This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/ONtLdxm2tPCgNG6apw05G9CfJl4.roa File: ONtLdxm2tPCgNG6apw05G9CfJl4.roa (raw, json) Hash identifier: GtpvzkZjqYfxcugYhiiM43AgTEuXOvMKvTUhpVcadjY= Subject key identifier: 38:DB:4B:77:19:B6:B4:F0:A0:34:6E:9A:A7:0D:39:1B:D0:9F:26:5E Certificate issuer: /CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5 Certificate serial: 019B7CEE20F0E42F0EBDBA4F737233A94D35 Authority key identifier: C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/ONtLdxm2tPCgNG6apw05G9CfJl4.roa Signing time: Fri 02 Jan 2026 04:18:59 +0000 ROA not before: Fri 02 Jan 2026 04:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3292 IP address blocks: 193.105.30.0/23 maxlen: 23 194.99.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:20:f0:e4:2f:0e:bd:ba:4f:73:72:33:a9:4d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5 Validity Not Before: Jan 2 04:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38db4b7719b6b4f0a0346e9aa70d391bd09f265e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:a7:b9:41:eb:d1:77:33:25:b0:9b:48:9a: f4:3b:70:36:71:28:3a:b9:52:ee:98:64:30:7c:03: 71:29:97:f8:ef:a3:87:ec:1e:3e:13:20:e8:46:52: b4:e4:b7:b9:bb:05:4c:33:3c:05:28:1c:ae:4e:ef: 35:09:e2:23:49:2c:58:f5:a2:c5:b7:2a:62:43:0a: d5:40:3c:51:da:50:02:71:f2:58:59:f7:16:dd:4a: e6:42:c0:2d:e0:11:e0:09:f7:90:08:74:34:92:6b: 81:94:b8:22:b2:00:de:63:ca:72:be:83:44:0b:83: 8b:12:7d:d8:b0:63:22:96:8a:64:e8:c4:ed:59:76: c4:bd:d3:fd:04:70:52:3a:96:7f:cf:78:db:e7:c6: 70:ad:08:19:02:93:34:28:6c:51:7c:c8:8f:1e:93: dd:b2:62:bd:bf:35:13:2b:3b:dc:cb:35:99:0b:0d: e3:ca:7b:c9:b4:e6:ea:0d:09:4a:5e:ae:40:65:22: b0:3e:c6:be:2f:46:3a:77:43:ca:68:e8:80:cb:f6: f0:3e:65:0c:ee:15:27:d5:b9:fd:aa:d7:6f:be:fa: f6:01:de:9d:7d:df:16:4f:1f:c2:3c:c8:0d:62:c1: ee:aa:85:b3:96:c1:1d:34:f4:5b:7b:fd:8c:f9:6e: 81:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DB:4B:77:19:B6:B4:F0:A0:34:6E:9A:A7:0D:39:1B:D0:9F:26:5E X509v3 Authority Key Identifier: keyid:C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/ONtLdxm2tPCgNG6apw05G9CfJl4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.30.0/23 194.99.114.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:25:ca:14:f1:86:45:59:48:91:dc:d0:8c:f1:7b:d8:f6:7b: d7:2e:93:5b:1c:6a:03:dd:8f:cc:a9:8c:d1:03:09:13:f0:ab: d5:08:2b:a9:1c:4f:d6:3b:63:54:58:a0:9b:ee:88:85:eb:89: 79:90:db:85:85:6c:c7:90:87:0b:5c:66:0e:ac:ba:e2:23:66: 7a:ce:27:91:a0:4e:69:35:f7:94:5f:de:b1:d6:b1:fe:1f:90: 4d:6a:77:e6:13:0f:12:64:d8:fa:5e:7d:69:9c:f5:78:d0:77: e2:d0:cd:36:92:c5:80:54:04:2e:a6:30:e9:09:57:74:e4:35: 11:aa:3f:f7:42:09:f4:7c:2d:f1:47:27:38:77:2c:9f:7b:3f: c5:23:d1:cc:ef:a4:2b:1c:fc:ab:4a:95:fe:80:e4:4f:c4:06: 7e:0f:7e:47:78:dc:d9:10:52:b0:ae:b2:ea:43:50:92:da:b4: bf:5b:a4:9c:e9:48:fb:04:2d:11:8d:50:c9:85:98:c8:23:a5: ab:aa:86:e7:51:bb:fe:83:0e:b1:34:a4:ad:75:65:4b:08:68: 2c:63:a3:54:e4:cc:57:cb:60:ac:a3:23:b2:3f:35:75:07:b8: 0f:08:99:cf:86:3c:39:6e:53:82:28:f4:0e:a7:13:4f:99:86: 36:a8:b9:81 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87iDw5C8OvbpPc3IzqU01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZWExZGRiYTRjYmQzY2I1N2VjODYwZDg1ZmY0ZmY5MzAx YWZjZTUwHhcNMjYwMTAyMDQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGRiNGI3NzE5YjZiNGYwYTAzNDZlOWFhNzBkMzkxYmQwOWYyNjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3KnuUHr0XczJbCbSJr0O3A2cSg6 uVLumGQwfANxKZf476OH7B4+EyDoRlK05Le5uwVMMzwFKByuTu81CeIjSSxY9aLF typiQwrVQDxR2lACcfJYWfcW3UrmQsAt4BHgCfeQCHQ0kmuBlLgisgDeY8pyvoNE C4OLEn3YsGMilopk6MTtWXbEvdP9BHBSOpZ/z3jb58ZwrQgZApM0KGxRfMiPHpPd smK9vzUTKzvcyzWZCw3jynvJtObqDQlKXq5AZSKwPsa+L0Y6d0PKaOiAy/bwPmUM 7hUn1bn9qtdvvvr2Ad6dfd8WTx/CPMgNYsHuqoWzlsEdNPRbe/2M+W6BQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDjbS3cZtrTwoDRumqcNORvQnyZeMB8GA1UdIwQY MBaAFMDqHduky9PLV+yGDYX/T/kwGvzlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZDk1M2MtOTZiYy00MDdiLWFkNmEt M2NmZDZjM2ZkY2E0LzEvT050TGR4bTJ0UENnTkc2YXB3MDVHOUNmSmw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8yZDk1M2MtOTZiYy00MDdiLWFkNmEtM2NmZDZjM2ZkY2E0 LzEvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwWkeAwQB wmNyMA0GCSqGSIb3DQEBCwUAA4IBAQBPJcoU8YZFWUiR3NCM8XvY9nvXLpNbHGoD 3Y/MqYzRAwkT8KvVCCupHE/WO2NUWKCb7oiF64l5kNuFhWzHkIcLXGYOrLriI2Z6 zieRoE5pNfeUX96x1rH+H5BNanfmEw8SZNj6Xn1pnPV40Hfi0M02ksWAVAQupjDp CVd05DURqj/3Qgn0fC3xRyc4dyyfez/FI9HM76QrHPyrSpX+gORPxAZ+D35HeNzZ EFKwrrLqQ1CS2rS/W6Sc6Uj7BC0RjVDJhZjII6WrqobnUbv+gw6xNKStdWVLCGgs Y6NU5MxXy2CsoyOyPzV1B7gPCJnPhjw5blOCKPQOpxNPmYY2qLmB -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:22 2026 by rpki-client