This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/_Oo5q5cK7WylvggoJmoqFYskB4c.roa File: _Oo5q5cK7WylvggoJmoqFYskB4c.roa (raw, json) Hash identifier: 5KMQiMGpqj0Z920Fo72+vT0buVYau5a+ocsxOU9eZ5U= Subject key identifier: FC:EA:39:AB:97:0A:ED:6C:A5:BE:08:28:26:6A:2A:15:8B:24:07:87 Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c Certificate serial: 019B7AC8A9190BE2FBF40D98A2B0E7173D9E Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/_Oo5q5cK7WylvggoJmoqFYskB4c.roa Signing time: Thu 01 Jan 2026 18:18:49 +0000 ROA not before: Thu 01 Jan 2026 18:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201150 IP address blocks: 45.134.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a9:19:0b:e2:fb:f4:0d:98:a2:b0:e7:17:3d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcea39ab970aed6ca5be0828266a2a158b240787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:db:d9:b8:c7:c2:b8:a4:12:0b:bc:d5:50: 1c:96:83:b9:fa:07:bc:7f:7d:8a:e0:ee:c7:18:4b: 51:22:ef:6d:50:b2:56:fd:fc:0f:ea:c4:08:6c:3a: ed:49:a0:3f:65:72:ac:a7:0e:b6:47:72:b2:da:fd: 18:84:a0:d5:61:d2:1d:cc:e1:8b:3b:7f:3a:13:63: ee:ae:f7:0e:1d:ec:20:9f:80:02:69:95:07:14:ec: 9b:6a:1f:af:5e:9f:40:14:62:69:0c:7f:e9:dc:f5: f3:d0:a0:a1:f1:0f:38:2e:ef:de:77:8f:aa:db:da: af:a1:ea:b2:d5:85:ac:cf:d6:32:bd:64:80:66:82: 17:40:91:d6:54:99:3f:c3:d5:47:fe:cd:44:40:b8: be:69:36:57:4b:bd:67:f7:b5:1d:9d:a4:48:66:8e: 32:a5:ae:1f:ed:68:3c:75:12:48:01:5e:1e:e1:94: 35:d6:ab:30:1a:02:65:ae:31:de:4c:54:84:de:b5: 33:cc:87:9b:21:3c:2e:85:6d:2b:b3:bc:26:88:28: 8f:68:d0:c0:d3:0f:bb:89:26:39:b6:04:8e:03:9a: 8d:ce:d8:4f:3b:a8:69:d0:fa:1f:b1:3b:b0:79:1e: 2f:58:b1:fd:93:54:f0:23:b5:ed:a0:c9:e2:5f:f2: 11:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EA:39:AB:97:0A:ED:6C:A5:BE:08:28:26:6A:2A:15:8B:24:07:87 X509v3 Authority Key Identifier: keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/_Oo5q5cK7WylvggoJmoqFYskB4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.99.0/24 Signature Algorithm: sha256WithRSAEncryption 31:06:20:94:fa:c5:8a:fb:1e:54:b4:f4:62:e6:07:2b:a9:fc: ea:9b:f4:da:2a:9f:3b:08:4b:60:3f:08:93:cc:fd:49:53:6b: ed:b8:22:92:14:51:0f:82:4f:be:d5:56:40:2e:a4:e9:24:e0: 9d:c5:a8:46:b0:25:5d:b6:ff:ce:6a:97:41:b7:ac:f3:6f:5e: 15:97:1f:8c:4e:bc:c7:1f:2a:98:bc:17:e7:df:ad:c1:f2:e0: c9:50:a2:e5:30:89:13:a4:cc:49:46:d2:43:b2:7d:d6:ec:34: f7:9f:e4:6a:df:ab:d6:cf:7b:4a:6d:cb:d0:0e:da:0d:f9:ac: da:46:14:48:16:09:87:2d:30:66:35:49:0b:91:a6:bd:2a:d6: 68:f6:c5:d8:85:27:27:dc:ac:01:9c:c5:2e:d9:c5:2d:df:8c: 70:03:e4:14:7b:ef:c8:e1:23:ae:4c:2b:5c:03:23:2a:60:bb: 26:a6:27:59:a9:e5:20:e6:33:8c:18:fe:fe:e4:df:fa:25:7e: ca:aa:c5:90:68:1a:87:94:47:40:87:39:9e:5f:3e:45:73:1d: 09:3f:22:bb:1e:5b:23:dc:b8:70:8f:ad:fe:c4:c8:d9:f4:69: ed:b6:cc:52:91:3c:a3:d7:65:aa:a7:27:27:81:e8:10:b3:0b: 55:fc:e4:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yKkZC+L79A2YorDnFz2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NjFkOTY0ZGY0YTg2ZGI4ZmZiOTlhYTg5NTgyZGE2OGEz MDkwOGMwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2VhMzlhYjk3MGFlZDZjYTViZTA4MjgyNjZhMmExNThiMjQwNzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtHb2bjHwrikEgu81VAcloO5+ge8 f32K4O7HGEtRIu9tULJW/fwP6sQIbDrtSaA/ZXKspw62R3Ky2v0YhKDVYdIdzOGL O386E2PurvcOHewgn4ACaZUHFOybah+vXp9AFGJpDH/p3PXz0KCh8Q84Lu/ed4+q 29qvoeqy1YWsz9YyvWSAZoIXQJHWVJk/w9VH/s1EQLi+aTZXS71n97UdnaRIZo4y pa4f7Wg8dRJIAV4e4ZQ11qswGgJlrjHeTFSE3rUzzIebITwuhW0rs7wmiCiPaNDA 0w+7iSY5tgSOA5qNzthPO6hp0PofsTuweR4vWLH9k1TwI7XtoMniX/IRJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPzqOauXCu1spb4IKCZqKhWLJAeHMB8GA1UdIwQY MBaAFFZh2WTfSobbj/uZqolYLaaKMJCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYt M2Q0MzliN2NkZTcyLzEvX09vNXE1Y0s3V3lsdmdnb0ptb3FGWXNrQjRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYtM2Q0MzliN2NkZTcy LzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYZjMA0G CSqGSIb3DQEBCwUAA4IBAQAxBiCU+sWK+x5UtPRi5gcrqfzqm/TaKp87CEtgPwiT zP1JU2vtuCKSFFEPgk++1VZALqTpJOCdxahGsCVdtv/OapdBt6zzb14Vlx+MTrzH HyqYvBfn363B8uDJUKLlMIkTpMxJRtJDsn3W7DT3n+Rq36vWz3tKbcvQDtoN+aza RhRIFgmHLTBmNUkLkaa9KtZo9sXYhScn3KwBnMUu2cUt34xwA+QUe+/I4SOuTCtc AyMqYLsmpidZqeUg5jOMGP7+5N/6JX7KqsWQaBqHlEdAhzmeXz5Fcx0JPyK7Hlsj 3Lhwj63+xMjZ9GnttsxSkTyj12WqpycngegQswtV/OSM -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:03 2026 by rpki-client