This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/OtVkQ4f1AeHI3V_qrZEwcYGqMW0.roa File: OtVkQ4f1AeHI3V_qrZEwcYGqMW0.roa (raw, json) Hash identifier: lQOpU/KkOdEbHcGa0HJQ2Z69/i85MPhOWNcJfoQZtBs= Subject key identifier: 3A:D5:64:43:87:F5:01:E1:C8:DD:5F:EA:AD:91:30:71:81:AA:31:6D Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f Certificate serial: 019B7910455F92DF125E416B6DC7FCE51A31 Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/OtVkQ4f1AeHI3V_qrZEwcYGqMW0.roa Signing time: Thu 01 Jan 2026 10:17:48 +0000 ROA not before: Thu 01 Jan 2026 10:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43519 IP address blocks: 149.20.120.0/24 maxlen: 24 149.20.121.0/24 maxlen: 24 149.20.122.0/24 maxlen: 24 149.20.123.0/24 maxlen: 24 213.248.200.0/24 maxlen: 24 213.248.201.0/24 maxlen: 24 213.248.202.0/24 maxlen: 24 213.248.203.0/24 maxlen: 24 213.248.204.0/24 maxlen: 24 213.248.205.0/24 maxlen: 24 213.248.206.0/24 maxlen: 24 213.248.207.0/24 maxlen: 24 213.248.216.0/24 maxlen: 24 213.248.217.0/24 maxlen: 24 213.248.218.0/24 maxlen: 24 213.248.219.0/24 maxlen: 24 213.248.220.0/24 maxlen: 24 213.248.221.0/24 maxlen: 24 213.248.222.0/24 maxlen: 24 213.248.223.0/24 maxlen: 24 213.248.254.0/24 maxlen: 24 2a01:618:200::/48 maxlen: 48 2a01:618:2ff::/48 maxlen: 48 2a01:618:400::/48 maxlen: 48 2a01:618:401::/48 maxlen: 48 2a01:618:402::/48 maxlen: 48 2a01:618:403::/48 maxlen: 48 2a01:618:404::/48 maxlen: 48 2a01:618:405::/48 maxlen: 48 2a01:618:406::/48 maxlen: 48 2a01:618:407::/48 maxlen: 48 2a01:618:408::/48 maxlen: 48 2a01:618:409::/48 maxlen: 48 2a01:618:4ff::/48 maxlen: 48 2a01:61e:1::/48 maxlen: 48 2a01:61e:2::/48 maxlen: 48 2a01:61e:3::/48 maxlen: 48 2a01:61e:4::/48 maxlen: 48 2a01:61e:5::/48 maxlen: 48 2a01:61e:6::/48 maxlen: 48 2a01:61e:fffc::/48 maxlen: 48 2a01:61e:fffd::/48 maxlen: 48 2a01:61e:fffe::/48 maxlen: 48 2a01:61e:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:45:5f:92:df:12:5e:41:6b:6d:c7:fc:e5:1a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f Validity Not Before: Jan 1 10:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ad5644387f501e1c8dd5feaad91307181aa316d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:df:a3:03:91:76:ea:6b:18:9b:3d:ce:30: 7a:21:e2:62:b1:46:ef:50:96:b3:a7:c2:2f:ca:b5: 60:3d:1b:8c:55:ee:fa:36:4e:c6:0b:17:ff:f1:55: c7:32:a0:77:c8:24:44:b0:da:30:22:e2:80:1b:48: be:0b:1b:bf:25:9f:ac:7b:09:37:0a:f1:0d:a7:98: 33:15:7a:82:5b:45:9d:47:69:03:fe:38:b2:c0:79: b8:9a:ab:1b:a6:b4:f7:47:23:7a:1d:b3:6d:75:40: 6f:d6:0b:53:0e:ce:a7:3b:25:c2:28:26:12:54:20: f6:8b:52:80:6f:dd:f7:80:6f:e8:0a:c6:f3:97:e7: 1e:7d:4f:08:56:48:0a:31:e2:ca:cd:95:a2:bf:8d: 8b:d3:c1:ab:a1:4f:c0:59:86:e4:8a:09:cd:44:be: 34:d0:f1:f1:32:c6:d1:8d:66:8f:56:e2:f3:96:a8: 5d:db:c9:5c:3e:50:a3:ec:bf:c3:a2:3d:0b:b0:26: 9a:7e:89:ee:ed:48:fc:43:51:a2:5e:1a:5b:16:dd: b9:03:60:c7:63:45:25:70:c2:76:84:eb:fa:11:c4: d6:13:41:ac:98:71:35:85:9a:78:cd:e3:60:c6:cb: c5:d8:40:5e:42:a2:98:39:c2:28:00:16:26:90:00: 23:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D5:64:43:87:F5:01:E1:C8:DD:5F:EA:AD:91:30:71:81:AA:31:6D X509v3 Authority Key Identifier: keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/OtVkQ4f1AeHI3V_qrZEwcYGqMW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.20.120.0/22 213.248.200.0/21 213.248.216.0/21 213.248.254.0/24 IPv6: 2a01:618:200::/48 2a01:618:2ff::/48 2a01:618:400::-2a01:618:409:ffff:ffff:ffff:ffff:ffff 2a01:618:4ff::/48 2a01:61e:1::-2a01:61e:6:ffff:ffff:ffff:ffff:ffff 2a01:61e:fffc::/46 Signature Algorithm: sha256WithRSAEncryption 19:e6:bd:ce:c3:e7:4c:c9:01:8c:26:44:fd:fa:0b:ee:c2:8c: 98:ff:a0:04:df:06:ca:0f:b8:97:7e:d0:9c:ab:f4:cd:a6:11: 72:58:cc:0f:3b:df:34:62:21:ba:7c:c8:f1:4b:34:b5:4a:ae: 96:3e:4c:2b:21:bc:41:3e:5b:2b:cf:86:0c:b3:3e:87:88:c2: d7:b5:e9:fe:92:54:df:d3:0b:e3:38:6e:77:53:6c:d2:03:63: ec:39:36:cb:d3:db:c5:57:f7:8b:6d:87:4d:a2:c6:83:8d:63: 3b:06:dc:e2:70:f5:c9:e3:d6:c9:4e:89:a2:7e:76:4a:1f:2f: 0a:20:d6:c9:fa:2a:b2:4d:5c:c3:86:6f:1d:86:66:94:68:5c: c4:3c:59:6f:24:1c:b8:87:e5:38:96:c3:55:47:ae:37:d4:5c: 26:00:74:35:27:16:30:90:ce:bc:fe:41:49:d6:2d:08:44:02: 41:cd:9d:1d:9a:10:18:cd:6a:f5:3b:2c:70:3b:22:e5:03:5f: 56:9b:1b:5e:3e:61:4f:e5:05:0b:9f:c3:16:e8:d3:47:0c:b5: 9e:fc:02:97:bf:da:40:da:e3:e4:e6:67:ed:5f:e3:fc:25:e3: cb:a4:6d:b9:b8:67:c9:c1:d7:c9:9d:13:b8:ef:92:8a:e9:f4: 0d:c2:75:d6 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZt5EEVfkt8SXkFrbcf85RoxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMmVjYzZjYzU5MDNhZWEwZGI2MTIwMGY0Y2NkNGY4MjRj ZGQ1NGYwHhcNMjYwMTAxMTAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWQ1NjQ0Mzg3ZjUwMWUxYzhkZDVmZWFhZDkxMzA3MTgxYWEzMTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQrfowORduprGJs9zjB6IeJisUbv UJazp8IvyrVgPRuMVe76Nk7GCxf/8VXHMqB3yCREsNowIuKAG0i+Cxu/JZ+sewk3 CvENp5gzFXqCW0WdR2kD/jiywHm4mqsbprT3RyN6HbNtdUBv1gtTDs6nOyXCKCYS VCD2i1KAb933gG/oCsbzl+cefU8IVkgKMeLKzZWiv42L08GroU/AWYbkignNRL40 0PHxMsbRjWaPVuLzlqhd28lcPlCj7L/Doj0LsCaafonu7Uj8Q1GiXhpbFt25A2DH Y0UlcMJ2hOv6EcTWE0GsmHE1hZp4zeNgxsvF2EBeQqKYOcIoABYmkAAjoQIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFDrVZEOH9QHhyN1f6q2RMHGBqjFtMB8GA1UdIwQY MBaAFGIuzGzFkDrqDbYSAPTM1PgkzdVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUt MzQ2MzY4ODI3ZTY4LzEvT3RWa1E0ZjFBZUhJM1ZfcXJaRXdjWUdxTVcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yNjJhNGItYzcwMS00OGRjLTlhZTUtMzQ2MzY4ODI3ZTY4 LzEvWWk3TWJNV1FPdW9OdGhJQTlNelUtQ1ROMVU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwHgQCAAEwGAMEApUUeAME A9X4yAMEA9X42AMEANX4/jBRBAIAAjBLAwcAKgEGGAIAAwcAKgEGGAL/MBEDBgIq AQYYBAMHASoBBhgECAMHACoBBhgE/zASAwcAKgEGHgABAwcAKgEGHgAGAwcCKgEG Hv/8MA0GCSqGSIb3DQEBCwUAA4IBAQAZ5r3Ow+dMyQGMJkT9+gvuwoyY/6AE3wbK D7iXftCcq/TNphFyWMwPO980YiG6fMjxSzS1Sq6WPkwrIbxBPlsrz4YMsz6HiMLX ten+klTf0wvjOG53U2zSA2PsOTbL09vFV/eLbYdNosaDjWM7BtzicPXJ49bJTomi fnZKHy8KINbJ+iqyTVzDhm8dhmaUaFzEPFlvJBy4h+U4lsNVR6431FwmAHQ1JxYw kM68/kFJ1i0IRAJBzZ0dmhAYzWr1OyxwOyLlA19WmxtePmFP5QULn8MW6NNHDLWe /AKXv9pA2uPk5mftX+P8JePLpG25uGfJwdfJnRO475KK6fQNwnXW -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:13 2026 by rpki-client