This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/ODWTOuQzruA6ho_UERn0GtVqVf0.roa File: ODWTOuQzruA6ho_UERn0GtVqVf0.roa (raw, json) Hash identifier: 0ZGtpcC1iCRZQmVMpvlkv+WlgjdEhITWUsgUWVKAkJI= Subject key identifier: 38:35:93:3A:E4:33:AE:E0:3A:86:8F:D4:11:19:F4:1A:D5:6A:55:FD Certificate issuer: /CN=b2d7f999838aa163bf344fc69917bb60d12fdfc3 Certificate serial: 019B7DCA4B5886AC1B9F2D1BEBD70319B1CA Authority key identifier: B2:D7:F9:99:83:8A:A1:63:BF:34:4F:C6:99:17:BB:60:D1:2F:DF:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/ODWTOuQzruA6ho_UERn0GtVqVf0.roa Signing time: Fri 02 Jan 2026 08:19:28 +0000 ROA not before: Fri 02 Jan 2026 08:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206343 IP address blocks: 185.137.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.crl rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.mft rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:4b:58:86:ac:1b:9f:2d:1b:eb:d7:03:19:b1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2d7f999838aa163bf344fc69917bb60d12fdfc3 Validity Not Before: Jan 2 08:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3835933ae433aee03a868fd41119f41ad56a55fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0b:a5:11:1d:82:7c:0d:be:0e:21:5e:51:ba: 45:50:29:41:24:c2:fe:50:dc:9c:40:48:36:41:a9: 83:d4:99:48:6c:ee:55:fb:d0:50:af:f2:83:3c:6a: 1d:10:b6:1e:a3:d0:7e:08:c3:93:db:2d:87:35:42: d7:80:4a:fc:21:3b:b2:79:25:b6:0e:c0:3f:ce:13: 15:7e:2e:7e:8d:4e:2d:99:34:fb:96:24:63:0c:0a: 03:a7:10:22:89:f6:07:3d:f1:8f:8f:68:f6:0d:4b: c0:a4:02:dd:89:af:67:be:a2:b7:22:e2:b1:b9:1f: 70:a5:fe:c3:78:fa:28:cb:b7:5f:63:f1:72:63:e9: 76:22:3f:cf:eb:f0:12:68:c5:00:b1:1e:76:23:89: b3:f4:3d:c5:17:56:b5:04:a8:38:e2:1a:b2:3b:2b: 48:36:58:ef:d3:62:5e:5d:32:0e:00:c6:54:fa:3f: 0f:33:95:2d:48:58:66:85:d3:28:68:4e:47:e7:fe: 65:14:a4:4c:6f:ef:31:84:8b:1d:74:22:7b:d8:66: 83:32:bd:62:20:cf:6b:10:26:65:97:5f:25:c2:d6: 4d:7f:53:da:33:81:25:33:71:41:d9:e7:45:d0:78: a7:34:cf:2b:7f:3a:71:9c:c7:b3:1e:a3:53:a0:33: fa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:35:93:3A:E4:33:AE:E0:3A:86:8F:D4:11:19:F4:1A:D5:6A:55:FD X509v3 Authority Key Identifier: keyid:B2:D7:F9:99:83:8A:A1:63:BF:34:4F:C6:99:17:BB:60:D1:2F:DF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stf5mYOKoWO_NE_GmRe7YNEv38M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/ODWTOuQzruA6ho_UERn0GtVqVf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/698efb-c6b4-4d2c-9368-7cec2d5345b4/1/stf5mYOKoWO_NE_GmRe7YNEv38M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.158.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:08:ed:a5:8e:15:02:67:67:90:59:90:b3:45:ba:d6:ba:4f: af:38:e1:20:17:33:23:55:8d:6b:92:93:18:e9:3f:de:17:17: fe:26:4f:bf:e2:b5:f5:fb:56:16:13:c6:c3:41:24:f4:7a:1a: bc:ef:39:3b:dc:06:33:42:12:4d:3c:f7:b9:b7:6a:80:aa:72: 80:84:8e:ca:7a:e8:42:1e:0f:31:95:27:d3:68:06:c5:b3:af: 1f:ba:4a:0f:b3:df:6b:5c:26:e2:09:21:55:87:7e:63:44:e9: 3c:7a:e4:79:d7:18:c4:0e:7f:62:4d:a2:21:7e:cc:c3:9a:06: 05:48:43:36:70:dd:fb:e8:23:f5:d0:97:86:00:da:0b:d7:26: 62:1b:7b:96:75:c1:b9:25:a5:8f:66:c4:08:38:4b:ab:4f:ea: 25:d2:94:10:79:98:90:b2:f7:13:6c:b3:bf:f6:63:f0:f5:e9: 71:b6:5a:e9:e8:6f:c5:cf:64:51:df:6c:16:e4:73:b6:4a:ee: 01:48:6c:c1:92:ee:86:d2:df:6a:82:41:3c:a6:9b:85:a7:1d: ad:ea:3e:07:e2:f8:1e:70:8f:6c:b8:fb:41:ff:fa:9d:17:8a: 5e:a1:6a:25:5a:3e:ac:a3:44:69:b5:d4:30:11:5a:4c:19:81: 79:31:f2:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yktYhqwbny0b69cDGbHKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZDdmOTk5ODM4YWExNjNiZjM0NGZjNjk5MTdiYjYwZDEy ZmRmYzMwHhcNMjYwMTAyMDgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODM1OTMzYWU0MzNhZWUwM2E4NjhmZDQxMTE5ZjQxYWQ1NmE1NWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgulER2CfA2+DiFeUbpFUClBJML+ UNycQEg2QamD1JlIbO5V+9BQr/KDPGodELYeo9B+CMOT2y2HNULXgEr8ITuyeSW2 DsA/zhMVfi5+jU4tmTT7liRjDAoDpxAiifYHPfGPj2j2DUvApALdia9nvqK3IuKx uR9wpf7DePooy7dfY/FyY+l2Ij/P6/ASaMUAsR52I4mz9D3FF1a1BKg44hqyOytI Nljv02JeXTIOAMZU+j8PM5UtSFhmhdMoaE5H5/5lFKRMb+8xhIsddCJ72GaDMr1i IM9rECZll18lwtZNf1PaM4ElM3FB2edF0HinNM8rfzpxnMezHqNToDP65wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDg1kzrkM67gOoaP1BEZ9BrValX9MB8GA1UdIwQY MBaAFLLX+ZmDiqFjvzRPxpkXu2DRL9/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3RmNW1ZT0tvV09fTkVfR21SZTdZTkV2MzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82OThlZmItYzZiNC00ZDJjLTkzNjgt N2NlYzJkNTM0NWI0LzEvT0RXVE91UXpydUE2aG9fVUVSbjBHdFZxVmYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My82OThlZmItYzZiNC00ZDJjLTkzNjgtN2NlYzJkNTM0NWI0 LzEvc3RmNW1ZT0tvV09fTkVfR21SZTdZTkV2MzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYmeMA0G CSqGSIb3DQEBCwUAA4IBAQAbCO2ljhUCZ2eQWZCzRbrWuk+vOOEgFzMjVY1rkpMY 6T/eFxf+Jk+/4rX1+1YWE8bDQST0ehq87zk73AYzQhJNPPe5t2qAqnKAhI7KeuhC Hg8xlSfTaAbFs68fukoPs99rXCbiCSFVh35jROk8euR51xjEDn9iTaIhfszDmgYF SEM2cN376CP10JeGANoL1yZiG3uWdcG5JaWPZsQIOEurT+ol0pQQeZiQsvcTbLO/ 9mPw9elxtlrp6G/Fz2RR32wW5HO2Su4BSGzBku6G0t9qgkE8ppuFpx2t6j4H4vge cI9suPtB//qdF4peoWolWj6so0RptdQwEVpMGYF5MfIq -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:20 2026 by rpki-client