This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/ODt7PHiuGg1x7ZK4rw_s4kN0mRA.roa File: ODt7PHiuGg1x7ZK4rw_s4kN0mRA.roa (raw, json) Hash identifier: XptWkOCtZXQLc7ip95cgT3GyOmfhUjdofdkZeE4pykc= Subject key identifier: 38:3B:7B:3C:78:AE:1A:0D:71:ED:92:B8:AF:0F:EC:E2:43:74:99:10 Certificate issuer: /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89 Certificate serial: 019BFB8EAEFE3E68C94D74EBC793A169FBF9 Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/ODt7PHiuGg1x7ZK4rw_s4kN0mRA.roa Signing time: Mon 26 Jan 2026 18:26:30 +0000 ROA not before: Mon 26 Jan 2026 18:26:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44592 IP address blocks: 91.223.95.0/24 maxlen: 24 2a0a:64c0::/32 maxlen: 32 2a0e:9640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 03:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:8e:ae:fe:3e:68:c9:4d:74:eb:c7:93:a1:69:fb:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89 Validity Not Before: Jan 26 18:26:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=383b7b3c78ae1a0d71ed92b8af0fece243749910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4f:19:48:d2:7a:92:ce:86:8d:06:78:62:77: a4:e7:c8:09:c4:89:c6:77:8a:fc:95:8b:2e:dd:4e: 08:9e:65:fb:7a:19:ac:26:76:2c:b8:b0:2b:86:39: 82:70:91:bb:a9:ed:8b:45:f1:cd:60:31:cb:c7:d6: 2f:00:76:ad:82:fd:a0:3a:32:d6:4a:99:2a:a4:57: 0f:f6:64:b4:41:07:c9:84:38:fa:04:51:2e:c1:3a: ca:db:ed:a8:2a:7d:fd:06:7b:b9:59:6f:41:0a:65: 8a:fa:e0:dd:6f:31:b1:03:4a:96:e3:ca:2f:d5:a3: 5e:99:77:f5:ed:83:02:8d:3d:80:12:46:4e:8f:ad: 69:99:21:58:47:f9:40:df:4a:ee:6a:a9:e1:1a:d7: 7c:32:de:13:f1:5b:38:b5:c8:5f:d9:36:0c:db:6c: 6e:23:eb:2f:71:a0:a8:8c:bc:04:06:2f:b1:a4:e2: 72:8c:88:ed:d0:57:b7:77:aa:77:48:6c:3b:ac:d1: da:67:23:ff:4b:31:1a:a5:8e:90:7b:ef:2b:0e:b9: 6d:16:61:b1:ec:8d:9a:47:06:67:5c:a9:af:b8:8c: 30:25:50:27:a2:89:e8:74:55:5d:9d:29:2c:3a:5c: 6c:89:aa:35:ed:ac:9e:b2:ed:67:6e:72:d8:2c:8e: 8d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3B:7B:3C:78:AE:1A:0D:71:ED:92:B8:AF:0F:EC:E2:43:74:99:10 X509v3 Authority Key Identifier: keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/ODt7PHiuGg1x7ZK4rw_s4kN0mRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.95.0/24 IPv6: 2a0a:64c0::/32 2a0e:9640::/29 Signature Algorithm: sha256WithRSAEncryption 50:5f:30:7b:fd:94:7a:b3:da:4d:d0:87:c2:6e:c2:e3:97:f5: 43:4f:eb:f1:5e:76:3e:2d:d7:a9:c7:88:c4:d0:5c:4a:85:dc: 80:bc:3b:67:e1:e3:4e:e4:e3:ee:91:53:ce:25:63:ce:f2:81: 0e:66:f6:8d:77:fc:4d:43:d6:58:90:d8:be:7b:45:08:0e:1f: 9d:8a:5b:69:65:a6:23:d5:c7:ad:87:a8:f7:8d:3f:74:86:c2: b5:87:eb:60:3e:4f:66:4f:20:28:77:c9:b3:50:10:88:bd:a0: 74:c8:1f:71:fc:07:5d:4a:87:27:38:36:5a:e0:f3:c0:f6:b7: 01:1c:78:98:52:3f:2e:96:50:ef:b0:70:86:73:7a:01:98:66: 8c:8d:b2:71:bd:65:45:2d:66:1f:19:9f:91:c6:89:c4:0c:b8: f2:36:b1:c1:ad:25:61:df:86:d3:af:0d:d4:23:08:a5:76:41: 0c:3a:5b:2b:ff:d1:c5:e6:3c:7f:df:9c:8d:1a:34:8a:7d:59: 2f:15:5e:25:df:7f:14:73:4f:45:d2:2b:b1:00:44:27:93:56: b6:89:50:04:97:53:25:94:71:b9:e6:e5:5e:98:3f:0b:de:c2: 37:7e:68:e6:b5:47:bf:03:09:b2:7e:aa:66:1e:b6:5f:d5:c4: 61:ac:e1:61 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZv7jq7+PmjJTXTrx5Ohafv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZjJmNTQ1ZGRiMjM0ZTM4M2QzNmI4YThkNmI1NmEzOGRk NzJmODkwHhcNMjYwMTI2MTgyNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODNiN2IzYzc4YWUxYTBkNzFlZDkyYjhhZjBmZWNlMjQzNzQ5OTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk8ZSNJ6ks6GjQZ4Ynek58gJxInG d4r8lYsu3U4InmX7ehmsJnYsuLArhjmCcJG7qe2LRfHNYDHLx9YvAHatgv2gOjLW SpkqpFcP9mS0QQfJhDj6BFEuwTrK2+2oKn39Bnu5WW9BCmWK+uDdbzGxA0qW48ov 1aNemXf17YMCjT2AEkZOj61pmSFYR/lA30ruaqnhGtd8Mt4T8Vs4tchf2TYM22xu I+svcaCojLwEBi+xpOJyjIjt0Fe3d6p3SGw7rNHaZyP/SzEapY6Qe+8rDrltFmGx 7I2aRwZnXKmvuIwwJVAnoonodFVdnSksOlxsiao17ayesu1nbnLYLI6NhwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFDg7ezx4rhoNce2SuK8P7OJDdJkQMB8GA1UdIwQY MBaAFODy9UXdsjTjg9Nrio1rVqON1y+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jODBjNWEtZmFlMi00NjZkLWFhMTYt OGNhNmMzM2QxNGJiLzEvT0R0N1BIaXVHZzF4N1pLNHJ3X3M0a04wbVJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9jODBjNWEtZmFlMi00NjZkLWFhMTYtOGNhNmMzM2QxNGJi LzEvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAW99fMBQE AgACMA4DBQAqCmTAAwUDKg6WQDANBgkqhkiG9w0BAQsFAAOCAQEAUF8we/2UerPa TdCHwm7C45f1Q0/r8V52Pi3XqceIxNBcSoXcgLw7Z+HjTuTj7pFTziVjzvKBDmb2 jXf8TUPWWJDYvntFCA4fnYpbaWWmI9XHrYeo940/dIbCtYfrYD5PZk8gKHfJs1AQ iL2gdMgfcfwHXUqHJzg2WuDzwPa3ARx4mFI/LpZQ77BwhnN6AZhmjI2ycb1lRS1m HxmfkcaJxAy48jaxwa0lYd+G068N1CMIpXZBDDpbK//RxeY8f9+cjRo0in1ZLxVe Jd9/FHNPRdIrsQBEJ5NWtolQBJdTJZRxueblXpg/C97CN35o5rVHvwMJsn6qZh62 X9XEYazhYQ== -----END CERTIFICATE-----Generated at Mon Feb 2 09:40:13 2026 by rpki-client