This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/O03DBjC5wyd8RW2MFdl-M0ECh2U.roa File: O03DBjC5wyd8RW2MFdl-M0ECh2U.roa (raw, json) Hash identifier: z1zQB46jLwAcWj6J/SW9r+uHJvrboe3UGVf7KkVqTME= Subject key identifier: 3B:4D:C3:06:30:B9:C3:27:7C:45:6D:8C:15:D9:7E:33:41:02:87:65 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C6886B1E3416FD34A39B8E9E906569 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/O03DBjC5wyd8RW2MFdl-M0ECh2U.roa Signing time: Thu 01 Jan 2026 04:17:38 +0000 ROA not before: Thu 01 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48427 IP address blocks: 5.154.56.0/22 maxlen: 22 5.154.56.0/24 maxlen: 24 5.154.57.0/24 maxlen: 24 84.232.55.0/24 maxlen: 24 93.114.252.0/23 maxlen: 23 93.114.252.0/24 maxlen: 24 93.114.253.0/24 maxlen: 24 109.167.58.0/23 maxlen: 23 109.167.58.0/24 maxlen: 24 109.167.59.0/24 maxlen: 24 109.167.64.0/23 maxlen: 23 109.167.64.0/24 maxlen: 24 109.167.65.0/24 maxlen: 24 109.167.92.0/23 maxlen: 23 109.167.92.0/24 maxlen: 24 109.167.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:88:6b:1e:34:16:fd:34:a3:9b:8e:9e:90:65:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b4dc30630b9c3277c456d8c15d97e3341028765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:87:f6:e3:56:24:49:e5:b2:f9:1d:0a:15:db: cf:95:92:61:b2:1d:b4:77:97:90:9f:51:43:3d:6f: c4:e6:de:d8:24:e6:f5:08:47:1d:a9:2a:d0:de:09: f0:60:6f:e8:7c:f9:50:f6:76:17:5c:ae:e1:92:5f: 72:c8:e3:f5:ca:3c:2d:77:f6:2c:90:3b:e5:97:b0: d1:b5:49:2b:ba:33:28:7a:80:e9:37:9a:4f:2e:c7: 00:41:4c:69:65:37:f5:a3:37:b6:c8:5c:42:d1:19: cb:87:d9:62:99:67:6c:04:72:72:46:d1:ee:cb:e9: f0:8a:48:cf:e5:3e:b0:6b:04:ef:74:27:c0:4f:38: e1:2b:7b:a7:7d:f3:14:55:df:a5:8e:6a:f9:7f:fd: 8d:ba:ce:cc:98:25:20:b2:de:22:8a:09:a8:17:84: da:47:7a:8b:b8:d4:40:51:05:8d:27:25:8c:65:36: e3:fb:fb:d8:a9:13:16:a9:e4:04:1f:7c:06:06:18: 9a:68:27:db:bf:3d:d0:5a:d3:e8:38:00:3b:b0:a9: df:41:21:00:1c:0c:bd:61:a2:40:d2:83:8b:0b:e8: 14:5e:89:ba:87:a3:4f:f9:07:4a:f5:01:63:b0:25: ad:9b:8d:a6:8e:57:69:ed:73:75:54:67:31:4a:56: 4c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4D:C3:06:30:B9:C3:27:7C:45:6D:8C:15:D9:7E:33:41:02:87:65 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/O03DBjC5wyd8RW2MFdl-M0ECh2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.56.0/22 84.232.55.0/24 93.114.252.0/23 109.167.58.0/23 109.167.64.0/23 109.167.92.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:7b:11:dd:4a:00:0a:a6:2c:a6:ea:5e:48:1e:64:f6:61:80: 5a:bc:e3:85:21:72:3e:4a:fd:fd:37:f5:29:74:12:81:72:e0: 15:d9:a6:bf:ac:ab:2b:c5:3c:4b:51:37:cc:41:ff:79:b8:8b: 8c:a6:7b:3d:8d:2a:be:79:a4:e9:d1:cf:b0:75:21:59:d5:5f: c6:d0:40:19:a5:33:a4:49:af:f4:bf:b2:c6:99:c6:ae:20:56: f8:59:4e:af:b1:cb:3e:26:14:d0:34:c4:f8:a1:de:95:38:fd: 7b:92:19:2d:3c:51:30:52:77:a6:b2:6b:3f:e7:66:a7:d2:88: 70:4c:81:cf:e4:7e:5b:d5:41:50:fb:b0:89:86:8e:82:4b:2d: 13:53:b9:99:b0:34:ee:78:05:cf:0b:dc:2c:ca:5c:da:59:ce: 0a:ae:2c:d3:72:63:11:dc:58:41:7f:e4:8a:ea:06:44:7b:8f: d4:cc:59:b1:51:28:d8:83:06:fc:f5:ca:04:e9:15:82:56:cd: ad:65:8b:0a:17:dc:0a:b8:fe:58:e4:2a:4e:2f:17:4c:19:eb: be:95:c9:4e:55:d6:fb:b9:c7:5b:15:ca:e4:30:c0:d3:f0:ca: 70:c8:3f:b7:eb:fd:61:71:3b:ff:82:3a:97:e4:37:10:a4:c2: dc:09:ec:7b -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt3xohrHjQW/TSjm46ekGVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjRkYzMwNjMwYjljMzI3N2M0NTZkOGMxNWQ5N2UzMzQxMDI4NzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxof241YkSeWy+R0KFdvPlZJhsh20 d5eQn1FDPW/E5t7YJOb1CEcdqSrQ3gnwYG/ofPlQ9nYXXK7hkl9yyOP1yjwtd/Ys kDvll7DRtUkrujMoeoDpN5pPLscAQUxpZTf1oze2yFxC0RnLh9limWdsBHJyRtHu y+nwikjP5T6wawTvdCfATzjhK3unffMUVd+ljmr5f/2Nus7MmCUgst4iigmoF4Ta R3qLuNRAUQWNJyWMZTbj+/vYqRMWqeQEH3wGBhiaaCfbvz3QWtPoOAA7sKnfQSEA HAy9YaJA0oOLC+gUXom6h6NP+QdK9QFjsCWtm42mjldp7XN1VGcxSlZMwQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFDtNwwYwucMnfEVtjBXZfjNBAodlMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvTzAzREJqQzV3eWQ4UlcyTUZkbC1NMEVDaDJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCBZo4AwQA VOg3AwQBXXL8AwQBbac6AwQBbadAAwQBbadcMA0GCSqGSIb3DQEBCwUAA4IBAQCM exHdSgAKpiym6l5IHmT2YYBavOOFIXI+Sv39N/UpdBKBcuAV2aa/rKsrxTxLUTfM Qf95uIuMpns9jSq+eaTp0c+wdSFZ1V/G0EAZpTOkSa/0v7LGmcauIFb4WU6vscs+ JhTQNMT4od6VOP17khktPFEwUnemsms/52an0ohwTIHP5H5b1UFQ+7CJho6CSy0T U7mZsDTueAXPC9wsylzaWc4KrizTcmMR3FhBf+SK6gZEe4/UzFmxUSjYgwb89coE 6RWCVs2tZYsKF9wKuP5Y5CpOLxdMGeu+lclOVdb7ucdbFcrkMMDT8MpwyD+36/1h cTv/gjqX5DcQpMLcCex7 -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:14 2026 by rpki-client