:9D:F3:E5:AE:C7:27:B1:2F:6B:8C:17:32:8F X509v3 Authority Key Identifier: keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/olLV4SbqUJ3z5a7HJ7Eva4wXMo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.241.84.0/23 Signature Algorithm: sha256WithRSAEncryption 83:ee:4e:d7:9c:21:a7:90:ac:05:c4:b9:81:2f:94:51:a4:ec: cb:c1:92:c5:9d:7c:b7:e8:ff:49:1f:32:d2:2a:9e:e9:0a:23: f8:e2:ce:4f:05:5a:4f:64:3a:e8:bf:e2:d4:f1:1e:6f:4b:72: c2:4d:49:8d:76:26:02:16:cb:b0:9a:50:f4:78:d9:9b:79:41: 97:36:f0:e7:65:f8:6b:71:ed:4e:6e:0e:56:11:01:30:ba:57: e3:2c:c2:6e:0a:f4:57:aa:0f:fd:f1:3a:4a:0f:d2:da:ef:49: 68:45:6d:5b:64:48:ce:1a:8c:16:39:90:08:70:fe:86:ae:fc: 02:c2:92:ff:0a:70:3d:b1:6f:ad:5e:42:c7:5c:60:3a:58:23: 55:56:b0:ab:5d:51:33:33:b7:02:b5:91:fe:20:64:36:b0:00: bc:e0:80:c4:39:23:20:3b:76:c0:06:39:af:d1:29:58:d1:a1: fd:c7:b4:d4:e1:b6:04:91:a6:b8:d2:10:85:0f:87:de:11:05: c7:be:24:d8:07:e8:14:6c:85:29:b4:48:84:e1:99:1c:1d:b6: 4a:dc:e4:1b:d3:24:b6:96:d2:e2:8b:2d:b8:ed:8b:70:7b:80: b4:d0:27:ea:26:be:53:b8:92:33:eb:81:50:76:e1:c6:5e:c0: 1e:d8:08:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x3rNZZl1Wg0RkhKyuIfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZGZlMjZkNDAzMTQxYmU5MDU5YWIyMTQ0MzI1YjQwMmQ0 Y2FiN2QwHhcNMjYwMTAxMTgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjUyZDVlMTI2ZWE1MDlkZjNlNWFlYzcyN2IxMmY2YjhjMTczMjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofKoMaT5AJUfEdos5prWzK1rHLZL Sm+9XggB4ax0S8QTGaBFv+9hIiehY7y5RBkr/BcM1mGh3ouNzq0e7+Lu35QbTW6p Xwm+oqTtYkIpjYE3LlNAsJxDwlZzfMHpBjEKoT2PbXlZAHeF3iTn3fKFuCLwlbBr uxINdCFqf1szCMkP7aTTS/UqWqXwvUsaN1bK+VXKxnsp0ERhXkFWREB5juQGbONM ngevow3b1bnXBIHTJFfVQQNjNcmnYVyqGf6tQTVAq+QVcQ2LMlS6lILOzqmbSTFl r/z8SojSO+61c/shrkdp8jYpJ028tZPmwmEOSoZ+Mjznl9WRYTF/IoBlAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKJS1eEm6lCd8+WuxyexL2uMFzKPMB8GA1UdIwQY MBaAFGTf4m1AMUG+kFmrIUQyW0AtTKt9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81ZDYyNTUtNjVjOS00YmZhLWI5ZDct ZjY1NzUxOWQwMjMzLzEvb2xMVjRTYnFVSjN6NWE3SEo3RXZhNHdYTW84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81ZDYyNTUtNjVjOS00YmZhLWI5ZDctZjY1NzUxOWQwMjMz LzEvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsPFUMA0G CSqGSIb3DQEBCwUAA4IBAQCD7k7XnCGnkKwFxLmBL5RRpOzLwZLFnXy36P9JHzLS Kp7pCiP44s5PBVpPZDrov+LU8R5vS3LCTUmNdiYCFsuwmlD0eNmbeUGXNvDnZfhr ce1Obg5WEQEwulfjLMJuCvRXqg/98TpKD9La70loRW1bZEjOGowWOZAIcP6GrvwC wpL/CnA9sW+tXkLHXGA6WCNVVrCrXVEzM7cCtZH+IGQ2sAC84IDEOSMgO3bABjmv 0SlY0aH9x7TU4bYEkaa40hCFD4feEQXHviTYB+gUbIUptEiE4ZkcHbZK3OQb0yS2 ltLiiy247Ytwe4C00CfqJr5TuJIz64FQduHGXsAe2Ajm -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:58 2026 by rpki-client