This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/OlXzXvBAnBQPn7vN2i51e9g7V2s.roa File: OlXzXvBAnBQPn7vN2i51e9g7V2s.roa (raw, json) Hash identifier: utu4lV5oPAA53ByLeLqmv8n1Y3PqkvTnZhXV5UjfUXo= Subject key identifier: 3A:55:F3:5E:F0:40:9C:14:0F:9F:BB:CD:DA:2E:75:7B:D8:3B:57:6B Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019BE102B8E5A388F553B114D0F566E41C11 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/OlXzXvBAnBQPn7vN2i51e9g7V2s.roa Signing time: Wed 21 Jan 2026 14:43:30 +0000 ROA not before: Wed 21 Jan 2026 14:43:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 87.229.35.0/24 maxlen: 24 87.229.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:02:b8:e5:a3:88:f5:53:b1:14:d0:f5:66:e4:1c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 21 14:43:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a55f35ef0409c140f9fbbcdda2e757bd83b576b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c0:eb:7c:29:89:1e:5d:ef:2b:55:e5:df:df: f8:aa:8e:3b:85:f7:b1:4f:0a:eb:67:40:e7:dd:3e: e4:c9:26:cf:d1:79:f7:05:33:8e:8c:04:07:81:35: 99:bb:8a:38:e8:c2:8f:5e:fb:6a:4c:20:a9:a4:59: aa:0a:44:d3:03:5c:d9:43:18:c9:d9:01:c0:fe:e4: 18:c7:0c:87:c5:c5:6c:0e:a1:81:9f:a5:1e:3e:1b: 3d:ba:ca:31:19:f1:fc:f1:b6:fd:ad:ae:07:1d:68: d4:4c:5c:e9:7c:1f:f9:e2:13:31:8f:aa:45:2e:13: ed:9f:5a:3c:b5:d4:75:80:e9:0b:67:f2:a2:48:e7: 53:71:11:00:01:48:b2:04:f9:24:2e:3a:51:4a:f7: 38:1c:f3:56:89:03:10:f3:42:bf:35:1e:62:d4:cb: f4:76:26:d0:55:e4:d3:39:40:76:80:59:49:8d:ee: 2e:45:fb:80:c7:d0:bb:e5:96:55:9f:ce:fc:ef:12: 56:71:8e:b9:b8:84:83:8d:0b:e4:a7:10:cc:06:b9: 53:7c:bd:5f:bb:30:e7:d2:2e:74:cf:0d:76:08:09: 3d:5f:cc:f2:e1:63:75:41:e5:ff:67:43:7a:1a:5a: 5f:c0:2d:db:e9:be:ec:a3:14:a4:c3:e8:d5:12:02: f6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:55:F3:5E:F0:40:9C:14:0F:9F:BB:CD:DA:2E:75:7B:D8:3B:57:6B X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/OlXzXvBAnBQPn7vN2i51e9g7V2s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.35.0/24 87.229.124.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:b0:2d:ab:75:86:b0:20:23:84:98:11:de:f9:5a:e0:77:94: 41:cd:81:69:bf:be:87:42:d1:a7:65:06:97:a5:d0:7c:3c:ee: 6a:cd:fa:f7:5c:ef:d0:c5:e9:8a:9a:aa:12:44:4e:e0:0e:74: cf:82:82:31:0f:2b:50:c4:48:c1:ba:52:69:e8:ad:fa:10:08: fe:e5:d3:57:0c:d5:0e:88:6b:7b:b8:7d:13:e1:d1:9e:ee:d6: 39:25:94:08:5d:96:4e:22:5d:11:4b:11:2b:17:d6:c4:8a:d2: b6:78:69:2a:7c:43:0d:e4:78:d6:5b:3f:e2:e4:ea:01:61:f1: 9e:98:eb:3d:d4:54:86:66:28:6c:e4:c1:fb:f5:96:34:ea:12: 47:4d:bd:c8:77:da:ed:cb:e5:a3:61:b9:1c:3b:36:bd:2c:93: f1:34:55:cd:27:a4:8e:84:36:95:1a:63:77:88:1e:42:69:b8: 8b:43:93:0b:c9:40:87:45:47:ea:68:0e:8f:ac:34:44:fc:e8: 11:08:aa:81:f7:7b:40:f6:a3:6d:ed:85:20:58:8c:34:c6:90: 41:58:75:3a:19:54:6f:cd:10:e4:85:f0:21:4e:8d:76:cb:13: 3d:0f:29:2e:50:15:06:b4:0d:43:a1:ae:51:26:18:4e:c0:d3: 43:e8:ca:4f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvhArjlo4j1U7EU0PVm5BwRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTIxMTQ0MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTU1ZjM1ZWYwNDA5YzE0MGY5ZmJiY2RkYTJlNzU3YmQ4M2I1NzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcDrfCmJHl3vK1Xl39/4qo47hfex TwrrZ0Dn3T7kySbP0Xn3BTOOjAQHgTWZu4o46MKPXvtqTCCppFmqCkTTA1zZQxjJ 2QHA/uQYxwyHxcVsDqGBn6UePhs9usoxGfH88bb9ra4HHWjUTFzpfB/54hMxj6pF LhPtn1o8tdR1gOkLZ/KiSOdTcREAAUiyBPkkLjpRSvc4HPNWiQMQ80K/NR5i1Mv0 dibQVeTTOUB2gFlJje4uRfuAx9C75ZZVn8787xJWcY65uISDjQvkpxDMBrlTfL1f uzDn0i50zw12CAk9X8zy4WN1QeX/Z0N6GlpfwC3b6b7soxSkw+jVEgL2SwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDpV817wQJwUD5+7zdoudXvYO1drMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvT2xYelh2QkFuQlFQbjd2TjJpNTFlOWc3VjJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV+UjAwQA V+V8MA0GCSqGSIb3DQEBCwUAA4IBAQAbsC2rdYawICOEmBHe+Vrgd5RBzYFpv76H QtGnZQaXpdB8PO5qzfr3XO/QxemKmqoSRE7gDnTPgoIxDytQxEjBulJp6K36EAj+ 5dNXDNUOiGt7uH0T4dGe7tY5JZQIXZZOIl0RSxErF9bEitK2eGkqfEMN5HjWWz/i 5OoBYfGemOs91FSGZihs5MH79ZY06hJHTb3Id9rty+WjYbkcOza9LJPxNFXNJ6SO hDaVGmN3iB5CabiLQ5MLyUCHRUfqaA6PrDRE/OgRCKqB93tA9qNt7YUgWIw0xpBB WHU6GVRvzRDkhfAhTo12yxM9DykuUBUGtA1Doa5RJhhOwNND6MpP -----END CERTIFICATE-----Generated at Sun Jan 25 03:58:43 2026 by rpki-client