This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/2OlXrMHEGCGdCIkFH9DwRH8m-_Y.roa File: 2OlXrMHEGCGdCIkFH9DwRH8m-_Y.roa (raw, json) Hash identifier: EyDlhcGNJI5g7xCKKg+SLdnpu6y3b/Owb67XHcNo4LM= Subject key identifier: D8:E9:57:AC:C1:C4:18:21:9D:08:89:05:1F:D0:F0:44:7F:26:FB:F6 Certificate issuer: /CN=1904ce28eae682c97acd2d862fee2897c3b096fd Certificate serial: 019B7B35BB9C61B5AAF1369CF5B2B19F8625 Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/2OlXrMHEGCGdCIkFH9DwRH8m-_Y.roa Signing time: Thu 01 Jan 2026 20:17:57 +0000 ROA not before: Thu 01 Jan 2026 20:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214528 IP address blocks: 37.114.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:bb:9c:61:b5:aa:f1:36:9c:f5:b2:b1:9f:86:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd Validity Not Before: Jan 1 20:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8e957acc1c418219d0889051fd0f0447f26fbf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:87:70:53:a4:86:37:3e:78:eb:12:52:f3:68: 51:06:93:6a:a2:37:30:0e:6f:d3:0e:84:d0:03:36: c4:52:88:c6:12:8f:09:46:fc:0c:87:73:e5:19:ab: 7b:5e:a1:34:bf:02:18:d4:54:d3:63:9c:3c:e9:f9: e5:e7:5b:44:4a:07:b0:8f:a6:3d:74:82:41:a0:ea: 75:f8:fb:b5:04:e6:07:62:27:88:4a:a1:43:7b:b6: 6d:bc:61:e3:4f:4a:eb:9b:d8:70:b4:8a:bf:ca:9e: 95:d8:39:43:b2:b6:42:8f:88:72:bd:22:9e:4b:8d: b1:dc:b6:56:3f:b2:72:04:b7:cf:9a:fa:c4:f7:44: b6:7a:84:b4:3b:1b:55:52:8a:1a:8f:27:48:69:2b: e7:5a:42:6e:1d:bf:0b:38:83:78:50:ab:8c:e5:23: 77:f9:27:03:84:76:31:c2:ff:a8:d1:d2:9d:8f:5e: 4b:59:01:7f:4a:9e:12:5c:ab:ff:17:59:bf:14:ef: 73:e4:dc:b1:6a:da:85:ed:5a:57:6a:13:c2:e2:93: 3f:6b:ab:c4:7e:6c:01:39:48:c1:86:87:a1:9a:a3: f7:aa:32:5a:64:20:41:f0:95:4d:7d:4a:11:ef:d6: 6c:bb:b4:89:8b:e1:05:8c:3b:ef:89:25:6b:6e:0b: e3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E9:57:AC:C1:C4:18:21:9D:08:89:05:1F:D0:F0:44:7F:26:FB:F6 X509v3 Authority Key Identifier: keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/2OlXrMHEGCGdCIkFH9DwRH8m-_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.176.0/20 Signature Algorithm: sha256WithRSAEncryption 06:cd:b2:c2:a7:31:3a:7d:46:2d:b9:d4:e6:1a:89:36:28:10: c9:53:ef:2c:08:fa:b2:f1:54:a5:32:02:da:a7:b7:85:96:14: a7:88:c3:68:d8:1d:19:a6:8f:af:d9:62:b7:52:79:74:5b:de: aa:9d:09:42:2f:9d:b7:7c:37:3c:7a:1e:8e:cd:e3:b4:93:b6: 9e:04:74:b4:4c:f9:33:9e:c9:a7:97:62:78:5c:cb:8d:a2:e3: fe:46:96:be:04:47:22:33:13:38:5c:2a:5a:f6:b5:51:4f:27: 9f:41:b4:2b:ff:ec:d4:d2:6e:cc:9f:21:64:25:95:07:41:2e: d2:47:54:49:15:a1:0b:1a:97:1f:f4:1b:c8:1b:bc:10:be:11: cf:1d:a5:ca:aa:16:3b:b4:a1:46:f3:a0:d3:b4:b1:a2:06:e6: 97:57:a4:0c:11:9a:68:26:2f:41:54:68:9b:9e:98:ca:74:7b: 57:45:6d:8d:12:11:69:ad:d7:a6:f6:64:f3:65:86:8f:43:7b: 42:ed:02:ac:d2:c4:71:3b:69:c6:5e:88:27:21:e5:91:96:f4: f7:44:1b:6d:74:61:66:1c:39:81:2e:ff:de:8b:63:6d:e7:39: 50:2a:19:27:6f:48:c0:f1:5c:2c:21:a1:51:d1:ad:dc:e9:f2: b1:7f:98:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NbucYbWq8Tac9bKxn4YlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDRjZTI4ZWFlNjgyYzk3YWNkMmQ4NjJmZWUyODk3YzNi MDk2ZmQwHhcNMjYwMTAxMjAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGU5NTdhY2MxYzQxODIxOWQwODg5MDUxZmQwZjA0NDdmMjZmYmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmodwU6SGNz546xJS82hRBpNqojcw Dm/TDoTQAzbEUojGEo8JRvwMh3PlGat7XqE0vwIY1FTTY5w86fnl51tESgewj6Y9 dIJBoOp1+Pu1BOYHYieISqFDe7ZtvGHjT0rrm9hwtIq/yp6V2DlDsrZCj4hyvSKe S42x3LZWP7JyBLfPmvrE90S2eoS0OxtVUooajydIaSvnWkJuHb8LOIN4UKuM5SN3 +ScDhHYxwv+o0dKdj15LWQF/Sp4SXKv/F1m/FO9z5NyxatqF7VpXahPC4pM/a6vE fmwBOUjBhoehmqP3qjJaZCBB8JVNfUoR79Zsu7SJi+EFjDvviSVrbgvj3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNjpV6zBxBghnQiJBR/Q8ER/Jvv2MB8GA1UdIwQY MBaAFBkEzijq5oLJes0thi/uKJfDsJb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDkt MTVkNWRlYjIyOGRkLzEvMk9sWHJNSEVHQ0dkQ0lrRkg5RHdSSDhtLV9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDktMTVkNWRlYjIyOGRk LzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJXKwMA0G CSqGSIb3DQEBCwUAA4IBAQAGzbLCpzE6fUYtudTmGok2KBDJU+8sCPqy8VSlMgLa p7eFlhSniMNo2B0Zpo+v2WK3Unl0W96qnQlCL523fDc8eh6OzeO0k7aeBHS0TPkz nsmnl2J4XMuNouP+Rpa+BEciMxM4XCpa9rVRTyefQbQr/+zU0m7MnyFkJZUHQS7S R1RJFaELGpcf9BvIG7wQvhHPHaXKqhY7tKFG86DTtLGiBuaXV6QMEZpoJi9BVGib npjKdHtXRW2NEhFprdem9mTzZYaPQ3tC7QKs0sRxO2nGXognIeWRlvT3RBttdGFm HDmBLv/ei2Nt5zlQKhknb0jA8VwsIaFR0a3c6fKxf5g/ -----END CERTIFICATE-----Generated at Tue Jan 27 00:30:19 2026 by rpki-client