This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/odPvkDMmAxjrc3ZPhrKtHv1Pl_Q.roa File: odPvkDMmAxjrc3ZPhrKtHv1Pl_Q.roa (raw, json) Hash identifier: WbetbahmmvNLGyGKWf2niABo2rq9cUlLwj18Yb3Jj3M= Subject key identifier: A1:D3:EF:90:33:26:03:18:EB:73:76:4F:86:B2:AD:1E:FD:4F:97:F4 Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23 Certificate serial: 019B79EC2AE31B90242C3BCC63A266F11310 Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/odPvkDMmAxjrc3ZPhrKtHv1Pl_Q.roa Signing time: Thu 01 Jan 2026 14:17:59 +0000 ROA not before: Thu 01 Jan 2026 14:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13046 IP address blocks: 188.125.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:2a:e3:1b:90:24:2c:3b:cc:63:a2:66:f1:13:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23 Validity Not Before: Jan 1 14:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1d3ef9033260318eb73764f86b2ad1efd4f97f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5a:96:f3:b4:8f:7d:d6:3f:77:66:7c:69:01: f7:ac:e8:33:e9:c4:3e:5b:27:c1:dc:5e:d4:fc:e6: 92:21:aa:98:9c:d8:6c:95:6c:91:3e:d6:88:c1:28: 88:8d:45:d6:ab:b4:29:ca:d7:7b:5c:f7:7b:1c:19: a9:72:7f:cc:bc:d1:7b:0d:90:7e:b6:59:ce:09:f1: 3e:2a:8e:fb:0e:32:96:bc:e0:a0:24:82:9e:c9:ef: 63:41:40:49:40:de:87:f7:5e:7e:1e:93:80:a2:00: d8:68:93:4f:0e:3a:13:8e:c5:4b:da:10:0f:aa:53: ef:40:4f:8d:ae:e2:51:22:8e:9e:1e:39:dc:85:ab: 7d:37:ee:02:27:5c:ba:4c:2e:18:18:19:5d:5c:5b: fb:f6:cb:30:9d:03:64:a1:76:2c:94:8d:8e:0f:3a: 49:7a:2e:bf:77:b2:1b:52:86:2a:14:f4:91:e7:1e: 0f:34:1d:ab:da:ad:8d:79:e4:71:e7:ef:1f:79:be: bf:19:d1:d7:28:ce:15:7c:d1:90:8e:47:2f:c3:72: fa:3d:cf:d0:9f:d5:8b:84:6a:b1:1c:bc:8a:87:80: 85:6c:c2:1d:ce:4c:45:f0:ed:85:89:1b:d0:0c:f6: 37:72:01:52:22:3c:11:23:3b:d8:5e:62:86:c8:8f: 32:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D3:EF:90:33:26:03:18:EB:73:76:4F:86:B2:AD:1E:FD:4F:97:F4 X509v3 Authority Key Identifier: keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/odPvkDMmAxjrc3ZPhrKtHv1Pl_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.125.15.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:27:ba:5c:e2:1a:02:84:d0:ff:02:a7:71:0d:a1:78:ae:04: 61:56:33:1f:2e:dc:c8:7f:99:ea:9d:37:37:97:5e:9e:58:7c: a6:bb:38:66:8e:4e:5d:42:70:1b:0e:c7:82:59:6b:4f:c8:2b: 43:89:50:89:c2:fb:eb:97:dc:da:65:28:f7:db:ef:ab:77:80: 54:2f:2c:88:46:ad:08:b1:af:0f:29:0a:fc:9a:64:53:b6:66: 87:79:85:f3:3b:b7:ae:ad:ab:55:3b:f3:a7:c3:6f:98:69:36: c1:8d:5e:d0:90:0d:ea:ad:3d:82:25:e8:23:4c:ac:d0:90:94: 55:a5:2c:57:98:08:ce:39:e9:e7:0b:5f:2e:ba:a3:d0:5a:01: ed:46:65:6b:78:76:ef:34:38:72:28:b9:95:dc:76:65:94:b1: 80:23:79:d7:3d:e6:6a:ef:49:58:ff:bd:33:aa:f2:d9:38:ce: fb:81:cd:78:b3:d5:36:bb:bb:86:2d:e5:7e:28:b2:00:cb:4d: f4:5a:9a:e6:ec:7b:dc:ae:aa:ea:0b:d1:b0:cd:55:af:da:c6: df:33:31:8c:32:86:2a:ca:99:5c:c8:fd:5d:43:df:76:82:17: b2:d3:1c:97:ba:90:90:15:e5:dc:e0:ca:7e:fa:ea:95:a2:69: 70:f0:c1:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57CrjG5AkLDvMY6Jm8RMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMGY0ODcyYWQxYzFmNGZjYjIxM2I2YjJlZGIzODhhMmQ5 YzlhMjMwHhcNMjYwMTAxMTQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWQzZWY5MDMzMjYwMzE4ZWI3Mzc2NGY4NmIyYWQxZWZkNGY5N2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1qW87SPfdY/d2Z8aQH3rOgz6cQ+ WyfB3F7U/OaSIaqYnNhslWyRPtaIwSiIjUXWq7Qpytd7XPd7HBmpcn/MvNF7DZB+ tlnOCfE+Ko77DjKWvOCgJIKeye9jQUBJQN6H915+HpOAogDYaJNPDjoTjsVL2hAP qlPvQE+NruJRIo6eHjnchat9N+4CJ1y6TC4YGBldXFv79sswnQNkoXYslI2ODzpJ ei6/d7IbUoYqFPSR5x4PNB2r2q2NeeRx5+8feb6/GdHXKM4VfNGQjkcvw3L6Pc/Q n9WLhGqxHLyKh4CFbMIdzkxF8O2FiRvQDPY3cgFSIjwRIzvYXmKGyI8ycQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKHT75AzJgMY63N2T4ayrR79T5f0MB8GA1UdIwQY MBaAFA4PSHKtHB9PyyE7ay7bOIotnJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQt YzAxZjgwYTFjODA1LzEvb2RQdmtETW1BeGpyYzNaUGhyS3RIdjFQbF9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQtYzAxZjgwYTFjODA1 LzEvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvH0PMA0G CSqGSIb3DQEBCwUAA4IBAQAbJ7pc4hoChND/AqdxDaF4rgRhVjMfLtzIf5nqnTc3 l16eWHymuzhmjk5dQnAbDseCWWtPyCtDiVCJwvvrl9zaZSj32++rd4BULyyIRq0I sa8PKQr8mmRTtmaHeYXzO7euratVO/Onw2+YaTbBjV7QkA3qrT2CJegjTKzQkJRV pSxXmAjOOennC18uuqPQWgHtRmVreHbvNDhyKLmV3HZllLGAI3nXPeZq70lY/70z qvLZOM77gc14s9U2u7uGLeV+KLIAy030Wprm7HvcrqrqC9GwzVWv2sbfMzGMMoYq yplcyP1dQ992ghey0xyXupCQFeXc4Mp++uqVomlw8MFs -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:36 2026 by rpki-client