This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/OwT3MWkGmy8nucB77AIErlwv-c8.roa File: OwT3MWkGmy8nucB77AIErlwv-c8.roa (raw, json) Hash identifier: TO+izXPgq1XnvslTtUGRCnNQnecbCKgXbwm0U1xhS58= Subject key identifier: 3B:04:F7:31:69:06:9B:2F:27:B9:C0:7B:EC:02:04:AE:5C:2F:F9:CF Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4 Certificate serial: 019B79ECF570E5613A4CB3A09E9378FAE47B Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/OwT3MWkGmy8nucB77AIErlwv-c8.roa Signing time: Thu 01 Jan 2026 14:18:50 +0000 ROA not before: Thu 01 Jan 2026 14:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4755 IP address blocks: 91.140.128.0/17 maxlen: 24 194.54.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f5:70:e5:61:3a:4c:b3:a0:9e:93:78:fa:e4:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4 Validity Not Before: Jan 1 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b04f73169069b2f27b9c07bec0204ae5c2ff9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:7f:fd:b5:0f:d8:59:66:26:f5:50:2b:5c:de: 3e:56:9d:51:6a:e5:9f:34:16:03:de:a1:eb:85:a7: 66:68:6f:9f:5c:30:5f:74:b1:09:d1:f2:c7:95:b5: c5:05:eb:9f:b7:cb:86:56:d2:47:c2:12:f4:da:4c: 1c:06:f3:ac:04:e9:53:7c:bc:6a:b8:a8:ba:3d:d4: ab:fa:fa:cc:c2:80:f3:30:53:5e:66:44:f5:62:09: 42:cd:44:4f:4a:65:8e:1a:02:6b:1c:52:3a:da:49: f0:5b:d9:3a:3d:2e:1f:23:65:f2:d6:51:3e:be:aa: fc:7c:80:52:05:e1:9a:25:ea:ed:8c:71:15:e8:9d: 5c:a7:d8:bc:bf:de:40:72:ce:9b:94:60:4d:3a:81: 40:8c:f5:a1:f9:cb:92:9f:fc:b4:77:f1:ad:00:8c: 03:8b:f6:d4:12:c6:f8:5f:6b:9e:6e:3b:6f:eb:9e: c5:de:77:91:d3:cb:a2:0f:99:4e:99:71:9d:34:d4: 55:fb:92:fc:d8:fd:1c:1f:4d:c6:53:ca:67:34:c7: 4b:08:6c:9f:b4:e8:2d:81:aa:b9:2a:ef:fc:dd:19: e3:b5:33:51:8b:9c:da:ae:2a:11:fc:4a:55:7a:4e: dc:45:2c:ee:c1:9e:9c:2b:c6:1d:dd:f2:5d:26:f9: e7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:04:F7:31:69:06:9B:2F:27:B9:C0:7B:EC:02:04:AE:5C:2F:F9:CF X509v3 Authority Key Identifier: keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/OwT3MWkGmy8nucB77AIErlwv-c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.140.128.0/17 194.54.192.0/18 Signature Algorithm: sha256WithRSAEncryption 18:4d:6b:fe:00:25:aa:53:28:ca:f2:ec:49:85:d1:2b:0a:e2: 6e:12:e1:8f:06:4a:0b:92:bb:8d:f6:cd:f5:fa:c5:6e:9e:dd: 4d:e7:d6:7b:0f:70:1d:69:72:4c:9c:21:e6:7f:e7:2b:ee:51: dc:da:6a:08:33:4c:dd:64:7e:80:78:59:b6:a8:2d:cc:f2:ea: 18:9f:6a:31:29:f0:d4:fb:eb:56:1b:0e:4c:5b:56:b4:9e:12: 9d:1e:9a:30:54:82:d1:27:34:de:7b:26:bb:9b:30:08:a1:f3: 07:87:62:0d:d2:de:ea:87:f2:dd:b9:24:be:d3:c8:65:ac:09: 51:12:c6:c3:87:04:c5:b3:54:d0:9d:d2:ed:ff:f5:09:78:18: 70:94:9d:b4:25:a6:5a:ae:75:93:23:5f:2c:2a:ae:e1:b0:a9: a9:23:de:fb:75:81:d5:f0:67:74:df:c1:67:05:2d:a0:d4:fe: a5:49:02:7e:54:b3:d7:71:05:f0:f4:c8:44:02:e6:c2:88:6a: 5e:e9:cf:7e:9b:7b:be:f5:73:7d:99:57:c4:c6:8c:71:68:41: e3:7a:f9:d4:99:87:5b:82:a2:c4:47:99:58:df:ab:02:fb:9a: c2:fb:f1:22:73:b6:df:a7:25:63:9f:80:39:b5:06:c7:d1:86: 01:7f:55:d4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57PVw5WE6TLOgnpN4+uR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzN2Y3ZGIwMzMzMTRjNDczY2RhMTk0ZTBkZjc5ZjFjMzc1 ZGEzZjQwHhcNMjYwMTAxMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjA0ZjczMTY5MDY5YjJmMjdiOWMwN2JlYzAyMDRhZTVjMmZmOWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7X/9tQ/YWWYm9VArXN4+Vp1RauWf NBYD3qHrhadmaG+fXDBfdLEJ0fLHlbXFBeuft8uGVtJHwhL02kwcBvOsBOlTfLxq uKi6PdSr+vrMwoDzMFNeZkT1YglCzURPSmWOGgJrHFI62knwW9k6PS4fI2Xy1lE+ vqr8fIBSBeGaJertjHEV6J1cp9i8v95Acs6blGBNOoFAjPWh+cuSn/y0d/GtAIwD i/bUEsb4X2uebjtv657F3neR08uiD5lOmXGdNNRV+5L82P0cH03GU8pnNMdLCGyf tOgtgaq5Ku/83RnjtTNRi5zarioR/EpVek7cRSzuwZ6cK8Yd3fJdJvnnAwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDsE9zFpBpsvJ7nAe+wCBK5cL/nPMB8GA1UdIwQY MBaAFCN/fbAzMUxHPNoZTg33nxw3XaP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYt ZWUwNjAzOTQ5ZjkzLzEvT3dUM01Xa0dteThudWNCNzdBSUVybHd2LWM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYtZWUwNjAzOTQ5Zjkz LzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHW4yAAwQG wjbAMA0GCSqGSIb3DQEBCwUAA4IBAQAYTWv+ACWqUyjK8uxJhdErCuJuEuGPBkoL kruN9s31+sVunt1N59Z7D3AdaXJMnCHmf+cr7lHc2moIM0zdZH6AeFm2qC3M8uoY n2oxKfDU++tWGw5MW1a0nhKdHpowVILRJzTeeya7mzAIofMHh2IN0t7qh/LduSS+ 08hlrAlREsbDhwTFs1TQndLt//UJeBhwlJ20JaZarnWTI18sKq7hsKmpI977dYHV 8Gd038FnBS2g1P6lSQJ+VLPXcQXw9MhEAubCiGpe6c9+m3u+9XN9mVfExoxxaEHj evnUmYdbgqLER5lY36sC+5rC+/Eic7bfpyVjn4A5tQbH0YYBf1XU -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:38 2026 by rpki-client