This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/4OtylCmVUOQ1YUFtglhWgqf0IYA.roa File: 4OtylCmVUOQ1YUFtglhWgqf0IYA.roa (raw, json) Hash identifier: WWTOLHqEiZ6EYrBZLenBHdV2VidIQmH+ASGlD1/87NA= Subject key identifier: E0:EB:72:94:29:95:50:E4:35:61:41:6D:82:58:56:82:A7:F4:21:80 Certificate issuer: /CN=23ac486807398ac1ceec0921d04d409a4f7f479b Certificate serial: 019B7F856E2E7835D257756D9333A2A8CC0A Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/4OtylCmVUOQ1YUFtglhWgqf0IYA.roa Signing time: Fri 02 Jan 2026 16:23:29 +0000 ROA not before: Fri 02 Jan 2026 16:23:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199345 IP address blocks: 176.124.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:6e:2e:78:35:d2:57:75:6d:93:33:a2:a8:cc:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b Validity Not Before: Jan 2 16:23:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0eb7294299550e43561416d82585682a7f42180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f9:4e:54:3a:e3:7e:11:49:7c:eb:4c:bd:ae: fd:50:f2:cc:36:37:05:45:4e:81:60:8f:2f:5c:48: dc:77:52:a0:bc:db:16:d9:b6:cf:e8:ff:c1:64:6c: ab:56:3e:eb:ef:89:4f:37:83:31:f9:d2:51:20:cc: 8e:43:30:41:97:9b:81:c8:46:ec:b9:9a:3d:80:57: 0d:df:63:e8:fa:cb:bf:a7:24:56:e3:52:db:d2:84: 3f:86:c7:d0:3b:ac:02:dd:b8:ee:ad:23:3c:1b:92: e2:f9:dc:9a:a6:e5:bd:4d:94:34:03:11:cf:0d:b5: 36:74:ec:4e:bd:d0:48:0c:27:98:46:46:b5:f9:d3: 1f:58:23:8b:7d:a0:cd:d0:b1:d3:5a:cf:08:c7:56: 31:fe:7b:fd:a4:a2:8d:0b:52:5d:f7:eb:a4:a6:ad: c1:b4:86:a2:64:57:06:ff:05:08:bc:46:db:8a:03: 9d:99:da:a0:c3:51:ac:a3:5f:41:aa:06:e9:2c:d9: 8f:31:9d:74:78:5a:e7:4c:32:b7:16:50:92:ec:1d: c0:c8:e3:2a:d9:a1:b4:d2:76:e4:b4:45:24:b0:72: 12:87:15:43:a6:db:00:fc:67:7f:83:37:6f:24:96: a6:45:b0:02:a0:a4:8c:f5:20:19:8b:81:e1:49:99: a6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EB:72:94:29:95:50:E4:35:61:41:6D:82:58:56:82:A7:F4:21:80 X509v3 Authority Key Identifier: keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/4OtylCmVUOQ1YUFtglhWgqf0IYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.148.0/24 Signature Algorithm: sha256WithRSAEncryption 78:6c:d7:51:09:16:91:fa:5e:d9:78:6e:57:32:76:6f:d1:d2: 3e:b9:41:8f:28:7a:4b:40:ed:7c:11:35:69:37:16:b7:dd:22: 88:2d:11:e9:ec:7e:5b:5e:41:ff:1e:39:c3:4c:0f:2d:50:33: 9d:2d:01:20:a2:79:0c:41:8e:26:80:da:73:ef:5b:30:66:ad: d8:08:c5:55:bf:04:27:0e:a6:cd:21:78:a5:7b:3c:ad:f0:fa: 43:dd:07:d3:1e:e8:09:b0:17:23:16:47:ec:c7:10:ed:3d:3e: a3:74:5b:31:cc:79:09:27:4b:e2:79:61:18:94:97:fa:01:19: 57:e3:bb:7a:ea:90:43:b4:21:0f:a4:16:20:98:f9:3c:35:f9: 65:e7:cb:0b:72:3a:d4:39:4b:96:32:12:da:de:05:6c:e4:0f: fc:d8:b6:48:de:15:3d:57:59:af:2f:bc:a8:1d:9e:9e:5c:b6: 7c:bf:8a:f9:b7:fd:c1:3a:0e:f7:05:ce:d1:c0:62:15:3d:c6: a5:0a:2d:eb:71:53:68:55:e9:75:89:27:e8:9e:28:2c:3b:bc: 8e:9e:ec:59:8b:0d:58:f6:50:f9:ac:7b:5d:95:4d:f6:b3:89: 2e:1e:05:61:af:e5:46:43:e7:13:46:bf:56:ef:0e:89:76:8e: 91:ce:f4:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hW4ueDXSV3VtkzOiqMwKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYWM0ODY4MDczOThhYzFjZWVjMDkyMWQwNGQ0MDlhNGY3 ZjQ3OWIwHhcNMjYwMTAyMTYyMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGViNzI5NDI5OTU1MGU0MzU2MTQxNmQ4MjU4NTY4MmE3ZjQyMTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/lOVDrjfhFJfOtMva79UPLMNjcF RU6BYI8vXEjcd1KgvNsW2bbP6P/BZGyrVj7r74lPN4Mx+dJRIMyOQzBBl5uByEbs uZo9gFcN32Po+su/pyRW41Lb0oQ/hsfQO6wC3bjurSM8G5Li+dyapuW9TZQ0AxHP DbU2dOxOvdBIDCeYRka1+dMfWCOLfaDN0LHTWs8Ix1Yx/nv9pKKNC1Jd9+ukpq3B tIaiZFcG/wUIvEbbigOdmdqgw1Gso19BqgbpLNmPMZ10eFrnTDK3FlCS7B3AyOMq 2aG00nbktEUksHIShxVDptsA/Gd/gzdvJJamRbACoKSM9SAZi4HhSZmmnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFODrcpQplVDkNWFBbYJYVoKn9CGAMB8GA1UdIwQY MBaAFCOsSGgHOYrBzuwJIdBNQJpPf0ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTZ4SWFBYzVpc0hPN0FraDBFMUFtazlfUjVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hMzFiODItZDdlYS00ZjBiLTg2M2Qt NjE2MDViMjZmODJkLzEvNE90eWxDbVZVT1ExWVVGdGdsaFdncWYwSVlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hMzFiODItZDdlYS00ZjBiLTg2M2QtNjE2MDViMjZmODJk LzEvSTZ4SWFBYzVpc0hPN0FraDBFMUFtazlfUjVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHyUMA0G CSqGSIb3DQEBCwUAA4IBAQB4bNdRCRaR+l7ZeG5XMnZv0dI+uUGPKHpLQO18ETVp Nxa33SKILRHp7H5bXkH/HjnDTA8tUDOdLQEgonkMQY4mgNpz71swZq3YCMVVvwQn DqbNIXilezyt8PpD3QfTHugJsBcjFkfsxxDtPT6jdFsxzHkJJ0vieWEYlJf6ARlX 47t66pBDtCEPpBYgmPk8Nfll58sLcjrUOUuWMhLa3gVs5A/82LZI3hU9V1mvL7yo HZ6eXLZ8v4r5t/3BOg73Bc7RwGIVPcalCi3rcVNoVel1iSfonigsO7yOnuxZiw1Y 9lD5rHtdlU32s4kuHgVhr+VGQ+cTRr9W7w6Jdo6RzvRb -----END CERTIFICATE-----Generated at Tue Feb 10 02:32:29 2026 by rpki-client