This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/oT3Rxl2OFf4kaJDbTi8hc1n-RvM.roa File: oT3Rxl2OFf4kaJDbTi8hc1n-RvM.roa (raw, json) Hash identifier: U0lf5akSoaRZ7m2KsTwFQy8jypSmGTV7L8sismPyTHI= Subject key identifier: A1:3D:D1:C6:5D:8E:15:FE:24:68:90:DB:4E:2F:21:73:59:FE:46:F3 Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee Certificate serial: 019B7DC8B5A193516442677D80BCAA2A5E85 Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/oT3Rxl2OFf4kaJDbTi8hc1n-RvM.roa Signing time: Fri 02 Jan 2026 08:17:44 +0000 ROA not before: Fri 02 Jan 2026 08:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48571 IP address blocks: 91.209.189.0/24 maxlen: 24 91.216.80.0/24 maxlen: 24 128.0.55.0/24 maxlen: 24 194.55.152.0/22 maxlen: 24 2a0c:cb40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:b5:a1:93:51:64:42:67:7d:80:bc:aa:2a:5e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee Validity Not Before: Jan 2 08:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a13dd1c65d8e15fe246890db4e2f217359fe46f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:11:90:a3:01:e4:1d:63:2f:95:9d:cb:d6:36: b6:d9:29:aa:65:db:96:3b:f2:e3:55:f8:53:81:5e: 31:6c:29:fa:3e:d8:9a:9a:74:a0:cc:2a:f1:2d:76: 01:f5:67:7e:bb:c7:9d:24:ec:ad:af:a4:51:7f:f3: 61:7a:72:49:c8:26:ff:eb:44:2c:8e:6f:88:56:3b: da:9a:a0:7c:7e:05:e3:54:0d:83:08:90:61:42:6b: 4c:a8:1a:f2:9b:a7:ab:70:4d:79:e3:6a:3d:b4:d0: 70:8a:bf:16:be:96:bb:3e:e0:44:26:c0:4a:f2:ff: e8:dc:5b:45:43:35:5f:8c:d9:3c:80:a8:69:a8:ef: aa:81:61:00:50:9e:93:8c:24:6e:f7:62:7a:f0:a7: 94:c2:ad:9d:15:b9:af:45:53:b3:98:d0:4d:ef:e0: 89:12:cd:67:b2:d5:70:62:44:3a:60:e8:59:1e:87: 4f:cc:de:75:8b:3e:c3:eb:21:cd:49:fb:09:77:04: 75:bd:90:67:e6:55:ac:b5:b4:94:b5:bf:18:cc:c0: 37:38:b4:74:85:1d:a4:35:34:66:37:1e:00:4c:81: 7c:32:5f:11:be:4b:b5:62:ed:86:0a:4c:6b:e6:33: 01:42:e8:50:34:71:e5:45:d9:a4:64:c5:2f:4f:cd: a9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3D:D1:C6:5D:8E:15:FE:24:68:90:DB:4E:2F:21:73:59:FE:46:F3 X509v3 Authority Key Identifier: keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/oT3Rxl2OFf4kaJDbTi8hc1n-RvM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.189.0/24 91.216.80.0/24 128.0.55.0/24 194.55.152.0/22 IPv6: 2a0c:cb40::/29 Signature Algorithm: sha256WithRSAEncryption 06:5c:e0:ae:e8:15:fc:2e:8b:ed:af:ba:e6:d2:95:23:80:c7: be:1c:f5:19:e2:30:4a:d1:9a:da:f2:a5:e2:8b:4a:f0:c4:5e: eb:3a:a5:9b:83:b6:47:16:31:9a:25:77:d6:ea:a1:cf:5a:b0: da:42:82:64:10:a5:77:fc:16:1e:a9:00:0e:cc:98:14:37:ab: 94:3c:97:75:d5:fe:1e:77:94:08:1b:d2:0d:d4:3d:e5:4f:83: 14:2b:c5:38:ca:b2:97:a3:d7:19:38:2a:01:91:21:ba:00:73: 24:38:9f:1d:4b:44:55:a5:c0:d6:06:55:94:30:91:e3:f4:dd: 7a:5a:45:20:50:a1:b8:39:51:82:4e:ae:4b:d2:09:c6:09:f5: 33:e0:df:73:86:a0:0b:b8:2b:ca:8e:20:2f:c9:d6:4d:7f:96: 87:83:92:30:4b:e6:17:b1:16:62:a1:db:e2:8a:96:fd:3e:2b: 1c:c5:f8:82:0a:6d:3d:42:b8:ba:4d:a7:3a:a9:cb:86:3e:8d: 10:18:c3:b5:bb:0d:65:1a:66:aa:0f:3e:f8:b7:6b:c1:8f:21: 1a:5e:a7:0d:60:58:b3:ab:ac:6c:aa:a3:fb:ea:3a:30:28:44: fa:90:b4:e3:a6:6e:29:d2:51:09:68:97:65:88:31:d2:e5:2a: 5d:4f:3e:40 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt9yLWhk1FkQmd9gLyqKl6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNDE4YmNmMzE5NDMxN2I5YzI4ODExOTMxOTZmZWI1OThm ZDllZWUwHhcNMjYwMTAyMDgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTNkZDFjNjVkOGUxNWZlMjQ2ODkwZGI0ZTJmMjE3MzU5ZmU0NmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhGQowHkHWMvlZ3L1ja22SmqZduW O/LjVfhTgV4xbCn6PtiamnSgzCrxLXYB9Wd+u8edJOytr6RRf/NhenJJyCb/60Qs jm+IVjvamqB8fgXjVA2DCJBhQmtMqBrym6ercE1542o9tNBwir8Wvpa7PuBEJsBK 8v/o3FtFQzVfjNk8gKhpqO+qgWEAUJ6TjCRu92J68KeUwq2dFbmvRVOzmNBN7+CJ Es1nstVwYkQ6YOhZHodPzN51iz7D6yHNSfsJdwR1vZBn5lWstbSUtb8YzMA3OLR0 hR2kNTRmNx4ATIF8Ml8Rvku1Yu2GCkxr5jMBQuhQNHHlRdmkZMUvT82pBQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFKE90cZdjhX+JGiQ204vIXNZ/kbzMB8GA1UdIwQY MBaAFNtBi88xlDF7nCiBGTGW/rWY/Z7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iODk3YWQtNWQ0MS00MGEyLTkwYzMt ZTI5ZWUzZDkxMzk1LzEvb1QzUnhsMk9GZjRrYUpEYlRpOGhjMW4tUnZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iODk3YWQtNWQ0MS00MGEyLTkwYzMtZTI5ZWUzZDkxMzk1 LzEvMjBHTHp6R1VNWHVjS0lFWk1aYi10Wmo5bnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAW9G9AwQA W9hQAwQAgAA3AwQCwjeYMA0EAgACMAcDBQMqDMtAMA0GCSqGSIb3DQEBCwUAA4IB AQAGXOCu6BX8Lovtr7rm0pUjgMe+HPUZ4jBK0Zra8qXii0rwxF7rOqWbg7ZHFjGa JXfW6qHPWrDaQoJkEKV3/BYeqQAOzJgUN6uUPJd11f4ed5QIG9IN1D3lT4MUK8U4 yrKXo9cZOCoBkSG6AHMkOJ8dS0RVpcDWBlWUMJHj9N16WkUgUKG4OVGCTq5L0gnG CfUz4N9zhqALuCvKjiAvydZNf5aHg5IwS+YXsRZiodviipb9PiscxfiCCm09Qri6 Tac6qcuGPo0QGMO1uw1lGmaqDz74t2vBjyEaXqcNYFizq6xsqqP76jowKET6kLTj pm4p0lEJaJdliDHS5SpdTz5A -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:18 2026 by rpki-client