This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/OtqwT00KNG8ocLQ5lsbZa477HJU.roa File: OtqwT00KNG8ocLQ5lsbZa477HJU.roa (raw, json) Hash identifier: 3OLEihhSTZHcEQMRGGKnC6MAqTjm7MFUfykjVMW1buE= Subject key identifier: 3A:DA:B0:4F:4D:0A:34:6F:28:70:B4:39:96:C6:D9:6B:8E:FB:1C:95 Certificate issuer: /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775 Certificate serial: 019B7DCAE1F0DE4725771CEFEDD01B608731 Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/OtqwT00KNG8ocLQ5lsbZa477HJU.roa Signing time: Fri 02 Jan 2026 08:20:06 +0000 ROA not before: Fri 02 Jan 2026 08:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48309 IP address blocks: 188.136.136.0/24 maxlen: 24 188.136.137.0/24 maxlen: 24 188.136.138.0/24 maxlen: 24 188.136.139.0/24 maxlen: 24 2a02:5380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e1:f0:de:47:25:77:1c:ef:ed:d0:1b:60:87:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775 Validity Not Before: Jan 2 08:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3adab04f4d0a346f2870b43996c6d96b8efb1c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1b:74:ce:90:b1:54:89:f6:49:12:e8:61:a8: d5:99:ce:da:8e:49:fb:52:90:43:42:aa:83:54:ac: 5f:af:f6:c3:af:36:4e:24:80:c2:c8:b9:fb:f8:64: dc:d7:c8:33:1c:f4:cb:dc:85:a3:1d:6b:ce:da:fd: 4b:ba:78:7f:8b:7a:08:a6:c3:50:52:b5:7d:04:43: 2b:b7:d2:1b:e1:02:2a:32:d5:19:79:12:30:3f:9b: bf:21:33:ae:b0:e1:d6:fb:76:44:e2:c4:7a:06:54: 1a:e3:dd:2c:b4:5a:3b:25:25:01:d2:db:78:09:dd: 58:d6:fb:10:26:ab:1b:03:53:aa:60:3f:a6:35:df: 3a:be:06:1f:55:ac:aa:fd:04:83:7f:5d:8d:34:08: 38:ff:1d:e1:b5:29:20:30:22:c5:d8:42:08:01:0f: ff:fe:3c:da:5a:86:d6:98:38:bd:86:f3:5d:5a:a9: a4:fe:e1:4d:54:01:8b:b2:f6:2c:80:9a:61:05:cc: 9c:9b:bd:5e:45:f3:6f:4d:73:0b:8c:29:79:80:c7: 95:8f:87:3d:43:fc:62:67:bb:9d:45:99:7c:f6:e6: 65:d9:13:88:48:3d:bf:d6:cb:e6:f0:e9:f3:47:61: b5:98:5b:b3:c2:34:b0:55:c9:14:c1:0c:1a:fa:ed: b0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DA:B0:4F:4D:0A:34:6F:28:70:B4:39:96:C6:D9:6B:8E:FB:1C:95 X509v3 Authority Key Identifier: keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/OtqwT00KNG8ocLQ5lsbZa477HJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.136.136.0/22 IPv6: 2a02:5380::/32 Signature Algorithm: sha256WithRSAEncryption 2a:a0:85:d8:a2:5f:6b:59:7a:3f:5d:4b:b7:a6:2a:65:7d:ee: 35:9f:4f:b2:29:64:e3:6a:e1:ab:2c:5a:ee:58:cf:c3:33:a2: 1a:9e:0a:67:75:8c:06:26:44:1e:a5:be:da:2e:f2:ce:a6:33: e5:4d:41:d3:b1:58:40:5b:db:9f:df:9a:20:5e:10:d4:ff:2f: bb:71:49:3b:62:65:79:78:dc:7d:84:1a:6f:8c:d0:47:7e:e1: fc:bc:43:b0:b6:65:dc:07:f0:85:d1:7a:b1:9e:e9:29:e9:fd: fc:6d:ab:d7:4f:56:2a:98:48:14:a4:de:5e:9f:25:47:aa:66: 7b:7b:75:cb:1a:5d:9a:08:9a:10:4f:12:1f:fb:ce:c1:f1:80: 62:68:81:bb:63:c6:da:0a:f2:5a:00:05:c3:83:21:95:24:c2: 92:73:74:ce:42:49:89:c0:e7:fa:59:51:b0:ae:67:d9:05:b1: 3a:a4:e2:dc:a2:04:dc:a1:a9:72:35:23:f8:14:53:48:2c:a0: 2f:07:16:de:7f:27:b8:ca:14:8e:1d:fa:73:25:24:20:48:64: 2a:16:37:b2:be:bd:82:29:04:e2:d5:79:3a:10:b1:5f:aa:46: 2a:a0:ff:20:c8:56:79:6e:04:dc:84:e6:91:51:1e:96:64:72: fc:de:6a:32 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yuHw3kcldxzv7dAbYIcxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNWU3NWRiY2NlNWZjZGQ5MWQ4YTk5ZTVhMWIyYzk5NWI4 MTI3NzUwHhcNMjYwMTAyMDgyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWRhYjA0ZjRkMGEzNDZmMjg3MGI0Mzk5NmM2ZDk2YjhlZmIxYzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxt0zpCxVIn2SRLoYajVmc7ajkn7 UpBDQqqDVKxfr/bDrzZOJIDCyLn7+GTc18gzHPTL3IWjHWvO2v1Lunh/i3oIpsNQ UrV9BEMrt9Ib4QIqMtUZeRIwP5u/ITOusOHW+3ZE4sR6BlQa490stFo7JSUB0tt4 Cd1Y1vsQJqsbA1OqYD+mNd86vgYfVayq/QSDf12NNAg4/x3htSkgMCLF2EIIAQ// /jzaWobWmDi9hvNdWqmk/uFNVAGLsvYsgJphBcycm71eRfNvTXMLjCl5gMeVj4c9 Q/xiZ7udRZl89uZl2ROISD2/1svm8OnzR2G1mFuzwjSwVckUwQwa+u2wHwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDrasE9NCjRvKHC0OZbG2WuO+xyVMB8GA1UdIwQY MBaAFHBeddvM5fzdkdipnlobLJlbgSd1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0Y1MTI4emxfTjJSMkttZVdoc3NtVnVCSjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jMWY0NDgtODgwOC00YTJmLWJmZmEt ZjhiNDhiYWNjZDliLzEvT3Rxd1QwMEtORzhvY0xRNWxzYlphNDc3SEpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9jMWY0NDgtODgwOC00YTJmLWJmZmEtZjhiNDhiYWNjZDli LzEvY0Y1MTI4emxfTjJSMkttZVdoc3NtVnVCSjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCvIiIMA0E AgACMAcDBQAqAlOAMA0GCSqGSIb3DQEBCwUAA4IBAQAqoIXYol9rWXo/XUu3pipl fe41n0+yKWTjauGrLFruWM/DM6IangpndYwGJkQepb7aLvLOpjPlTUHTsVhAW9uf 35ogXhDU/y+7cUk7YmV5eNx9hBpvjNBHfuH8vEOwtmXcB/CF0Xqxnukp6f38bavX T1YqmEgUpN5enyVHqmZ7e3XLGl2aCJoQTxIf+87B8YBiaIG7Y8baCvJaAAXDgyGV JMKSc3TOQkmJwOf6WVGwrmfZBbE6pOLcogTcoalyNSP4FFNILKAvBxbefye4yhSO HfpzJSQgSGQqFjeyvr2CKQTi1Xk6ELFfqkYqoP8gyFZ5bgTchOaRUR6WZHL83moy -----END CERTIFICATE-----Generated at Mon Jan 26 10:16:02 2026 by rpki-client