This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/OVXT6gUHNs92I_TpJokrvNCUI_k.roa File: OVXT6gUHNs92I_TpJokrvNCUI_k.roa (raw, json) Hash identifier: GunbA4sCmSgthfWeCRgymGCKQHjNQ++TdcqNZ9NqpfA= Subject key identifier: 39:55:D3:EA:05:07:36:CF:76:23:F4:E9:26:89:2B:BC:D0:94:23:F9 Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762 Certificate serial: 019B7C1308CF41F6F7C7EC61D453F281CE9F Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/OVXT6gUHNs92I_TpJokrvNCUI_k.roa Signing time: Fri 02 Jan 2026 00:19:40 +0000 ROA not before: Fri 02 Jan 2026 00:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204835 IP address blocks: 91.231.174.0/24 maxlen: 24 195.138.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:08:cf:41:f6:f7:c7:ec:61:d4:53:f2:81:ce:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762 Validity Not Before: Jan 2 00:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3955d3ea050736cf7623f4e926892bbcd09423f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:bf:39:cb:83:e1:f9:15:57:86:c4:f8:dd: c4:2c:c6:55:a4:5d:d5:7b:af:04:e0:77:45:57:80: 25:78:e4:e7:19:d3:c8:8b:9d:d7:8e:b0:46:6c:89: af:28:db:e8:92:a5:31:88:28:2e:dc:64:26:37:ec: 9a:75:52:9e:83:8e:92:2b:d9:d2:6f:d5:fb:6a:a7: 20:7b:c5:f0:87:b9:d2:4e:da:b2:34:7c:b3:d2:13: 90:f2:36:9b:40:77:d9:a6:ef:27:dd:c4:ef:ea:14: d0:ab:ce:99:45:e3:46:26:8f:a0:d8:20:c2:2e:fb: c8:7d:bd:94:46:0a:d3:69:20:25:d1:45:c0:6b:f9: a2:c4:f8:f6:00:3e:1c:c7:0e:b6:eb:c8:0a:1c:11: eb:c3:6d:b7:5e:22:07:02:b5:53:52:a4:53:f7:bc: cb:07:75:21:98:2c:2a:ff:da:22:f6:55:0a:4a:c0: 76:bd:d8:11:7e:dc:31:56:35:2f:04:33:22:93:ea: 83:16:41:80:94:51:92:f6:8a:d6:08:ca:b3:f0:6b: 7a:ce:7c:ca:5d:3c:06:e3:21:b8:fc:c0:ce:71:b9: 9a:9e:58:10:29:b5:3e:9d:f1:63:4c:87:42:d3:a6: f4:23:65:92:4b:e4:a1:5c:67:14:11:06:b6:78:35: bd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:55:D3:EA:05:07:36:CF:76:23:F4:E9:26:89:2B:BC:D0:94:23:F9 X509v3 Authority Key Identifier: keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/OVXT6gUHNs92I_TpJokrvNCUI_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.174.0/24 195.138.204.0/24 Signature Algorithm: sha256WithRSAEncryption 37:69:a6:bf:cc:7b:b4:b6:9f:14:85:40:2f:4d:69:44:1d:d8: 26:2b:11:cc:81:ce:9c:73:37:33:42:60:c7:07:a8:bb:60:2f: 59:63:43:07:ab:c1:14:9c:dd:ce:e1:e4:b4:3d:c1:6d:03:42: 50:92:08:e0:b9:6e:ba:ea:2f:b0:85:9d:b3:2f:f9:28:9a:5d: 79:40:78:fe:f8:a8:4b:da:25:eb:f7:ec:a6:e5:73:ea:1c:77: 44:e5:b2:ea:d9:9f:c0:fe:35:3e:c1:44:e6:2b:29:e3:12:27: 8c:65:7b:26:fe:55:3e:85:ac:3a:f5:94:04:89:b6:bd:9d:6c: b8:63:4a:c2:7c:cd:43:4b:f5:bd:a2:4f:74:4e:4c:03:65:5d: 36:05:7e:5b:8d:50:44:90:71:3c:8c:54:d0:22:23:b8:da:4c: e7:3a:0b:ca:75:71:5d:64:18:0d:6d:fa:d9:8b:23:af:09:46: 68:5e:3d:6d:b6:d5:60:65:79:a5:fb:86:b7:81:50:ef:f3:2f: 7c:45:a9:0f:b2:d3:25:1f:b4:9a:b5:c5:0c:68:d0:19:ea:ad: 38:c8:c9:57:1a:a8:1b:07:85:11:b2:ad:0b:18:b4:9c:ec:5b: d5:dd:aa:1a:dd:4a:50:2c:80:8c:33:61:81:25:5c:e3:40:54: 13:24:ef:68 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EwjPQfb3x+xh1FPygc6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMTE5MDEyMjc1Nzc4MDdmNGI2OGM4YjhmMjVmYmVhOWM3 MjA3NjIwHhcNMjYwMTAyMDAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTU1ZDNlYTA1MDczNmNmNzYyM2Y0ZTkyNjg5MmJiY2QwOTQyM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX6/OcuD4fkVV4bE+N3ELMZVpF3V e68E4HdFV4AleOTnGdPIi53XjrBGbImvKNvokqUxiCgu3GQmN+yadVKeg46SK9nS b9X7aqcge8Xwh7nSTtqyNHyz0hOQ8jabQHfZpu8n3cTv6hTQq86ZReNGJo+g2CDC LvvIfb2URgrTaSAl0UXAa/mixPj2AD4cxw6268gKHBHrw223XiIHArVTUqRT97zL B3UhmCwq/9oi9lUKSsB2vdgRftwxVjUvBDMik+qDFkGAlFGS9orWCMqz8Gt6znzK XTwG4yG4/MDOcbmanlgQKbU+nfFjTIdC06b0I2WSS+ShXGcUEQa2eDW9xwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDlV0+oFBzbPdiP06SaJK7zQlCP5MB8GA1UdIwQY MBaAFGIRkBInV3gH9LaMi48l++qccgdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYt N2NmZGQ4NGY3MzRkLzEvT1ZYVDZnVUhOczkySV9UcEpva3J2TkNVSV9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYtN2NmZGQ4NGY3MzRk LzEvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+euAwQA w4rMMA0GCSqGSIb3DQEBCwUAA4IBAQA3aaa/zHu0tp8UhUAvTWlEHdgmKxHMgc6c czczQmDHB6i7YC9ZY0MHq8EUnN3O4eS0PcFtA0JQkgjguW666i+whZ2zL/koml15 QHj++KhL2iXr9+ym5XPqHHdE5bLq2Z/A/jU+wUTmKynjEieMZXsm/lU+haw69ZQE iba9nWy4Y0rCfM1DS/W9ok90TkwDZV02BX5bjVBEkHE8jFTQIiO42kznOgvKdXFd ZBgNbfrZiyOvCUZoXj1tttVgZXml+4a3gVDv8y98RakPstMlH7SatcUMaNAZ6q04 yMlXGqgbB4URsq0LGLSc7FvV3aoa3UpQLICMM2GBJVzjQFQTJO9o -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:31 2026 by rpki-client