This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/otd5V2cV1Ca3eD_CY3OTJoxda-o.roa File: otd5V2cV1Ca3eD_CY3OTJoxda-o.roa (raw, json) Hash identifier: q2udBVaxk+e2Vd86P+KK9uKGO31T3slWZ/u6JA3I8mc= Subject key identifier: A2:D7:79:57:67:15:D4:26:B7:78:3F:C2:63:73:93:26:8C:5D:6B:EA Certificate issuer: /CN=e1e8b7cab521e88e8022a36424544185538a7b33 Certificate serial: 019B797EF42F017CBDA6DBA36D085882852C Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/otd5V2cV1Ca3eD_CY3OTJoxda-o.roa Signing time: Thu 01 Jan 2026 12:18:41 +0000 ROA not before: Thu 01 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56687 IP address blocks: 185.154.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f4:2f:01:7c:bd:a6:db:a3:6d:08:58:82:85:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2d779576715d426b7783fc2637393268c5d6bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:05:f1:9c:08:40:8f:f2:38:9a:e6:b8:ef: 2d:0d:00:65:6d:60:3b:cc:6b:b1:71:46:ea:b1:fc: 42:73:56:a1:ff:f6:14:80:5e:92:19:54:a2:ba:8a: 24:79:4d:6d:ac:85:6b:a4:20:8b:ff:ed:34:c4:9f: e6:41:40:61:2f:d2:a5:fb:94:05:10:eb:ee:56:43: 4f:73:9d:69:11:02:51:ce:30:85:8d:f0:83:3b:90: 5d:28:f6:53:c6:ae:20:a3:b5:6e:32:90:f9:24:be: 31:18:31:5c:c7:95:4a:58:7e:1e:d6:1a:4a:a4:ca: 72:2b:61:43:20:01:f1:7b:5d:b3:a5:ee:3a:2d:b6: a0:e7:02:c7:64:57:6d:9b:48:f9:54:19:90:2e:18: 3d:ac:8e:ef:74:ae:e4:ae:62:b1:fd:af:3e:2d:45: da:af:09:cf:a2:54:df:cc:bb:46:8c:b5:fe:51:43: 4b:3c:31:37:e7:09:36:2a:2e:26:a8:fd:f0:bd:8e: 7e:f0:5a:b7:06:67:5a:a6:40:f2:98:f2:53:0d:66: fd:76:a8:81:f4:be:81:78:e2:44:31:04:6d:39:5c: 50:ea:6e:7e:70:f4:dd:84:86:cb:5b:5e:86:68:bc: 79:1d:89:c6:bf:33:3e:97:a7:71:62:8d:7a:d2:93: ea:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D7:79:57:67:15:D4:26:B7:78:3F:C2:63:73:93:26:8C:5D:6B:EA X509v3 Authority Key Identifier: keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/otd5V2cV1Ca3eD_CY3OTJoxda-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.190.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:03:fd:9a:c3:3a:b6:22:2e:ad:24:4d:8e:27:cd:89:ed:06: ac:71:f0:50:c2:c7:a4:3f:a1:b5:b5:74:23:0b:b2:3a:2b:13: 2d:15:81:4e:32:55:2c:a1:a2:e2:2d:73:9f:bc:41:88:fb:e3: 4c:96:66:97:c0:86:9a:b2:11:7b:e9:d6:7e:77:b0:c4:5a:89: d3:c4:c7:35:66:75:9f:80:cf:76:00:3b:c9:db:f2:90:77:9a: 18:17:90:ab:ca:ad:12:96:3e:f1:ab:b9:44:37:47:62:2f:ff: 6c:76:ba:d5:cb:e9:f0:04:88:b6:1b:d2:41:c0:13:7d:e9:f8: 8b:58:a2:52:9a:c1:65:6d:da:3f:94:79:d4:08:9e:b2:9d:30: 3e:09:36:44:bd:85:84:8f:05:27:a8:83:21:70:7a:53:0d:d5: 7c:51:62:78:e1:50:fa:5b:3c:13:5e:69:70:f4:15:86:42:88: dc:4e:2d:b4:9f:aa:78:ee:93:53:0d:3c:9a:65:0d:08:35:82: c8:66:d3:15:d9:d8:ef:1b:8e:9f:4e:5e:64:2e:4a:5d:61:ee: 5c:a9:c4:4b:97:f9:61:00:36:89:88:24:9f:1c:43:54:61:5b: 72:35:ac:1b:78:d0:54:5e:04:ed:be:2f:28:13:b4:71:27:e1: c9:b9:af:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvQvAXy9ptujbQhYgoUsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZThiN2NhYjUyMWU4OGU4MDIyYTM2NDI0NTQ0MTg1NTM4 YTdiMzMwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmQ3Nzk1NzY3MTVkNDI2Yjc3ODNmYzI2MzczOTMyNjhjNWQ2YmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8UF8ZwIQI/yOJrmuO8tDQBlbWA7 zGuxcUbqsfxCc1ah//YUgF6SGVSiuookeU1trIVrpCCL/+00xJ/mQUBhL9Kl+5QF EOvuVkNPc51pEQJRzjCFjfCDO5BdKPZTxq4go7VuMpD5JL4xGDFcx5VKWH4e1hpK pMpyK2FDIAHxe12zpe46Lbag5wLHZFdtm0j5VBmQLhg9rI7vdK7krmKx/a8+LUXa rwnPolTfzLtGjLX+UUNLPDE35wk2Ki4mqP3wvY5+8Fq3BmdapkDymPJTDWb9dqiB 9L6BeOJEMQRtOVxQ6m5+cPTdhIbLW16GaLx5HYnGvzM+l6dxYo160pPqSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKLXeVdnFdQmt3g/wmNzkyaMXWvqMB8GA1UdIwQY MBaAFOHot8q1IeiOgCKjZCRUQYVTinszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYt MjFjNTg0NzBiOGQyLzEvb3RkNVYyY1YxQ2EzZURfQ1kzT1RKb3hkYS1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYtMjFjNTg0NzBiOGQy LzEvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZq+MA0G CSqGSIb3DQEBCwUAA4IBAQBcA/2awzq2Ii6tJE2OJ82J7QascfBQwsekP6G1tXQj C7I6KxMtFYFOMlUsoaLiLXOfvEGI++NMlmaXwIaashF76dZ+d7DEWonTxMc1ZnWf gM92ADvJ2/KQd5oYF5Cryq0Slj7xq7lEN0diL/9sdrrVy+nwBIi2G9JBwBN96fiL WKJSmsFlbdo/lHnUCJ6ynTA+CTZEvYWEjwUnqIMhcHpTDdV8UWJ44VD6WzwTXmlw 9BWGQojcTi20n6p47pNTDTyaZQ0INYLIZtMV2djvG46fTl5kLkpdYe5cqcRLl/lh ADaJiCSfHENUYVtyNawbeNBUXgTtvi8oE7RxJ+HJua9y -----END CERTIFICATE-----Generated at Mon Jan 26 02:13:36 2026 by rpki-client