This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/OTmYG5w2zWjBDBJnDDKBYpbFxQE.roa File: OTmYG5w2zWjBDBJnDDKBYpbFxQE.roa (raw, json) Hash identifier: wOCD2A3JYKhAmA4Jxehzqr2P6WlUUR1QNP5GZ7+5dNU= Subject key identifier: 39:39:98:1B:9C:36:CD:68:C1:0C:12:67:0C:32:81:62:96:C5:C5:01 Certificate issuer: /CN=4e4c1389a849ef5dccb8303703b898c91e63d14f Certificate serial: 019B7E38C48B5AF5C165854331059F02058E Authority key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/OTmYG5w2zWjBDBJnDDKBYpbFxQE.roa Signing time: Fri 02 Jan 2026 10:20:08 +0000 ROA not before: Fri 02 Jan 2026 10:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25447 IP address blocks: 152.89.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c4:8b:5a:f5:c1:65:85:43:31:05:9f:02:05:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f Validity Not Before: Jan 2 10:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3939981b9c36cd68c10c12670c32816296c5c501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e8:1b:28:ca:83:7d:b3:43:4c:cc:1c:03:4a: f3:6f:ab:a6:e0:87:3b:33:ba:9e:5c:3b:3e:7a:63: c5:10:8f:c6:4a:51:ae:f5:51:08:ba:81:ee:37:39: f5:bf:b3:52:c3:17:a9:1f:dc:78:cb:4d:a3:5c:f4: e8:22:6a:c1:e2:a7:a0:df:30:fb:d6:fd:f6:69:51: 91:1f:c4:11:08:f8:d4:83:9a:a7:78:97:e3:28:d3: a3:76:f5:d7:5f:cc:73:84:f2:56:ee:37:1b:07:be: 19:f4:7f:f8:63:bb:d9:67:da:2b:f2:9b:36:f3:e8: 99:2a:e8:1e:4f:31:e6:0d:37:f5:0f:d2:9e:13:6d: 07:b1:ea:dd:95:7f:93:77:30:7a:cc:70:6a:8f:50: d0:7a:59:40:c4:62:20:6f:42:71:16:4d:c1:64:1c: 69:b0:41:f2:89:bb:ca:1c:d1:32:4a:a7:9b:60:f5: e5:d6:87:90:ea:b2:59:37:68:f8:ba:da:81:7e:2d: 3e:ea:fd:42:9d:24:c1:c8:d6:d9:ed:45:f7:ca:59: 28:21:df:e9:02:29:f1:98:9b:de:86:c1:d4:b1:6a: 31:70:61:c4:e8:f6:5b:99:af:58:07:66:f8:45:21: 84:f5:23:ca:e0:c8:56:17:50:6e:38:dd:1b:35:3e: 48:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:39:98:1B:9C:36:CD:68:C1:0C:12:67:0C:32:81:62:96:C5:C5:01 X509v3 Authority Key Identifier: keyid:4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/OTmYG5w2zWjBDBJnDDKBYpbFxQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.220.0/22 Signature Algorithm: sha256WithRSAEncryption 78:34:65:3b:2d:01:73:7c:64:b8:97:df:14:04:d9:95:91:1a: 7d:ea:5d:d4:2a:ed:e1:ba:37:fa:1c:3d:af:13:15:1d:3a:65: c4:1b:c1:fd:36:70:0e:55:39:1e:38:51:6c:5e:7f:94:bf:ba: 60:49:f3:8d:d3:54:cb:fb:b3:62:bb:01:be:d0:c9:53:a9:6f: 26:42:1a:ef:0f:1e:5f:b1:d0:be:a8:89:1c:39:78:26:2f:0b: f7:34:9e:a2:75:e1:b0:91:95:ac:c4:5d:02:a3:74:b9:6f:87: e6:84:44:51:5d:cc:0e:82:a7:c7:b6:45:3d:bb:0a:6b:c1:f9: 48:89:98:f6:e1:41:bd:14:84:ac:be:24:ce:eb:52:9a:62:22: 3c:0e:e4:29:f4:4d:cc:28:cf:eb:59:5a:db:f8:45:c6:0c:bd: ea:90:a1:33:bc:8d:82:98:c5:ef:74:03:12:c0:22:bf:00:f1: fc:d0:03:41:c7:84:4e:27:63:d9:ad:33:21:fd:58:19:55:f7: 58:e7:bb:17:0d:bf:13:19:75:94:59:53:ec:37:ea:a8:0c:1a: 5b:84:36:42:c2:ad:3f:cc:80:aa:33:a4:98:a8:b3:d3:e5:c3: 57:c1:af:93:37:c2:1f:b3:49:33:45:0b:2f:b1:d9:2e:8e:0e: 0c:52:10:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OMSLWvXBZYVDMQWfAgWOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNGMxMzg5YTg0OWVmNWRjY2I4MzAzNzAzYjg5OGM5MWU2 M2QxNGYwHhcNMjYwMTAyMTAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTM5OTgxYjljMzZjZDY4YzEwYzEyNjcwYzMyODE2Mjk2YzVjNTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkugbKMqDfbNDTMwcA0rzb6um4Ic7 M7qeXDs+emPFEI/GSlGu9VEIuoHuNzn1v7NSwxepH9x4y02jXPToImrB4qeg3zD7 1v32aVGRH8QRCPjUg5qneJfjKNOjdvXXX8xzhPJW7jcbB74Z9H/4Y7vZZ9or8ps2 8+iZKugeTzHmDTf1D9KeE20HserdlX+TdzB6zHBqj1DQellAxGIgb0JxFk3BZBxp sEHyibvKHNEySqebYPXl1oeQ6rJZN2j4utqBfi0+6v1CnSTByNbZ7UX3ylkoId/p AinxmJvehsHUsWoxcGHE6PZbma9YB2b4RSGE9SPK4MhWF1BuON0bNT5IuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDk5mBucNs1owQwSZwwygWKWxcUBMB8GA1UdIwQY MBaAFE5ME4moSe9dzLgwNwO4mMkeY9FPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGt3VGlhaEo3MTNNdURBM0E3aVl5UjVqMFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zOTY1YjAtZmVlOS00OWJmLWE1NGQt YThkODM4NDM4ZDhhLzEvT1RtWUc1dzJ6V2pCREJKbkRES0JZcGJGeFFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zOTY1YjAtZmVlOS00OWJmLWE1NGQtYThkODM4NDM4ZDhh LzEvVGt3VGlhaEo3MTNNdURBM0E3aVl5UjVqMFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmFncMA0G CSqGSIb3DQEBCwUAA4IBAQB4NGU7LQFzfGS4l98UBNmVkRp96l3UKu3hujf6HD2v ExUdOmXEG8H9NnAOVTkeOFFsXn+Uv7pgSfON01TL+7NiuwG+0MlTqW8mQhrvDx5f sdC+qIkcOXgmLwv3NJ6ideGwkZWsxF0Co3S5b4fmhERRXcwOgqfHtkU9uwprwflI iZj24UG9FISsviTO61KaYiI8DuQp9E3MKM/rWVrb+EXGDL3qkKEzvI2CmMXvdAMS wCK/APH80ANBx4ROJ2PZrTMh/VgZVfdY57sXDb8TGXWUWVPsN+qoDBpbhDZCwq0/ zICqM6SYqLPT5cNXwa+TN8Ifs0kzRQsvsdkujg4MUhAV -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:42 2026 by rpki-client