This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Ot9lzAsI_BYRWxJHShZ_sNy6TQE.roa File: Ot9lzAsI_BYRWxJHShZ_sNy6TQE.roa (raw, json) Hash identifier: okx1A4+uPrtu1VfsVJTCRu2rdB0eV794sdfC0zgIhxk= Subject key identifier: 3A:DF:65:CC:0B:08:FC:16:11:5B:12:47:4A:16:7F:B0:DC:BA:4D:01 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019B791059FDE34259EFA82B1CDF6EB2DAFD Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Ot9lzAsI_BYRWxJHShZ_sNy6TQE.roa Signing time: Thu 01 Jan 2026 10:17:53 +0000 ROA not before: Thu 01 Jan 2026 10:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 185.164.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:59:fd:e3:42:59:ef:a8:2b:1c:df:6e:b2:da:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3adf65cc0b08fc16115b12474a167fb0dcba4d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:5f:e4:b1:97:0a:09:9c:37:5f:05:e9:4e: 54:f1:d5:0b:bf:22:06:ce:a4:ec:e4:63:19:c3:2b: 3f:f5:27:1b:a9:6f:38:31:37:15:56:2c:62:b2:21: 2b:7a:07:72:60:20:39:bf:3b:06:3a:fd:0b:4c:54: d7:97:fc:ef:fa:dd:c8:d1:80:ee:b8:b3:7b:32:5c: 05:f8:89:f0:3c:99:ce:24:73:25:25:97:40:41:7a: b5:37:af:29:c1:48:dd:83:ba:de:44:4d:30:f3:69: cb:c2:b8:1a:1a:83:6f:04:a9:82:51:fc:54:78:e3: 2e:e4:e8:5c:1d:80:03:bc:8d:1e:69:d4:23:ab:e2: e1:3e:3c:d7:5c:3c:0e:dd:d4:2a:10:84:a6:6f:05: 74:5f:12:fb:70:78:13:bc:27:06:ef:47:f9:34:8a: 59:82:ec:83:2b:0e:9d:b9:6e:21:ce:9c:7a:0e:23: cb:e7:d0:63:9e:ce:90:52:c3:80:27:73:80:af:90: 86:0a:ad:16:4a:ea:2c:9f:4d:2e:60:e9:1d:48:3f: be:c4:7b:56:9f:9e:a8:29:bd:13:3c:c6:c3:dd:57: a5:4b:d3:f0:81:ca:77:c8:5d:ef:ad:cc:89:5d:e7: 1c:62:25:0e:d6:98:2d:1c:dc:55:24:0c:5f:bd:49: 2c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DF:65:CC:0B:08:FC:16:11:5B:12:47:4A:16:7F:B0:DC:BA:4D:01 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Ot9lzAsI_BYRWxJHShZ_sNy6TQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.175.0/24 Signature Algorithm: sha256WithRSAEncryption 56:79:62:d8:b6:f9:dc:70:03:fd:45:87:36:18:b5:a7:f7:5e: b3:84:8e:94:33:fa:11:47:14:72:af:6c:3a:4e:0c:9c:8e:ec: 64:5b:a1:3e:0f:1a:35:56:6a:c6:54:c1:8b:cc:2d:07:4b:80: f0:6d:92:58:44:6e:84:44:35:91:d8:77:8c:a4:7a:bc:23:d1: 67:10:66:3a:9a:f9:ca:a9:ee:bf:72:6a:92:27:c0:9e:65:57: c0:11:a4:16:9e:14:b4:7d:88:46:25:83:99:9f:fd:33:03:2d: b0:a1:92:05:e5:2c:26:7a:c7:55:5e:a0:26:d3:89:d2:a4:af: 5d:05:e8:89:aa:b6:a7:3f:89:3d:06:d7:f2:c2:3d:c3:5b:c1: ff:e0:b6:fe:ef:26:07:11:4d:82:98:09:73:74:cd:9c:c9:4d: f3:49:ba:97:fb:36:77:8a:06:0a:65:a4:0d:68:5f:cb:f6:01: f8:7f:9f:3d:48:85:81:34:a6:06:8e:67:74:ba:3f:06:a0:d5: a2:d8:29:52:94:92:90:02:5e:30:c0:31:c0:72:f9:1c:b7:36: 7e:c5:f6:7c:f2:e3:bc:bc:a7:6d:e3:a0:e0:18:db:0d:7e:69: 8c:c8:8d:55:c0:6b:d0:06:41:d6:f8:07:4e:27:a4:f1:e2:75: 1c:2d:d2:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFn940JZ76grHN9ustr9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWRmNjVjYzBiMDhmYzE2MTE1YjEyNDc0YTE2N2ZiMGRjYmE0ZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHJf5LGXCgmcN18F6U5U8dULvyIG zqTs5GMZwys/9ScbqW84MTcVVixisiEregdyYCA5vzsGOv0LTFTXl/zv+t3I0YDu uLN7MlwF+InwPJnOJHMlJZdAQXq1N68pwUjdg7reRE0w82nLwrgaGoNvBKmCUfxU eOMu5OhcHYADvI0eadQjq+LhPjzXXDwO3dQqEISmbwV0XxL7cHgTvCcG70f5NIpZ guyDKw6duW4hzpx6DiPL59Bjns6QUsOAJ3OAr5CGCq0WSuosn00uYOkdSD++xHtW n56oKb0TPMbD3VelS9Pwgcp3yF3vrcyJXeccYiUO1pgtHNxVJAxfvUksBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDrfZcwLCPwWEVsSR0oWf7Dcuk0BMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvT3Q5bHpBc0lfQllSV3hKSFNoWl9zTnk2VFFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaSvMA0G CSqGSIb3DQEBCwUAA4IBAQBWeWLYtvnccAP9RYc2GLWn916zhI6UM/oRRxRyr2w6 TgycjuxkW6E+Dxo1VmrGVMGLzC0HS4DwbZJYRG6ERDWR2HeMpHq8I9FnEGY6mvnK qe6/cmqSJ8CeZVfAEaQWnhS0fYhGJYOZn/0zAy2woZIF5SwmesdVXqAm04nSpK9d BeiJqranP4k9Btfywj3DW8H/4Lb+7yYHEU2CmAlzdM2cyU3zSbqX+zZ3igYKZaQN aF/L9gH4f589SIWBNKYGjmd0uj8GoNWi2ClSlJKQAl4wwDHAcvkctzZ+xfZ88uO8 vKdt46DgGNsNfmmMyI1VwGvQBkHW+AdOJ6Tx4nUcLdL9 -----END CERTIFICATE-----Generated at Tue Jan 20 00:56:03 2026 by rpki-client