This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa File: dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa (raw, json) Hash identifier: 2OEK8MCyAYfbPpIXmNvUjGE5NLgSoSESlZhOHxxGtOM= Subject key identifier: 75:CF:01:4B:90:91:BB:EC:F2:70:3F:B0:35:86:3C:60:A7:F0:E0:2C Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019B7CEE51A923E72E9CEE4971B43EF8D6D0 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa Signing time: Fri 02 Jan 2026 04:19:11 +0000 ROA not before: Fri 02 Jan 2026 04:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 45.158.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:51:a9:23:e7:2e:9c:ee:49:71:b4:3e:f8:d6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Jan 2 04:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75cf014b9091bbecf2703fb035863c60a7f0e02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:33:1c:15:a1:4e:97:c6:7d:b7:43:5e:02:e3: d2:8a:ef:f0:bc:c2:2c:e3:2f:ee:d6:ec:f9:e1:12: 6a:74:8a:a6:6e:45:68:ba:76:9c:fe:d7:f8:47:14: fb:c6:5d:2a:39:e2:fc:09:80:43:03:d5:3b:71:c1: a2:5c:fe:08:30:81:7f:45:9b:b2:47:29:79:c2:93: 6f:36:26:35:0d:9a:9f:50:c1:84:39:e6:ad:76:0c: aa:7f:71:7b:d7:27:b0:35:34:b3:29:7c:48:8a:a3: a2:e5:d7:ce:b3:8e:80:d7:4c:3b:01:69:ea:bd:f2: 97:9a:e6:2a:37:ce:fe:88:d9:41:5a:1e:e4:80:e0: 87:d5:ba:05:96:3c:54:e9:7a:a1:e4:41:9b:dc:72: c9:a3:ba:f1:0f:9f:2b:3f:83:09:e6:3e:bf:e8:35: 68:69:d5:05:14:ab:88:ab:af:c8:4b:b0:8d:d0:71: ec:6f:95:52:6b:6c:e8:0d:8a:3c:5c:fc:54:05:6a: 2a:43:da:44:76:e8:f2:55:70:60:a7:cb:64:ba:03: 78:29:6a:69:e1:33:ae:9e:b9:72:23:f5:06:4f:29: 28:42:b8:5f:ef:18:26:86:1e:dc:00:49:b3:68:2d: 89:c8:ad:f7:dd:d8:4d:7a:9f:9c:d9:39:1c:d9:63: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CF:01:4B:90:91:BB:EC:F2:70:3F:B0:35:86:3C:60:A7:F0:E0:2C X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.13.0/24 Signature Algorithm: sha256WithRSAEncryption 04:a7:44:d5:e3:67:31:8a:eb:17:f2:c4:06:4b:4a:1f:e5:6c: 67:70:57:c0:b2:b0:d5:b0:9f:58:51:da:a0:1c:85:01:1a:6b: 0c:7b:c4:5d:11:4d:89:30:fe:c3:ca:90:e2:73:99:42:a1:63: 67:de:fa:9c:c4:67:f4:cb:65:e8:9f:4c:36:9b:12:21:09:49: 3c:5e:90:c0:fa:b6:8f:47:dd:22:6b:61:6b:b4:ea:fe:f3:30: f2:f6:89:e6:65:eb:27:0c:3d:dc:69:91:b3:7c:8a:66:92:53: 54:44:65:e7:b0:67:49:53:31:77:aa:2f:e8:f9:64:fa:dd:5a: 43:c1:20:34:6f:d2:c1:99:0c:17:32:b9:f5:5f:ca:56:9b:63: a9:f5:3d:d9:9e:e7:c5:18:fc:14:f8:c2:18:ea:2c:82:2c:b4: 73:09:79:f2:a9:75:70:bc:a3:51:b2:81:0f:a0:42:cf:fd:94: ff:c9:ed:83:1d:0f:ce:b2:3a:f7:cb:ad:4d:90:5b:e1:2a:69: 5a:7d:05:a8:c5:c7:01:db:7a:9e:1b:1a:0d:93:74:f3:35:a0: f1:8f:b0:4d:fd:3f:31:64:2d:4b:5d:fa:ca:b0:fa:ca:bb:6a: 55:86:95:d2:47:88:c9:19:23:ee:99:56:05:56:03:70:84:57: 2d:3a:6b:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87lGpI+cunO5JcbQ++NbQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjYwMTAyMDQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWNmMDE0YjkwOTFiYmVjZjI3MDNmYjAzNTg2M2M2MGE3ZjBlMDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zMcFaFOl8Z9t0NeAuPSiu/wvMIs 4y/u1uz54RJqdIqmbkVounac/tf4RxT7xl0qOeL8CYBDA9U7ccGiXP4IMIF/RZuy Ryl5wpNvNiY1DZqfUMGEOeatdgyqf3F71yewNTSzKXxIiqOi5dfOs46A10w7AWnq vfKXmuYqN87+iNlBWh7kgOCH1boFljxU6Xqh5EGb3HLJo7rxD58rP4MJ5j6/6DVo adUFFKuIq6/IS7CN0HHsb5VSa2zoDYo8XPxUBWoqQ9pEdujyVXBgp8tkugN4KWpp 4TOunrlyI/UGTykoQrhf7xgmhh7cAEmzaC2JyK333dhNep+c2Tkc2WPLkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHXPAUuQkbvs8nA/sDWGPGCn8OAsMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvZGM4QlM1Q1J1LXp5Y0Qtd05ZWThZS2Z3NEN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ4NMA0G CSqGSIb3DQEBCwUAA4IBAQAEp0TV42cxiusX8sQGS0of5WxncFfAsrDVsJ9YUdqg HIUBGmsMe8RdEU2JMP7DypDic5lCoWNn3vqcxGf0y2Xon0w2mxIhCUk8XpDA+raP R90ia2FrtOr+8zDy9onmZesnDD3caZGzfIpmklNURGXnsGdJUzF3qi/o+WT63VpD wSA0b9LBmQwXMrn1X8pWm2Op9T3ZnufFGPwU+MIY6iyCLLRzCXnyqXVwvKNRsoEP oELP/ZT/ye2DHQ/Osjr3y61NkFvhKmlafQWoxccB23qeGxoNk3TzNaDxj7BN/T8x ZC1LXfrKsPrKu2pVhpXSR4jJGSPumVYFVgNwhFctOmuq -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:15 2026 by rpki-client