This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/otrcKIXq_A9uaKlz_d5wq-4G144.roa File: otrcKIXq_A9uaKlz_d5wq-4G144.roa (raw, json) Hash identifier: 384/aWNa4g4uNh0J2+RFW9VIMxNrtEwydVkvP0K9KIg= Subject key identifier: A2:DA:DC:28:85:EA:FC:0F:6E:68:A9:73:FD:DE:70:AB:EE:06:D7:8E Certificate issuer: /CN=de169952f97f494cfe0f6b5427ca56e810c05ce0 Certificate serial: 019B7758F247B48101D1A33417544F8876BB Authority key identifier: DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/otrcKIXq_A9uaKlz_d5wq-4G144.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34756 IP address blocks: 194.105.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f2:47:b4:81:01:d1:a3:34:17:54:4f:88:76:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de169952f97f494cfe0f6b5427ca56e810c05ce0 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2dadc2885eafc0f6e68a973fdde70abee06d78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:8e:28:12:0c:bf:45:fb:10:60:48:aa:5e:f2: 31:b9:24:e7:04:3c:6c:fe:4f:6a:e2:65:85:3e:e8: f0:d1:a9:6e:23:dd:19:27:0a:fa:da:d0:a9:c0:cf: 92:b0:89:43:9e:55:82:70:d1:ed:57:d8:c8:15:05: 88:c0:e2:56:8a:74:55:3d:23:75:a4:7d:80:f6:35: f5:06:9c:d2:2b:be:27:d0:7a:3b:6b:1c:25:63:a1: 38:79:2d:a0:87:af:56:9e:e1:a9:73:b6:8d:35:75: 92:41:ce:b8:b2:8b:a4:ad:94:97:6e:4d:b8:7b:16: f9:86:fe:c8:ae:36:27:95:80:de:8b:34:9e:1a:1d: ad:a9:88:ab:04:15:1c:84:8b:28:3b:d8:3f:4e:8b: 29:ae:28:8b:17:10:12:b8:85:16:60:8b:65:a2:ad: 13:ef:c8:f2:73:c9:c9:1f:02:5b:5c:8d:4f:cb:f6: c9:10:8a:1c:6f:16:68:75:63:58:47:cf:fc:9d:ac: 59:94:69:dc:76:c1:35:ff:80:9f:32:f3:d6:26:95: 7e:12:6d:1a:d3:c9:a1:87:cf:ee:3a:75:92:af:9d: fc:f2:5b:5d:9a:6a:a9:71:3b:fe:30:f8:98:46:d6: e5:27:c9:56:53:9c:0e:92:f3:20:a8:1d:b1:3a:2a: af:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DA:DC:28:85:EA:FC:0F:6E:68:A9:73:FD:DE:70:AB:EE:06:D7:8E X509v3 Authority Key Identifier: keyid:DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/otrcKIXq_A9uaKlz_d5wq-4G144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.105.150.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:c4:a0:d3:cf:aa:e1:02:e2:81:40:05:c9:6a:9f:c8:64:5b: 96:02:61:f4:27:7c:11:04:e4:fb:8b:79:05:8e:cc:a8:db:cd: f9:88:29:26:bb:6c:77:43:df:74:60:c8:cf:92:2d:d1:32:5c: be:51:be:5b:3d:e3:fa:3c:99:a2:7a:89:c1:9e:2f:45:1d:74: 25:5b:8c:78:b0:aa:f5:3a:48:f0:45:f4:65:fb:28:c3:63:92: 2b:2d:d5:58:c3:6d:45:ef:cc:f3:5b:91:91:0f:df:7a:93:3f: b8:6b:a7:5e:13:67:c0:2c:39:7a:b5:24:c3:5e:d2:e0:a6:7f: ad:3c:97:0a:c1:4a:d9:0b:14:37:3c:29:83:60:a1:5f:2d:63: e2:fc:59:af:eb:01:c0:43:d0:91:c6:0e:ec:98:76:63:e9:22: 67:10:26:88:89:bc:8c:81:36:fb:93:d0:4a:8f:dc:26:f4:1b: 0c:a8:44:17:c1:d2:49:fe:b3:b0:a6:46:56:9c:ba:fa:7e:25: 7c:da:fb:f9:05:b6:4a:bc:06:48:4b:54:66:5e:e7:79:6c:cd: 6f:3c:6b:e8:08:f4:69:2a:23:98:e6:f6:48:63:7d:bb:2e:a0: bc:44:9b:fa:86:5b:26:ec:38:9c:10:b5:6f:04:0a:64:1f:4e: 85:cf:b6:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPJHtIEB0aM0F1RPiHa7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTY5OTUyZjk3ZjQ5NGNmZTBmNmI1NDI3Y2E1NmU4MTBj MDVjZTAwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmRhZGMyODg1ZWFmYzBmNmU2OGE5NzNmZGRlNzBhYmVlMDZkNzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/I4oEgy/RfsQYEiqXvIxuSTnBDxs /k9q4mWFPujw0aluI90ZJwr62tCpwM+SsIlDnlWCcNHtV9jIFQWIwOJWinRVPSN1 pH2A9jX1BpzSK74n0Ho7axwlY6E4eS2gh69WnuGpc7aNNXWSQc64soukrZSXbk24 exb5hv7IrjYnlYDeizSeGh2tqYirBBUchIsoO9g/TospriiLFxASuIUWYItloq0T 78jyc8nJHwJbXI1Py/bJEIocbxZodWNYR8/8naxZlGncdsE1/4CfMvPWJpV+Em0a 08mhh8/uOnWSr5388ltdmmqpcTv+MPiYRtblJ8lWU5wOkvMgqB2xOiqviQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKLa3CiF6vwPbmipc/3ecKvuBteOMB8GA1UdIwQY MBaAFN4WmVL5f0lM/g9rVCfKVugQwFzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hhWlV2bF9TVXotRDJ0VUo4cFc2QkRBWE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lNzg5NTQtMzFmZC00ZmQwLTlmYzEt MGY0YjI4Yjg4NmY3LzEvb3RyY0tJWHFfQTl1YUtsel9kNXdxLTRHMTQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9lNzg5NTQtMzFmZC00ZmQwLTlmYzEtMGY0YjI4Yjg4NmY3 LzEvM2hhWlV2bF9TVXotRDJ0VUo4cFc2QkRBWE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwmmWMA0G CSqGSIb3DQEBCwUAA4IBAQCKxKDTz6rhAuKBQAXJap/IZFuWAmH0J3wRBOT7i3kF jsyo2835iCkmu2x3Q990YMjPki3RMly+Ub5bPeP6PJmieonBni9FHXQlW4x4sKr1 OkjwRfRl+yjDY5IrLdVYw21F78zzW5GRD996kz+4a6deE2fALDl6tSTDXtLgpn+t PJcKwUrZCxQ3PCmDYKFfLWPi/Fmv6wHAQ9CRxg7smHZj6SJnECaIibyMgTb7k9BK j9wm9BsMqEQXwdJJ/rOwpkZWnLr6fiV82vv5BbZKvAZIS1RmXud5bM1vPGvoCPRp KiOY5vZIY327LqC8RJv6hlsm7DicELVvBApkH06Fz7Yp -----END CERTIFICATE-----Generated at Sun Jan 25 15:38:05 2026 by rpki-client