This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/OtNgvXQFZPXV3K6VEt77FwRHyj0.roa File: OtNgvXQFZPXV3K6VEt77FwRHyj0.roa (raw, json) Hash identifier: QlmOgofQg3ZixWb6JBEFzJmxT+Sl5PaItjSGLrWz0n0= Subject key identifier: 3A:D3:60:BD:74:05:64:F5:D5:DC:AE:95:12:DE:FB:17:04:47:CA:3D Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7 Certificate serial: 019B783494AF1CD09B66742C6CF02964E515 Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/OtNgvXQFZPXV3K6VEt77FwRHyj0.roa Signing time: Thu 01 Jan 2026 06:17:50 +0000 ROA not before: Thu 01 Jan 2026 06:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209183 IP address blocks: 91.211.12.0/24 maxlen: 24 91.211.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:94:af:1c:d0:9b:66:74:2c:6c:f0:29:64:e5:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7 Validity Not Before: Jan 1 06:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ad360bd740564f5d5dcae9512defb170447ca3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:35:66:88:61:ac:6d:1c:44:2c:ad:44:50:f8: d0:9e:e6:19:2a:07:e2:80:3c:62:c1:49:6d:6f:7f: 53:27:ab:13:1d:c8:08:6d:a8:b2:dc:44:ca:12:33: b2:b4:9c:d0:58:f0:a6:2f:14:25:ed:84:ae:e6:a2: 1d:27:47:40:6c:95:d2:09:fd:1c:ae:42:e6:5f:b5: df:56:05:ea:19:a4:9b:5b:b1:a4:72:f9:ff:10:ae: 60:04:3f:10:97:ac:60:93:e7:06:b6:96:bd:fa:0f: da:ad:0d:ea:53:f7:0b:28:f0:4d:0d:20:59:cf:82: 87:5c:9e:fe:99:7e:c0:9b:21:41:91:48:11:95:9e: 6c:2f:dd:43:00:99:18:d3:3a:69:0f:6c:3e:87:45: 0c:fe:09:ab:1b:e5:44:52:09:c4:a2:b2:bd:ee:75: 24:59:73:2f:24:8c:47:56:0d:ad:25:f8:e7:ef:55: 41:6e:97:bf:2d:1c:08:f3:2b:80:7f:bc:64:73:9e: 6b:30:df:ed:09:e9:ed:8a:6f:8e:a7:2b:05:ba:23: cf:e3:f3:d6:29:bd:98:c6:a7:8f:78:41:24:e2:61: d5:17:dd:19:44:b6:96:12:6a:fa:27:71:ad:9d:de: e0:ae:fb:f8:08:25:bb:7f:48:40:37:0e:3d:7d:19: 07:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D3:60:BD:74:05:64:F5:D5:DC:AE:95:12:DE:FB:17:04:47:CA:3D X509v3 Authority Key Identifier: keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/OtNgvXQFZPXV3K6VEt77FwRHyj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.12.0/24 91.211.15.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:ef:c6:29:0d:23:5e:ec:6c:8f:e4:5d:0c:99:65:ca:fd:b8: 1a:23:81:98:13:c0:80:cc:2a:32:fd:08:fd:00:7d:33:b9:dc: 59:61:06:b7:c8:7c:89:b3:43:7f:38:2e:cc:23:36:b7:68:33: cf:d6:ee:82:5a:5f:d9:10:bc:e2:7e:a3:9a:8a:0c:9e:85:1d: dc:98:98:80:0b:f5:1b:2a:52:56:34:03:ef:bf:2a:2b:2f:ed: 00:2a:a2:27:fc:84:fc:9f:2f:67:e7:32:10:59:a5:f6:76:3e: a5:99:3a:2d:a2:8f:15:dd:63:bc:5a:61:41:fe:05:b0:68:98: 76:2a:a6:6d:04:f7:1f:0e:f2:30:5d:2b:2d:4d:73:1c:e1:13: c3:b3:eb:26:18:b0:0a:a0:b8:d5:c6:59:bd:50:91:25:10:d0: 04:8e:db:2f:04:72:f7:d7:a1:cd:f8:90:48:ec:0e:e0:8f:c6: 94:67:7a:6e:c1:c7:7d:49:9d:bd:dc:8f:99:8e:8c:ba:37:b2: 2a:4f:d6:4a:66:d2:76:35:9a:8a:94:0c:1a:7e:8a:cf:58:98: ac:fd:a6:15:cc:26:2f:e4:4b:3e:d1:44:b1:ab:c6:6a:23:2b: 89:5f:f1:18:aa:51:67:6a:06:1e:b4:bf:16:4b:e2:bb:5f:ee: 6d:6a:0c:f2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NJSvHNCbZnQsbPApZOUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzQxYzA1ZDRhZDdlZDY5MGU1NzFlZjVlZDBmODc1MjJk YTQ3ZDcwHhcNMjYwMTAxMDYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWQzNjBiZDc0MDU2NGY1ZDVkY2FlOTUxMmRlZmIxNzA0NDdjYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDVmiGGsbRxELK1EUPjQnuYZKgfi gDxiwUltb39TJ6sTHcgIbaiy3ETKEjOytJzQWPCmLxQl7YSu5qIdJ0dAbJXSCf0c rkLmX7XfVgXqGaSbW7Gkcvn/EK5gBD8Ql6xgk+cGtpa9+g/arQ3qU/cLKPBNDSBZ z4KHXJ7+mX7AmyFBkUgRlZ5sL91DAJkY0zppD2w+h0UM/gmrG+VEUgnEorK97nUk WXMvJIxHVg2tJfjn71VBbpe/LRwI8yuAf7xkc55rMN/tCentim+OpysFuiPP4/PW Kb2YxqePeEEk4mHVF90ZRLaWEmr6J3Gtnd7grvv4CCW7f0hANw49fRkHXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDrTYL10BWT11dyulRLe+xcER8o9MB8GA1UdIwQY MBaAFEF0HAXUrX7WkOVx717Q+HUi2kfXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMt NDEwMzIyYzcwMmZmLzEvT3ROZ3ZYUUZaUFhWM0s2VkV0NzdGd1JIeWowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hMzExZWEtMzFiMy00YmE0LWI1MzMtNDEwMzIyYzcwMmZm LzEvUVhRY0JkU3RmdGFRNVhIdlh0RDRkU0xhUjljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9MMAwQA W9MPMA0GCSqGSIb3DQEBCwUAA4IBAQCO78YpDSNe7GyP5F0MmWXK/bgaI4GYE8CA zCoy/Qj9AH0zudxZYQa3yHyJs0N/OC7MIza3aDPP1u6CWl/ZELzifqOaigyehR3c mJiAC/UbKlJWNAPvvyorL+0AKqIn/IT8ny9n5zIQWaX2dj6lmTotoo8V3WO8WmFB /gWwaJh2KqZtBPcfDvIwXSstTXMc4RPDs+smGLAKoLjVxlm9UJElENAEjtsvBHL3 16HN+JBI7A7gj8aUZ3puwcd9SZ293I+Zjoy6N7IqT9ZKZtJ2NZqKlAwaforPWJis /aYVzCYv5Es+0USxq8ZqIyuJX/EYqlFnagYetL8WS+K7X+5tagzy -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:03 2026 by rpki-client