This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/odXhA_xZijYQgRVHy6_dtJpV9S4.roa File: odXhA_xZijYQgRVHy6_dtJpV9S4.roa (raw, json) Hash identifier: phjPAghGyg2dhEtydU7dRYb/McKqEnDMEOpSwT4IJtY= Subject key identifier: A1:D5:E1:03:FC:59:8A:36:10:81:15:47:CB:AF:DD:B4:9A:55:F5:2E Certificate issuer: /CN=794f253abffa3214cda8dc99599e5e7c664abf4a Certificate serial: 019B7835064FA9EF7FCCAC0CA42E56C7094C Authority key identifier: 79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/odXhA_xZijYQgRVHy6_dtJpV9S4.roa Signing time: Thu 01 Jan 2026 06:18:19 +0000 ROA not before: Thu 01 Jan 2026 06:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212733 IP address blocks: 93.157.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:06:4f:a9:ef:7f:cc:ac:0c:a4:2e:56:c7:09:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=794f253abffa3214cda8dc99599e5e7c664abf4a Validity Not Before: Jan 1 06:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1d5e103fc598a3610811547cbafddb49a55f52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:50:d2:dd:96:9a:8c:c8:45:e1:39:1f:f8: 82:32:af:8d:af:52:6b:06:44:cc:16:70:31:ba:05: b0:50:c2:13:67:4c:00:4a:80:9c:e6:42:37:ab:fd: 67:b8:3b:52:5f:94:91:ed:ce:c0:ab:31:5e:f2:2e: 12:06:a5:69:49:37:c7:a8:88:6b:26:f9:af:08:6a: 5c:3b:12:38:31:90:01:ac:a0:ae:09:51:49:56:d7: 46:d7:c3:5b:04:8e:95:a2:36:ef:77:12:ce:58:6e: 8c:f9:15:9e:5a:59:f9:48:a4:57:d1:3d:07:3c:c7: 11:c8:4a:4f:a5:1a:2e:76:4d:56:49:e4:9a:84:4d: f5:c1:b2:7e:63:d0:d5:94:37:cf:ff:e1:00:6a:74: 48:6c:a1:60:43:a6:ba:65:73:10:3d:f6:65:4a:b9: 22:ff:01:22:b1:62:89:5b:cc:f0:2f:c4:69:69:a6: fd:59:07:ba:0c:89:ae:ac:29:f9:d8:cf:20:12:a1: 85:68:84:4f:ba:dc:c6:b2:94:5c:e5:39:f0:22:18: bb:a6:6e:b0:2a:79:24:3a:66:74:28:df:5f:22:a5: d9:24:99:77:cf:99:d2:bc:6d:15:b9:f5:da:a5:fe: 4e:60:e3:ec:37:f7:0f:9e:89:11:9f:af:4a:aa:03: b7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D5:E1:03:FC:59:8A:36:10:81:15:47:CB:AF:DD:B4:9A:55:F5:2E X509v3 Authority Key Identifier: keyid:79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/odXhA_xZijYQgRVHy6_dtJpV9S4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.157.141.0/24 Signature Algorithm: sha256WithRSAEncryption 34:0e:98:2b:d2:bc:f1:aa:9b:16:03:6f:78:f4:08:75:28:12: fd:90:40:10:3f:3a:77:9f:a8:37:a4:2e:29:01:c5:c7:26:28: 2b:99:35:30:da:ec:39:45:91:02:97:92:04:c0:c0:6c:12:35: 91:30:22:6b:91:67:79:1d:91:7a:de:83:4a:97:d0:8b:6e:79: 00:71:fa:72:8f:b6:69:da:ec:3b:9c:c3:06:4d:0c:c7:59:12: 75:b6:f9:2f:bd:80:40:56:1b:fc:b8:e0:23:90:97:0d:11:fe: 8f:0b:c1:c6:16:48:65:ec:ba:61:31:a1:47:07:d6:7c:41:c3: 35:78:f4:b3:61:bc:1f:d6:20:a9:fc:6f:9e:34:99:dc:86:bd: 3e:e2:c5:b5:82:5c:94:56:c3:84:84:e0:20:02:6d:f0:97:32: fb:d6:e6:6e:b2:a5:99:ff:3d:5c:a6:eb:09:c8:d6:ec:fc:6e: 9c:e5:41:59:cb:20:95:9e:45:42:92:5a:26:bf:6a:36:71:77: a6:aa:45:fa:db:eb:07:3d:0d:14:c3:f7:ad:b4:59:7f:a4:10: c9:43:1b:f5:96:98:f3:ae:21:71:94:a6:4a:ce:ce:df:d4:2a: 67:74:40:5f:aa:da:ed:11:0c:32:b9:59:6d:2f:2f:3f:50:fc: 14:81:38:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NQZPqe9/zKwMpC5WxwlMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NGYyNTNhYmZmYTMyMTRjZGE4ZGM5OTU5OWU1ZTdjNjY0 YWJmNGEwHhcNMjYwMTAxMDYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWQ1ZTEwM2ZjNTk4YTM2MTA4MTE1NDdjYmFmZGRiNDlhNTVmNTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD5Q0t2WmozIReE5H/iCMq+Nr1Jr BkTMFnAxugWwUMITZ0wASoCc5kI3q/1nuDtSX5SR7c7AqzFe8i4SBqVpSTfHqIhr JvmvCGpcOxI4MZABrKCuCVFJVtdG18NbBI6VojbvdxLOWG6M+RWeWln5SKRX0T0H PMcRyEpPpRoudk1WSeSahE31wbJ+Y9DVlDfP/+EAanRIbKFgQ6a6ZXMQPfZlSrki /wEisWKJW8zwL8Rpaab9WQe6DImurCn52M8gEqGFaIRPutzGspRc5TnwIhi7pm6w KnkkOmZ0KN9fIqXZJJl3z5nSvG0VufXapf5OYOPsN/cPnokRn69KqgO3GQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKHV4QP8WYo2EIEVR8uv3bSaVfUuMB8GA1UdIwQY MBaAFHlPJTq/+jIUzajcmVmeXnxmSr9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVU4bE9yXzZNaFROcU55WldaNWVmR1pLdjBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iNTIzZGItODQyZC00MjY3LWJlODct ZTZkZjhlZGFiZmI4LzEvb2RYaEFfeFppallRZ1JWSHk2X2R0SnBWOVM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iNTIzZGItODQyZC00MjY3LWJlODctZTZkZjhlZGFiZmI4 LzEvZVU4bE9yXzZNaFROcU55WldaNWVmR1pLdjBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZ2NMA0G CSqGSIb3DQEBCwUAA4IBAQA0Dpgr0rzxqpsWA2949Ah1KBL9kEAQPzp3n6g3pC4p AcXHJigrmTUw2uw5RZECl5IEwMBsEjWRMCJrkWd5HZF63oNKl9CLbnkAcfpyj7Zp 2uw7nMMGTQzHWRJ1tvkvvYBAVhv8uOAjkJcNEf6PC8HGFkhl7LphMaFHB9Z8QcM1 ePSzYbwf1iCp/G+eNJnchr0+4sW1glyUVsOEhOAgAm3wlzL71uZusqWZ/z1cpusJ yNbs/G6c5UFZyyCVnkVCklomv2o2cXemqkX62+sHPQ0Uw/ettFl/pBDJQxv1lpjz riFxlKZKzs7f1CpndEBfqtrtEQwyuVltLy8/UPwUgThu -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:13 2026 by rpki-client