This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/45OIlQXRBKhXdsBsmg66b6ttNc0.roa File: 45OIlQXRBKhXdsBsmg66b6ttNc0.roa (raw, json) Hash identifier: 9Ub005lkc+w57wG9grBHyP6ReXz9XDG+FfsBGg7/Xao= Subject key identifier: E3:93:88:95:05:D1:04:A8:57:76:C0:6C:9A:0E:BA:6F:AB:6D:35:CD Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F8476B2AD428D31BE329DAD29A255D3 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/45OIlQXRBKhXdsBsmg66b6ttNc0.roa Signing time: Fri 02 Jan 2026 16:22:26 +0000 ROA not before: Fri 02 Jan 2026 16:22:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209490 IP address blocks: 176.235.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:76:b2:ad:42:8d:31:be:32:9d:ad:29:a2:55:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e393889505d104a85776c06c9a0eba6fab6d35cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:11:92:a8:b3:14:9b:07:db:91:01:ba:b9:74: 69:ac:8b:62:19:d3:c0:87:6c:7d:a5:14:32:8c:53: 7b:b7:3b:46:6c:1c:c5:2a:8d:2f:d9:13:f0:27:4b: b4:ce:ba:24:0d:51:c6:63:1b:75:3b:69:79:5d:a9: 05:b9:c4:55:27:89:e7:15:57:9d:6f:05:30:33:c9: dd:4a:32:61:42:7c:29:0b:76:e8:a5:33:7e:b6:86: c7:5e:dd:b7:60:d8:d3:f1:2c:66:43:f4:8c:0e:e7: 9f:e7:8d:5c:de:bf:2e:97:0b:d1:10:af:84:f3:64: fc:28:1c:ff:d7:8f:c5:67:d4:13:7e:51:16:9b:61: 3a:65:60:ba:55:56:86:0a:8d:15:11:fc:97:e3:39: 9e:e3:90:59:f0:ce:9f:85:6b:c1:8c:61:2d:2b:e5: 06:19:2a:0f:7e:69:c6:b8:12:76:85:03:be:67:2d: ab:5d:e3:10:3a:cb:8f:82:e4:58:2d:3e:b0:65:28: 11:06:47:5b:a9:7e:14:54:45:9e:23:83:ab:1c:f2: 20:72:86:5e:55:73:4f:8a:bd:5b:4d:e9:fc:1c:d2: cc:a8:2b:3f:42:4f:3a:01:58:03:d7:2d:24:80:1d: 28:be:1d:eb:35:49:64:9e:3c:36:14:66:76:b3:d3: 05:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:93:88:95:05:D1:04:A8:57:76:C0:6C:9A:0E:BA:6F:AB:6D:35:CD X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/45OIlQXRBKhXdsBsmg66b6ttNc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.235.119.0/24 Signature Algorithm: sha256WithRSAEncryption 56:64:6b:a2:87:00:0a:60:f7:09:3d:2c:ac:5c:7e:3e:83:53: 50:93:66:3a:ba:06:13:fb:21:01:de:be:2e:9d:8e:aa:78:df: 42:d9:55:b9:d1:67:12:34:42:c4:39:5c:d7:52:99:b7:91:65: dc:b1:f7:83:c7:d3:57:74:64:6b:e0:0e:66:b2:f9:f6:5e:e4: 5c:87:ce:0d:0a:1a:c3:90:5e:17:1d:19:c1:88:76:56:e8:29: 04:de:a8:f3:ff:93:d2:dc:2b:bc:3e:07:3b:25:e5:4c:6e:50: 38:1b:50:d3:af:71:64:c2:33:b0:f3:69:b3:6f:dd:63:9c:a7: f2:c2:35:df:0a:eb:de:90:63:63:99:3c:be:8e:f6:01:70:b5: dc:8a:6a:ec:9f:89:2f:7a:30:27:6b:b1:67:62:4d:40:db:65: e9:0a:99:4a:6e:b1:5d:c6:f5:22:1d:ec:24:02:9f:29:12:2c: 25:c6:0e:69:cc:83:61:ee:27:47:2f:d9:a7:b5:90:db:f2:6d: 23:d0:f5:66:9e:5e:08:46:d2:87:c4:a4:e3:8b:63:3c:74:a1: 9f:db:71:1d:12:10:51:ce:26:20:24:b9:3a:d0:21:49:32:88: 68:15:5a:f0:d6:7e:dc:20:74:97:71:b9:43:39:ce:5d:05:42: 9c:97:25:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hHayrUKNMb4yna0polXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzkzODg5NTA1ZDEwNGE4NTc3NmMwNmM5YTBlYmE2ZmFiNmQzNWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRGSqLMUmwfbkQG6uXRprItiGdPA h2x9pRQyjFN7tztGbBzFKo0v2RPwJ0u0zrokDVHGYxt1O2l5XakFucRVJ4nnFVed bwUwM8ndSjJhQnwpC3bopTN+tobHXt23YNjT8SxmQ/SMDuef541c3r8ulwvREK+E 82T8KBz/14/FZ9QTflEWm2E6ZWC6VVaGCo0VEfyX4zme45BZ8M6fhWvBjGEtK+UG GSoPfmnGuBJ2hQO+Zy2rXeMQOsuPguRYLT6wZSgRBkdbqX4UVEWeI4OrHPIgcoZe VXNPir1bTen8HNLMqCs/Qk86AVgD1y0kgB0ovh3rNUlknjw2FGZ2s9MFZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOOTiJUF0QSoV3bAbJoOum+rbTXNMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvNDVPSWxRWFJCS2hYZHNCc21nNjZiNnR0TmMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsOt3MA0G CSqGSIb3DQEBCwUAA4IBAQBWZGuihwAKYPcJPSysXH4+g1NQk2Y6ugYT+yEB3r4u nY6qeN9C2VW50WcSNELEOVzXUpm3kWXcsfeDx9NXdGRr4A5msvn2XuRch84NChrD kF4XHRnBiHZW6CkE3qjz/5PS3Cu8Pgc7JeVMblA4G1DTr3FkwjOw82mzb91jnKfy wjXfCuvekGNjmTy+jvYBcLXcimrsn4kvejAna7FnYk1A22XpCplKbrFdxvUiHewk Ap8pEiwlxg5pzINh7idHL9mntZDb8m0j0PVmnl4IRtKHxKTji2M8dKGf23EdEhBR ziYgJLk60CFJMohoFVrw1n7cIHSXcblDOc5dBUKclyUd -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:23 2026 by rpki-client