This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/POkwjuuBGCe0F21ORjR2-VQPpzM.roa File: POkwjuuBGCe0F21ORjR2-VQPpzM.roa (raw, json) Hash identifier: 2Yn0ZCvtpiHPj7sihF4ez4hggi+qgq8ycEgz8zN0BIM= Subject key identifier: 3C:E9:30:8E:EB:81:18:27:B4:17:6D:4E:46:34:76:F9:54:0F:A7:33 Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019B7759755DE63A96845808B2BF1BB5D833 Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/POkwjuuBGCe0F21ORjR2-VQPpzM.roa Signing time: Thu 01 Jan 2026 02:18:30 +0000 ROA not before: Thu 01 Jan 2026 02:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61367 IP address blocks: 45.132.160.0/23 maxlen: 23 45.132.162.0/23 maxlen: 23 45.141.248.0/23 maxlen: 23 45.141.250.0/23 maxlen: 23 45.143.240.0/23 maxlen: 23 45.143.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:75:5d:e6:3a:96:84:58:08:b2:bf:1b:b5:d8:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Jan 1 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ce9308eeb811827b4176d4e463476f9540fa733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:dc:ce:df:a7:99:a8:b4:4e:a9:d9:e7:e3:f0: 43:93:77:61:4b:38:48:f7:34:e7:a4:ba:7e:55:82: a5:1a:cf:56:30:66:17:47:da:3b:5c:72:d4:5e:64: 14:cd:2b:54:ec:67:5d:0e:7a:e3:c9:06:01:96:9b: dc:b6:71:f6:73:c2:59:a8:60:5e:2c:04:0c:88:c1: be:7d:7a:3c:d0:36:58:0e:25:c5:99:ba:a5:0b:ca: 6e:50:74:50:ca:be:76:7b:b3:c0:28:b9:f0:eb:43: 33:6b:e5:66:2c:33:dd:04:f4:64:84:90:b1:64:6b: d2:ce:ab:27:75:68:f4:49:b6:33:b3:a9:66:2f:4c: 37:c1:e1:2d:11:56:17:f7:57:9c:4c:10:7c:37:37: cf:ca:56:40:fd:4b:05:72:ee:be:65:c5:0e:f1:4c: 6d:23:97:4d:45:8f:0e:e9:6d:be:64:85:b8:58:69: 79:a7:fd:39:ea:d8:cd:a6:d0:9f:2c:d5:a9:79:b1: f8:b2:6c:a7:25:ae:7c:9e:5a:26:20:50:66:e9:f8: 94:5b:f7:bb:f2:bb:6d:e2:76:c1:87:1e:9d:6e:44: b7:42:d1:67:1e:e1:6f:6e:11:61:9d:4a:b1:5e:c1: 29:7c:2a:88:e0:b6:a8:86:bd:49:fe:ae:0c:94:8a: ed:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E9:30:8E:EB:81:18:27:B4:17:6D:4E:46:34:76:F9:54:0F:A7:33 X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/POkwjuuBGCe0F21ORjR2-VQPpzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.160.0/22 45.141.248.0/22 45.143.240.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:5e:44:ee:9a:2f:97:47:2e:86:24:1b:02:eb:d5:43:50:20: e0:21:60:65:23:2f:3a:00:5e:1f:8f:8e:e2:b4:05:eb:eb:b7: 0d:be:e5:fc:d1:80:b7:41:34:58:65:82:3e:07:66:d8:48:a5: e9:b1:8f:04:80:f5:a2:f0:77:8e:8a:ca:66:90:f8:f6:2b:82: 24:0c:4b:29:70:54:41:23:b4:78:96:75:77:ed:4f:c6:01:d5: 6c:b3:4c:12:93:77:eb:7d:8d:8c:03:d3:d2:a1:a6:28:d2:82: 38:84:db:a8:fb:07:f2:05:5d:12:2e:69:9c:6b:1f:62:6c:54: 5c:03:38:88:a8:2f:88:e1:57:1d:e7:a2:2a:80:4e:50:1d:b9: 0c:29:83:a8:3a:04:e4:ae:e3:41:94:b0:f0:01:93:a6:e7:0c: b1:a9:29:35:ae:34:0f:7b:a3:a6:a6:3a:bc:25:b8:6b:a5:d4: e7:a7:ba:89:d6:6c:37:37:1a:66:3f:4d:75:f4:30:8d:33:f9: 0f:df:93:63:b3:bc:1c:3a:60:d4:fe:86:b3:44:8b:cd:35:aa: c4:c2:f3:75:8d:54:57:52:4d:88:05:a3:6d:dc:e4:68:ca:13: ee:f7:60:ce:22:16:e3:24:db:93:09:a6:0f:75:27:6f:ef:2d: 0b:d1:e9:99 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WXVd5jqWhFgIsr8btdgzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjYwMTAxMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2U5MzA4ZWViODExODI3YjQxNzZkNGU0NjM0NzZmOTU0MGZhNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdzO36eZqLROqdnn4/BDk3dhSzhI 9zTnpLp+VYKlGs9WMGYXR9o7XHLUXmQUzStU7GddDnrjyQYBlpvctnH2c8JZqGBe LAQMiMG+fXo80DZYDiXFmbqlC8puUHRQyr52e7PAKLnw60Mza+VmLDPdBPRkhJCx ZGvSzqsndWj0SbYzs6lmL0w3weEtEVYX91ecTBB8NzfPylZA/UsFcu6+ZcUO8Uxt I5dNRY8O6W2+ZIW4WGl5p/056tjNptCfLNWpebH4smynJa58nlomIFBm6fiUW/e7 8rtt4nbBhx6dbkS3QtFnHuFvbhFhnUqxXsEpfCqI4Laohr1J/q4MlIrtIQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDzpMI7rgRgntBdtTkY0dvlUD6czMB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvUE9rd2p1dUJHQ2UwRjIxT1JqUjItVlFQcHpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLYSgAwQC LY34AwQCLY/wMA0GCSqGSIb3DQEBCwUAA4IBAQB9XkTumi+XRy6GJBsC69VDUCDg IWBlIy86AF4fj47itAXr67cNvuX80YC3QTRYZYI+B2bYSKXpsY8EgPWi8HeOispm kPj2K4IkDEspcFRBI7R4lnV37U/GAdVss0wSk3frfY2MA9PSoaYo0oI4hNuo+wfy BV0SLmmcax9ibFRcAziIqC+I4Vcd56IqgE5QHbkMKYOoOgTkruNBlLDwAZOm5wyx qSk1rjQPe6Ompjq8JbhrpdTnp7qJ1mw3NxpmP0119DCNM/kP35Njs7wcOmDU/oaz RIvNNarEwvN1jVRXUk2IBaNt3ORoyhPu92DOIhbjJNuTCaYPdSdv7y0L0emZ -----END CERTIFICATE-----Generated at Mon Jan 26 05:06:11 2026 by rpki-client