This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/x_ow3qxhfOMLBRjgBidD1PQTkzs.roa File: x_ow3qxhfOMLBRjgBidD1PQTkzs.roa (raw, json) Hash identifier: tTO9VSPgrTRCs8qsXCJT8F1FGJbKaVUFEepw4YEza7k= Subject key identifier: C7:FA:30:DE:AC:61:7C:E3:0B:05:18:E0:06:27:43:D4:F4:13:93:3B Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb Certificate serial: 019B7D5CA36CD4A5623A802A86180965B228 Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/x_ow3qxhfOMLBRjgBidD1PQTkzs.roa Signing time: Fri 02 Jan 2026 06:19:41 +0000 ROA not before: Fri 02 Jan 2026 06:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60475 IP address blocks: 45.90.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a3:6c:d4:a5:62:3a:80:2a:86:18:09:65:b2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb Validity Not Before: Jan 2 06:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7fa30deac617ce30b0518e0062743d4f413933b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2f:05:5e:9b:53:7d:4e:13:70:4a:5b:40:21: 06:fb:5c:98:23:83:44:f9:09:87:cd:41:99:27:8e: 60:a0:ff:ca:f5:57:16:38:aa:52:9b:c9:1c:70:92: 07:ac:86:b2:76:a5:12:3c:17:b8:fe:76:fe:e4:44: 9a:fa:51:72:c6:d8:a0:16:6f:67:fa:e5:b6:25:c2: 67:c0:8c:c5:87:0f:4c:e0:55:af:74:ec:77:9c:f4: 21:f9:f2:16:82:19:c2:83:ad:54:34:23:18:02:19: 61:88:15:c2:ac:e9:20:ec:47:4e:6f:6b:cb:91:79: 63:1c:24:0d:b5:2e:53:1b:ad:69:9e:d7:e8:bd:f9: 50:9b:da:a6:c9:98:55:dc:5a:c2:b2:fe:a0:61:ab: 39:27:80:88:e8:51:ff:1d:67:79:f8:d7:e6:92:cc: d5:4e:38:80:65:7e:e3:c1:82:29:fb:61:67:f7:05: 31:4f:d9:c1:74:72:c8:52:a8:c7:00:39:69:5e:a3: 9d:f0:a2:79:d1:5c:b7:f7:0d:7e:8f:7a:ad:55:45: 21:8f:0e:89:ac:5d:45:c6:d2:fc:03:3c:8a:25:3d: d8:77:08:65:4b:33:b8:aa:ff:6a:29:9e:2f:50:f3: ca:67:b8:92:73:e6:b8:bb:20:ce:30:02:47:45:62: b8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FA:30:DE:AC:61:7C:E3:0B:05:18:E0:06:27:43:D4:F4:13:93:3B X509v3 Authority Key Identifier: keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/x_ow3qxhfOMLBRjgBidD1PQTkzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.240.0/22 Signature Algorithm: sha256WithRSAEncryption 85:e0:1a:ee:fd:31:f1:44:64:fe:9d:d2:a6:60:05:10:f8:b2: 61:e8:3b:fe:c4:11:e0:a2:1c:03:a1:27:cc:c9:a0:a6:58:99: 9c:77:47:af:99:cd:7b:fe:6a:99:3e:53:59:60:97:d5:e3:c7: 68:27:a6:2e:06:13:db:9c:8e:98:c6:72:b8:2b:a9:da:69:42: 5d:41:38:e2:cf:7f:b7:44:20:95:05:f3:6c:15:96:f6:c7:8c: 59:78:4a:7c:c8:5f:28:6f:11:bf:e2:04:97:ae:9a:4a:60:ac: f1:b4:ce:04:38:53:dd:c1:4f:99:56:10:04:25:45:cd:da:df: a3:ad:8f:52:3f:41:72:02:4e:95:f1:1f:31:8f:3a:0f:3a:f6: 1c:84:4c:2b:15:e7:94:f7:c8:c7:50:e6:fe:b3:7d:59:16:e0: be:31:96:52:ab:09:67:7d:bf:5b:f4:30:42:0b:79:d4:a4:5d: 88:ec:72:41:23:3b:79:24:d6:c4:eb:94:c3:a4:9b:a2:94:4e: c4:df:3f:d2:82:49:40:8d:0f:b6:d7:b4:73:72:41:9b:08:a5: 2f:4f:8d:ba:1c:28:7c:7a:0f:b8:4f:80:df:95:1e:63:55:0d: 0e:3f:85:cf:25:51:da:36:d8:7f:de:b7:66:0e:d9:f9:30:11: ea:94:22:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKNs1KViOoAqhhgJZbIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYTVhYmU5ZjczMDQzODMxOThiYTFmZmE1OTI3OTBlY2Yy YzNjZWIwHhcNMjYwMTAyMDYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2ZhMzBkZWFjNjE3Y2UzMGIwNTE4ZTAwNjI3NDNkNGY0MTM5MzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6i8FXptTfU4TcEpbQCEG+1yYI4NE +QmHzUGZJ45goP/K9VcWOKpSm8kccJIHrIaydqUSPBe4/nb+5ESa+lFyxtigFm9n +uW2JcJnwIzFhw9M4FWvdOx3nPQh+fIWghnCg61UNCMYAhlhiBXCrOkg7EdOb2vL kXljHCQNtS5TG61pntfovflQm9qmyZhV3FrCsv6gYas5J4CI6FH/HWd5+NfmkszV TjiAZX7jwYIp+2Fn9wUxT9nBdHLIUqjHADlpXqOd8KJ50Vy39w1+j3qtVUUhjw6J rF1FxtL8AzyKJT3YdwhlSzO4qv9qKZ4vUPPKZ7iSc+a4uyDOMAJHRWK4kwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMf6MN6sYXzjCwUY4AYnQ9T0E5M7MB8GA1UdIwQY MBaAFOqlq+n3MEODGYuh/6WSeQ7PLDzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEt YzlkZTIyYjkxNmNhLzEveF9vdzNxeGhmT01MQlJqZ0JpZEQxUFFUa3pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEtYzlkZTIyYjkxNmNh LzEvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVrwMA0G CSqGSIb3DQEBCwUAA4IBAQCF4Bru/THxRGT+ndKmYAUQ+LJh6Dv+xBHgohwDoSfM yaCmWJmcd0evmc17/mqZPlNZYJfV48doJ6YuBhPbnI6YxnK4K6naaUJdQTjiz3+3 RCCVBfNsFZb2x4xZeEp8yF8obxG/4gSXrppKYKzxtM4EOFPdwU+ZVhAEJUXN2t+j rY9SP0FyAk6V8R8xjzoPOvYchEwrFeeU98jHUOb+s31ZFuC+MZZSqwlnfb9b9DBC C3nUpF2I7HJBIzt5JNbE65TDpJuilE7E3z/SgklAjQ+217RzckGbCKUvT426HCh8 eg+4T4DflR5jVQ0OP4XPJVHaNth/3rdmDtn5MBHqlCI2 -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:42 2026 by rpki-client