This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/0wOE1Lwn8HJDtEjPGELhar65MA8.roa File: 0wOE1Lwn8HJDtEjPGELhar65MA8.roa (raw, json) Hash identifier: dMU6yM3Dvl5oYB+HgLAnul1wrAFhsPZ1NCFECppPjhc= Subject key identifier: D3:03:84:D4:BC:27:F0:72:43:B4:48:CF:18:42:E1:6A:BE:B9:30:0F Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a Certificate serial: 019B7FF24C6F6DA6803DA4B083F7A7B13985 Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/0wOE1Lwn8HJDtEjPGELhar65MA8.roa Signing time: Fri 02 Jan 2026 18:22:24 +0000 ROA not before: Fri 02 Jan 2026 18:22:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40513 IP address blocks: 84.45.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:4c:6f:6d:a6:80:3d:a4:b0:83:f7:a7:b1:39:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a Validity Not Before: Jan 2 18:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d30384d4bc27f07243b448cf1842e16abeb9300f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:f4:0d:b2:0d:35:92:98:61:2a:59:41:5a: 36:2e:68:c6:8e:c4:33:ee:85:83:47:fd:40:f9:3e: 1f:f8:2b:9a:f1:91:37:31:5b:f2:24:a2:60:c2:4e: fe:d7:50:c6:95:4d:41:97:91:1e:14:62:ea:85:38: a3:9e:78:0b:0a:aa:ab:15:6f:26:14:c7:ba:20:7e: 35:7d:85:2b:4e:fd:2d:97:01:8b:83:75:b6:76:87: 49:98:6a:ed:ad:f5:3e:f1:38:59:7e:cc:9b:98:98: c3:9b:82:db:b1:97:43:45:f0:be:9b:2e:98:b7:74: 52:60:54:70:ac:48:7d:da:6f:43:ad:32:91:ad:55: 5b:58:e9:8f:a1:5c:be:cc:94:45:f8:98:01:cc:4b: f1:a9:41:8c:30:72:96:9f:04:1d:d8:8e:23:ce:65: c4:fc:63:5d:df:9c:aa:cc:ee:76:41:80:87:6c:1e: 57:c4:dd:ce:12:2d:14:cb:2b:94:ce:39:15:01:43: ef:c2:37:82:aa:9a:ae:96:8f:9b:19:2c:62:18:c8: f9:b9:5d:1a:97:79:8d:7f:da:92:9b:12:ca:4f:3b: 54:5c:a4:aa:75:c3:6f:ea:b1:70:f7:2f:8d:72:b7: 74:69:82:e0:0b:a1:73:c6:63:5a:d1:a7:65:a0:d6: 88:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:03:84:D4:BC:27:F0:72:43:B4:48:CF:18:42:E1:6A:BE:B9:30:0F X509v3 Authority Key Identifier: keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/0wOE1Lwn8HJDtEjPGELhar65MA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.45.50.0/24 Signature Algorithm: sha256WithRSAEncryption c1:32:32:d1:9a:03:40:26:75:50:88:bb:b9:f8:98:48:47:59: 75:20:65:09:10:a0:3f:f9:7e:ba:fa:06:ae:77:82:06:87:86: 92:dc:6b:46:9d:62:d4:76:db:29:c3:15:d1:6c:bf:e2:3e:29: cc:03:28:35:9e:21:f6:03:e5:8e:3f:ab:9d:f1:67:da:a8:8b: ef:bb:d7:3a:ee:3d:6c:ca:5b:90:b6:a5:49:e2:58:e0:a6:b8: d1:78:31:d4:71:ce:ee:07:84:17:8c:3e:84:73:5b:c3:dc:6f: fc:e3:61:32:50:dd:a4:ae:44:a8:33:40:54:63:e5:34:b5:45: 4e:0c:ad:40:9b:ec:ed:6f:44:c5:1d:14:a2:4d:02:a1:8f:36: 01:e4:53:a5:4e:86:a9:8e:ca:35:6e:6a:cc:ab:5a:a4:a1:3b: bd:68:6a:84:f5:22:be:e8:23:a8:ef:46:dd:78:cd:a2:ea:87: 76:b0:20:28:35:d7:bb:2b:b4:5b:15:6e:8d:9f:af:db:e0:1e: a4:75:d5:89:65:19:f7:1e:db:b3:70:32:18:18:e1:b5:5c:d9: f9:39:23:f5:81:48:04:63:b7:8a:4a:95:1e:3b:6d:ca:3e:8c: 44:bc:0a:3b:b5:00:14:d7:a9:82:51:de:07:bb:58:71:b9:f8: cc:a4:42:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8kxvbaaAPaSwg/ensTmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDE5MGIyMzhkOTdhZjc5MDBiZGNiZDAyMzA0Yjc4MmZm Y2FmMmEwHhcNMjYwMTAyMTgyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzAzODRkNGJjMjdmMDcyNDNiNDQ4Y2YxODQyZTE2YWJlYjkzMDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVr0DbINNZKYYSpZQVo2LmjGjsQz 7oWDR/1A+T4f+Cua8ZE3MVvyJKJgwk7+11DGlU1Bl5EeFGLqhTijnngLCqqrFW8m FMe6IH41fYUrTv0tlwGLg3W2dodJmGrtrfU+8ThZfsybmJjDm4LbsZdDRfC+my6Y t3RSYFRwrEh92m9DrTKRrVVbWOmPoVy+zJRF+JgBzEvxqUGMMHKWnwQd2I4jzmXE /GNd35yqzO52QYCHbB5XxN3OEi0UyyuUzjkVAUPvwjeCqpqulo+bGSxiGMj5uV0a l3mNf9qSmxLKTztUXKSqdcNv6rFw9y+Ncrd0aYLgC6FzxmNa0adloNaIgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNMDhNS8J/ByQ7RIzxhC4Wq+uTAPMB8GA1UdIwQY MBaAFGLRkLI42Xr3kAvcvQIwS3gv/K8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTkt MTYzZmI3MDAzZTVkLzEvMHdPRTFMd244SEpEdEVqUEdFTGhhcjY1TUE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTktMTYzZmI3MDAzZTVk LzEvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVC0yMA0G CSqGSIb3DQEBCwUAA4IBAQDBMjLRmgNAJnVQiLu5+JhIR1l1IGUJEKA/+X66+gau d4IGh4aS3GtGnWLUdtspwxXRbL/iPinMAyg1niH2A+WOP6ud8WfaqIvvu9c67j1s yluQtqVJ4ljgprjReDHUcc7uB4QXjD6Ec1vD3G/842EyUN2krkSoM0BUY+U0tUVO DK1Am+ztb0TFHRSiTQKhjzYB5FOlToapjso1bmrMq1qkoTu9aGqE9SK+6COo70bd eM2i6od2sCAoNde7K7RbFW6Nn6/b4B6kddWJZRn3HtuzcDIYGOG1XNn5OSP1gUgE Y7eKSpUeO23KPoxEvAo7tQAU16mCUd4Hu1hxufjMpELQ -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:33 2026 by rpki-client