This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/OFtZps6dpl6vgRLStPIpQ1v6qWY.roa File: OFtZps6dpl6vgRLStPIpQ1v6qWY.roa (raw, json) Hash identifier: zT8indcX7sjfJFlFkEG48Xstgyuf1yTwWBE7Hk2NDFo= Subject key identifier: 38:5B:59:A6:CE:9D:A6:5E:AF:81:12:D2:B4:F2:29:43:5B:FA:A9:66 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA76139360A56288D436A8F0B6444AC Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/OFtZps6dpl6vgRLStPIpQ1v6qWY.roa Signing time: Fri 02 Jan 2026 12:20:57 +0000 ROA not before: Fri 02 Jan 2026 12:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21017 IP address blocks: 77.45.128.0/17 maxlen: 17 77.45.128.0/19 maxlen: 19 80.82.32.0/19 maxlen: 19 88.83.192.0/19 maxlen: 19 95.32.0.0/18 maxlen: 18 95.32.64.0/18 maxlen: 18 95.32.128.0/18 maxlen: 18 95.32.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:61:39:36:0a:56:28:8d:43:6a:8f:0b:64:44:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=385b59a6ce9da65eaf8112d2b4f229435bfaa966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e7:b6:7b:cc:5f:a6:d3:55:39:06:c9:3e:4a: a5:22:41:b7:fc:01:60:33:60:db:63:16:bb:89:ce: 58:7e:99:27:f7:94:6b:31:e3:66:3e:3f:16:79:d9: 42:86:85:d4:71:5b:da:6a:b2:64:60:11:10:68:a3: 4c:a6:0b:08:78:91:37:24:d5:50:da:a2:22:6c:93: 9f:11:d1:04:b4:43:63:76:34:b7:37:9d:2e:9e:e4: 04:ac:7d:c7:72:db:be:98:69:65:21:0e:97:57:67: bb:a1:01:48:d5:f5:5d:ed:7f:c0:ea:b2:53:21:75: 9d:61:80:7f:30:20:eb:4d:7f:09:69:7e:bd:b1:c7: 55:75:c2:ab:69:47:29:6d:5b:b7:38:2e:89:42:af: 1e:c6:00:bf:02:8f:37:a8:df:2c:c9:80:2b:ac:82: 8c:1e:40:38:d3:c9:c4:9a:b7:08:3b:b4:d8:89:be: 03:45:0c:be:26:87:e7:a1:bb:5b:ab:a8:1e:1e:cd: 27:84:5d:79:a6:b9:ce:ec:55:47:ff:56:fe:3a:37: 77:3a:ae:27:1f:f8:4b:8f:dc:1f:5d:65:4a:3c:d9: 2e:a4:63:97:1e:7d:26:37:e4:a6:4b:00:49:d9:1b: 9c:e6:20:93:47:b1:b8:d8:ed:f5:0a:ab:0a:e8:f2: b5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5B:59:A6:CE:9D:A6:5E:AF:81:12:D2:B4:F2:29:43:5B:FA:A9:66 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/OFtZps6dpl6vgRLStPIpQ1v6qWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.45.128.0/17 80.82.32.0/19 88.83.192.0/19 95.32.0.0/16 Signature Algorithm: sha256WithRSAEncryption 10:28:2e:6f:bb:a3:bf:1a:42:ca:34:64:75:18:48:eb:03:bb: a2:29:8f:b3:9c:92:e4:5e:6d:37:cb:7a:f3:f2:d6:6e:88:16: 86:4b:3e:ca:ce:1f:d6:24:ac:19:c0:27:b7:16:e5:88:61:b9: bd:5a:33:8a:8d:77:cd:99:04:f9:f3:f5:5e:1c:11:ba:33:61: 1f:d6:58:52:12:41:98:ce:28:0f:4b:fc:9d:98:ae:73:b4:c5: b5:05:b8:98:c7:44:76:1a:36:93:4c:99:b3:21:7b:00:49:1d: e2:86:13:28:c8:06:d5:96:64:64:de:d1:e6:6c:81:c9:49:b0: a0:06:0c:c8:2f:56:26:7d:7c:61:a5:16:2d:e1:8d:97:a0:ed: 6b:0f:a7:02:65:4c:07:40:02:05:7b:4f:31:c3:f1:fc:36:bc: c4:5c:a6:35:06:ea:f8:95:6e:d9:05:7d:63:b4:11:14:04:7c: 79:0a:73:f1:07:b3:7b:e1:2e:63:33:51:ce:51:91:e3:77:e8: 78:d8:c9:24:5b:54:c1:d6:3f:a3:6d:f5:8c:a4:8f:e1:c1:d0: 7e:d1:ea:4e:d9:46:53:e1:dd:92:15:88:96:96:68:78:b2:5f: c0:89:0d:46:7f:c3:fe:b8:f3:f6:27:3a:e3:50:b3:7e:6c:7d: a1:49:1e:b3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+p2E5NgpWKI1Dao8LZESsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODViNTlhNmNlOWRhNjVlYWY4MTEyZDJiNGYyMjk0MzViZmFhOTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkee2e8xfptNVOQbJPkqlIkG3/AFg M2DbYxa7ic5Yfpkn95RrMeNmPj8WedlChoXUcVvaarJkYBEQaKNMpgsIeJE3JNVQ 2qIibJOfEdEEtENjdjS3N50unuQErH3Hctu+mGllIQ6XV2e7oQFI1fVd7X/A6rJT IXWdYYB/MCDrTX8JaX69scdVdcKraUcpbVu3OC6JQq8exgC/Ao83qN8syYArrIKM HkA408nEmrcIO7TYib4DRQy+Jofnobtbq6geHs0nhF15prnO7FVH/1b+Ojd3Oq4n H/hLj9wfXWVKPNkupGOXHn0mN+SmSwBJ2Ruc5iCTR7G42O31CqsK6PK1UwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDhbWabOnaZer4ES0rTyKUNb+qlmMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvT0Z0WnBzNmRwbDZ2Z1JMU3RQSXBRMXY2cVdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwQHTS2AAwQF UFIgAwQFWFPAAwMAXyAwDQYJKoZIhvcNAQELBQADggEBABAoLm+7o78aQso0ZHUY SOsDu6Ipj7OckuRebTfLevPy1m6IFoZLPsrOH9YkrBnAJ7cW5Yhhub1aM4qNd82Z BPnz9V4cEbozYR/WWFISQZjOKA9L/J2YrnO0xbUFuJjHRHYaNpNMmbMhewBJHeKG EyjIBtWWZGTe0eZsgclJsKAGDMgvViZ9fGGlFi3hjZeg7WsPpwJlTAdAAgV7TzHD 8fw2vMRcpjUG6viVbtkFfWO0ERQEfHkKc/EHs3vhLmMzUc5RkeN36HjYySRbVMHW P6Nt9Yykj+HB0H7R6k7ZRlPh3ZIViJaWaHiyX8CJDUZ/w/648/YnOuNQs35sfaFJ HrM= -----END CERTIFICATE-----Generated at Mon Jan 26 01:40:01 2026 by rpki-client