This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/odYIvbxaJeYmOjoyzYcsw6tdRBQ.roa File: odYIvbxaJeYmOjoyzYcsw6tdRBQ.roa (raw, json) Hash identifier: gjz6TPRGymxJ3q8bit5/XLbB9ysikFUi3nJ/upxA8J0= Subject key identifier: A1:D6:08:BD:BC:5A:25:E6:26:3A:3A:32:CD:87:2C:C3:AB:5D:44:14 Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49 Certificate serial: 019B78A28EEE715FC875C01DD2B1E41FA5FC Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/odYIvbxaJeYmOjoyzYcsw6tdRBQ.roa Signing time: Thu 01 Jan 2026 08:17:57 +0000 ROA not before: Thu 01 Jan 2026 08:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 195.10.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:8e:ee:71:5f:c8:75:c0:1d:d2:b1:e4:1f:a5:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49 Validity Not Before: Jan 1 08:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1d608bdbc5a25e6263a3a32cd872cc3ab5d4414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:80:bf:bd:c0:f4:14:4c:64:52:fe:2d:8b: f8:10:6b:3b:1c:03:6a:4d:b9:98:e0:e2:da:1f:6a: e4:94:cf:eb:38:b5:da:ab:ae:e5:9b:a5:e5:18:9a: af:9e:41:01:69:d4:a1:b4:b6:57:7e:0c:2a:39:69: 56:08:59:7f:75:df:45:bd:4e:72:54:b2:fb:4a:8a: 1c:94:d9:3f:a4:a2:b5:d8:55:3b:af:ed:ae:a9:cb: f7:f8:8b:fd:30:c0:7f:0c:a3:63:e3:09:14:ea:59: da:44:cf:a0:d3:ef:10:a5:bf:13:cd:65:42:27:55: 02:c3:65:8b:f5:f3:6d:92:4c:e0:f6:7d:8c:5b:3e: 11:4f:40:9c:46:0d:70:e2:4a:ca:64:e3:19:00:ea: f8:3b:da:38:b6:bf:62:fa:0d:7a:13:27:9f:20:65: 39:97:3c:d7:0b:8e:83:06:21:94:6a:dc:97:7a:fb: 7b:28:51:5b:36:f2:a3:ae:40:7a:a8:d2:38:ae:2a: e6:24:64:d4:df:9a:2b:c0:66:e3:17:07:90:9b:f3: ca:fb:55:9e:d5:a2:95:7c:46:fc:b3:e9:ad:7d:e1: 88:ef:7b:d9:e4:63:fd:98:83:15:81:88:25:f5:ec: 97:77:69:c1:1c:4f:8f:4b:be:bd:b8:cb:57:55:e4: db:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D6:08:BD:BC:5A:25:E6:26:3A:3A:32:CD:87:2C:C3:AB:5D:44:14 X509v3 Authority Key Identifier: keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/odYIvbxaJeYmOjoyzYcsw6tdRBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.10.220.0/24 Signature Algorithm: sha256WithRSAEncryption 04:12:b5:64:fc:c2:b1:ca:4f:11:a8:cf:af:b1:00:0c:c7:58: db:b6:7d:58:f4:e9:e2:35:d7:c5:fe:84:c5:dd:29:5a:81:33: ae:10:32:b1:4f:a3:57:0c:b4:01:42:91:5c:0a:c4:81:13:5c: 08:36:81:ec:be:28:00:2d:fe:a6:e6:5c:1d:2e:f6:4e:56:15: 93:c5:20:84:34:eb:44:da:45:98:a2:9d:a7:18:22:18:68:24: 6e:a4:c9:3c:34:e9:b2:d3:45:0c:61:74:ad:f9:87:48:c4:2c: 72:81:a5:8e:1b:f3:a3:06:a7:56:e1:67:67:ae:d0:6a:70:10: 44:26:43:c6:d8:f9:bb:f8:f7:dd:ac:df:e1:74:df:25:ea:d7: 6c:cc:05:f9:d8:48:fd:9e:ea:33:42:39:b0:cf:7e:c4:81:a3: 41:d0:1c:cd:93:dc:02:58:b2:ce:dd:d3:a8:25:c6:98:f5:48: 6f:ad:99:be:7d:58:19:07:74:fa:bd:af:a2:a3:7d:35:d3:02: 8e:16:28:1f:54:19:a7:81:bf:b2:43:47:18:41:a5:57:af:a3: d3:8c:19:39:9c:79:5e:0b:2a:e5:f4:24:ad:23:42:96:23:89: f1:43:41:3f:e5:ad:f0:d6:39:5b:64:5f:ab:53:db:2d:ee:ad: bd:cb:45:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oo7ucV/IdcAd0rHkH6X8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3YzAwZGUwMDdkNGFhNGE0MDMxZDQ3NjEwYjM5Yjc3NDkw OGJmNDkwHhcNMjYwMTAxMDgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWQ2MDhiZGJjNWEyNWU2MjYzYTNhMzJjZDg3MmNjM2FiNWQ0NDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7CAv73A9BRMZFL+LYv4EGs7HANq TbmY4OLaH2rklM/rOLXaq67lm6XlGJqvnkEBadShtLZXfgwqOWlWCFl/dd9FvU5y VLL7SooclNk/pKK12FU7r+2uqcv3+Iv9MMB/DKNj4wkU6lnaRM+g0+8Qpb8TzWVC J1UCw2WL9fNtkkzg9n2MWz4RT0CcRg1w4krKZOMZAOr4O9o4tr9i+g16EyefIGU5 lzzXC46DBiGUatyXevt7KFFbNvKjrkB6qNI4rirmJGTU35orwGbjFweQm/PK+1We 1aKVfEb8s+mtfeGI73vZ5GP9mIMVgYgl9eyXd2nBHE+PS769uMtXVeTbZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKHWCL28WiXmJjo6Ms2HLMOrXUQUMB8GA1UdIwQY MBaAFJfADeAH1KpKQDHUdhCzm3dJCL9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wMDc3YzUtZjBiZS00NjNmLWFiNzUt OGMzZGNjNDU5MDI2LzEvb2RZSXZieGFKZVltT2pveXpZY3N3NnRkUkJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wMDc3YzUtZjBiZS00NjNmLWFiNzUtOGMzZGNjNDU5MDI2 LzEvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwrcMA0G CSqGSIb3DQEBCwUAA4IBAQAEErVk/MKxyk8RqM+vsQAMx1jbtn1Y9OniNdfF/oTF 3SlagTOuEDKxT6NXDLQBQpFcCsSBE1wINoHsvigALf6m5lwdLvZOVhWTxSCENOtE 2kWYop2nGCIYaCRupMk8NOmy00UMYXSt+YdIxCxygaWOG/OjBqdW4WdnrtBqcBBE JkPG2Pm7+PfdrN/hdN8l6tdszAX52Ej9nuozQjmwz37EgaNB0BzNk9wCWLLO3dOo JcaY9UhvrZm+fVgZB3T6va+io3010wKOFigfVBmngb+yQ0cYQaVXr6PTjBk5nHle Cyrl9CStI0KWI4nxQ0E/5a3w1jlbZF+rU9st7q29y0Uf -----END CERTIFICATE-----Generated at Mon Jan 26 23:23:20 2026 by rpki-client