This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/otCB4X2SkZik_W7jF5YoKtNQVQo.roa File: otCB4X2SkZik_W7jF5YoKtNQVQo.roa (raw, json) Hash identifier: ZJ6P0rtTXDrrXOKDDXJiQDSmAF8So5IfFur0h47zhmg= Subject key identifier: A2:D0:81:E1:7D:92:91:98:A4:FD:6E:E3:17:96:28:2A:D3:50:55:0A Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019B7910D591474C3A1D43C9B3D95FC29EDB Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/otCB4X2SkZik_W7jF5YoKtNQVQo.roa Signing time: Thu 01 Jan 2026 10:18:24 +0000 ROA not before: Thu 01 Jan 2026 10:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 146813 IP address blocks: 84.247.114.0/24 maxlen: 24 89.149.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d5:91:47:4c:3a:1d:43:c9:b3:d9:5f:c2:9e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Jan 1 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2d081e17d929198a4fd6ee31796282ad350550a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:27:ba:27:e0:3d:bf:2f:d9:e3:b3:53:0c:e7: d1:3c:54:1d:9b:59:f7:f8:31:04:07:fc:26:6d:7a: 67:d8:93:88:bb:fd:63:30:3f:27:60:ae:57:99:6d: 5c:f2:eb:09:c2:54:f7:1f:34:d9:70:1c:37:32:ab: ac:37:df:23:12:13:28:41:0b:26:41:a4:6e:df:34: f3:7a:06:05:e4:86:42:16:2a:85:38:5c:19:3e:be: 5d:a8:1a:d0:7d:e8:b6:71:18:b6:e1:94:e2:3a:3c: 05:95:3e:65:25:1c:ba:9c:46:18:0b:19:37:09:ab: cc:b5:84:21:19:78:ae:9d:75:4a:e7:24:07:e9:55: 2b:5e:24:f6:66:47:24:0a:3e:e6:0a:1c:c1:06:63: d3:91:4c:66:aa:ef:02:99:f0:df:bd:58:dc:c8:d8: fc:d9:a2:b8:da:bf:bc:42:29:55:a6:30:d7:9a:1b: f0:65:14:60:cc:84:65:cd:99:23:34:8d:a8:15:41: 24:80:ad:bf:c0:d7:90:4d:85:e2:71:3f:bb:86:26: 8e:5b:a9:b0:d3:8c:28:bb:79:6b:90:76:99:5d:54: 9a:2f:49:82:8e:b6:a2:c2:b2:91:11:0b:5d:d9:39: e5:ba:bc:09:20:77:8d:3c:4e:74:41:26:93:01:ec: 2c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D0:81:E1:7D:92:91:98:A4:FD:6E:E3:17:96:28:2A:D3:50:55:0A X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/otCB4X2SkZik_W7jF5YoKtNQVQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.247.114.0/24 89.149.17.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:2d:23:bc:b7:b5:c4:88:a1:fa:23:44:7b:de:1b:5a:24:8b: e6:82:d4:05:72:69:2a:79:d4:64:40:1a:18:83:f8:78:97:0b: ab:fe:df:da:b2:71:82:1d:cb:7e:9c:20:4b:d0:f4:a8:67:9f: 6c:cb:97:8d:2c:85:68:1c:c6:14:a4:60:ac:7c:12:99:25:ee: 14:48:d2:fc:d0:a4:19:2f:24:1b:89:d2:c4:22:0a:5f:84:56: 07:17:2f:c5:f5:1f:08:10:cd:2f:f5:cb:bc:4c:7d:cb:10:8c: 17:b4:6b:3d:bf:0c:eb:6a:2a:ce:5a:96:d1:8a:7f:95:cb:b6: 61:b8:d1:f6:77:7c:e8:fc:ae:89:78:b2:f0:4d:a8:25:b7:08: 4f:16:76:e8:e3:ab:ed:76:0c:f4:1d:48:24:48:99:82:55:25: 40:f0:5e:cd:33:d5:e8:e8:94:8f:79:a3:bc:45:0a:a2:b0:01: 4e:2d:0c:ff:ad:9b:f4:f3:47:05:de:f2:2a:b7:7e:e8:cd:0f: 6e:1b:28:b6:6b:e5:5b:26:a8:fe:53:a5:4a:dd:c4:e6:50:dd: 90:2b:23:6a:5f:09:2b:ae:03:11:ad:4f:5a:73:71:9d:82:ba: 97:68:13:da:8b:e1:1d:df:19:21:aa:66:9e:92:41:9f:f6:47: 1c:3d:35:05 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ENWRR0w6HUPJs9lfwp7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmQwODFlMTdkOTI5MTk4YTRmZDZlZTMxNzk2MjgyYWQzNTA1NTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsye6J+A9vy/Z47NTDOfRPFQdm1n3 +DEEB/wmbXpn2JOIu/1jMD8nYK5XmW1c8usJwlT3HzTZcBw3MqusN98jEhMoQQsm QaRu3zTzegYF5IZCFiqFOFwZPr5dqBrQfei2cRi24ZTiOjwFlT5lJRy6nEYYCxk3 CavMtYQhGXiunXVK5yQH6VUrXiT2ZkckCj7mChzBBmPTkUxmqu8CmfDfvVjcyNj8 2aK42r+8QilVpjDXmhvwZRRgzIRlzZkjNI2oFUEkgK2/wNeQTYXicT+7hiaOW6mw 04wou3lrkHaZXVSaL0mCjraiwrKREQtd2TnlurwJIHeNPE50QSaTAews8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKLQgeF9kpGYpP1u4xeWKCrTUFUKMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvb3RDQjRYMlNrWmlrX1c3akY1WW9LdE5RVlFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVPdyAwQA WZURMA0GCSqGSIb3DQEBCwUAA4IBAQA/LSO8t7XEiKH6I0R73htaJIvmgtQFcmkq edRkQBoYg/h4lwur/t/asnGCHct+nCBL0PSoZ59sy5eNLIVoHMYUpGCsfBKZJe4U SNL80KQZLyQbidLEIgpfhFYHFy/F9R8IEM0v9cu8TH3LEIwXtGs9vwzrairOWpbR in+Vy7ZhuNH2d3zo/K6JeLLwTagltwhPFnbo46vtdgz0HUgkSJmCVSVA8F7NM9Xo 6JSPeaO8RQqisAFOLQz/rZv080cF3vIqt37ozQ9uGyi2a+VbJqj+U6VK3cTmUN2Q KyNqXwkrrgMRrU9ac3GdgrqXaBPai+Ed3xkhqmaekkGf9kccPTUF -----END CERTIFICATE-----Generated at Tue Jan 20 18:20:23 2026 by rpki-client