This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/OtTzKBhHOY6wOBoHAZ0VbR54kA4.roa File: OtTzKBhHOY6wOBoHAZ0VbR54kA4.roa (raw, json) Hash identifier: aU0rHFNkYFHdV5H8egljpHkLcw9iIq3HEwixa6GSrPc= Subject key identifier: 3A:D4:F3:28:18:47:39:8E:B0:38:1A:07:01:9D:15:6D:1E:78:90:0E Certificate issuer: /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a Certificate serial: 019B7C8090B9D9AAED5FDCFD346265E0D549 Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/OtTzKBhHOY6wOBoHAZ0VbR54kA4.roa Signing time: Fri 02 Jan 2026 02:19:19 +0000 ROA not before: Fri 02 Jan 2026 02:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62270 IP address blocks: 193.162.140.0/24 maxlen: 24 2a10:8080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:90:b9:d9:aa:ed:5f:dc:fd:34:62:65:e0:d5:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a Validity Not Before: Jan 2 02:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ad4f3281847398eb0381a07019d156d1e78900e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:30:f8:25:df:3e:dd:76:31:5e:d6:21:2e: 3d:4c:75:20:84:dd:7e:4a:c7:14:9e:93:be:7f:ca: dc:31:cd:da:38:54:8c:f9:e6:03:cc:a1:63:2a:10: 6d:67:4e:e6:34:ed:9d:4e:5e:73:a5:dc:5f:15:65: 44:e4:22:64:90:2a:1c:bf:3e:70:ae:45:95:f2:30: b8:65:9c:87:39:c6:53:a7:b3:9d:60:a4:62:5b:b2: 9d:54:6d:05:97:e3:6a:61:92:81:6c:28:b7:cc:3d: 24:d1:6d:d0:a9:80:06:94:82:09:6f:d8:2e:e9:cb: bd:f2:66:4b:05:3c:c8:2b:70:fa:89:79:74:77:10: 1f:1d:b4:17:4c:f9:8a:e9:33:74:a9:5c:5f:0d:fa: b4:17:b8:b7:ea:8a:d2:d4:bb:f6:d6:51:be:f0:45: 35:f1:4d:21:d4:2d:5a:f4:69:e9:bb:74:de:b4:11: 4c:c5:2f:1b:9b:19:1b:f3:28:44:85:36:e0:a9:ec: 8e:36:d8:ef:52:fe:1b:b3:46:0d:dd:31:3e:aa:30: b0:ef:ed:98:3e:71:50:f5:cf:bb:ff:c6:a0:21:fa: 7e:33:51:b6:2d:12:f8:6a:74:a1:4b:1b:2c:4f:30: 34:6f:76:31:15:1a:0e:3d:d2:0b:c6:fd:73:09:c6: ff:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D4:F3:28:18:47:39:8E:B0:38:1A:07:01:9D:15:6D:1E:78:90:0E X509v3 Authority Key Identifier: keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/OtTzKBhHOY6wOBoHAZ0VbR54kA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.162.140.0/24 IPv6: 2a10:8080::/29 Signature Algorithm: sha256WithRSAEncryption 8c:b1:93:b1:c5:06:f4:4f:79:0d:0f:52:85:8a:d1:f0:17:89: eb:47:54:6d:a9:3d:1a:11:bc:2a:8a:49:c6:f9:4a:b8:eb:a6: 7c:69:80:54:44:91:2c:21:6f:82:a0:49:01:c5:8e:29:9c:58: 8f:98:72:c9:e4:82:08:c0:ab:a6:06:a5:13:30:c1:5b:8b:8d: 90:00:8d:97:2a:01:83:8d:69:38:6d:d6:62:b2:d8:da:40:35: 53:71:45:42:56:71:47:5f:35:85:ac:fa:a5:74:9c:75:8d:a2: a8:c5:41:99:52:da:66:2a:af:37:30:f2:7d:d4:6f:05:e2:30: 9d:db:90:ec:eb:e3:d3:28:f2:30:f0:57:9b:91:e2:12:fb:23: ce:d2:57:81:34:fe:cb:1c:8e:37:39:4f:d3:45:59:70:a9:b0: e8:07:e6:bf:99:cf:ca:a6:0d:e3:a3:e6:52:1f:d4:08:a4:7a: b6:2b:3a:50:52:bb:e9:be:91:58:a8:98:de:77:45:c2:4a:38: 43:f5:25:ce:c0:51:cc:87:b6:70:4e:15:70:90:34:f3:dc:a5: 15:f2:83:45:46:b3:8a:23:bd:23:12:1d:ef:8c:77:3b:ec:23: 35:ef:dc:50:44:fd:cc:ca:ce:95:81:7a:2b:08:2d:a8:70:4a: 7e:07:f5:fd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gJC52artX9z9NGJl4NVJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YTA3Y2RjZDA5NTAzZWNmZTNlNjk3Y2MzMjY2OTg1MTgx YWU4MmEwHhcNMjYwMTAyMDIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWQ0ZjMyODE4NDczOThlYjAzODFhMDcwMTlkMTU2ZDFlNzg5MDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgcw+CXfPt12MV7WIS49THUghN1+ SscUnpO+f8rcMc3aOFSM+eYDzKFjKhBtZ07mNO2dTl5zpdxfFWVE5CJkkCocvz5w rkWV8jC4ZZyHOcZTp7OdYKRiW7KdVG0Fl+NqYZKBbCi3zD0k0W3QqYAGlIIJb9gu 6cu98mZLBTzIK3D6iXl0dxAfHbQXTPmK6TN0qVxfDfq0F7i36orS1Lv21lG+8EU1 8U0h1C1a9Gnpu3TetBFMxS8bmxkb8yhEhTbgqeyONtjvUv4bs0YN3TE+qjCw7+2Y PnFQ9c+7/8agIfp+M1G2LRL4anShSxssTzA0b3YxFRoOPdILxv1zCcb/4wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDrU8ygYRzmOsDgaBwGdFW0eeJAOMB8GA1UdIwQY MBaAFKSgfNzQlQPs/j5pfMMmaYUYGugqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEtCODNOQ1ZBLXotUG1sOHd5WnBoUmdhNkNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kODU0OGMtMzBiMS00OGE0LWFlMjgt ZDZiMGJjOTBmMmY1LzEvT3RUektCaEhPWTZ3T0JvSEFaMFZiUjU0a0E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9kODU0OGMtMzBiMS00OGE0LWFlMjgtZDZiMGJjOTBmMmY1 LzEvcEtCODNOQ1ZBLXotUG1sOHd5WnBoUmdhNkNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwaKMMA0E AgACMAcDBQMqEICAMA0GCSqGSIb3DQEBCwUAA4IBAQCMsZOxxQb0T3kND1KFitHw F4nrR1RtqT0aEbwqiknG+Uq466Z8aYBURJEsIW+CoEkBxY4pnFiPmHLJ5IIIwKum BqUTMMFbi42QAI2XKgGDjWk4bdZistjaQDVTcUVCVnFHXzWFrPqldJx1jaKoxUGZ UtpmKq83MPJ91G8F4jCd25Ds6+PTKPIw8FebkeIS+yPO0leBNP7LHI43OU/TRVlw qbDoB+a/mc/Kpg3jo+ZSH9QIpHq2KzpQUrvpvpFYqJjed0XCSjhD9SXOwFHMh7Zw ThVwkDTz3KUV8oNFRrOKI70jEh3vjHc77CM179xQRP3Mys6VgXorCC2ocEp+B/X9 -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:20 2026 by rpki-client