This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/olTnJZOeBxSGSHdFIbwThqvRrwM.roa File: olTnJZOeBxSGSHdFIbwThqvRrwM.roa (raw, json) Hash identifier: 7ZVXpb1BUMxPZ9Jc/FGOlyUwvnj11IZVQ1xQChFmpVk= Subject key identifier: A2:54:E7:25:93:9E:07:14:86:48:77:45:21:BC:13:86:AB:D1:AF:03 Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5 Certificate serial: 019B7759385AC0C21628A7085357B2AEA8F4 Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/olTnJZOeBxSGSHdFIbwThqvRrwM.roa Signing time: Thu 01 Jan 2026 02:18:14 +0000 ROA not before: Thu 01 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204456 IP address blocks: 185.222.232.0/22 maxlen: 22 185.222.232.0/24 maxlen: 24 185.222.233.0/24 maxlen: 24 185.222.234.0/24 maxlen: 24 185.222.235.0/24 maxlen: 24 2a0d:800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:38:5a:c0:c2:16:28:a7:08:53:57:b2:ae:a8:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5 Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a254e725939e07148648774521bc1386abd1af03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ec:65:0e:62:6f:d5:81:05:4b:bc:9d:60:a8: 78:9e:9a:5f:3e:d5:a8:23:36:13:9e:e3:cc:fe:56: 98:d2:d5:db:bc:07:0f:27:fc:c4:cf:6d:f2:73:af: 7f:70:c8:40:22:52:90:b7:d3:19:92:66:96:63:2b: d4:06:14:42:dc:89:be:47:b7:74:6c:92:b3:7e:ad: bc:aa:55:67:ce:d1:3c:55:f4:6c:4d:e3:ed:3f:51: 0f:70:00:cc:d3:84:26:b8:2c:8c:4a:51:27:0c:f8: 1b:71:ae:e4:8d:5d:9e:25:2d:1b:5e:99:03:5b:89: aa:c9:24:2d:c3:42:a3:24:a6:af:01:56:6f:17:2b: 80:ef:f2:64:f9:a5:37:99:83:c0:b2:66:79:27:6f: 22:d3:11:87:83:8a:89:7b:9a:75:3e:29:0e:18:49: 7d:6d:0f:b3:1e:0a:da:63:5d:da:73:44:13:6c:ef: 3d:b2:7f:f3:3a:09:56:42:7b:9b:31:e3:62:33:74: 22:03:3e:59:36:78:96:62:24:b0:37:f9:e3:fc:60: b1:bb:53:a8:dc:5b:4c:0e:d2:a3:aa:ea:51:fb:b4: dc:92:1c:71:a4:2f:f3:f3:98:df:43:31:97:4c:f7: b8:98:12:b0:50:84:96:6e:98:80:71:71:84:9a:c6: 86:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:54:E7:25:93:9E:07:14:86:48:77:45:21:BC:13:86:AB:D1:AF:03 X509v3 Authority Key Identifier: keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/olTnJZOeBxSGSHdFIbwThqvRrwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.232.0/22 IPv6: 2a0d:800::/29 Signature Algorithm: sha256WithRSAEncryption 41:b8:2e:29:16:c3:95:cb:37:d1:e4:72:50:3d:91:b1:69:ee: 12:55:7b:ea:cf:3e:9d:f3:11:7c:0a:9f:83:12:48:93:20:14: 2b:ca:f2:10:cd:72:2b:8b:46:f1:1c:07:22:5b:92:5e:44:f1: 61:85:17:2a:fa:27:5b:2e:1e:bb:ad:91:cb:8f:e9:ca:b3:ff: 44:c8:d3:4d:c0:be:08:51:67:63:6e:2f:d4:07:d0:45:da:39: d6:50:d6:63:d1:dd:5e:d1:78:29:97:86:22:d5:e6:fc:62:89: 2e:70:3f:4c:0d:ef:76:45:f8:54:f5:8d:ad:88:09:e8:a7:ba: b3:bf:c6:c4:6f:e7:70:38:71:f1:5c:ae:7e:1c:3a:35:da:25: 75:c2:b3:19:83:a2:36:cf:18:a7:59:12:b9:c2:03:7e:d3:8d: 3f:ae:d6:a2:d4:9b:5c:fb:c2:7a:2c:b4:8b:31:cf:54:16:5a: 81:25:f6:ee:a1:bd:7b:7c:d9:41:ce:64:1a:b7:9b:c3:4e:5d: 72:02:c4:fd:12:2b:a2:4c:92:e7:73:87:29:e1:07:85:64:96: a1:6b:8a:2e:ed:a6:22:ad:f9:0a:20:e7:63:ed:47:d4:70:b5: 78:f6:97:82:3d:e7:6e:a5:67:45:76:ed:11:2b:f8:a7:d5:72: a4:b3:7c:6b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WThawMIWKKcIU1eyrqj0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzEzNzEwNmMxYTQ2YWVhMDdjMjRiMTE3MjlmZDdkMjE2 YTI0ZjUwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjU0ZTcyNTkzOWUwNzE0ODY0ODc3NDUyMWJjMTM4NmFiZDFhZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+xlDmJv1YEFS7ydYKh4nppfPtWo IzYTnuPM/laY0tXbvAcPJ/zEz23yc69/cMhAIlKQt9MZkmaWYyvUBhRC3Im+R7d0 bJKzfq28qlVnztE8VfRsTePtP1EPcADM04QmuCyMSlEnDPgbca7kjV2eJS0bXpkD W4mqySQtw0KjJKavAVZvFyuA7/Jk+aU3mYPAsmZ5J28i0xGHg4qJe5p1PikOGEl9 bQ+zHgraY13ac0QTbO89sn/zOglWQnubMeNiM3QiAz5ZNniWYiSwN/nj/GCxu1Oo 3FtMDtKjqupR+7TckhxxpC/z85jfQzGXTPe4mBKwUISWbpiAcXGEmsaGVwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKJU5yWTngcUhkh3RSG8E4ar0a8DMB8GA1UdIwQY MBaAFOLBNxBsGkauoHwksRcp/X0haiT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODIt OWNhZjI1YTQ5OWQ3LzEvb2xUbkpaT2VCeFNHU0hkRklid1RocXZScndNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODItOWNhZjI1YTQ5OWQ3 LzEvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCud7oMA0E AgACMAcDBQMqDQgAMA0GCSqGSIb3DQEBCwUAA4IBAQBBuC4pFsOVyzfR5HJQPZGx ae4SVXvqzz6d8xF8Cp+DEkiTIBQryvIQzXIri0bxHAciW5JeRPFhhRcq+idbLh67 rZHLj+nKs/9EyNNNwL4IUWdjbi/UB9BF2jnWUNZj0d1e0Xgpl4Yi1eb8YokucD9M De92RfhU9Y2tiAnop7qzv8bEb+dwOHHxXK5+HDo12iV1wrMZg6I2zxinWRK5wgN+ 040/rtai1Jtc+8J6LLSLMc9UFlqBJfbuob17fNlBzmQat5vDTl1yAsT9EiuiTJLn c4cp4QeFZJaha4ou7aYirfkKIOdj7UfUcLV49peCPedupWdFdu0RK/in1XKks3xr -----END CERTIFICATE-----Generated at Thu Jan 1 17:30:11 2026 by rpki-client