This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/ofUu4lRg92WUSco00177ziw81JU.roa File: ofUu4lRg92WUSco00177ziw81JU.roa (raw, json) Hash identifier: htA+c0kcWkcBhio4o0E3T+qCJhv0CReLZ/At0DindSM= Subject key identifier: A1:F5:2E:E2:54:60:F7:65:94:49:CA:34:D3:5E:FB:CE:2C:3C:D4:95 Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7 Certificate serial: 019B7D5CDD2C35D620A53F24ED03F8CC41BA Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/ofUu4lRg92WUSco00177ziw81JU.roa Signing time: Fri 02 Jan 2026 06:19:56 +0000 ROA not before: Fri 02 Jan 2026 06:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212582 IP address blocks: 45.88.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:dd:2c:35:d6:20:a5:3f:24:ed:03:f8:cc:41:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7 Validity Not Before: Jan 2 06:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1f52ee25460f7659449ca34d35efbce2c3cd495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:00:b9:af:3e:af:a5:c8:ee:19:17:db:9d:9f: 94:b7:4d:ef:77:7a:41:3e:34:15:d5:60:f7:c4:65: 18:6e:64:2d:00:40:e5:0f:08:bb:97:dd:d8:53:f1: 3c:f9:ea:15:b3:d4:6e:84:27:5d:c3:ee:4b:37:d0: 36:06:b4:bf:4d:59:6f:02:25:0f:33:98:c5:61:55: 4c:11:41:f9:0a:f2:78:75:00:1b:59:47:5d:ba:57: e0:61:eb:ed:99:d4:34:c1:13:7f:f5:27:f1:bb:7e: aa:c6:85:78:ec:e3:95:60:14:e7:a5:12:b1:cf:a7: 53:d6:3f:09:57:6a:22:52:df:ea:4e:a3:cf:6f:1b: 8a:68:33:0d:7b:13:cd:3d:b0:13:6d:19:3e:97:48: 5f:8b:02:63:3f:01:19:81:41:67:d8:6e:83:59:65: bc:c8:b9:ec:f8:22:9c:70:b7:66:5b:bf:73:e9:53: a6:1c:30:69:0e:26:94:2d:ff:d9:f7:8a:0c:6c:9c: 46:0d:95:72:b3:65:56:74:04:2f:2a:19:48:60:9f: 21:b8:3d:9e:70:f2:38:92:a1:06:90:50:39:23:7d: 9c:73:7b:d4:61:2d:e6:04:1b:87:45:67:8e:36:88: 3a:e1:88:9d:76:5f:b7:d0:86:18:6b:ba:a6:72:2d: d3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F5:2E:E2:54:60:F7:65:94:49:CA:34:D3:5E:FB:CE:2C:3C:D4:95 X509v3 Authority Key Identifier: keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/ofUu4lRg92WUSco00177ziw81JU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.228.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:60:ed:1d:fa:fc:89:68:d8:e1:64:59:22:b6:d3:1e:62:75: b6:e9:81:9f:cf:fb:11:fc:94:39:b0:bb:a6:11:66:ee:b1:6c: de:54:05:e1:09:d2:07:e5:d0:57:77:e8:c8:3b:9a:66:31:53: b0:76:04:6d:00:5d:0f:ae:a4:6e:96:1e:5d:58:1b:99:51:6c: da:89:c8:69:c2:85:43:d5:39:46:e5:d0:dd:5a:07:ad:a1:d0: be:97:65:5b:41:97:1c:1f:c8:e9:8c:1a:20:f8:8c:b0:5d:13: 3e:d8:4f:9c:e9:91:b3:45:b0:16:fc:58:7c:79:70:b9:c6:3d: 0b:f8:c3:8a:15:46:92:94:d3:82:2c:26:78:e5:a4:3f:cc:a9: b9:14:d0:57:b3:2c:75:b8:ba:79:34:54:e8:d2:54:a6:7d:7b: 3c:a6:02:b1:85:c6:a9:3c:8a:f5:19:09:3d:90:e2:c9:3e:26: 3d:ea:06:14:54:e7:69:17:c9:08:f0:91:b9:66:02:85:2d:f1: a5:b3:d3:3d:21:9e:02:7f:55:45:db:e5:c0:e9:88:df:f7:d9: fc:a5:27:d0:0e:80:48:b4:c3:08:fb:f6:0c:55:9d:59:f7:b8: bc:25:fc:bb:0d:c3:4d:18:7a:ec:48:6b:9d:39:76:95:25:dd: a6:2e:bc:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XN0sNdYgpT8k7QP4zEG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYTI1M2NkZjUwN2EwM2UxZjU3OWQyMDJkOGRmMTFkNjhm NWMzZDcwHhcNMjYwMTAyMDYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWY1MmVlMjU0NjBmNzY1OTQ0OWNhMzRkMzVlZmJjZTJjM2NkNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwC5rz6vpcjuGRfbnZ+Ut03vd3pB PjQV1WD3xGUYbmQtAEDlDwi7l93YU/E8+eoVs9RuhCddw+5LN9A2BrS/TVlvAiUP M5jFYVVMEUH5CvJ4dQAbWUddulfgYevtmdQ0wRN/9Sfxu36qxoV47OOVYBTnpRKx z6dT1j8JV2oiUt/qTqPPbxuKaDMNexPNPbATbRk+l0hfiwJjPwEZgUFn2G6DWWW8 yLns+CKccLdmW79z6VOmHDBpDiaULf/Z94oMbJxGDZVys2VWdAQvKhlIYJ8huD2e cPI4kqEGkFA5I32cc3vUYS3mBBuHRWeONog64Yiddl+30IYYa7qmci3TBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKH1LuJUYPdllEnKNNNe+84sPNSVMB8GA1UdIwQY MBaAFPKiU831B6A+H1edIC2N8R1o9cPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjct YmU0ZDVkMDlkNzEwLzEvb2ZVdTRsUmc5MldVU2NvMDAxNzd6aXc4MUpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjctYmU0ZDVkMDlkNzEw LzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVjkMA0G CSqGSIb3DQEBCwUAA4IBAQA9YO0d+vyJaNjhZFkittMeYnW26YGfz/sR/JQ5sLum EWbusWzeVAXhCdIH5dBXd+jIO5pmMVOwdgRtAF0PrqRulh5dWBuZUWzaichpwoVD 1TlG5dDdWgetodC+l2VbQZccH8jpjBog+IywXRM+2E+c6ZGzRbAW/Fh8eXC5xj0L +MOKFUaSlNOCLCZ45aQ/zKm5FNBXsyx1uLp5NFTo0lSmfXs8pgKxhcapPIr1GQk9 kOLJPiY96gYUVOdpF8kI8JG5ZgKFLfGls9M9IZ4Cf1VF2+XA6Yjf99n8pSfQDoBI tMMI+/YMVZ1Z97i8Jfy7DcNNGHrsSGudOXaVJd2mLrxQ -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:01 2026 by rpki-client