This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OtNicrm9KkIz9n56ciC-kGstxT4.roa File: OtNicrm9KkIz9n56ciC-kGstxT4.roa (raw, json) Hash identifier: fV6lO0uaDsG2PwA2/mlNNWTojBEaYyrLyeKUT/QvpAI= Subject key identifier: 3A:D3:62:72:B9:BD:2A:42:33:F6:7E:7A:72:20:BE:90:6B:2D:C5:3E Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C80229BD3DC7A072E3243C107A99148 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OtNicrm9KkIz9n56ciC-kGstxT4.roa Signing time: Fri 02 Jan 2026 02:18:50 +0000 ROA not before: Fri 02 Jan 2026 02:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199233 IP address blocks: 90.85.39.0/24 maxlen: 24 194.2.130.0/23 maxlen: 24 194.2.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:22:9b:d3:dc:7a:07:2e:32:43:c1:07:a9:91:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ad36272b9bd2a4233f67e7a7220be906b2dc53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8a:c3:e8:07:0b:26:05:1b:78:02:a2:5a:92: 15:20:99:60:0f:59:29:04:24:d7:8b:67:0f:90:8a: b6:36:11:08:83:d9:a6:24:0c:5f:bb:30:cc:10:ce: 37:4b:8d:5b:6f:7e:af:8d:cf:64:a0:07:23:9c:7f: cd:fc:9b:83:60:6f:81:91:09:09:25:f3:f9:8e:51: c2:a1:41:c6:52:b3:e2:cc:60:8f:2e:2d:62:b8:61: c5:0e:4a:ce:8f:dc:a6:e1:24:5b:9b:11:92:1b:28: 71:d4:cb:81:a9:15:e3:b1:6d:9b:f7:0b:e1:8b:ea: 49:f8:80:e7:15:4e:34:6d:07:16:c5:a1:d3:39:39: 56:26:50:0f:76:cd:f8:79:8e:0d:98:21:92:f0:86: 2b:4b:87:28:0d:f1:f2:49:3f:98:fd:a8:22:5f:6a: 02:22:e7:2a:2a:c8:55:ce:4e:84:f2:71:88:00:e7: 3b:18:26:37:8d:04:1f:42:61:e8:d1:f4:10:a7:7c: a2:30:4c:80:74:92:e0:da:df:0e:40:8d:6c:b2:33: 71:ad:54:d5:d9:a8:54:b2:3c:e3:78:35:63:bf:ff: 2a:c0:d3:d2:fb:6a:52:67:39:4b:38:dd:81:7f:f0: 5a:68:92:e9:9e:e0:bb:61:30:b8:b5:c2:6d:e7:4d: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D3:62:72:B9:BD:2A:42:33:F6:7E:7A:72:20:BE:90:6B:2D:C5:3E X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OtNicrm9KkIz9n56ciC-kGstxT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.85.39.0/24 194.2.130.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:00:d7:79:a5:f0:cf:ae:ab:76:19:85:2d:96:e1:38:ee:ee: 52:ac:f9:a2:c8:95:c4:30:f8:ae:70:e7:61:fb:ed:dc:a4:68: 46:ac:8c:ae:be:a9:f6:26:f6:a3:97:b3:80:46:94:6d:79:7b: 88:49:71:d1:b3:40:25:c2:61:21:d2:7e:27:27:c5:82:c8:f9: 14:9b:68:16:6f:15:5b:c1:1d:15:75:6c:4f:fd:05:aa:14:1c: ad:e6:0e:aa:d5:06:a8:5b:cf:15:0a:16:98:4a:52:73:08:b9: 84:e9:4c:35:1a:f8:61:c2:bb:22:ee:d9:52:ae:01:d2:fb:07: 6c:7b:6e:52:4f:ae:52:85:2b:06:12:8a:f5:4d:33:e1:25:21: 41:88:55:7c:b8:2c:d3:76:b0:a0:31:50:af:7a:b8:73:1a:84: 12:96:e5:a6:e5:af:69:2b:9d:c5:26:12:0d:6c:2c:69:c4:02: b0:0e:b1:f0:7b:b3:70:58:e8:08:0f:40:96:b5:45:f7:39:17: 90:85:b6:80:9d:a1:55:c6:21:82:7f:89:23:96:e8:2b:31:5f: 40:77:2a:0a:2c:ba:1a:1d:5b:d9:be:07:aa:64:e6:c1:36:58: ed:f6:05:03:2e:8f:27:9c:28:a3:8c:e2:56:72:4c:df:63:0d: 7a:5a:a5:c6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gCKb09x6By4yQ8EHqZFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWQzNjI3MmI5YmQyYTQyMzNmNjdlN2E3MjIwYmU5MDZiMmRjNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4rD6AcLJgUbeAKiWpIVIJlgD1kp BCTXi2cPkIq2NhEIg9mmJAxfuzDMEM43S41bb36vjc9koAcjnH/N/JuDYG+BkQkJ JfP5jlHCoUHGUrPizGCPLi1iuGHFDkrOj9ym4SRbmxGSGyhx1MuBqRXjsW2b9wvh i+pJ+IDnFU40bQcWxaHTOTlWJlAPds34eY4NmCGS8IYrS4coDfHyST+Y/agiX2oC IucqKshVzk6E8nGIAOc7GCY3jQQfQmHo0fQQp3yiMEyAdJLg2t8OQI1ssjNxrVTV 2ahUsjzjeDVjv/8qwNPS+2pSZzlLON2Bf/BaaJLpnuC7YTC4tcJt502nPQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDrTYnK5vSpCM/Z+enIgvpBrLcU+MB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvT3ROaWNybTlLa0l6OW41NmNpQy1rR3N0eFQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWlUnAwQB wgKCMA0GCSqGSIb3DQEBCwUAA4IBAQB9ANd5pfDPrqt2GYUtluE47u5SrPmiyJXE MPiucOdh++3cpGhGrIyuvqn2Jvajl7OARpRteXuISXHRs0AlwmEh0n4nJ8WCyPkU m2gWbxVbwR0VdWxP/QWqFByt5g6q1QaoW88VChaYSlJzCLmE6Uw1Gvhhwrsi7tlS rgHS+wdse25ST65ShSsGEor1TTPhJSFBiFV8uCzTdrCgMVCverhzGoQSluWm5a9p K53FJhINbCxpxAKwDrHwe7NwWOgID0CWtUX3OReQhbaAnaFVxiGCf4kjlugrMV9A dyoKLLoaHVvZvgeqZObBNljt9gUDLo8nnCijjOJWckzfYw16WqXG -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:10 2026 by rpki-client