This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/oe5V3edHVxBSH693Q5nBUmZV1Yc.roa File: oe5V3edHVxBSH693Q5nBUmZV1Yc.roa (raw, json) Hash identifier: KhGjj8OWcacL3cslLcFm12ige6JQo2tta7+5mTizYwI= Subject key identifier: A1:EE:55:DD:E7:47:57:10:52:1F:AF:77:43:99:C1:52:66:55:D5:87 Certificate issuer: /CN=d94bddafb5df098419020a8fbc7a90b16e341d63 Certificate serial: 019B7C12278E7422D81C591AE989E2C166C2 Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/oe5V3edHVxBSH693Q5nBUmZV1Yc.roa Signing time: Fri 02 Jan 2026 00:18:43 +0000 ROA not before: Fri 02 Jan 2026 00:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24875 IP address blocks: 2.58.21.0/24 maxlen: 24 2.58.22.0/24 maxlen: 24 46.182.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:27:8e:74:22:d8:1c:59:1a:e9:89:e2:c1:66:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63 Validity Not Before: Jan 2 00:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1ee55dde7475710521faf774399c1526655d587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1b:6b:f2:0f:ba:63:9d:37:2c:05:71:16:58: 45:67:4b:07:91:73:8c:d5:a9:0e:cc:26:fc:8c:27: e7:a0:b7:c1:a6:f2:99:17:77:7c:2e:cc:c7:6e:1b: fc:d5:50:94:71:06:c3:fe:40:6a:c3:41:8b:b6:4e: 84:6b:d8:28:3b:8e:eb:58:09:07:9b:c0:6a:2e:b5: d2:44:14:0a:1a:2b:dc:d2:38:8a:07:8d:5f:0e:9d: 88:58:75:6d:21:73:95:5e:cd:33:3f:ce:42:31:7f: 0d:c1:33:e8:b1:4a:2f:9b:c6:44:2e:4e:cf:26:f0: 62:15:45:2e:c9:c5:3e:ef:a0:d3:87:f2:cf:c4:70: 5b:49:ea:1d:0a:f9:3c:12:f8:a3:8d:e2:84:29:80: a3:bf:84:5a:f3:01:8a:9d:66:03:83:a3:9f:32:83: 2d:d3:e9:39:a2:69:4f:5b:38:79:86:fe:1d:a8:bf: 4f:c4:0e:e3:5e:fe:96:88:86:a5:e0:39:9f:e4:2b: b7:5c:39:ee:b4:a9:b2:e2:31:3c:ea:5e:ff:e3:77: be:3e:6c:a0:0d:95:1e:41:5d:42:b0:3c:a5:26:63: de:43:93:8d:90:88:09:86:48:8a:83:57:4d:c2:cd: 7f:5d:0d:4f:55:4e:9e:01:67:cb:0f:67:75:9a:f0: 82:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EE:55:DD:E7:47:57:10:52:1F:AF:77:43:99:C1:52:66:55:D5:87 X509v3 Authority Key Identifier: keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/oe5V3edHVxBSH693Q5nBUmZV1Yc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.21.0-2.58.22.255 46.182.108.0/24 Signature Algorithm: sha256WithRSAEncryption 18:cd:f5:d9:79:5a:70:8c:a8:83:a2:20:20:f4:a3:14:35:1c: 5a:a8:9e:8a:5a:39:3e:63:ac:db:01:2f:dc:2d:8f:3d:59:48: ef:b3:b6:59:bc:66:b4:ba:96:4a:c3:82:4e:66:d2:c2:d5:91: 76:3a:87:58:f4:7c:e3:41:6b:66:d5:56:d9:fb:ac:5e:6c:40: e3:c0:54:e4:60:24:6a:9a:f6:ed:ad:a9:6a:7b:0f:13:60:0f: cd:d8:cd:ce:b8:78:97:7e:e2:96:c5:63:c7:ee:a4:4c:a2:e9: d9:15:7e:69:4f:16:1a:fe:0f:b4:c7:84:8b:1f:de:3f:95:c8: 47:9f:eb:b6:e1:d8:53:1d:70:c4:dd:2c:db:c5:05:4e:d7:a1: 98:46:75:96:be:61:e6:a5:64:53:37:cc:ae:8e:bc:5e:23:fe: 69:3b:5c:b7:86:5a:32:88:13:63:42:d5:34:7a:74:06:67:9f: 90:f5:5c:0c:86:f1:b5:6b:03:8b:7c:5a:a3:b1:34:69:cc:81: 32:21:a6:b9:d8:37:0e:da:31:e1:69:56:90:a6:de:ee:1c:7f: ba:5a:61:85:36:76:34:ab:53:4e:4a:71:ad:9a:a0:93:ed:06: fc:1d:1a:2d:17:c4:66:84:6d:20:72:d3:b2:ac:60:96:d7:5a: e3:37:06:b3 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8EieOdCLYHFka6YniwWbCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NGJkZGFmYjVkZjA5ODQxOTAyMGE4ZmJjN2E5MGIxNmUz NDFkNjMwHhcNMjYwMTAyMDAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWVlNTVkZGU3NDc1NzEwNTIxZmFmNzc0Mzk5YzE1MjY2NTVkNTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xtr8g+6Y503LAVxFlhFZ0sHkXOM 1akOzCb8jCfnoLfBpvKZF3d8LszHbhv81VCUcQbD/kBqw0GLtk6Ea9goO47rWAkH m8BqLrXSRBQKGivc0jiKB41fDp2IWHVtIXOVXs0zP85CMX8NwTPosUovm8ZELk7P JvBiFUUuycU+76DTh/LPxHBbSeodCvk8EvijjeKEKYCjv4Ra8wGKnWYDg6OfMoMt 0+k5omlPWzh5hv4dqL9PxA7jXv6WiIal4Dmf5Cu3XDnutKmy4jE86l7/43e+Pmyg DZUeQV1CsDylJmPeQ5ONkIgJhkiKg1dNws1/XQ1PVU6eAWfLD2d1mvCCPwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFKHuVd3nR1cQUh+vd0OZwVJmVdWHMB8GA1UdIwQY MBaAFNlL3a+13wmEGQIKj7x6kLFuNB1jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlV2ZHI3WGZDWVFaQWdxUHZIcVFzVzQwSFdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jZGU3NTctNzY3Mi00NzIwLThjZTEt NmUyNmI5MWY2OTEwLzEvb2U1VjNlZEhWeEJTSDY5M1E1bkJVbVpWMVljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jZGU3NTctNzY3Mi00NzIwLThjZTEtNmUyNmI5MWY2OTEw LzEvMlV2ZHI3WGZDWVFaQWdxUHZIcVFzVzQwSFdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAACOhUD BAACOhYDBAAutmwwDQYJKoZIhvcNAQELBQADggEBABjN9dl5WnCMqIOiICD0oxQ1 HFqonopaOT5jrNsBL9wtjz1ZSO+ztlm8ZrS6lkrDgk5m0sLVkXY6h1j0fONBa2bV Vtn7rF5sQOPAVORgJGqa9u2tqWp7DxNgD83Yzc64eJd+4pbFY8fupEyi6dkVfmlP Fhr+D7THhIsf3j+VyEef67bh2FMdcMTdLNvFBU7XoZhGdZa+YealZFM3zK6OvF4j /mk7XLeGWjKIE2NC1TR6dAZnn5D1XAyG8bVrA4t8WqOxNGnMgTIhprnYNw7aMeFp VpCm3u4cf7paYYU2djSrU05Kca2aoJPtBvwdGi0XxGaEbSBy07KsYJbXWuM3BrM= -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:56 2026 by rpki-client