This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/OTlRxRTeXOHkKtdakV9hVrtGRYg.roa File: OTlRxRTeXOHkKtdakV9hVrtGRYg.roa (raw, json) Hash identifier: BCoXfQjO9Xf/pZBal3UjOjOaA9/ocffh1LBzcabh728= Subject key identifier: 39:39:51:C5:14:DE:5C:E1:E4:2A:D7:5A:91:5F:61:56:BB:46:45:88 Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f Certificate serial: 019B78349A94309910B97C3584715F916C12 Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/OTlRxRTeXOHkKtdakV9hVrtGRYg.roa Signing time: Thu 01 Jan 2026 06:17:51 +0000 ROA not before: Thu 01 Jan 2026 06:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44803 IP address blocks: 77.37.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9a:94:30:99:10:b9:7c:35:84:71:5f:91:6c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f Validity Not Before: Jan 1 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=393951c514de5ce1e42ad75a915f6156bb464588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1c:b8:16:47:b8:79:28:0c:09:2c:06:07:9b: fb:27:ae:64:fc:b6:3b:c8:8a:a9:90:e6:03:5d:07: d7:07:62:df:3a:f1:21:47:06:ef:91:9c:99:bf:5f: dd:67:90:d5:7f:0e:db:99:23:7d:30:8e:ae:45:48: 9b:a3:21:26:70:3f:a2:5f:e0:4c:5b:74:43:f2:7e: 32:87:14:66:4c:56:59:77:56:65:91:7e:2f:d3:7f: 14:4d:ad:bf:fa:8f:7f:60:a6:cc:6e:27:81:b4:33: bd:0e:81:28:b0:61:02:0a:d8:07:a3:b9:cc:4f:e8: 0f:26:3a:bc:98:a8:ce:d1:b2:85:ed:ac:97:ca:73: 94:b3:58:fd:01:8a:7c:7a:77:2a:fe:5c:ea:7f:65: 46:cd:d7:ce:93:22:c7:1e:59:51:41:6a:8c:13:a6: 99:5f:ac:a7:e3:5e:1a:50:cb:8a:19:b4:b7:a6:46: da:a8:74:1c:9f:55:a2:e8:89:a8:02:9f:53:76:33: fc:ef:30:0c:ee:86:e5:41:8b:35:82:40:7c:82:0c: a0:b7:f6:fa:7d:fa:06:37:80:3b:5e:3d:b5:33:bf: 3c:f1:ab:e0:aa:c2:d0:55:65:4d:3d:06:ca:d5:76: 12:98:88:36:ad:06:56:3e:12:25:ba:bf:c6:d2:87: 01:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:39:51:C5:14:DE:5C:E1:E4:2A:D7:5A:91:5F:61:56:BB:46:45:88 X509v3 Authority Key Identifier: keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/OTlRxRTeXOHkKtdakV9hVrtGRYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.37.96.0/23 Signature Algorithm: sha256WithRSAEncryption 72:92:c2:27:3e:37:13:5f:17:61:fc:72:7f:17:09:da:6b:3a: c4:7f:ad:59:30:5e:a8:fd:5a:04:1f:53:eb:f0:31:6a:7f:e0: cd:38:49:05:09:86:93:fe:01:5c:ea:41:f8:97:c4:46:70:d7: 26:87:0a:cd:28:1a:7f:5e:e9:b9:4c:f6:08:38:77:e7:17:e8: 6f:80:5b:3b:91:24:0e:09:d5:32:64:34:76:35:b4:31:36:2f: 1e:cd:b1:10:07:89:26:3f:56:ad:98:4b:8f:3a:53:15:91:01: 01:7d:d9:38:f0:ea:a3:a0:69:52:6d:f7:2a:92:46:69:8f:1b: b1:ce:4a:77:25:ae:7b:be:83:24:54:fa:f2:a4:a6:b9:30:60: 71:f9:d6:9c:34:45:99:d7:9c:ec:15:1d:e9:3d:27:9d:4c:8c: 4e:e7:49:22:76:c6:e5:d4:d4:f7:1c:f2:c7:d4:0f:63:fc:99: 05:b4:d2:df:f5:9d:57:60:e6:f5:dd:be:5a:10:3b:9f:e5:a4: 81:b3:02:6f:1c:12:3c:25:68:c2:fe:62:c8:c9:da:ff:83:3d: 88:7d:32:a4:27:cc:b3:74:54:17:c5:2f:f2:47:b2:09:4c:71: e9:76:3f:39:cc:56:18:ab:5e:8e:1c:a7:97:04:1d:50:15:64: a6:d8:ae:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJqUMJkQuXw1hHFfkWwSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2 ZGRlNmYwHhcNMjYwMTAxMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTM5NTFjNTE0ZGU1Y2UxZTQyYWQ3NWE5MTVmNjE1NmJiNDY0NTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRy4Fke4eSgMCSwGB5v7J65k/LY7 yIqpkOYDXQfXB2LfOvEhRwbvkZyZv1/dZ5DVfw7bmSN9MI6uRUiboyEmcD+iX+BM W3RD8n4yhxRmTFZZd1ZlkX4v038UTa2/+o9/YKbMbieBtDO9DoEosGECCtgHo7nM T+gPJjq8mKjO0bKF7ayXynOUs1j9AYp8encq/lzqf2VGzdfOkyLHHllRQWqME6aZ X6yn414aUMuKGbS3pkbaqHQcn1Wi6ImoAp9TdjP87zAM7oblQYs1gkB8ggygt/b6 ffoGN4A7Xj21M7888avgqsLQVWVNPQbK1XYSmIg2rQZWPhIlur/G0ocBfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDk5UcUU3lzh5CrXWpFfYVa7RkWIMB8GA1UdIwQY MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt NDQxNDU1OGZkY2JiLzEvT1RsUnhSVGVYT0hrS3RkYWtWOWhWcnRHUllnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTSVgMA0G CSqGSIb3DQEBCwUAA4IBAQByksInPjcTXxdh/HJ/FwnaazrEf61ZMF6o/VoEH1Pr 8DFqf+DNOEkFCYaT/gFc6kH4l8RGcNcmhwrNKBp/Xum5TPYIOHfnF+hvgFs7kSQO CdUyZDR2NbQxNi8ezbEQB4kmP1atmEuPOlMVkQEBfdk48OqjoGlSbfcqkkZpjxux zkp3Ja57voMkVPrypKa5MGBx+dacNEWZ15zsFR3pPSedTIxO50kidsbl1NT3HPLH 1A9j/JkFtNLf9Z1XYOb13b5aEDuf5aSBswJvHBI8JWjC/mLIydr/gz2IfTKkJ8yz dFQXxS/yR7IJTHHpdj85zFYYq16OHKeXBB1QFWSm2K6g -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:19 2026 by rpki-client