This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/uV7OQJTuC4kYWor682k9f-C0_5I.roa File: uV7OQJTuC4kYWor682k9f-C0_5I.roa (raw, json) Hash identifier: q4UJtdgviUqdDZKlm/WdXXX7eWbJCWOwGJBJFpte8C4= Subject key identifier: B9:5E:CE:40:94:EE:0B:89:18:5A:8A:FA:F3:69:3D:7F:E0:B4:FF:92 Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695 Certificate serial: 019B7C7FE1EBDA67C729A1953C29D8E5F378 Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/uV7OQJTuC4kYWor682k9f-C0_5I.roa Signing time: Fri 02 Jan 2026 02:18:34 +0000 ROA not before: Fri 02 Jan 2026 02:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60042 IP address blocks: 45.15.157.0/24 maxlen: 24 45.15.158.0/24 maxlen: 24 45.15.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e1:eb:da:67:c7:29:a1:95:3c:29:d8:e5:f3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695 Validity Not Before: Jan 2 02:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b95ece4094ee0b89185a8afaf3693d7fe0b4ff92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c4:b0:7c:f4:1e:f9:af:6b:64:59:89:67:f0: 97:a4:4f:8f:7c:ba:48:5f:74:d9:28:78:09:5b:2b: fe:14:69:fa:a4:e7:4a:16:42:da:04:1f:ae:31:7b: e2:4d:02:25:66:c7:6f:da:61:34:2c:b2:6a:4f:a5: c7:ba:76:b5:15:12:a5:7b:2a:af:c4:8a:cc:8d:fe: f8:af:4a:bf:04:f9:76:cb:5a:9f:2b:e4:a9:e7:f3: 04:c5:5a:24:b4:a3:1c:a6:ef:ab:ce:eb:ef:f5:0f: b4:79:75:7c:18:69:4a:9f:25:07:76:99:5e:6d:3e: c3:e8:48:15:55:b3:1a:09:70:6e:eb:e1:52:20:08: 5f:20:84:ec:a8:e7:df:dd:40:6e:96:5a:a4:11:f3: 7d:09:d1:b3:9b:43:f5:7b:12:b0:db:79:b9:ed:51: 31:40:9c:d8:25:bf:e7:48:62:06:b8:32:75:5a:50: 51:68:84:fb:88:43:78:ff:44:24:06:e4:00:04:73: ca:28:7e:75:bc:21:0f:a5:27:8a:f2:ce:d9:74:18: c4:13:f7:27:4a:b5:9d:0c:62:74:fe:21:8c:33:66: f8:fd:4b:43:ca:2c:5a:c3:63:5b:11:2c:fc:0d:28: 9d:b1:e0:fa:55:c3:e7:16:fa:93:ed:36:15:f5:56: 9a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5E:CE:40:94:EE:0B:89:18:5A:8A:FA:F3:69:3D:7F:E0:B4:FF:92 X509v3 Authority Key Identifier: keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/uV7OQJTuC4kYWor682k9f-C0_5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.157.0-45.15.159.255 Signature Algorithm: sha256WithRSAEncryption a6:4c:95:5d:26:8c:a2:e6:07:f8:7a:14:72:77:83:07:2b:6d: 06:9c:c0:b6:6a:1c:1d:25:03:b3:80:84:b0:08:68:d1:ea:8e: ca:7e:37:ee:c4:d6:22:5e:42:4d:92:78:a0:e8:86:0a:c9:79: 59:40:1d:d1:e6:73:e2:3c:59:af:dd:f1:75:9d:2f:34:93:2d: 22:aa:07:43:6f:58:86:17:41:8b:2e:84:71:4f:5c:94:66:a6: 0a:63:bd:0e:92:42:45:14:07:73:98:f1:29:d6:72:9c:86:37: 83:85:89:39:b2:3b:1a:7f:2b:53:6b:7f:1a:1a:5f:33:97:9b: c3:39:c8:0d:fd:b5:20:23:77:c3:bb:9d:4b:51:77:b3:cd:b5: 9b:2d:c6:87:76:94:38:35:c5:d9:39:6c:f0:a5:55:5b:b3:bc: 01:c8:56:81:59:ed:87:5e:3a:fc:61:a0:9d:62:28:c6:19:13: 3a:8d:f1:64:d9:90:f7:df:b2:a3:a4:09:11:6a:13:3f:df:68: 6e:a7:9d:a8:0f:bd:9b:28:b7:20:f6:9d:8c:79:61:04:5c:f6: 9e:22:eb:06:ab:b1:d5:65:1f:31:6c:fa:2b:23:e5:e2:ed:45: 51:87:7b:68:69:6b:40:fe:a9:ce:f0:de:58:30:78:c0:38:53: 54:ee:36:c2 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8f+Hr2mfHKaGVPCnY5fN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMzA2NThmMTZkMmQ4OGQzNDE2NDU5MmZjZDRkZTEzMTMx ZjE2OTUwHhcNMjYwMTAyMDIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTVlY2U0MDk0ZWUwYjg5MTg1YThhZmFmMzY5M2Q3ZmUwYjRmZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8SwfPQe+a9rZFmJZ/CXpE+PfLpI X3TZKHgJWyv+FGn6pOdKFkLaBB+uMXviTQIlZsdv2mE0LLJqT6XHuna1FRKleyqv xIrMjf74r0q/BPl2y1qfK+Sp5/MExVoktKMcpu+rzuvv9Q+0eXV8GGlKnyUHdple bT7D6EgVVbMaCXBu6+FSIAhfIITsqOff3UBullqkEfN9CdGzm0P1exKw23m57VEx QJzYJb/nSGIGuDJ1WlBRaIT7iEN4/0QkBuQABHPKKH51vCEPpSeK8s7ZdBjEE/cn SrWdDGJ0/iGMM2b4/UtDyixaw2NbESz8DSidseD6VcPnFvqT7TYV9VaaXQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLlezkCU7guJGFqK+vNpPX/gtP+SMB8GA1UdIwQY MBaAFPAwZY8W0tiNNBZFkvzU3hMTHxaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYt ODk0ODA1Mjg5Y2MwLzEvdVY3T1FKVHVDNGtZV29yNjgyazlmLUMwXzVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYtODk0ODA1Mjg5Y2Mw LzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtD50D BAUtD4AwDQYJKoZIhvcNAQELBQADggEBAKZMlV0mjKLmB/h6FHJ3gwcrbQacwLZq HB0lA7OAhLAIaNHqjsp+N+7E1iJeQk2SeKDohgrJeVlAHdHmc+I8Wa/d8XWdLzST LSKqB0NvWIYXQYsuhHFPXJRmpgpjvQ6SQkUUB3OY8SnWcpyGN4OFiTmyOxp/K1Nr fxoaXzOXm8M5yA39tSAjd8O7nUtRd7PNtZstxod2lDg1xdk5bPClVVuzvAHIVoFZ 7YdeOvxhoJ1iKMYZEzqN8WTZkPffsqOkCRFqEz/faG6nnagPvZsotyD2nYx5YQRc 9p4i6warsdVlHzFs+isj5eLtRVGHe2hpa0D+qc7w3lgweMA4U1TuNsI= -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:01 2026 by rpki-client