This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/Ot4KxuXmkuOStvZOE1g8U1UKl3o.roa File: Ot4KxuXmkuOStvZOE1g8U1UKl3o.roa (raw, json) Hash identifier: VjNwYRDzcrLWMS6mv1LsQbtQ5eDRXZIrApp3NshaenY= Subject key identifier: 3A:DE:0A:C6:E5:E6:92:E3:92:B6:F6:4E:13:58:3C:53:55:0A:97:7A Certificate issuer: /CN=0bebcee4d23379aed81aecffc7a742b35acdddb3 Certificate serial: 019B7FF1611691132049420EAAE7D4D5388E Authority key identifier: 0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/Ot4KxuXmkuOStvZOE1g8U1UKl3o.roa Signing time: Fri 02 Jan 2026 18:21:24 +0000 ROA not before: Fri 02 Jan 2026 18:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200273 IP address blocks: 195.39.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:61:16:91:13:20:49:42:0e:aa:e7:d4:d5:38:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bebcee4d23379aed81aecffc7a742b35acdddb3 Validity Not Before: Jan 2 18:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ade0ac6e5e692e392b6f64e13583c53550a977a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fe:74:f9:cd:c3:c8:06:8f:4b:d5:74:f6:a1: 16:e4:88:43:56:b0:ee:1c:8e:d0:79:b1:c0:4c:b1: 25:6d:1f:1e:ee:1e:39:f1:ea:0f:c6:85:e5:e5:37: f1:57:3f:a7:bd:33:3f:df:50:34:21:dc:a9:7c:59: 86:96:df:83:c4:19:8b:27:1d:fb:80:9d:58:93:01: 4a:97:b7:41:ae:af:35:6e:85:c0:a8:fa:43:a4:2b: 5c:4d:28:ab:e9:9f:31:92:92:f7:2d:79:10:54:2b: a6:11:77:22:70:91:fe:64:fc:46:88:ca:fd:eb:17: a7:ae:40:3c:70:a7:31:f0:45:b8:4f:db:80:61:23: 5d:03:be:b3:7f:c2:f5:ef:c1:cc:18:d9:1b:ab:e9: b5:3e:28:d2:16:66:23:3f:79:70:26:05:89:35:c9: 9d:98:fa:7d:4c:0e:10:e8:73:57:fe:e7:b5:60:1b: f2:a7:a1:c0:d5:d5:b3:a1:62:da:17:1c:96:22:3d: 13:15:8f:56:75:34:be:8b:22:39:14:99:5c:08:d6: 70:c3:46:bf:46:3c:3f:bd:56:18:5e:da:37:58:7f: 96:50:0f:de:29:ab:34:a7:78:24:77:f7:99:20:87: 8a:05:02:81:d6:7e:13:f2:18:96:a2:2e:e4:fc:7b: ee:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DE:0A:C6:E5:E6:92:E3:92:B6:F6:4E:13:58:3C:53:55:0A:97:7A X509v3 Authority Key Identifier: keyid:0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/Ot4KxuXmkuOStvZOE1g8U1UKl3o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.39.220.0/24 Signature Algorithm: sha256WithRSAEncryption 41:ab:fb:94:b8:fc:61:79:ff:50:c5:5e:64:f7:ce:38:9c:f7: da:8d:ac:18:ed:d2:7f:c8:7e:7b:9f:c0:3f:56:83:79:1e:4f: 4c:e7:4a:b7:f3:de:f1:f4:c7:07:53:77:f2:f6:19:f3:02:fe: ee:08:5a:52:dc:e5:9e:56:52:da:dd:54:02:4d:e0:64:4d:b9: 3a:9b:a9:d8:58:9d:bd:f0:5e:fc:5f:71:7e:85:b2:ba:89:36: 67:98:82:ba:7e:75:7e:e4:bc:a4:1b:fc:2e:3b:fb:22:bc:ea: fb:8f:49:25:dc:c8:24:69:b6:9e:a2:5e:bc:13:82:9f:ae:fe: 69:9b:33:50:d3:5f:fc:f9:1f:52:0f:c3:30:1c:65:d0:d3:7f: dd:cc:00:d9:8e:64:a3:f8:e1:8d:f3:64:06:e6:de:03:75:66: 1f:8a:59:94:b0:2b:60:2b:d7:f0:69:6a:03:fb:49:3a:df:94: 9d:de:24:70:be:44:1e:a0:a6:48:f5:8c:0b:eb:e7:8e:b3:cb: a3:15:b6:18:a3:be:8d:7f:03:8b:88:44:f1:ab:0e:6a:7e:01: 8f:78:dc:26:50:5d:99:dc:52:b3:21:6a:01:74:25:13:ef:de: 5d:e2:08:3e:42:ba:fe:e7:7f:19:73:98:d2:b7:37:b8:cc:df: a0:e3:d7:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8WEWkRMgSUIOqufU1TiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZWJjZWU0ZDIzMzc5YWVkODFhZWNmZmM3YTc0MmIzNWFj ZGRkYjMwHhcNMjYwMTAyMTgyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWRlMGFjNmU1ZTY5MmUzOTJiNmY2NGUxMzU4M2M1MzU1MGE5NzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf50+c3DyAaPS9V09qEW5IhDVrDu HI7QebHATLElbR8e7h458eoPxoXl5TfxVz+nvTM/31A0IdypfFmGlt+DxBmLJx37 gJ1YkwFKl7dBrq81boXAqPpDpCtcTSir6Z8xkpL3LXkQVCumEXcicJH+ZPxGiMr9 6xenrkA8cKcx8EW4T9uAYSNdA76zf8L178HMGNkbq+m1PijSFmYjP3lwJgWJNcmd mPp9TA4Q6HNX/ue1YBvyp6HA1dWzoWLaFxyWIj0TFY9WdTS+iyI5FJlcCNZww0a/ Rjw/vVYYXto3WH+WUA/eKas0p3gkd/eZIIeKBQKB1n4T8hiWoi7k/Hvu5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDreCsbl5pLjkrb2ThNYPFNVCpd6MB8GA1UdIwQY MBaAFAvrzuTSM3mu2Brs/8enQrNazd2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQy12TzVOSXplYTdZR3V6X3g2ZENzMXJOM2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xZjMzMjItNmFmNy00N2FiLThkYzUt OTlhMTFmNjM4NWFiLzEvT3Q0S3h1WG1rdU9TdHZaT0UxZzhVMVVLbDNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8xZjMzMjItNmFmNy00N2FiLThkYzUtOTlhMTFmNjM4NWFi LzEvQy12TzVOSXplYTdZR3V6X3g2ZENzMXJOM2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyfcMA0G CSqGSIb3DQEBCwUAA4IBAQBBq/uUuPxhef9QxV5k9844nPfajawY7dJ/yH57n8A/ VoN5Hk9M50q3897x9McHU3fy9hnzAv7uCFpS3OWeVlLa3VQCTeBkTbk6m6nYWJ29 8F78X3F+hbK6iTZnmIK6fnV+5LykG/wuO/sivOr7j0kl3Mgkabaeol68E4Kfrv5p mzNQ01/8+R9SD8MwHGXQ03/dzADZjmSj+OGN82QG5t4DdWYfilmUsCtgK9fwaWoD +0k635Sd3iRwvkQeoKZI9YwL6+eOs8ujFbYYo76NfwOLiETxqw5qfgGPeNwmUF2Z 3FKzIWoBdCUT795d4gg+Qrr+538Zc5jStze4zN+g49fx -----END CERTIFICATE-----Generated at Tue Feb 10 05:49:11 2026 by rpki-client