This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/OtBfd7lwBBx9oZDAv86N0_1cG1M.roa File: OtBfd7lwBBx9oZDAv86N0_1cG1M.roa (raw, json) Hash identifier: mYV8iF1/FRjdO4p86cpzPjgZ6mNMXzTtT3N1Gdwv9LY= Subject key identifier: 3A:D0:5F:77:B9:70:04:1C:7D:A1:90:C0:BF:CE:8D:D3:FD:5C:1B:53 Certificate issuer: /CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9 Certificate serial: 019B7B36DFF85331F904AFFD0ADFB62F043C Authority key identifier: E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/OtBfd7lwBBx9oZDAv86N0_1cG1M.roa Signing time: Thu 01 Jan 2026 20:19:12 +0000 ROA not before: Thu 01 Jan 2026 20:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205186 IP address blocks: 194.164.179.0/24 maxlen: 24 2a01:f680:30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:df:f8:53:31:f9:04:af:fd:0a:df:b6:2f:04:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9 Validity Not Before: Jan 1 20:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ad05f77b970041c7da190c0bfce8dd3fd5c1b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:95:67:07:16:d7:7b:c8:85:6b:f2:eb:f5:79: 62:31:ca:11:35:b4:67:f5:98:46:6e:0c:55:90:5c: 8f:01:04:c6:22:15:3f:6b:82:de:77:bd:70:0f:5f: 09:17:ac:f4:3f:07:6c:5b:64:e0:99:f8:8d:33:45: 96:75:cd:f3:07:70:ba:1d:6f:87:0f:91:7a:ee:a7: 38:92:8e:14:1d:ca:b8:2f:61:ac:00:04:34:50:69: 28:9c:a2:e6:87:88:b3:ef:97:1f:46:28:07:50:6d: de:25:c0:a8:87:ef:7d:e4:e3:a3:b8:12:1e:eb:44: 47:6d:ca:ea:32:fc:ca:c0:31:30:df:a5:9f:79:a8: ce:a6:ab:1f:ef:b4:27:38:6c:49:ca:d0:ed:44:d9: e8:9d:61:86:64:fb:a7:8f:7d:93:7f:f0:da:13:3a: ee:6a:f7:1b:11:8d:12:c9:90:e4:8d:fc:76:a1:f8: c7:9e:6f:a0:ce:d4:e8:09:a8:29:7b:d7:70:3d:19: 1e:06:bd:73:76:19:2c:ea:6d:e3:9d:b7:fb:09:e3: a8:1e:4f:b1:7b:71:a6:ee:ee:96:41:f7:f0:8e:c5: 8b:a8:1a:43:31:8b:6e:62:c9:f8:29:e7:60:fa:b9: a8:e5:74:4c:31:2e:dd:ea:16:5a:bc:8e:d7:5e:42: 2b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D0:5F:77:B9:70:04:1C:7D:A1:90:C0:BF:CE:8D:D3:FD:5C:1B:53 X509v3 Authority Key Identifier: keyid:E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/OtBfd7lwBBx9oZDAv86N0_1cG1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.164.179.0/24 IPv6: 2a01:f680:30::/48 Signature Algorithm: sha256WithRSAEncryption 85:4e:da:13:d2:39:fc:60:a3:b6:8d:95:7a:c3:ee:90:39:f2: b6:34:a3:5e:63:52:c2:34:62:c4:4d:57:87:00:38:14:40:dc: ff:88:f5:f0:15:b2:96:7c:0e:8e:d7:ba:05:31:7e:e3:7f:db: 4e:0b:70:63:aa:3d:61:2a:59:7a:98:b1:15:b8:a0:85:a1:79: 03:e0:73:04:04:c0:9e:ce:3b:31:1b:80:db:f0:3b:bc:5e:53: 4f:c5:f1:e9:16:a7:c8:ae:9e:58:80:6c:7f:b8:48:96:cd:2d: bb:0c:92:3a:93:ef:0a:28:ab:c8:bb:09:da:13:79:bd:6c:97: 60:32:34:25:57:ee:e1:d5:9d:4e:d5:8e:4c:b2:bc:09:ce:d9: 8b:0a:03:aa:f3:c2:48:56:39:1e:3d:18:3a:34:e7:4a:2c:21: ec:4d:c5:87:df:18:39:f0:32:46:07:74:8f:57:65:8f:63:c1: b4:04:3b:15:1e:0a:16:f8:ce:26:e4:32:5d:35:5e:5f:68:63: 1b:b3:b8:c9:91:cb:51:a4:54:7d:ab:d3:6c:25:90:e0:b1:4e: f9:21:50:54:43:b1:45:54:5d:dc:31:83:fb:98:88:fa:3c:1c: d2:d6:66:65:58:6c:9c:e8:7f:c5:a3:6a:cf:0b:81:e2:8e:28: b9:3a:73:22 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7Nt/4UzH5BK/9Ct+2LwQ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Y2ZhYmIyYjVkNzhmZjlmYmJkYzFlMzdkZDM3YjZmYzM0 ZjExZDkwHhcNMjYwMTAxMjAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWQwNWY3N2I5NzAwNDFjN2RhMTkwYzBiZmNlOGRkM2ZkNWMxYjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZVnBxbXe8iFa/Lr9XliMcoRNbRn 9ZhGbgxVkFyPAQTGIhU/a4Led71wD18JF6z0PwdsW2TgmfiNM0WWdc3zB3C6HW+H D5F67qc4ko4UHcq4L2GsAAQ0UGkonKLmh4iz75cfRigHUG3eJcCoh+995OOjuBIe 60RHbcrqMvzKwDEw36WfeajOpqsf77QnOGxJytDtRNnonWGGZPunj32Tf/DaEzru avcbEY0SyZDkjfx2ofjHnm+gztToCagpe9dwPRkeBr1zdhks6m3jnbf7CeOoHk+x e3Gm7u6WQffwjsWLqBpDMYtuYsn4Kedg+rmo5XRMMS7d6hZavI7XXkIrXQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDrQX3e5cAQcfaGQwL/OjdP9XBtTMB8GA1UdIwQY MBaAFOjPq7K114/5+73B433Te2/DTxHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk0tcnNyWFhqX243dmNIamZkTjdiOE5QRWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hODJiNjUtODU2NS00Zjg2LWJiZTgt YjM3MDA4NGEyN2Y3LzEvT3RCZmQ3bHdCQng5b1pEQXY4Nk4wXzFjRzFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9hODJiNjUtODU2NS00Zjg2LWJiZTgtYjM3MDA4NGEyN2Y3 LzEvNk0tcnNyWFhqX243dmNIamZkTjdiOE5QRWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwqSzMA8E AgACMAkDBwAqAfaAADAwDQYJKoZIhvcNAQELBQADggEBAIVO2hPSOfxgo7aNlXrD 7pA58rY0o15jUsI0YsRNV4cAOBRA3P+I9fAVspZ8Do7XugUxfuN/204LcGOqPWEq WXqYsRW4oIWheQPgcwQEwJ7OOzEbgNvwO7xeU0/F8ekWp8iunliAbH+4SJbNLbsM kjqT7wooq8i7CdoTeb1sl2AyNCVX7uHVnU7VjkyyvAnO2YsKA6rzwkhWOR49GDo0 50osIexNxYffGDnwMkYHdI9XZY9jwbQEOxUeChb4zibkMl01Xl9oYxuzuMmRy1Gk VH2r02wlkOCxTvkhUFRDsUVUXdwxg/uYiPo8HNLWZmVYbJzof8Wjas8LgeKOKLk6 cyI= -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:13 2026 by rpki-client