This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/olt9_dWJPDD4A1-gNvx3OH6cyiI.roa File: olt9_dWJPDD4A1-gNvx3OH6cyiI.roa (raw, json) Hash identifier: a6+ylHvPQBgtIyMA+Dg7vQp0JQ6EMGqrOIKWKotQrKo= Subject key identifier: A2:5B:7D:FD:D5:89:3C:30:F8:03:5F:A0:36:FC:77:38:7E:9C:CA:22 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B3F7A2C4F0C9608B03B8766B1D3437AEB Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/olt9_dWJPDD4A1-gNvx3OH6cyiI.roa Signing time: Sun 21 Dec 2025 05:55:29 +0000 ROA not before: Sun 21 Dec 2025 05:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205899 IP address blocks: 91.217.166.0/24 maxlen: 24 185.113.10.0/24 maxlen: 24 2a05:9080:5::/48 maxlen: 48 2a05:9080:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7a:2c:4f:0c:96:08:b0:3b:87:66:b1:d3:43:7a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 21 05:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a25b7dfdd5893c30f8035fa036fc77387e9cca22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4c:86:5f:85:37:35:9b:de:34:cc:7c:3d:75: b2:0c:d0:de:2a:cb:80:ba:66:e3:24:fc:51:3b:9f: e5:ed:84:d0:34:45:ad:06:af:2c:65:57:e4:fa:af: ef:70:89:94:52:ed:3b:3d:37:2a:ab:1e:ec:1c:47: d5:d9:53:be:52:c9:bf:02:90:3a:fc:d1:69:34:0d: 30:7d:34:de:8f:0c:42:02:6b:d5:f5:8f:bf:ed:68: 00:45:d9:52:43:33:7e:fd:02:10:76:a5:85:b2:43: 80:32:24:32:22:9f:b8:54:66:26:fb:3e:32:4c:57: 2d:34:f6:76:50:59:ef:0a:53:ea:68:9f:06:5c:0b: b8:2a:9d:bd:ee:77:f2:63:09:ca:a2:20:3c:ee:7b: 98:69:c8:3f:92:aa:75:71:a1:b8:17:2d:bc:91:e7: dd:01:18:94:21:1d:c1:74:0e:5a:25:dd:bf:37:94: f1:f0:48:fe:cd:c5:84:06:fb:56:ec:64:e6:e9:c1: ca:c2:a1:8c:33:4c:8c:95:90:02:47:7d:59:aa:d3: cb:7a:32:64:b5:c7:f0:07:1d:e4:4b:e5:3d:14:06: 1c:d6:cb:f2:cb:8f:26:98:63:17:95:31:2a:5e:5b: e6:f0:da:85:fc:e0:af:5f:96:b1:5c:f5:ad:5a:8f: 82:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5B:7D:FD:D5:89:3C:30:F8:03:5F:A0:36:FC:77:38:7E:9C:CA:22 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/olt9_dWJPDD4A1-gNvx3OH6cyiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.166.0/24 185.113.10.0/24 IPv6: 2a05:9080:5::/48 2a05:9080:14::/48 Signature Algorithm: sha256WithRSAEncryption 0f:c6:8e:32:7d:67:51:f5:60:fe:e3:fb:95:f2:19:9c:51:a7: 70:8f:10:17:1a:1f:c9:dc:b5:af:a8:b0:59:5b:4f:b7:e4:54: 03:08:0c:36:8f:f5:a5:40:68:85:fe:9c:d8:9b:a9:f9:70:13: 18:0f:09:40:bd:42:48:1c:68:eb:6d:97:04:b2:30:f4:0a:90: 0a:a9:91:b9:0e:b6:97:65:24:c0:d4:07:d3:61:06:39:86:89: 4f:02:96:e4:6d:f5:ba:35:c3:b1:1e:df:9d:c0:3c:8d:49:5e: e7:fa:15:49:5f:bf:26:0a:d0:d1:f3:27:cc:76:86:c4:8b:48: 8f:6c:62:30:56:93:20:a4:65:4a:80:83:13:ad:2a:cf:73:50: cc:c3:94:ce:e7:db:bb:36:cd:b6:cc:f5:e8:6b:23:f5:db:cb: dd:00:a4:f8:b2:b8:44:96:f5:3d:93:c0:41:dd:e9:16:f9:ed: 80:95:d0:ae:3a:40:4d:27:0d:aa:66:c6:9e:2b:7e:39:5a:dc: f4:71:bc:c1:ad:2e:0d:13:c0:32:54:96:d8:22:13:a0:65:b7: 44:7e:ff:69:d4:f0:6b:e8:5d:16:5b:dc:53:70:8b:5d:b8:de: cb:60:d9:99:fb:dc:1c:6f:4c:4a:b2:f2:46:bd:bb:46:af:b9: ea:c8:17:82 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZs/eixPDJYIsDuHZrHTQ3rrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjIxMDU1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjViN2RmZGQ1ODkzYzMwZjgwMzVmYTAzNmZjNzczODdlOWNjYTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEyGX4U3NZveNMx8PXWyDNDeKsuA umbjJPxRO5/l7YTQNEWtBq8sZVfk+q/vcImUUu07PTcqqx7sHEfV2VO+Usm/ApA6 /NFpNA0wfTTejwxCAmvV9Y+/7WgARdlSQzN+/QIQdqWFskOAMiQyIp+4VGYm+z4y TFctNPZ2UFnvClPqaJ8GXAu4Kp297nfyYwnKoiA87nuYacg/kqp1caG4Fy28kefd ARiUIR3BdA5aJd2/N5Tx8Ej+zcWEBvtW7GTm6cHKwqGMM0yMlZACR31ZqtPLejJk tcfwBx3kS+U9FAYc1svyy48mmGMXlTEqXlvm8NqF/OCvX5axXPWtWo+C+QIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFKJbff3ViTww+ANfoDb8dzh+nMoiMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvb2x0OV9kV0pQREQ0QTEtZ052eDNPSDZjeWlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAW9mmAwQA uXEKMBgEAgACMBIDBwAqBZCAAAUDBwAqBZCAABQwDQYJKoZIhvcNAQELBQADggEB AA/GjjJ9Z1H1YP7j+5XyGZxRp3CPEBcaH8ncta+osFlbT7fkVAMIDDaP9aVAaIX+ nNibqflwExgPCUC9QkgcaOttlwSyMPQKkAqpkbkOtpdlJMDUB9NhBjmGiU8CluRt 9bo1w7Ee353API1JXuf6FUlfvyYK0NHzJ8x2hsSLSI9sYjBWkyCkZUqAgxOtKs9z UMzDlM7n27s2zbbM9ehrI/Xby90ApPiyuESW9T2TwEHd6Rb57YCV0K46QE0nDapm xp4rfjla3PRxvMGtLg0TwDJUltgiE6Blt0R+/2nU8GvoXRZb3FNwi1243stg2Zn7 3BxvTEqy8ka9u0avuerIF4I= -----END CERTIFICATE-----Generated at Sat Dec 27 05:36:36 2025 by rpki-client