This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/o0nlrJylYIGYsWBjRFGVnG7mqFk.roa File: o0nlrJylYIGYsWBjRFGVnG7mqFk.roa (raw, json) Hash identifier: ytLMden+iVQSZ4MVhXxgpNGbvtp5EMg2V51G3jlU0Tc= Subject key identifier: A3:49:E5:AC:9C:A5:60:81:98:B1:60:63:44:51:95:9C:6E:E6:A8:59 Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53 Certificate serial: 019B7B369A9D552CEB084CC6B4092E336D9A Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/o0nlrJylYIGYsWBjRFGVnG7mqFk.roa Signing time: Thu 01 Jan 2026 20:18:54 +0000 ROA not before: Thu 01 Jan 2026 20:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208974 IP address blocks: 45.12.168.0/23 maxlen: 23 45.12.170.0/24 maxlen: 24 2a0e:b500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9a:9d:55:2c:eb:08:4c:c6:b4:09:2e:33:6d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53 Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a349e5ac9ca5608198b160634451959c6ee6a859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3e:c9:09:f5:39:89:46:9e:db:27:e7:3c:44: aa:8a:15:c1:33:c3:ce:85:36:a9:d1:0d:26:12:84: e8:6a:89:91:d2:32:9d:3c:04:fc:cf:a0:89:98:19: 7f:43:6d:e1:09:30:a7:d5:3b:f4:89:4a:cb:f5:36: 76:00:12:ec:e6:3a:01:4d:13:78:0f:9a:20:bd:cd: 1c:a7:fb:18:bd:4f:53:9d:72:31:76:0d:d3:5b:3f: 7a:7e:dd:47:d6:71:a9:d0:95:de:f7:cf:dd:61:1f: e2:ee:93:e0:19:1d:ef:df:7f:d5:7e:99:76:fb:d2: 13:6a:09:41:f7:e8:58:83:01:0f:01:87:72:76:87: fa:9f:d8:f9:55:49:f1:19:5d:c2:20:92:4f:b5:1a: 9b:99:50:cd:e4:69:0b:08:28:45:4e:cf:45:da:f7: 65:01:51:2b:b1:35:b9:3d:25:5a:af:30:00:d1:7c: 06:d4:5a:cf:55:bd:32:41:78:95:66:f0:59:8f:52: ee:d8:85:05:13:43:ab:68:07:dd:53:96:fb:7f:ac: 94:49:52:36:d5:72:42:f4:20:37:15:39:0b:7f:4a: c4:42:7e:d8:2b:12:c1:62:97:27:71:80:27:61:3e: 94:08:01:1d:e6:4f:75:a1:00:8b:ab:ab:3f:c0:bd: ba:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:49:E5:AC:9C:A5:60:81:98:B1:60:63:44:51:95:9C:6E:E6:A8:59 X509v3 Authority Key Identifier: keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/o0nlrJylYIGYsWBjRFGVnG7mqFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.168.0-45.12.170.255 IPv6: 2a0e:b500::/29 Signature Algorithm: sha256WithRSAEncryption 58:6e:40:77:43:64:99:91:b3:3b:0d:73:55:cd:32:c3:b2:de: 41:65:93:fa:6c:db:f6:50:9d:95:6b:b0:b9:e1:3f:1d:c2:34: 29:bf:e2:b3:74:1f:24:86:1f:eb:2e:92:db:e9:e6:10:e1:e3: d5:5c:65:0e:cc:62:2f:c8:00:39:30:ef:75:e5:45:82:38:ef: b9:82:5d:5a:58:e2:7c:83:d3:c8:b4:b0:f8:4c:0d:d9:ab:57: 6a:a2:e8:23:55:3d:f3:6f:31:98:ba:00:30:9f:76:cd:c9:82: 5f:10:7c:55:7d:36:f4:6e:84:ce:3a:0b:0f:35:4a:1c:ad:88: eb:3c:c2:4b:1c:95:e1:e0:03:40:a3:b6:a4:b8:e0:f3:86:b3: 33:e2:3c:f0:d8:c4:0d:8a:39:3d:cf:39:04:3b:4d:cf:d7:3e: c5:50:aa:4b:df:dc:6c:56:4f:ff:86:e3:06:bc:c6:89:ab:6c: a9:0e:7f:a0:25:0c:ab:4a:1e:63:15:55:67:2f:47:0d:18:5e: 1c:c3:5a:83:8a:26:af:ce:9d:cf:85:20:59:47:92:35:0f:9e: 26:34:62:0a:29:2b:df:19:a6:b4:c6:9c:a7:03:0a:b0:41:4d: ca:92:c4:12:0c:b9:07:dc:40:f3:1d:fd:4d:82:0f:14:3f:f9: 66:e9:67:19 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7NpqdVSzrCEzGtAkuM22aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk MTRjNTMwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzQ5ZTVhYzljYTU2MDgxOThiMTYwNjM0NDUxOTU5YzZlZTZhODU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5z7JCfU5iUae2yfnPESqihXBM8PO hTap0Q0mEoToaomR0jKdPAT8z6CJmBl/Q23hCTCn1Tv0iUrL9TZ2ABLs5joBTRN4 D5ogvc0cp/sYvU9TnXIxdg3TWz96ft1H1nGp0JXe98/dYR/i7pPgGR3v33/Vfpl2 +9ITaglB9+hYgwEPAYdydof6n9j5VUnxGV3CIJJPtRqbmVDN5GkLCChFTs9F2vdl AVErsTW5PSVarzAA0XwG1FrPVb0yQXiVZvBZj1Lu2IUFE0OraAfdU5b7f6yUSVI2 1XJC9CA3FTkLf0rEQn7YKxLBYpcncYAnYT6UCAEd5k91oQCLq6s/wL26pQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFKNJ5aycpWCBmLFgY0RRlZxu5qhZMB8GA1UdIwQY MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt MGFhNDYzY2RmY2EwLzEvbzBubHJKeWxZSUdZc1dCalJGR1ZuRzdtcUZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAMtDKgD BAAtDKowDQQCAAIwBwMFAyoOtQAwDQYJKoZIhvcNAQELBQADggEBAFhuQHdDZJmR szsNc1XNMsOy3kFlk/ps2/ZQnZVrsLnhPx3CNCm/4rN0HySGH+suktvp5hDh49Vc ZQ7MYi/IADkw73XlRYI477mCXVpY4nyD08i0sPhMDdmrV2qi6CNVPfNvMZi6ADCf ds3Jgl8QfFV9NvRuhM46Cw81ShytiOs8wkscleHgA0CjtqS44POGszPiPPDYxA2K OT3POQQ7Tc/XPsVQqkvf3GxWT/+G4wa8xomrbKkOf6AlDKtKHmMVVWcvRw0YXhzD WoOKJq/Onc+FIFlHkjUPniY0YgopK98ZprTGnKcDCrBBTcqSxBIMuQfcQPMd/U2C DxQ/+WbpZxk= -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:36 2026 by rpki-client