This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/OAoExsFYfSWDTNmJAFFZ07C36Io.roa File: OAoExsFYfSWDTNmJAFFZ07C36Io.roa (raw, json) Hash identifier: HYGNa7m4RCn44jMwYDLidhIrJWjwBmVIHxm95GA/v64= Subject key identifier: 38:0A:04:C6:C1:58:7D:25:83:4C:D9:89:00:51:59:D3:B0:B7:E8:8A Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C690EE1EC700D17C586907F057888A Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/OAoExsFYfSWDTNmJAFFZ07C36Io.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200845 IP address blocks: 5.154.42.0/24 maxlen: 24 31.14.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:90:ee:1e:c7:00:d1:7c:58:69:07:f0:57:88:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=380a04c6c1587d25834cd989005159d3b0b7e88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3d:88:3f:5a:33:89:2b:92:74:d5:e1:9e:c7: d6:41:41:f2:47:6b:f6:be:64:de:5f:3d:d5:4f:7d: 3e:95:2f:05:b5:b6:be:d2:cb:1a:4f:50:28:1d:ea: 5e:0a:8d:ee:ae:28:f0:05:aa:a7:b1:68:1e:78:71: e5:bb:e3:79:e5:57:8e:94:52:f8:c1:09:13:d6:d3: 6d:2b:fd:a3:ee:67:6e:dd:51:05:d5:fd:b8:96:52: 91:6f:ca:a6:1c:5a:cf:b7:0b:bf:7e:d4:85:e5:0a: 2d:73:97:5e:8b:ad:a8:cf:2a:e5:49:87:d6:eb:5d: 24:b5:da:92:90:cc:4e:a3:81:df:9e:cd:88:02:91: 57:0f:88:e5:51:66:1d:62:de:42:17:5d:4c:7f:34: 33:f7:69:d4:57:df:12:ca:8a:b8:d6:a3:dc:e0:66: 44:cd:b8:68:bc:9a:82:cd:0b:89:0f:9f:39:46:5b: 9d:1b:11:65:11:dd:9c:a2:4a:e9:1a:b7:7a:82:f1: 2c:4e:02:38:af:87:82:09:3a:48:2b:38:5d:ce:0a: 21:3a:9b:f2:4d:d7:49:96:f4:33:3a:42:60:09:b5: dd:c4:b6:08:a9:99:e9:28:14:08:2a:a4:3e:e5:de: 94:3c:dc:bd:d6:9a:18:90:cb:8b:ee:ec:7b:be:b2: f0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0A:04:C6:C1:58:7D:25:83:4C:D9:89:00:51:59:D3:B0:B7:E8:8A X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/OAoExsFYfSWDTNmJAFFZ07C36Io.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.42.0/24 31.14.207.0/24 Signature Algorithm: sha256WithRSAEncryption ca:4f:18:c4:aa:d0:45:9e:8b:77:81:41:b9:14:33:5b:6f:2f: 08:d1:ac:b3:57:a1:c3:7d:df:f9:d0:70:9a:99:dc:2d:a8:fa: 52:46:4a:00:d9:ae:6d:7f:a1:d2:c6:a9:93:5f:db:3f:89:7a: 59:b4:72:e0:7e:6a:1a:ad:c5:24:ea:3d:9c:a3:fd:20:29:45: 5f:18:f7:3d:26:44:0a:62:3a:7b:f7:0d:a7:a2:54:f6:5b:b2: 6d:55:fb:51:1b:71:7a:c2:09:e2:32:96:6f:34:19:40:1a:da: 36:82:dc:f4:bc:0a:bd:9a:82:6f:6f:97:73:5c:b9:1a:14:64: 4e:ba:91:c1:57:96:7e:c4:7a:e4:28:9a:32:df:3a:55:a0:07: 5c:c7:9c:75:7c:a0:aa:d1:fe:e9:20:24:07:71:d6:84:69:44: 41:2d:07:7e:26:32:30:4d:28:17:fb:1a:7a:c6:c4:99:f6:18: d5:2f:24:2b:92:b6:a5:50:8b:d6:d5:80:d1:05:3b:7e:72:f5: 4a:d0:6f:a0:25:86:f0:35:86:e1:7b:14:92:05:dd:bf:28:74: 89:5c:93:31:69:a0:a1:12:ba:52:91:30:37:48:0c:82:f9:58: e4:ad:f8:be:9f:03:36:25:13:64:54:05:de:31:ae:fc:08:95: 7f:67:85:98 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xpDuHscA0XxYaQfwV4iKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODBhMDRjNmMxNTg3ZDI1ODM0Y2Q5ODkwMDUxNTlkM2IwYjdlODhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT2IP1oziSuSdNXhnsfWQUHyR2v2 vmTeXz3VT30+lS8Ftba+0ssaT1AoHepeCo3urijwBaqnsWgeeHHlu+N55VeOlFL4 wQkT1tNtK/2j7mdu3VEF1f24llKRb8qmHFrPtwu/ftSF5Qotc5dei62ozyrlSYfW 610ktdqSkMxOo4Hfns2IApFXD4jlUWYdYt5CF11MfzQz92nUV98Syoq41qPc4GZE zbhovJqCzQuJD585RludGxFlEd2cokrpGrd6gvEsTgI4r4eCCTpIKzhdzgohOpvy TddJlvQzOkJgCbXdxLYIqZnpKBQIKqQ+5d6UPNy91poYkMuL7ux7vrLwyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDgKBMbBWH0lg0zZiQBRWdOwt+iKMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvT0FvRXhzRllmU1dEVE5tSkFGRlowN0MzNklvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABZoqAwQA Hw7PMA0GCSqGSIb3DQEBCwUAA4IBAQDKTxjEqtBFnot3gUG5FDNbby8I0ayzV6HD fd/50HCamdwtqPpSRkoA2a5tf6HSxqmTX9s/iXpZtHLgfmoarcUk6j2co/0gKUVf GPc9JkQKYjp79w2nolT2W7JtVftRG3F6wgniMpZvNBlAGto2gtz0vAq9moJvb5dz XLkaFGROupHBV5Z+xHrkKJoy3zpVoAdcx5x1fKCq0f7pICQHcdaEaURBLQd+JjIw TSgX+xp6xsSZ9hjVLyQrkralUIvW1YDRBTt+cvVK0G+gJYbwNYbhexSSBd2/KHSJ XJMxaaChErpSkTA3SAyC+Vjkrfi+nwM2JRNkVAXeMa78CJV/Z4WY -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:52 2026 by rpki-client