This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/O0O4Xg_devCgcZBCCVmryZVuD10.roa File: O0O4Xg_devCgcZBCCVmryZVuD10.roa (raw, json) Hash identifier: wlEVDlOa0NYJ2GQtXHiIWwkp+eia1OUendMc/DWWx98= Subject key identifier: 3B:43:B8:5E:0F:DD:7A:F0:A0:71:90:42:09:59:AB:C9:95:6E:0F:5D Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d Certificate serial: 019B7B3689170EFC3E32B1080DEB3C94A53E Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/O0O4Xg_devCgcZBCCVmryZVuD10.roa Signing time: Thu 01 Jan 2026 20:18:50 +0000 ROA not before: Thu 01 Jan 2026 20:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200845 IP address blocks: 5.158.80.0/21 maxlen: 24 185.178.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:89:17:0e:fc:3e:32:b1:08:0d:eb:3c:94:a5:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d Validity Not Before: Jan 1 20:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b43b85e0fdd7af0a07190420959abc9956e0f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a7:fd:2c:6a:81:58:62:f2:3f:c3:b7:10:c6: 17:6e:ce:4a:1e:ac:3f:bd:6d:31:b3:f8:be:47:8a: 58:fb:a1:8a:52:ed:35:3c:9d:a4:eb:81:81:80:40: c6:62:d4:6e:25:d8:61:03:12:78:32:30:8e:af:fb: ad:0d:d0:c6:fb:f1:8e:64:61:09:1d:e7:d0:44:f7: b5:61:32:70:9c:17:d7:85:7f:94:06:93:2a:17:34: 7b:6c:39:7d:46:f7:cf:84:4c:03:18:e1:98:f5:4b: ce:11:33:b8:06:f8:e1:02:a5:7e:1b:91:9c:2d:de: 58:e6:58:6f:32:51:63:a5:49:30:02:1a:07:ce:13: 7d:cb:f0:fb:0f:ab:44:d7:36:fb:a3:c4:a2:07:a8: 8f:22:14:bc:61:1d:0f:a1:e8:52:86:89:d0:88:c4: 92:e7:91:8b:52:96:38:64:19:a1:4e:57:73:6d:c7: 43:95:08:3b:7b:66:9e:cb:13:bc:3c:f3:17:bd:ef: 8d:48:01:46:b8:a2:bb:a1:2d:e8:ee:f1:c0:c6:1a: d7:b2:5a:96:c3:a3:0f:c5:66:88:68:f1:27:a9:36: 87:21:bb:3f:66:4a:f9:26:d5:85:bf:7c:5f:40:a6: 69:d0:e2:32:1b:38:1c:c4:d5:a4:22:61:ca:4d:46: 76:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:43:B8:5E:0F:DD:7A:F0:A0:71:90:42:09:59:AB:C9:95:6E:0F:5D X509v3 Authority Key Identifier: keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/O0O4Xg_devCgcZBCCVmryZVuD10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.158.80.0/21 185.178.170.0/24 Signature Algorithm: sha256WithRSAEncryption 40:42:c8:24:43:61:07:df:f5:5e:b2:17:b3:8e:dd:68:64:e9: 99:8d:02:f2:aa:88:05:5a:1b:87:5b:f8:8e:3b:e2:af:2a:d4: 8d:5d:a6:0c:2f:c7:09:f0:c6:1e:08:96:1e:ee:66:ea:64:f8: 54:3c:d1:2b:97:be:0b:90:65:2c:1d:41:45:0d:85:b4:2e:69: a3:4d:c8:17:f5:7e:cb:2a:6e:94:3c:89:5b:0b:b6:d9:0a:a9: 54:c5:60:07:2d:d9:cf:37:54:0b:0d:1a:29:15:df:78:27:67: 45:4c:f4:82:6a:eb:39:bd:dd:4f:7e:41:6a:ad:55:d5:ab:a5: 0f:40:3e:32:67:10:b6:1a:99:4e:55:6e:42:cc:67:cf:94:aa: 0f:93:53:0b:4b:d7:e2:a6:df:a3:40:99:a3:d7:4e:f8:19:eb: eb:ca:a3:71:81:8f:a8:fd:d6:82:c9:e9:40:d8:f8:37:b4:77: 71:dc:be:d2:f0:4d:16:40:bb:f3:d7:64:44:ab:57:88:46:ff: 14:a0:5a:00:b9:7f:88:13:ae:3e:00:3d:4d:ca:15:fc:22:21: 9a:ac:ef:91:06:df:79:74:32:e2:36:ce:ba:99:15:6a:09:db: dd:ca:b2:73:2f:f2:d4:14:ce:59:72:f7:25:ca:c2:69:69:54: 54:a9:bc:b2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NokXDvw+MrEIDes8lKU+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YWU1NTFhZjBiYjVkNzk3N2VhNzNmNjg5NmYyNWYxZWNh MjhmOWQwHhcNMjYwMTAxMjAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjQzYjg1ZTBmZGQ3YWYwYTA3MTkwNDIwOTU5YWJjOTk1NmUwZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKf9LGqBWGLyP8O3EMYXbs5KHqw/ vW0xs/i+R4pY+6GKUu01PJ2k64GBgEDGYtRuJdhhAxJ4MjCOr/utDdDG+/GOZGEJ HefQRPe1YTJwnBfXhX+UBpMqFzR7bDl9RvfPhEwDGOGY9UvOETO4BvjhAqV+G5Gc Ld5Y5lhvMlFjpUkwAhoHzhN9y/D7D6tE1zb7o8SiB6iPIhS8YR0PoehShonQiMSS 55GLUpY4ZBmhTldzbcdDlQg7e2aeyxO8PPMXve+NSAFGuKK7oS3o7vHAxhrXslqW w6MPxWaIaPEnqTaHIbs/Zkr5JtWFv3xfQKZp0OIyGzgcxNWkImHKTUZ28QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDtDuF4P3XrwoHGQQglZq8mVbg9dMB8GA1UdIwQY MBaAFCWuVRrwu115d+pz9olvJfHsoo+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80MmY4MWItYzQyYy00MjU0LWFiYjkt MjE0MmY4ZmI2NzZlLzEvTzBPNFhnX2RldkNnY1pCQ0NWbXJ5WlZ1RDEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80MmY4MWItYzQyYy00MjU0LWFiYjktMjE0MmY4ZmI2NzZl LzEvSmE1Vkd2QzdYWGwzNm5QMmlXOGw4ZXlpajUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBZ5QAwQA ubKqMA0GCSqGSIb3DQEBCwUAA4IBAQBAQsgkQ2EH3/Veshezjt1oZOmZjQLyqogF WhuHW/iOO+KvKtSNXaYML8cJ8MYeCJYe7mbqZPhUPNErl74LkGUsHUFFDYW0Lmmj TcgX9X7LKm6UPIlbC7bZCqlUxWAHLdnPN1QLDRopFd94J2dFTPSCaus5vd1PfkFq rVXVq6UPQD4yZxC2GplOVW5CzGfPlKoPk1MLS9fipt+jQJmj1074GevryqNxgY+o /daCyelA2Pg3tHdx3L7S8E0WQLvz12REq1eIRv8UoFoAuX+IE64+AD1NyhX8IiGa rO+RBt95dDLiNs66mRVqCdvdyrJzL/LUFM5ZcvclysJpaVRUqbyy -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:08 2026 by rpki-client