This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/OdpcRvq6Ntt7BatU6hcDO7lKhJU.roa File: OdpcRvq6Ntt7BatU6hcDO7lKhJU.roa (raw, json) Hash identifier: 2TK7J7AsVuo5uY1fW4gJFOzrWvfYvp6BV3XxeqBPocQ= Subject key identifier: 39:DA:5C:46:FA:BA:36:DB:7B:05:AB:54:EA:17:03:3B:B9:4A:84:95 Certificate issuer: /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf Certificate serial: 019B7A5B79EF3B265AECB1AEDD9417BC9D47 Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/OdpcRvq6Ntt7BatU6hcDO7lKhJU.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209980 IP address blocks: 92.43.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:79:ef:3b:26:5a:ec:b1:ae:dd:94:17:bc:9d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39da5c46faba36db7b05ab54ea17033bb94a8495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bb:ff:af:66:fc:5c:67:6d:a7:ff:ee:ba:b8: 97:21:56:0f:91:fc:fd:60:53:db:f3:15:40:1f:e8: 06:15:15:be:28:1b:39:86:39:e7:de:f1:b9:88:18: dd:94:f2:8a:b3:80:11:62:e9:09:11:57:0a:17:c2: 76:6c:ad:ad:74:b9:22:c4:b5:d9:23:00:05:63:6a: 0c:b3:9d:44:a8:97:de:3b:0e:64:2c:bd:95:e6:73: 67:4f:9d:da:63:3c:35:07:cc:93:8a:9a:33:fe:94: d1:3f:48:2b:e3:4e:fc:e7:3e:59:00:dd:05:6b:b8: cf:1b:84:2e:36:8c:bb:6d:01:3d:12:f7:e2:08:49: f8:05:50:72:48:b6:49:8c:0d:3e:66:05:29:e1:3d: da:7c:fd:d0:21:19:78:2d:4a:b7:9e:84:5b:0c:94: 34:2c:81:fb:34:c3:fb:02:45:72:a4:23:fc:97:2d: ab:03:fc:29:5a:2b:80:0f:8c:da:ac:42:d4:a2:4f: f7:bf:ce:f7:1a:4e:b1:f2:5e:4a:2f:9d:40:a2:15: df:e4:43:25:ad:5e:d8:fa:59:76:99:19:b5:e8:c9: 3d:24:8c:16:41:39:1e:20:a9:65:fe:bc:f1:d2:7e: aa:ea:41:62:2c:01:74:71:0c:9f:d2:25:f3:e2:ad: 3c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DA:5C:46:FA:BA:36:DB:7B:05:AB:54:EA:17:03:3B:B9:4A:84:95 X509v3 Authority Key Identifier: keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/OdpcRvq6Ntt7BatU6hcDO7lKhJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.43.224.0/21 Signature Algorithm: sha256WithRSAEncryption bb:4d:50:25:e9:d2:61:9d:cd:46:bd:1d:9b:b8:d9:e7:04:9b: 71:70:15:c1:98:1d:31:27:e1:e1:61:29:4f:4a:ce:7c:dd:4f: 0f:d2:b2:d6:33:6d:7a:d0:4e:4f:14:0b:17:c1:57:ec:66:32: 31:c2:2c:10:f4:f5:55:e6:98:aa:05:95:20:59:5b:4b:2d:7d: b5:07:c8:2f:33:99:89:ee:d7:97:d7:51:67:c6:c4:51:c6:e9: 13:59:0e:e0:9c:0d:84:2d:5e:1a:1b:23:f5:23:20:eb:f6:dc: 90:e8:fe:c8:08:57:82:2a:a8:f8:47:4a:4d:c3:99:82:af:01: b6:8b:a1:ae:67:e8:56:3c:94:29:b1:62:0e:cd:a3:af:14:7d: 9f:88:48:83:40:0d:af:fc:33:74:71:bd:16:0d:de:d8:bc:2f: c9:f1:d2:f4:cb:99:3d:f7:62:2e:03:d0:03:e6:06:0f:dc:45: 40:0b:c2:91:d9:28:87:ea:84:ab:8b:9c:23:64:04:19:8f:87: d9:0a:d0:fc:4b:32:8f:8f:75:f7:29:1e:f9:3f:29:94:f0:38: 4c:fa:63:c9:1b:39:cc:5a:a2:75:63:98:fe:be:2a:49:00:32: ac:fa:c9:3a:fc:be:e1:65:87:e6:58:26:49:4b:7c:16:9c:7f: 00:02:c7:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3nvOyZa7LGu3ZQXvJ1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYmI3OGJlNDFlNDgzMzc5OTdjOGZlOTFkOGUyZjI0Zjdi NDllYWYwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWRhNWM0NmZhYmEzNmRiN2IwNWFiNTRlYTE3MDMzYmI5NGE4NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7v/r2b8XGdtp//uuriXIVYPkfz9 YFPb8xVAH+gGFRW+KBs5hjnn3vG5iBjdlPKKs4ARYukJEVcKF8J2bK2tdLkixLXZ IwAFY2oMs51EqJfeOw5kLL2V5nNnT53aYzw1B8yTipoz/pTRP0gr40785z5ZAN0F a7jPG4QuNoy7bQE9EvfiCEn4BVBySLZJjA0+ZgUp4T3afP3QIRl4LUq3noRbDJQ0 LIH7NMP7AkVypCP8ly2rA/wpWiuAD4zarELUok/3v873Gk6x8l5KL51AohXf5EMl rV7Y+ll2mRm16Mk9JIwWQTkeIKll/rzx0n6q6kFiLAF0cQyf0iXz4q08GQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDnaXEb6ujbbewWrVOoXAzu5SoSVMB8GA1UdIwQY MBaAFIG7eL5B5IM3mXyP6R2OLyT3tJ6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85ZGI0ZDMtZjc4ZC00NDMwLTg3YzAt NmNiZDU4MWQzMTdjLzEvT2RwY1J2cTZOdHQ3QmF0VTZoY0RPN2xLaEpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC85ZGI0ZDMtZjc4ZC00NDMwLTg3YzAtNmNiZDU4MWQzMTdj LzEvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXCvgMA0G CSqGSIb3DQEBCwUAA4IBAQC7TVAl6dJhnc1GvR2buNnnBJtxcBXBmB0xJ+HhYSlP Ss583U8P0rLWM2160E5PFAsXwVfsZjIxwiwQ9PVV5piqBZUgWVtLLX21B8gvM5mJ 7teX11FnxsRRxukTWQ7gnA2ELV4aGyP1IyDr9tyQ6P7ICFeCKqj4R0pNw5mCrwG2 i6GuZ+hWPJQpsWIOzaOvFH2fiEiDQA2v/DN0cb0WDd7YvC/J8dL0y5k992IuA9AD 5gYP3EVAC8KR2SiH6oSri5wjZAQZj4fZCtD8SzKPj3X3KR75PymU8DhM+mPJGznM WqJ1Y5j+vipJADKs+sk6/L7hZYfmWCZJS3wWnH8AAseM -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:08 2026 by rpki-client