This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/OTWhYyuLQkjCKbz9jUHCD19EFpo.roa File: OTWhYyuLQkjCKbz9jUHCD19EFpo.roa (raw, json) Hash identifier: vWGmjIJCSNv5fdFMpQ8zZyjmVzro4Z5X4Sdye++7cOU= Subject key identifier: 39:35:A1:63:2B:8B:42:48:C2:29:BC:FD:8D:41:C2:0F:5F:44:16:9A Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767 Certificate serial: 019B78A3671E418D71C23C903F63B3B11216 Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/OTWhYyuLQkjCKbz9jUHCD19EFpo.roa Signing time: Thu 01 Jan 2026 08:18:53 +0000 ROA not before: Thu 01 Jan 2026 08:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197301 IP address blocks: 80.71.128.0/20 maxlen: 21 194.62.168.0/22 maxlen: 23 2a01:7a80::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:67:1e:41:8d:71:c2:3c:90:3f:63:b3:b1:12:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767 Validity Not Before: Jan 1 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3935a1632b8b4248c229bcfd8d41c20f5f44169a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:83:02:24:11:30:6a:3b:09:42:6c:e9:24: c0:77:12:87:d7:fa:00:37:c4:a7:f2:30:d4:7e:52: e6:58:22:d4:6b:aa:72:73:e5:ba:9c:8a:ab:48:f0: 3b:7c:c5:67:5a:93:1d:3e:50:2b:87:20:3f:5f:48: b2:17:f7:d5:2c:7d:5b:ee:df:a6:71:f7:76:d6:92: cc:a4:a7:c9:41:72:14:6c:9c:c5:55:68:32:4a:fa: b1:e6:b8:99:bc:9b:93:16:91:e1:a8:d8:4c:9c:40: 9f:76:36:2b:07:c3:9d:9d:87:8a:90:ec:f6:41:e5: 65:65:5d:6e:30:7b:b1:69:4a:a8:e3:17:76:97:5b: 8d:22:69:a6:24:3a:dc:36:8d:02:62:87:b5:4a:9c: e4:a5:7e:6f:fc:41:06:74:e7:90:da:a9:9f:5b:ad: 29:c6:78:c2:73:d8:20:50:a1:fe:3a:9f:5e:a6:be: 85:e6:c1:31:1a:a6:89:a5:cd:4c:2c:82:00:78:cb: a3:0b:29:37:a3:2b:23:0e:5b:7a:e4:d2:c1:39:cc: 2f:26:bb:ba:7d:0b:6a:71:3a:fd:cd:4d:60:da:9a: 90:e6:66:d7:84:7c:30:aa:0a:b4:40:14:95:0e:fc: 12:90:d0:c3:81:6d:3e:ad:b6:6d:5d:eb:eb:eb:89: 45:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:35:A1:63:2B:8B:42:48:C2:29:BC:FD:8D:41:C2:0F:5F:44:16:9A X509v3 Authority Key Identifier: keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/OTWhYyuLQkjCKbz9jUHCD19EFpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.128.0/20 194.62.168.0/22 IPv6: 2a01:7a80::/29 Signature Algorithm: sha256WithRSAEncryption 85:e2:38:99:cd:7b:0a:2c:22:0e:25:44:93:dc:c6:d1:31:3f: 62:dd:b5:fb:a9:a8:93:a2:c7:a0:51:ec:c7:c0:cc:9b:38:9d: 4b:1b:e6:ca:aa:fb:4b:d6:ca:b1:e9:98:57:e1:28:8b:41:f1: 3e:57:07:2a:95:1e:1c:e7:7b:0c:15:3c:45:7d:42:7a:de:1b: ae:3b:70:43:3e:df:7b:5d:db:cc:91:3b:d4:b5:56:b9:8f:c1: 6f:85:d2:d3:9e:a5:ae:22:60:5c:3c:ab:2d:ab:9b:82:a9:bb: f4:41:62:c9:2a:7e:c3:f6:e3:bc:1b:b7:27:da:11:bd:71:bb: 9e:46:ec:03:85:a1:2a:91:dd:d5:35:98:3f:0c:35:1c:ae:7f: 33:4b:60:9e:a1:28:d6:db:da:e9:95:98:9b:09:31:c1:0c:54: 33:23:2c:d6:d5:69:67:90:32:4f:95:00:aa:e2:0e:90:d1:89: f9:3b:fd:7b:81:39:bd:b7:50:d6:35:e6:b4:43:86:6a:69:f7: b6:45:15:2a:e0:ff:ee:af:89:b6:1a:c7:22:24:69:6d:83:b7: cc:93:ab:4a:bb:61:55:d3:83:77:fd:be:c9:5e:28:03:67:56: 6d:5b:6b:5d:7c:e0:de:10:7f:b4:fa:05:ae:b7:c3:bf:3c:6f: 07:6c:4c:42 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4o2ceQY1xwjyQP2OzsRIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NGFlYTUzZWY2MGY4YThhOTM0NWU1ODI5ODJhOWE1OWJj MTM3NjcwHhcNMjYwMTAxMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTM1YTE2MzJiOGI0MjQ4YzIyOWJjZmQ4ZDQxYzIwZjVmNDQxNjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkSDAiQRMGo7CUJs6STAdxKH1/oA N8Sn8jDUflLmWCLUa6pyc+W6nIqrSPA7fMVnWpMdPlArhyA/X0iyF/fVLH1b7t+m cfd21pLMpKfJQXIUbJzFVWgySvqx5riZvJuTFpHhqNhMnECfdjYrB8OdnYeKkOz2 QeVlZV1uMHuxaUqo4xd2l1uNImmmJDrcNo0CYoe1SpzkpX5v/EEGdOeQ2qmfW60p xnjCc9ggUKH+Op9epr6F5sExGqaJpc1MLIIAeMujCyk3oysjDlt65NLBOcwvJru6 fQtqcTr9zU1g2pqQ5mbXhHwwqgq0QBSVDvwSkNDDgW0+rbZtXevr64lFZQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDk1oWMri0JIwim8/Y1Bwg9fRBaaMB8GA1UdIwQY MBaAFHRK6lPvYPioqTReWCmCqaWbwTdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZDM4Y2MtYzBmNi00MDE4LWI5Mjkt OWI2NGMyNTE1NmI5LzEvT1RXaFl5dUxRa2pDS2J6OWpVSENEMTlFRnBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82ZDM4Y2MtYzBmNi00MDE4LWI5MjktOWI2NGMyNTE1NmI5 LzEvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUEeAAwQC wj6oMA0EAgACMAcDBQMqAXqAMA0GCSqGSIb3DQEBCwUAA4IBAQCF4jiZzXsKLCIO JUST3MbRMT9i3bX7qaiTosegUezHwMybOJ1LG+bKqvtL1sqx6ZhX4SiLQfE+Vwcq lR4c53sMFTxFfUJ63huuO3BDPt97XdvMkTvUtVa5j8FvhdLTnqWuImBcPKstq5uC qbv0QWLJKn7D9uO8G7cn2hG9cbueRuwDhaEqkd3VNZg/DDUcrn8zS2CeoSjW29rp lZibCTHBDFQzIyzW1WlnkDJPlQCq4g6Q0Yn5O/17gTm9t1DWNea0Q4Zqafe2RRUq 4P/ur4m2GsciJGltg7fMk6tKu2FV04N3/b7JXigDZ1ZtW2tdfODeEH+0+gWut8O/ PG8HbExC -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:26 2026 by rpki-client