This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/idlOCTZeLer70Tvy8HG_eFHIj_A.roa File: idlOCTZeLer70Tvy8HG_eFHIj_A.roa (raw, json) Hash identifier: OxjINEWNa+j5OovsQN+Iq8z65GnsnPtmn9axTiZoZlM= Subject key identifier: 89:D9:4E:09:36:5E:2D:EA:FB:D1:3B:F2:F0:71:BF:78:51:C8:8F:F0 Certificate issuer: /CN=51326fabb1256fa02277e5ee034b7991ff3185a5 Certificate serial: 019B77C718A0BF09341B026CD2EAA1F5C42A Authority key identifier: 51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/idlOCTZeLer70Tvy8HG_eFHIj_A.roa Signing time: Thu 01 Jan 2026 04:18:15 +0000 ROA not before: Thu 01 Jan 2026 04:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 185.213.216.0/24 maxlen: 24 185.213.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:18:a0:bf:09:34:1b:02:6c:d2:ea:a1:f5:c4:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51326fabb1256fa02277e5ee034b7991ff3185a5 Validity Not Before: Jan 1 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89d94e09365e2deafbd13bf2f071bf7851c88ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:22:a5:a9:9b:ef:93:ff:20:e5:bc:8e:64:87: b0:d3:da:50:ae:e4:ba:b0:63:ed:f8:bf:38:48:c2: 25:4d:f8:20:7c:c4:c8:8a:25:27:bf:b1:da:18:c8: 2c:ea:e2:5b:6f:96:15:22:e0:bc:54:71:f2:76:7b: 4a:24:19:09:87:33:c7:ed:85:bb:83:73:76:fd:3a: f8:ae:2b:cf:42:12:19:46:d8:e7:54:27:e9:25:75: 29:0e:6a:b3:c9:96:e3:39:ff:6f:1d:33:3e:02:42: bb:ed:24:a5:0d:02:31:94:03:ff:9c:57:16:fa:02: e6:74:01:92:a7:52:c4:06:13:b0:8f:af:0f:db:13: 3b:85:9a:74:e6:27:74:4b:37:2b:33:86:72:dc:1f: 29:4b:61:91:75:ec:f3:04:c5:73:b8:06:c2:35:25: 22:b4:d2:16:c8:fb:16:f7:13:b6:ff:01:d0:64:2d: 37:12:0b:dd:80:11:66:ee:62:64:a1:b7:36:b3:9a: 85:3b:7a:ce:32:cf:bf:2d:02:b7:20:fd:92:4c:1a: 86:40:e4:fc:9c:0e:42:98:ef:bc:d9:91:a4:13:36: 8a:4c:33:be:c3:73:40:71:35:f1:0f:a5:74:cd:5a: dd:62:cf:a9:71:17:48:9d:46:87:71:1e:58:0e:db: 5b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D9:4E:09:36:5E:2D:EA:FB:D1:3B:F2:F0:71:BF:78:51:C8:8F:F0 X509v3 Authority Key Identifier: keyid:51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/idlOCTZeLer70Tvy8HG_eFHIj_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.216.0/23 Signature Algorithm: sha256WithRSAEncryption 00:34:c1:ca:6e:b8:43:32:86:e7:c6:9f:04:d8:66:f5:08:16: 64:73:10:ac:58:25:4a:d0:e6:79:1b:85:e6:ef:4b:e5:2e:f0: d1:aa:4c:1a:13:c2:96:cd:1c:4d:4a:c2:2f:a6:55:4f:2f:f0: 4c:7f:87:97:5f:9b:0d:fb:37:da:63:f2:e2:72:bf:72:1b:c8: ec:95:37:ce:ee:43:95:4f:58:60:39:5e:6d:82:b9:9a:ef:48: 4a:85:d3:ff:05:8e:89:a5:8f:b8:46:9b:1c:7f:4d:1b:7d:b3: fc:82:53:cd:8e:40:71:71:50:99:35:2e:db:73:6b:0a:a0:19: dd:0e:23:9f:76:61:4c:75:fc:cc:9b:42:8a:62:eb:92:17:61: 6e:e9:c7:52:7e:1b:98:56:5f:1b:d0:d2:e2:75:dc:c0:14:3a: b8:ad:86:b8:59:2e:0a:1c:89:1d:64:7f:2f:31:54:e5:5c:c6: 45:34:96:6a:c1:6c:17:51:7c:36:07:ac:21:0c:71:de:fb:50: 7d:fe:b5:87:22:71:1a:a8:e0:7b:5b:b8:41:89:8e:8a:ce:ed: 5e:bc:8d:40:ab:b9:2c:81:ef:03:e9:13:d0:ad:f6:21:c5:f4: e3:cb:02:5c:b1:7d:0f:d2:a8:0f:0e:ec:12:17:ab:f0:21:a6: 9f:67:f2:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxigvwk0GwJs0uqh9cQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMzI2ZmFiYjEyNTZmYTAyMjc3ZTVlZTAzNGI3OTkxZmYz MTg1YTUwHhcNMjYwMTAxMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWQ5NGUwOTM2NWUyZGVhZmJkMTNiZjJmMDcxYmY3ODUxYzg4ZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSKlqZvvk/8g5byOZIew09pQruS6 sGPt+L84SMIlTfggfMTIiiUnv7HaGMgs6uJbb5YVIuC8VHHydntKJBkJhzPH7YW7 g3N2/Tr4rivPQhIZRtjnVCfpJXUpDmqzyZbjOf9vHTM+AkK77SSlDQIxlAP/nFcW +gLmdAGSp1LEBhOwj68P2xM7hZp05id0SzcrM4Zy3B8pS2GRdezzBMVzuAbCNSUi tNIWyPsW9xO2/wHQZC03EgvdgBFm7mJkobc2s5qFO3rOMs+/LQK3IP2STBqGQOT8 nA5CmO+82ZGkEzaKTDO+w3NAcTXxD6V0zVrdYs+pcRdInUaHcR5YDttbYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFInZTgk2Xi3q+9E78vBxv3hRyI/wMB8GA1UdIwQY MBaAFFEyb6uxJW+gInfl7gNLeZH/MYWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVRKdnE3RWxiNkFpZC1YdUEwdDVrZjh4aGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iZDZmMTgtZWE3ZC00M2M0LTljODUt ODdhM2YzYjMxMTUwLzEvaWRsT0NUWmVMZXI3MFR2eThIR19lRkhJal9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9iZDZmMTgtZWE3ZC00M2M0LTljODUtODdhM2YzYjMxMTUw LzEvVVRKdnE3RWxiNkFpZC1YdUEwdDVrZjh4aGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudXYMA0G CSqGSIb3DQEBCwUAA4IBAQAANMHKbrhDMobnxp8E2Gb1CBZkcxCsWCVK0OZ5G4Xm 70vlLvDRqkwaE8KWzRxNSsIvplVPL/BMf4eXX5sN+zfaY/Licr9yG8jslTfO7kOV T1hgOV5tgrma70hKhdP/BY6JpY+4Rpscf00bfbP8glPNjkBxcVCZNS7bc2sKoBnd DiOfdmFMdfzMm0KKYuuSF2Fu6cdSfhuYVl8b0NLiddzAFDq4rYa4WS4KHIkdZH8v MVTlXMZFNJZqwWwXUXw2B6whDHHe+1B9/rWHInEaqOB7W7hBiY6Kzu1evI1Aq7ks ge8D6RPQrfYhxfTjywJcsX0P0qgPDuwSF6vwIaafZ/LP -----END CERTIFICATE-----Generated at Wed Jan 21 13:16:59 2026 by rpki-client