This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/0VSesXDVm1kdp7OP9sVaQNaIx0I.roa File: 0VSesXDVm1kdp7OP9sVaQNaIx0I.roa (raw, json) Hash identifier: QMxjCfdCBm32VW6X1BoprZ37jAPwnIJNYNKtYt65wRk= Subject key identifier: D1:54:9E:B1:70:D5:9B:59:1D:A7:B3:8F:F6:C5:5A:40:D6:88:C7:42 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 019BB38DD0A5A50769A996C152AD33EA68D8 Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/0VSesXDVm1kdp7OP9sVaQNaIx0I.roa Signing time: Mon 12 Jan 2026 18:52:54 +0000 ROA not before: Mon 12 Jan 2026 18:52:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212477 IP address blocks: 45.15.208.0/24 maxlen: 24 45.15.210.0/24 maxlen: 24 45.84.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:8d:d0:a5:a5:07:69:a9:96:c1:52:ad:33:ea:68:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Jan 12 18:52:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1549eb170d59b591da7b38ff6c55a40d688c742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1a:f1:ef:50:12:45:b1:dd:44:ac:74:98:c7: f1:50:c6:cf:9a:a5:35:1e:77:9d:dc:d9:9f:07:04: c7:a5:d1:4d:12:92:1d:a5:5d:56:ee:2f:f0:92:b6: 74:f3:93:db:3d:78:d2:e1:87:f8:a1:d0:6b:9c:fa: 58:a1:f9:9b:71:3e:45:4e:63:9b:d1:33:65:83:df: 29:dc:ce:21:57:c8:fc:c5:47:e1:1a:07:99:d5:1a: f1:bb:9c:ad:4d:fe:04:1f:d7:81:be:a2:d2:8a:d5: 41:a2:50:56:aa:28:32:ca:c9:9f:b6:d3:f3:60:3d: e1:08:cc:33:fd:30:74:c4:4b:f1:47:fc:6e:b9:ee: ad:e7:1b:93:7a:5c:46:4f:27:f8:5e:8d:59:74:56: 83:4e:a4:43:e2:f7:79:84:8d:af:30:5e:07:10:83: 2a:4b:0d:8a:9f:6d:62:29:f5:f1:cc:e5:26:82:0b: fa:4c:65:fa:bf:8a:0f:86:02:0a:04:b0:a8:3d:6d: 4b:e2:e1:59:ca:d7:c9:22:1b:18:3a:1c:8c:bf:9b: 4f:eb:c3:2b:bc:f3:1f:75:ed:56:f3:e1:11:de:40: 69:e0:5b:d7:97:b0:c0:c7:f0:13:22:36:73:9d:1c: 34:ea:e8:ad:aa:cb:9f:89:ab:87:b1:06:37:e7:f3: 68:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:54:9E:B1:70:D5:9B:59:1D:A7:B3:8F:F6:C5:5A:40:D6:88:C7:42 X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/0VSesXDVm1kdp7OP9sVaQNaIx0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.208.0/24 45.15.210.0/24 45.84.59.0/24 Signature Algorithm: sha256WithRSAEncryption dd:cd:4c:56:87:1b:fe:a9:b1:86:3f:1c:53:cf:65:4e:90:98: c2:05:2a:2e:f3:88:e2:e6:f3:04:6c:15:98:bf:a9:d8:5a:02: 6a:b2:22:58:af:73:c7:25:11:a4:6c:b8:d1:1b:46:a4:02:cf: 34:2a:e0:0c:1c:bd:8d:2a:d7:9e:75:83:e9:7e:9c:00:f2:68: 57:d6:59:85:ed:d4:f1:5e:0a:ff:4c:8f:11:c2:88:b6:e2:ce: fe:4f:f8:c2:34:01:7e:73:21:bd:94:51:cf:a9:ce:b4:38:22: e1:f9:56:f7:01:d4:ce:e8:e0:2b:c0:2c:db:87:e0:f0:52:09: 82:79:d3:4c:3f:73:b4:56:20:d0:c3:2b:c1:a8:9d:a3:38:32: 25:2f:a2:dd:39:25:45:67:b3:51:9b:88:9f:74:54:df:dc:48: 5a:8e:b7:48:ee:df:26:79:f3:93:12:4c:a3:e7:48:60:79:f3: c1:e9:6f:a1:09:a6:ff:20:a3:37:26:2b:9b:80:37:45:00:c2: 43:b6:0c:3b:bb:1d:34:66:2a:36:b6:8f:ba:46:31:01:18:d8: 03:93:01:04:9d:e3:61:a9:57:af:ac:91:67:d8:d2:05:af:e7: 27:f0:c9:a3:72:9b:35:7e:1a:2b:6c:8e:43:24:3e:5e:44:2e: 2b:10:4e:cd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuzjdClpQdpqZbBUq0z6mjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjYwMTEyMTg1MjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTU0OWViMTcwZDU5YjU5MWRhN2IzOGZmNmM1NWE0MGQ2ODhjNzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBrx71ASRbHdRKx0mMfxUMbPmqU1 Hned3NmfBwTHpdFNEpIdpV1W7i/wkrZ085PbPXjS4Yf4odBrnPpYofmbcT5FTmOb 0TNlg98p3M4hV8j8xUfhGgeZ1Rrxu5ytTf4EH9eBvqLSitVBolBWqigyysmfttPz YD3hCMwz/TB0xEvxR/xuue6t5xuTelxGTyf4Xo1ZdFaDTqRD4vd5hI2vMF4HEIMq Sw2Kn21iKfXxzOUmggv6TGX6v4oPhgIKBLCoPW1L4uFZytfJIhsYOhyMv5tP68Mr vPMfde1W8+ER3kBp4FvXl7DAx/ATIjZznRw06uitqsufiauHsQY35/NogwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNFUnrFw1ZtZHaezj/bFWkDWiMdCMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvMFZTZXNYRFZtMWtkcDdPUDlzVmFRTmFJeDBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQ/QAwQA LQ/SAwQALVQ7MA0GCSqGSIb3DQEBCwUAA4IBAQDdzUxWhxv+qbGGPxxTz2VOkJjC BSou84ji5vMEbBWYv6nYWgJqsiJYr3PHJRGkbLjRG0akAs80KuAMHL2NKteedYPp fpwA8mhX1lmF7dTxXgr/TI8Rwoi24s7+T/jCNAF+cyG9lFHPqc60OCLh+Vb3AdTO 6OArwCzbh+DwUgmCedNMP3O0ViDQwyvBqJ2jODIlL6LdOSVFZ7NRm4ifdFTf3Eha jrdI7t8mefOTEkyj50hgefPB6W+hCab/IKM3JiubgDdFAMJDtgw7ux00Zio2to+6 RjEBGNgDkwEEneNhqVevrJFn2NIFr+cn8Mmjcps1fhorbI5DJD5eRC4rEE7N -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:34 2026 by rpki-client