This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/odBM4SC03fv9qvg4-_DkLC3ibmA.roa File: odBM4SC03fv9qvg4-_DkLC3ibmA.roa (raw, json) Hash identifier: NMg6E7qAz0hV7HQf0d2bJZ/M9xt0HNBTnuvRtP4cu6U= Subject key identifier: A1:D0:4C:E1:20:B4:DD:FB:FD:AA:F8:38:FB:F0:E4:2C:2D:E2:6E:60 Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99 Certificate serial: 019B77C6AF7D9DCBE1CD2CE805701EE380EA Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/odBM4SC03fv9qvg4-_DkLC3ibmA.roa Signing time: Thu 01 Jan 2026 04:17:48 +0000 ROA not before: Thu 01 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2848 IP address blocks: 89.249.160.0/20 maxlen: 20 93.180.0.0/18 maxlen: 18 188.44.32.0/19 maxlen: 19 2a00:f480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:af:7d:9d:cb:e1:cd:2c:e8:05:70:1e:e3:80:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99 Validity Not Before: Jan 1 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1d04ce120b4ddfbfdaaf838fbf0e42c2de26e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c6:f0:4e:c4:40:e9:a9:f8:49:a3:e4:c3:c7: de:6a:f8:aa:6e:e2:0d:f7:40:45:28:74:9a:c2:e2: b0:ac:fa:b2:54:78:dd:50:78:39:e6:52:d4:36:31: 9d:90:9d:19:3c:03:09:9a:24:e9:7f:c4:36:58:3b: 47:9d:21:92:75:34:0b:54:75:dd:11:68:45:87:73: 4a:1a:ce:de:d2:0f:6f:14:1c:66:41:75:18:a9:62: 98:19:51:e7:5d:e8:98:a4:a9:a2:e6:ac:97:bd:f3: 7d:2f:37:48:3e:77:a1:f5:81:c2:1c:ba:be:f4:f5: 3d:fa:e0:1d:4e:21:7a:4c:0c:00:95:46:e2:22:01: 5d:20:72:95:b4:41:0c:a2:75:e8:f9:d5:97:73:2a: d9:42:ec:c3:ce:0a:5a:b4:1d:a1:7c:70:4d:5d:3d: e5:24:ab:b0:e2:81:0c:e8:13:7b:00:54:7e:ff:ad: 49:f7:4a:72:f8:6e:5a:26:74:0a:c6:e6:64:39:ec: a5:15:72:a5:37:20:85:d3:bc:19:b5:6e:93:32:82: ac:a9:5d:81:ec:e5:c1:63:39:bd:61:44:30:f8:b6: 0f:f0:ec:25:8d:63:42:82:a5:e1:d9:7a:c1:2e:ec: 7b:89:b1:d3:33:34:e9:ad:0f:31:05:81:79:87:e6: 9e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D0:4C:E1:20:B4:DD:FB:FD:AA:F8:38:FB:F0:E4:2C:2D:E2:6E:60 X509v3 Authority Key Identifier: keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/odBM4SC03fv9qvg4-_DkLC3ibmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.160.0/20 93.180.0.0/18 188.44.32.0/19 IPv6: 2a00:f480::/32 Signature Algorithm: sha256WithRSAEncryption 6d:4a:8b:02:b9:05:aa:09:90:2a:0e:0c:61:82:de:c5:15:fd: 64:f8:8e:c9:22:8a:e6:bc:4e:28:14:12:09:9b:3a:7a:d9:6a: 08:98:01:12:57:a5:f7:b9:bb:01:51:d9:c2:9a:e2:de:4e:d5: aa:4d:b1:db:be:ee:17:88:f2:ce:b9:fc:82:18:9b:a5:9e:7d: 54:9a:20:fe:f8:9c:e4:ad:1a:81:d5:ae:df:00:5b:e7:35:62: 89:5f:65:48:1f:da:94:16:b0:5e:dd:ba:45:c6:09:42:7f:11: 3e:28:9f:f9:93:74:da:20:e2:b3:a2:59:bc:5b:df:07:76:24: 18:83:7f:a5:9f:8f:65:81:db:4c:e4:0a:a7:1d:56:bf:e2:22: 83:fd:d8:61:b1:65:06:d8:40:14:f6:f3:77:ff:19:f4:3e:85: 1c:54:81:cd:f9:1d:9f:d1:66:f1:5f:cb:29:b5:75:6d:c9:aa: e9:c4:dd:95:69:bf:ee:d2:6b:5c:7a:81:ea:70:9c:8c:ac:aa: 50:7f:25:9b:5f:47:2a:83:cd:68:20:20:58:9d:33:72:85:d0: 2f:f2:93:4f:08:85:7a:45:b1:6f:c8:78:2c:aa:13:30:f8:70: 22:5b:0a:84:b0:d1:49:d8:0f:7f:a1:85:b0:16:fa:6d:8f:8a: 5a:d7:21:ce -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3xq99ncvhzSzoBXAe44DqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZDQyYTA0ODc3MDU2MDYwMTVlNWEzMGRhMWU3MGY0MDdl NTllOTkwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWQwNGNlMTIwYjRkZGZiZmRhYWY4MzhmYmYwZTQyYzJkZTI2ZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sbwTsRA6an4SaPkw8feaviqbuIN 90BFKHSawuKwrPqyVHjdUHg55lLUNjGdkJ0ZPAMJmiTpf8Q2WDtHnSGSdTQLVHXd EWhFh3NKGs7e0g9vFBxmQXUYqWKYGVHnXeiYpKmi5qyXvfN9LzdIPneh9YHCHLq+ 9PU9+uAdTiF6TAwAlUbiIgFdIHKVtEEMonXo+dWXcyrZQuzDzgpatB2hfHBNXT3l JKuw4oEM6BN7AFR+/61J90py+G5aJnQKxuZkOeylFXKlNyCF07wZtW6TMoKsqV2B 7OXBYzm9YUQw+LYP8OwljWNCgqXh2XrBLux7ibHTMzTprQ8xBYF5h+aebQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKHQTOEgtN37/ar4OPvw5Cwt4m5gMB8GA1UdIwQY MBaAFD7UKgSHcFYGAV5aMNoecPQH5Z6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mYzkzYjEtMDY0ZS00NGFiLTkwZGEt ODI2MjUzOWRlNDZmLzEvb2RCTTRTQzAzZnY5cXZnNC1fRGtMQzNpYm1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9mYzkzYjEtMDY0ZS00NGFiLTkwZGEtODI2MjUzOWRlNDZm LzEvUHRRcUJJZHdWZ1lCWGxvdzJoNXc5QWZsbnBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEWfmgAwQG XbQAAwQFvCwgMA0EAgACMAcDBQAqAPSAMA0GCSqGSIb3DQEBCwUAA4IBAQBtSosC uQWqCZAqDgxhgt7FFf1k+I7JIormvE4oFBIJmzp62WoImAESV6X3ubsBUdnCmuLe TtWqTbHbvu4XiPLOufyCGJulnn1UmiD++JzkrRqB1a7fAFvnNWKJX2VIH9qUFrBe 3bpFxglCfxE+KJ/5k3TaIOKzolm8W98HdiQYg3+ln49lgdtM5AqnHVa/4iKD/dhh sWUG2EAU9vN3/xn0PoUcVIHN+R2f0WbxX8sptXVtyarpxN2Vab/u0mtceoHqcJyM rKpQfyWbX0cqg81oICBYnTNyhdAv8pNPCIV6RbFvyHgsqhMw+HAiWwqEsNFJ2A9/ oYWwFvptj4pa1yHO -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:04 2026 by rpki-client