This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/O-Lc9p7lKgu4RG8qbZStlySnjJw.roa File: O-Lc9p7lKgu4RG8qbZStlySnjJw.roa (raw, json) Hash identifier: VJbi6pgA5J9qOWeC5+ilPMjxUhX49jVlWxhniX3lMX8= Subject key identifier: 3B:E2:DC:F6:9E:E5:2A:0B:B8:44:6F:2A:6D:94:AD:97:24:A7:8C:9C Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019B7BA3AE3522E41C8A4C6AD92CE570C810 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/O-Lc9p7lKgu4RG8qbZStlySnjJw.roa Signing time: Thu 01 Jan 2026 22:18:02 +0000 ROA not before: Thu 01 Jan 2026 22:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35478 IP address blocks: 45.142.153.0/24 maxlen: 24 194.126.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ae:35:22:e4:1c:8a:4c:6a:d9:2c:e5:70:c8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Jan 1 22:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3be2dcf69ee52a0bb8446f2a6d94ad9724a78c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:85:cb:e9:80:76:69:d4:47:2f:5a:e5:19: 2f:f6:0c:61:09:d4:ef:3d:c1:d7:96:f5:7d:a1:12: b2:2c:c2:df:52:de:a3:b1:9e:d1:a9:72:31:de:01: c7:a6:3c:28:38:33:d3:99:94:dc:04:e3:1e:d6:a7: 7b:ca:36:a8:2a:05:cb:0a:00:ae:a6:bc:1b:96:b5: c7:9c:36:cc:fa:9c:0e:10:8d:93:ad:91:c4:d3:e9: 1b:06:95:a2:59:bf:30:5c:26:a0:33:ce:87:16:8b: ef:35:de:07:18:84:2c:9e:ec:c2:5a:1f:41:79:36: 7f:a3:a3:4c:f8:d7:22:84:88:dd:95:b5:c0:74:b2: ee:53:bf:9c:cc:39:7c:a5:50:e0:72:9a:35:b9:57: 8a:6f:81:64:46:d0:7e:4e:fa:b2:f7:a0:f7:f2:27: 1e:bd:e0:13:25:ac:b8:d3:bd:f7:5b:24:6e:40:6d: 33:fc:88:dd:c5:e7:b8:95:77:f8:0f:44:4a:8a:bd: f5:13:50:61:43:2f:3a:2f:9f:e2:d1:5b:73:97:14: 05:7e:57:02:bf:94:fe:a3:14:aa:7b:4e:4e:aa:f3: f7:4f:31:d8:73:a7:1f:c6:9c:17:e4:a0:d8:23:59: 7a:74:10:84:88:21:bc:b3:fc:88:90:15:b0:09:dc: 96:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E2:DC:F6:9E:E5:2A:0B:B8:44:6F:2A:6D:94:AD:97:24:A7:8C:9C X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/O-Lc9p7lKgu4RG8qbZStlySnjJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.153.0/24 194.126.219.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:36:18:b6:b8:3b:ef:ea:81:a8:a6:c0:49:eb:7f:04:de:a6: 5f:c3:9b:d7:d7:27:b9:fd:90:99:3c:b4:8f:6e:f1:c7:8c:64: bc:8b:33:a4:a2:28:25:c9:a6:c9:05:76:6f:c9:ae:f0:dc:6c: 68:b8:ab:10:bf:e1:d5:f6:e4:4b:6d:ed:73:d4:85:ba:1b:b4: 6e:11:ee:31:f6:3b:59:98:41:1f:ef:2d:d1:50:c8:48:d4:12: 0b:ed:0b:4f:f5:5c:a1:bb:a2:bd:1b:31:66:66:4f:21:9f:6b: 03:74:0f:00:cd:63:01:c7:da:ce:5c:c9:6d:3d:e9:e9:5c:18: 20:41:8b:c8:05:d3:08:a7:bc:07:9a:eb:e2:25:80:e5:43:7d: 9c:cd:cf:b7:78:9a:eb:50:0a:19:66:f1:8a:dd:95:6b:69:e4: 4b:e1:3b:f0:c1:2d:f1:a1:b1:3f:ee:a4:c8:e4:0c:14:72:7f: bf:c6:2c:5e:8a:e4:97:5d:74:34:7c:3e:69:45:f1:68:84:d1: c2:9c:f9:84:b4:03:16:6e:e2:1c:c7:50:12:ed:0c:38:73:26: 9d:e7:be:bf:45:1a:4b:92:7f:9d:b9:41:6d:23:68:07:37:34: 1e:f5:23:7b:5e:b1:c7:fd:ac:d6:d3:cc:20:df:cb:2c:01:a3: f3:ee:72:1c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o641IuQcikxq2SzlcMgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjYwMTAxMjIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmUyZGNmNjllZTUyYTBiYjg0NDZmMmE2ZDk0YWQ5NzI0YTc4YzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX2Fy+mAdmnURy9a5Rkv9gxhCdTv PcHXlvV9oRKyLMLfUt6jsZ7RqXIx3gHHpjwoODPTmZTcBOMe1qd7yjaoKgXLCgCu prwblrXHnDbM+pwOEI2TrZHE0+kbBpWiWb8wXCagM86HFovvNd4HGIQsnuzCWh9B eTZ/o6NM+NcihIjdlbXAdLLuU7+czDl8pVDgcpo1uVeKb4FkRtB+Tvqy96D38ice veATJay40733WyRuQG0z/Ijdxee4lXf4D0RKir31E1BhQy86L5/i0VtzlxQFflcC v5T+oxSqe05OqvP3TzHYc6cfxpwX5KDYI1l6dBCEiCG8s/yIkBWwCdyWewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDvi3Pae5SoLuERvKm2UrZckp4ycMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvTy1MYzlwN2xLZ3U0Ukc4cWJaU3RseVNuakp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY6ZAwQA wn7bMA0GCSqGSIb3DQEBCwUAA4IBAQBLNhi2uDvv6oGopsBJ638E3qZfw5vX1ye5 /ZCZPLSPbvHHjGS8izOkoiglyabJBXZvya7w3GxouKsQv+HV9uRLbe1z1IW6G7Ru Ee4x9jtZmEEf7y3RUMhI1BIL7QtP9Vyhu6K9GzFmZk8hn2sDdA8AzWMBx9rOXMlt PenpXBggQYvIBdMIp7wHmuviJYDlQ32czc+3eJrrUAoZZvGK3ZVraeRL4TvwwS3x obE/7qTI5AwUcn+/xixeiuSXXXQ0fD5pRfFohNHCnPmEtAMWbuIcx1AS7Qw4cyad 576/RRpLkn+duUFtI2gHNzQe9SN7XrHH/azW08wg38ssAaPz7nIc -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:16 2026 by rpki-client