This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/OTVDRcN1TmMcNu7534YmVHjTGr8.roa File: OTVDRcN1TmMcNu7534YmVHjTGr8.roa (raw, json) Hash identifier: Jm46+7IZBN8HTblZILZ7pnz9O68HO8MAoZHQtdvbMDo= Subject key identifier: 39:35:43:45:C3:75:4E:63:1C:36:EE:F9:DF:86:26:54:78:D3:1A:BF Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e Certificate serial: 019B7A5A6E95FA67407040AECE6832CF2C2F Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/OTVDRcN1TmMcNu7534YmVHjTGr8.roa Signing time: Thu 01 Jan 2026 16:18:25 +0000 ROA not before: Thu 01 Jan 2026 16:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50618 IP address blocks: 178.20.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:6e:95:fa:67:40:70:40:ae:ce:68:32:cf:2c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e Validity Not Before: Jan 1 16:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39354345c3754e631c36eef9df86265478d31abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:ef:cb:25:5a:7b:8c:9f:b6:5f:2b:0e:0a: 06:7e:7b:ea:2b:bd:22:d4:61:93:ea:b1:68:05:42: 88:36:a4:c6:e6:6e:f8:bb:ef:d8:01:fe:bd:fb:40: 5c:d7:f9:e0:8e:94:ee:08:8c:95:f4:d3:b1:31:ed: c8:be:a6:a6:77:88:6c:57:ee:4b:4c:85:ce:20:00: d5:ab:e9:fe:2e:5e:22:5f:3d:eb:11:f4:c7:52:47: d2:da:0c:23:cb:98:17:81:b5:a8:fb:59:c6:3d:1e: 98:4c:c1:ba:6b:6f:bc:f9:d9:63:64:c6:64:6d:27: d8:08:b3:7b:ef:28:ca:63:05:41:02:55:cf:5c:1c: a8:fa:3a:70:e8:7b:51:79:90:c9:27:96:96:e0:04: 69:87:2b:be:83:a6:99:45:ee:eb:e8:f6:ae:06:60: 5c:f2:87:ab:2a:5f:6a:e5:4e:60:9d:79:a4:28:e0: 10:bb:99:37:1e:3f:2c:6a:46:da:b2:44:55:e7:14: 86:1c:b0:11:01:b5:10:eb:29:84:a5:c9:5d:db:c5: 60:64:ee:10:f5:2c:a6:91:ff:9c:9a:be:ff:c7:89: c4:73:1d:a4:2f:d5:94:aa:f3:0a:31:3f:62:d2:09: 66:ca:93:86:a0:88:7c:08:1d:8a:f4:af:45:d5:38: 23:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:35:43:45:C3:75:4E:63:1C:36:EE:F9:DF:86:26:54:78:D3:1A:BF X509v3 Authority Key Identifier: keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/OTVDRcN1TmMcNu7534YmVHjTGr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.20.54.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:48:d6:1b:dd:2b:3d:fb:9a:64:c2:24:d6:0d:e4:0a:0b:e1: 79:84:3f:06:3f:9a:48:4b:c2:2e:94:af:01:2e:b8:75:bb:95: 5c:85:c3:4e:48:85:0e:b5:88:36:29:84:19:0c:7d:57:7d:fb: 14:76:83:8c:23:9a:a0:c9:ac:52:0d:49:d8:e3:46:a3:eb:3b: c8:5e:b7:00:59:19:18:c8:51:d5:33:cf:b3:56:62:9a:b9:56: 7c:dc:ad:75:0b:05:18:b0:44:27:95:9c:59:b2:07:2b:52:2d: 71:3c:e4:c0:7b:28:77:6d:57:22:49:5a:d8:06:20:95:f0:aa: cb:01:a8:34:ef:9b:e4:5d:c7:86:e9:57:05:54:3d:5d:9e:95: 73:dc:4a:02:70:7d:0f:1f:54:5a:df:9e:e5:c2:67:08:eb:3a: 7e:30:02:73:0e:5b:e6:49:a7:49:5e:a1:f4:32:7c:87:74:5f: b7:5b:68:8c:86:d2:7f:4a:d1:d5:31:02:69:a8:7d:c8:d7:60: 04:9e:26:a8:11:38:2f:47:10:d0:99:4f:45:d1:6c:f0:af:31: 0c:b3:09:b3:ee:39:42:5c:d4:d8:b8:dd:93:66:14:94:81:d0: 37:04:a5:a6:e5:81:a5:a0:4a:8d:8e:a5:f4:b6:6b:9f:16:e5: 58:b2:d8:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wm6V+mdAcECuzmgyzywvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGUxZDlkY2RiMjVjMWU1MzJjNWM5YjY5ZGZhNzU3ZTMw NjIxMGUwHhcNMjYwMTAxMTYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTM1NDM0NWMzNzU0ZTYzMWMzNmVlZjlkZjg2MjY1NDc4ZDMxYWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8nvyyVae4yftl8rDgoGfnvqK70i 1GGT6rFoBUKINqTG5m74u+/YAf69+0Bc1/ngjpTuCIyV9NOxMe3Ivqamd4hsV+5L TIXOIADVq+n+Ll4iXz3rEfTHUkfS2gwjy5gXgbWo+1nGPR6YTMG6a2+8+dljZMZk bSfYCLN77yjKYwVBAlXPXByo+jpw6HtReZDJJ5aW4ARphyu+g6aZRe7r6PauBmBc 8oerKl9q5U5gnXmkKOAQu5k3Hj8sakbaskRV5xSGHLARAbUQ6ymEpcld28VgZO4Q 9Symkf+cmr7/x4nEcx2kL9WUqvMKMT9i0glmypOGoIh8CB2K9K9F1TgjNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDk1Q0XDdU5jHDbu+d+GJlR40xq/MB8GA1UdIwQY MBaAFGbeHZ3NslweUyxcm2nfp1fjBiEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYt NDA0Nzk4NzA5NzZlLzEvT1RWRFJjTjFUbU1jTnU3NTM0WW1WSGpUR3I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYtNDA0Nzk4NzA5NzZl LzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshQ2MA0G CSqGSIb3DQEBCwUAA4IBAQAaSNYb3Ss9+5pkwiTWDeQKC+F5hD8GP5pIS8IulK8B Lrh1u5VchcNOSIUOtYg2KYQZDH1XffsUdoOMI5qgyaxSDUnY40aj6zvIXrcAWRkY yFHVM8+zVmKauVZ83K11CwUYsEQnlZxZsgcrUi1xPOTAeyh3bVciSVrYBiCV8KrL Aag075vkXceG6VcFVD1dnpVz3EoCcH0PH1Ra357lwmcI6zp+MAJzDlvmSadJXqH0 MnyHdF+3W2iMhtJ/StHVMQJpqH3I12AEniaoETgvRxDQmU9F0WzwrzEMswmz7jlC XNTYuN2TZhSUgdA3BKWm5YGloEqNjqX0tmufFuVYstj+ -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:32 2026 by rpki-client