This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Otk0FG79gmtURrbs9qBFw9Z1oYE.roa File: Otk0FG79gmtURrbs9qBFw9Z1oYE.roa (raw, json) Hash identifier: a7mLkMf4TxITC/PYCxNaVolYF/WwFtTrcxfr0qmRb9E= Subject key identifier: 3A:D9:34:14:6E:FD:82:6B:54:46:B6:EC:F6:A0:45:C3:D6:75:A1:81 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019B79EC4F1D42482970E5A9D60C9BAC3C83 Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Otk0FG79gmtURrbs9qBFw9Z1oYE.roa Signing time: Thu 01 Jan 2026 14:18:08 +0000 ROA not before: Thu 01 Jan 2026 14:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212667 IP address blocks: 85.235.81.0/24 maxlen: 24 91.241.180.0/24 maxlen: 24 91.241.181.0/24 maxlen: 24 176.103.82.0/24 maxlen: 24 192.109.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:4f:1d:42:48:29:70:e5:a9:d6:0c:9b:ac:3c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Jan 1 14:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ad934146efd826b5446b6ecf6a045c3d675a181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:91:33:c1:fb:1e:18:86:42:44:ab:70:a2: 3b:5d:cb:6c:55:b9:5f:74:12:a9:aa:7a:86:5c:43: 0d:5b:79:c7:10:3a:fb:62:98:02:ec:9b:21:7a:90: 3b:40:30:9f:a9:c5:7c:8d:db:44:ad:21:4a:52:38: f1:be:b1:e4:86:04:f6:71:c8:7e:40:31:3c:f2:a2: 14:a1:02:54:6c:97:3b:df:f7:95:01:cf:69:c2:39: 24:57:82:7a:52:5f:b2:8d:1a:41:d7:10:e1:1e:9e: 53:03:af:29:56:92:38:ac:85:c5:f6:97:37:b1:5f: 6a:8d:52:de:ff:79:53:c3:55:f7:fd:a3:c8:5b:91: 85:fa:38:e4:8f:bb:e9:52:75:4e:3e:f1:b5:ee:f5: d9:43:a5:38:f1:d2:c5:3d:b8:95:48:98:c0:e3:3f: e5:9d:fe:ab:c2:c0:7c:08:88:f9:55:4b:51:f5:fb: be:14:de:24:cf:a3:a5:32:a6:86:52:72:e8:47:7d: a0:0a:0d:15:80:0d:0a:d5:cd:b6:0e:d6:b7:11:e5: 6e:93:56:34:5a:ee:9b:5c:21:70:bc:1c:9a:25:53: 4c:b0:ac:f1:cc:cc:ee:77:de:4b:3d:6b:46:ca:0f: 5a:0f:2b:ad:90:4d:24:5f:82:f4:6b:cf:15:8d:d2: 0d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D9:34:14:6E:FD:82:6B:54:46:B6:EC:F6:A0:45:C3:D6:75:A1:81 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Otk0FG79gmtURrbs9qBFw9Z1oYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.235.81.0/24 91.241.180.0/23 176.103.82.0/24 192.109.97.0/24 Signature Algorithm: sha256WithRSAEncryption 08:7f:91:fb:70:63:f5:17:73:9b:02:37:9b:cd:c3:ad:f8:22: 0f:ee:6f:7a:3a:9e:9e:a5:b5:fd:e5:d2:78:43:75:97:a0:c8: 86:f8:5e:36:59:9d:51:48:5f:aa:15:ad:ab:36:5e:66:94:99: d4:27:90:a9:0c:44:32:f3:e7:dd:a3:18:45:ca:b6:ec:e4:95: a0:05:2f:4d:00:64:dc:a7:bc:88:89:2f:68:26:9c:66:07:e4: 18:cc:eb:a3:0b:08:45:21:9a:85:b6:19:5d:1e:3f:27:2e:32: 35:b3:93:27:8c:64:bd:68:b6:e0:f2:fb:d8:f1:65:84:ba:fc: 62:12:8e:7c:78:48:d0:5d:fe:1a:9b:9d:57:99:48:7c:1b:7c: cd:89:5e:13:c5:90:09:be:d1:bb:07:3c:f9:10:01:6f:34:de: 25:07:76:05:7c:35:94:10:6f:6c:5b:0b:d2:6b:d3:e1:61:80: be:a2:95:09:4c:ed:96:c7:c4:ca:85:96:c4:7d:3d:ef:43:68: b5:58:9c:e9:a9:cb:3e:70:58:ff:c0:b4:32:48:85:99:1b:77: c9:43:80:69:fa:6a:7a:bc:3c:96:ea:91:0e:25:97:4a:90:cb: a4:3c:51:52:c5:f1:d6:b6:9a:69:5d:ca:76:40:16:76:c5:d6: 19:33:23:3b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt57E8dQkgpcOWp1gybrDyDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjYwMTAxMTQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWQ5MzQxNDZlZmQ4MjZiNTQ0NmI2ZWNmNmEwNDVjM2Q2NzVhMTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1CRM8H7HhiGQkSrcKI7XctsVblf dBKpqnqGXEMNW3nHEDr7YpgC7JshepA7QDCfqcV8jdtErSFKUjjxvrHkhgT2cch+ QDE88qIUoQJUbJc73/eVAc9pwjkkV4J6Ul+yjRpB1xDhHp5TA68pVpI4rIXF9pc3 sV9qjVLe/3lTw1X3/aPIW5GF+jjkj7vpUnVOPvG17vXZQ6U48dLFPbiVSJjA4z/l nf6rwsB8CIj5VUtR9fu+FN4kz6OlMqaGUnLoR32gCg0VgA0K1c22Dta3EeVuk1Y0 Wu6bXCFwvByaJVNMsKzxzMzud95LPWtGyg9aDyutkE0kX4L0a88VjdIN+wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDrZNBRu/YJrVEa27PagRcPWdaGBMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvT3RrMEZHNzlnbXRVUnJiczlxQkZ3OVoxb1lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVetRAwQB W/G0AwQAsGdSAwQAwG1hMA0GCSqGSIb3DQEBCwUAA4IBAQAIf5H7cGP1F3ObAjeb zcOt+CIP7m96Op6epbX95dJ4Q3WXoMiG+F42WZ1RSF+qFa2rNl5mlJnUJ5CpDEQy 8+fdoxhFyrbs5JWgBS9NAGTcp7yIiS9oJpxmB+QYzOujCwhFIZqFthldHj8nLjI1 s5MnjGS9aLbg8vvY8WWEuvxiEo58eEjQXf4am51XmUh8G3zNiV4TxZAJvtG7Bzz5 EAFvNN4lB3YFfDWUEG9sWwvSa9PhYYC+opUJTO2Wx8TKhZbEfT3vQ2i1WJzpqcs+ cFj/wLQySIWZG3fJQ4Bp+mp6vDyW6pEOJZdKkMukPFFSxfHWtpppXcp2QBZ2xdYZ MyM7 -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:56 2026 by rpki-client