This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/OLT_saaFyTCh2Wp7QECV432JXik.roa File: OLT_saaFyTCh2Wp7QECV432JXik.roa (raw, json) Hash identifier: epnrEMMsND+vAHvnWq1lgQi5UnwwW4bJun39UcmLox8= Subject key identifier: 38:B4:FF:B1:A6:85:C9:30:A1:D9:6A:7B:40:40:95:E3:7D:89:5E:29 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83ABBEC87CDB03E2EC7A4A9B3C6331 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/OLT_saaFyTCh2Wp7QECV432JXik.roa Signing time: Fri 02 Jan 2026 16:21:34 +0000 ROA not before: Fri 02 Jan 2026 16:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200095 IP address blocks: 37.18.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:ab:be:c8:7c:db:03:e2:ec:7a:4a:9b:3c:63:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38b4ffb1a685c930a1d96a7b404095e37d895e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e7:a1:44:20:e9:f9:4a:bd:db:f8:3c:bb:76: fc:46:b1:f5:c0:f8:8e:1d:4e:6f:eb:ef:1a:e3:a3: 2c:ec:37:04:27:1c:fe:7f:bb:47:7d:8e:28:95:29: 9c:3e:e5:8f:5b:06:10:cc:0f:2f:15:3a:dd:89:5d: aa:ed:b1:75:5f:13:24:b0:26:b4:0c:f8:30:21:6a: ea:5d:d9:f5:f6:be:06:77:8d:09:fb:e9:be:ec:56: 71:b9:87:98:41:2a:c1:7a:16:97:73:96:d2:f7:96: c4:88:41:26:3c:24:f4:32:dd:3a:3a:bd:03:84:29: 7f:5d:7a:4c:4f:21:3b:88:3b:02:c2:d6:b3:8e:c8: 07:ea:38:f6:97:5a:a0:79:0f:15:3a:d5:fb:76:ae: 75:e6:00:fc:94:4a:60:b7:72:24:a2:04:8e:2e:48: 7e:63:8e:a7:3f:e1:dd:57:7f:8b:13:fd:2a:42:f8: 41:1e:0a:ff:7e:3b:cc:3e:25:e6:fe:6f:1a:69:5e: 85:40:17:a4:eb:e4:a5:41:29:3a:20:6b:08:4a:ab: 7d:29:7b:f7:b1:14:96:67:41:1a:7e:e6:0d:98:b1: 3b:2d:91:e1:57:0f:30:b2:81:2c:cc:be:f5:28:68: 4b:eb:48:aa:70:2f:49:dc:57:29:b4:cf:34:22:4c: a8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B4:FF:B1:A6:85:C9:30:A1:D9:6A:7B:40:40:95:E3:7D:89:5E:29 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/OLT_saaFyTCh2Wp7QECV432JXik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.13.0/24 Signature Algorithm: sha256WithRSAEncryption a9:a7:55:d5:2e:53:04:ec:f6:53:8d:3a:1d:e6:57:7c:c8:5a: ad:45:98:85:4a:45:74:b9:98:68:e5:14:40:c8:8e:fc:b8:42: c2:bd:25:92:cb:18:a8:ae:e3:a6:59:cc:7a:b8:29:98:4f:6e: 00:50:d1:4f:7f:55:66:f4:6d:9d:06:54:bb:6c:9b:5c:84:9f: d8:2e:ed:9d:81:e6:06:0c:2b:00:2b:48:5b:3a:34:b5:fb:a9: a7:58:85:af:6e:d2:a6:97:41:76:b2:b6:30:0b:50:58:af:cf: d1:7f:df:7d:75:e4:4e:57:37:9d:19:ac:19:8a:3c:f2:0f:42: 4a:7b:cd:2e:b4:87:ff:09:18:73:f4:42:2b:f1:e6:eb:91:75: b4:74:1f:e3:b5:b1:9f:93:3d:e2:a5:c5:bf:72:54:90:d8:a5: f7:67:d9:56:c6:e1:f3:d0:97:2f:11:3e:29:53:c1:c0:dc:de: ff:43:5d:a1:3e:4d:e1:1b:63:83:f9:a7:da:1a:4c:dc:37:23: e4:13:e7:57:07:12:3a:5a:dd:d5:26:60:5f:82:28:1d:e0:f8: c7:6e:20:0a:75:2a:b6:df:4f:73:6c:8a:9f:06:84:d6:0c:ba: 7a:7a:d0:b3:df:07:ad:89:ad:7a:5f:12:f1:2f:e0:54:8b:d2: 05:e4:81:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g6u+yHzbA+LsekqbPGMxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGI0ZmZiMWE2ODVjOTMwYTFkOTZhN2I0MDQwOTVlMzdkODk1ZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuehRCDp+Uq92/g8u3b8RrH1wPiO HU5v6+8a46Ms7DcEJxz+f7tHfY4olSmcPuWPWwYQzA8vFTrdiV2q7bF1XxMksCa0 DPgwIWrqXdn19r4Gd40J++m+7FZxuYeYQSrBehaXc5bS95bEiEEmPCT0Mt06Or0D hCl/XXpMTyE7iDsCwtazjsgH6jj2l1qgeQ8VOtX7dq515gD8lEpgt3IkogSOLkh+ Y46nP+HdV3+LE/0qQvhBHgr/fjvMPiXm/m8aaV6FQBek6+SlQSk6IGsISqt9KXv3 sRSWZ0EafuYNmLE7LZHhVw8wsoEszL71KGhL60iqcC9J3FcptM80IkyoAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDi0/7Gmhckwodlqe0BAleN9iV4pMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvT0xUX3NhYUZ5VENoMldwN1FFQ1Y0MzJKWGlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJRINMA0G CSqGSIb3DQEBCwUAA4IBAQCpp1XVLlME7PZTjTod5ld8yFqtRZiFSkV0uZho5RRA yI78uELCvSWSyxioruOmWcx6uCmYT24AUNFPf1Vm9G2dBlS7bJtchJ/YLu2dgeYG DCsAK0hbOjS1+6mnWIWvbtKml0F2srYwC1BYr8/Rf999deROVzedGawZijzyD0JK e80utIf/CRhz9EIr8ebrkXW0dB/jtbGfkz3ipcW/clSQ2KX3Z9lWxuHz0JcvET4p U8HA3N7/Q12hPk3hG2OD+afaGkzcNyPkE+dXBxI6Wt3VJmBfgigd4PjHbiAKdSq2 309zbIqfBoTWDLp6etCz3wetia16XxLxL+BUi9IF5IHw -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:20 2026 by rpki-client