This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OLXEn7omyMDAtD66yrEfSRHwGrQ.roa File: OLXEn7omyMDAtD66yrEfSRHwGrQ.roa (raw, json) Hash identifier: vrpEP60eZT1Sy7FQC8vPRP5rZ0d5V/S+VaWDH9BvnDM= Subject key identifier: 38:B5:C4:9F:BA:26:C8:C0:C0:B4:3E:BA:CA:B1:1F:49:11:F0:1A:B4 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84D0F8E08B90E5D931E5A886293DAE Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OLXEn7omyMDAtD66yrEfSRHwGrQ.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59738 IP address blocks: 31.148.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d0:f8:e0:8b:90:e5:d9:31:e5:a8:86:29:3d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38b5c49fba26c8c0c0b43ebacab11f4911f01ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c3:58:b9:b3:41:1f:7c:b1:f8:ad:45:84:bd: f7:80:2b:15:32:10:83:c5:d5:25:50:d3:0f:3d:c4: 3b:8f:2d:24:ef:4b:f7:37:d7:94:6f:41:c7:07:92: 9b:28:fa:96:a2:20:d4:5a:17:bf:51:92:63:bf:3e: 10:62:09:d0:a3:d2:86:96:05:f5:ca:38:4b:1b:25: c0:3d:19:ae:ab:6f:96:fa:42:ab:0e:88:c4:92:92: e4:cc:11:aa:a7:1f:43:e2:c2:ab:30:97:aa:f0:c1: ae:3a:db:69:21:90:41:0f:90:a3:e8:bd:2f:46:af: 41:94:6a:20:6e:9b:b6:68:6a:bf:e7:ee:47:2c:4a: 38:42:e9:91:d5:7a:30:0a:c2:3b:a9:28:2b:93:c2: 3e:86:4d:1c:76:2e:a7:ca:8c:95:8b:7c:17:7f:fe: 37:a4:13:7b:ab:c2:ad:af:15:f7:9b:a2:a6:19:e5: 48:04:a9:9d:36:52:49:e2:2a:67:5c:ae:be:9a:84: c7:b3:f2:61:ac:f1:10:05:cf:eb:02:76:75:0d:28: 9c:62:f4:f6:e2:ec:58:e8:82:d2:50:43:99:7e:91: b6:c7:45:dc:a2:ea:b6:17:2f:8f:a1:5c:06:f2:90: a5:cd:fd:86:75:b9:dc:d2:89:81:1c:67:71:f2:b1: 27:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B5:C4:9F:BA:26:C8:C0:C0:B4:3E:BA:CA:B1:1F:49:11:F0:1A:B4 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OLXEn7omyMDAtD66yrEfSRHwGrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.6.0/24 Signature Algorithm: sha256WithRSAEncryption 81:15:9b:40:cc:33:f7:51:1e:98:7e:03:53:04:70:bc:dc:3c: 22:79:23:33:08:aa:82:97:58:d6:cd:a6:88:68:bc:87:73:81: 7c:a0:03:0a:e7:4f:1e:1c:76:3d:45:d9:8c:d9:97:f8:74:7e: 87:25:a0:6e:18:d8:1c:29:57:2e:15:f4:51:7b:94:ed:bd:d9: 5d:d5:23:27:1b:91:42:47:76:ac:9b:e9:ac:fe:ca:41:4d:9d: 15:80:89:8f:e4:99:40:aa:b5:11:ba:4b:c0:18:74:fd:eb:d8: c9:f1:60:1e:59:e6:7a:cb:c0:4b:b3:0e:cf:d7:4c:0d:50:c0: 21:c6:1f:35:7b:26:c4:ca:4e:53:50:95:b0:3d:78:27:1b:62: a7:a3:1f:af:90:0b:86:5d:af:41:f5:eb:2f:3f:98:12:5c:67: b4:40:03:74:05:51:aa:07:52:94:7b:e8:e8:26:69:ae:02:52: 2c:9c:e3:2d:54:8b:c2:eb:59:96:32:03:03:4a:b2:7c:50:8a: 4f:82:33:eb:80:13:f3:f9:66:f5:18:72:81:5a:9b:66:77:57: f7:97:25:26:6f:8a:12:f8:d0:b8:19:ce:f7:c3:9d:70:47:83: 47:b8:d6:80:2d:68:32:ec:68:39:77:7d:c9:f9:8d:a0:36:b0: 40:5f:00:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hND44IuQ5dkx5aiGKT2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGI1YzQ5ZmJhMjZjOGMwYzBiNDNlYmFjYWIxMWY0OTExZjAxYWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sNYubNBH3yx+K1FhL33gCsVMhCD xdUlUNMPPcQ7jy0k70v3N9eUb0HHB5KbKPqWoiDUWhe/UZJjvz4QYgnQo9KGlgX1 yjhLGyXAPRmuq2+W+kKrDojEkpLkzBGqpx9D4sKrMJeq8MGuOttpIZBBD5Cj6L0v Rq9BlGogbpu2aGq/5+5HLEo4QumR1XowCsI7qSgrk8I+hk0cdi6nyoyVi3wXf/43 pBN7q8KtrxX3m6KmGeVIBKmdNlJJ4ipnXK6+moTHs/JhrPEQBc/rAnZ1DSicYvT2 4uxY6ILSUEOZfpG2x0Xcouq2Fy+PoVwG8pClzf2Gdbnc0omBHGdx8rEnAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDi1xJ+6JsjAwLQ+usqxH0kR8Bq0MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvT0xYRW43b215TURBdEQ2NnlyRWZTUkh3R3JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH5QGMA0G CSqGSIb3DQEBCwUAA4IBAQCBFZtAzDP3UR6YfgNTBHC83DwieSMzCKqCl1jWzaaI aLyHc4F8oAMK508eHHY9RdmM2Zf4dH6HJaBuGNgcKVcuFfRRe5Ttvdld1SMnG5FC R3asm+ms/spBTZ0VgImP5JlAqrURukvAGHT969jJ8WAeWeZ6y8BLsw7P10wNUMAh xh81eybEyk5TUJWwPXgnG2Knox+vkAuGXa9B9esvP5gSXGe0QAN0BVGqB1KUe+jo JmmuAlIsnOMtVIvC61mWMgMDSrJ8UIpPgjPrgBPz+Wb1GHKBWptmd1f3lyUmb4oS +NC4Gc73w51wR4NHuNaALWgy7Gg5d33J+Y2gNrBAXwDX -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:30 2026 by rpki-client