This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QOsx3tZZsYIHc-KO1LB_6reoupA.roa File: QOsx3tZZsYIHc-KO1LB_6reoupA.roa (raw, json) Hash identifier: AHOV+A2ZahG0BLpzonP+hTDvOsdoMbNkGSmbYjXtnS4= Subject key identifier: 40:EB:31:DE:D6:59:B1:82:07:73:E2:8E:D4:B0:7F:EA:B7:A8:BA:90 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1A5EC748114710E7A2D0E40E810BA Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QOsx3tZZsYIHc-KO1LB_6reoupA.roa Signing time: Fri 02 Jan 2026 18:21:41 +0000 ROA not before: Fri 02 Jan 2026 18:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22773 IP address blocks: 45.129.127.0/24 maxlen: 24 93.190.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:a5:ec:74:81:14:71:0e:7a:2d:0e:40:e8:10:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=40eb31ded659b1820773e28ed4b07feab7a8ba90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2a:82:11:60:d0:df:b3:38:03:5e:97:73:b1: dc:14:61:bb:12:df:28:0e:81:9a:3c:68:07:46:49: ab:b4:69:0d:24:41:31:37:db:44:60:f0:56:14:b6: 5d:c0:0e:44:74:07:a6:2d:24:13:7b:76:b2:80:6b: 31:1d:f9:c9:9f:81:ed:9a:43:b1:47:57:e6:c2:15: 05:41:90:ca:6d:a0:84:3a:f8:27:9a:b2:02:84:11: 95:00:e3:1f:7b:a0:f6:97:8c:32:4a:66:38:f7:92: 1a:d0:6b:1e:74:52:fb:25:8e:87:9e:89:4b:1a:ea: e8:71:88:80:99:0f:2f:59:d8:8b:db:85:8b:d8:70: e0:95:e9:f0:b1:20:0d:72:9c:de:8c:53:fb:85:39: 4d:4b:22:e6:ab:dd:ef:20:c4:d1:50:40:be:26:c5: 6a:c8:08:02:51:ce:a5:c5:9a:06:8f:8e:fa:a4:f6: 7c:49:2d:04:e0:d8:97:fd:31:9f:9c:52:52:ff:95: 4f:0c:39:1f:81:9e:b0:2f:06:6c:08:17:7f:1b:aa: f4:e4:90:2a:0f:bb:1c:21:ae:ce:35:43:b1:a9:f0: 6d:ba:e5:da:5e:4b:8f:2a:c9:61:80:a9:d8:22:03: 38:1c:09:9b:30:b6:6c:d5:74:71:03:9a:f4:35:16: 1a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EB:31:DE:D6:59:B1:82:07:73:E2:8E:D4:B0:7F:EA:B7:A8:BA:90 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QOsx3tZZsYIHc-KO1LB_6reoupA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.127.0/24 93.190.246.0/23 Signature Algorithm: sha256WithRSAEncryption 70:13:15:a7:8d:e7:e8:19:15:b6:72:c5:ff:b3:ae:42:3a:d9: 84:1e:0e:ff:00:48:1f:55:25:de:02:f4:42:43:bd:39:52:16: 0a:73:3b:e6:e9:a3:68:a6:d5:d3:44:8c:9a:c0:df:4e:23:a7: f7:d6:a8:77:e9:4f:8c:ac:77:b4:58:ed:02:98:a1:d0:73:57: 8d:66:92:64:7e:b5:fc:a9:e0:fa:1e:54:4b:81:d3:a2:5f:88: 68:14:ef:fc:d5:51:74:4a:68:5e:88:9c:1d:db:aa:02:b3:13: 70:d3:3c:c1:ca:a2:a9:83:5c:fd:af:75:08:0e:85:17:57:2f: 1e:d9:28:32:e9:31:cb:f6:41:c4:1a:1f:1f:cc:1a:4a:06:8c: 87:e8:f0:9a:93:15:63:16:1a:d8:21:95:89:d2:ad:a3:ea:13: c2:71:7a:c0:c9:44:97:2c:36:d9:71:68:5e:9c:a0:55:61:78: 52:d7:97:f5:c4:77:a8:b9:24:1d:9e:3b:e2:e0:8c:d3:8d:91: b7:e3:63:c2:bb:25:47:de:82:7a:12:70:b1:c8:8d:0e:06:c3: 5f:e5:6e:c1:6f:c0:c7:0e:f4:59:83:d2:bf:3e:d7:28:b2:06: f3:04:a5:56:f7:da:b9:b4:3c:95:6e:0b:55:af:eb:52:1c:49: f1:46:a9:85 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8aXsdIEUcQ56LQ5A6BC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MGViMzFkZWQ2NTliMTgyMDc3M2UyOGVkNGIwN2ZlYWI3YThiYTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCqCEWDQ37M4A16Xc7HcFGG7Et8o DoGaPGgHRkmrtGkNJEExN9tEYPBWFLZdwA5EdAemLSQTe3aygGsxHfnJn4HtmkOx R1fmwhUFQZDKbaCEOvgnmrIChBGVAOMfe6D2l4wySmY495Ia0GsedFL7JY6HnolL GurocYiAmQ8vWdiL24WL2HDglenwsSANcpzejFP7hTlNSyLmq93vIMTRUEC+JsVq yAgCUc6lxZoGj476pPZ8SS0E4NiX/TGfnFJS/5VPDDkfgZ6wLwZsCBd/G6r05JAq D7scIa7ONUOxqfBtuuXaXkuPKslhgKnYIgM4HAmbMLZs1XRxA5r0NRYaIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEDrMd7WWbGCB3PijtSwf+q3qLqQMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvUU9zeDN0WlpzWUlIYy1LTzFMQl82cmVvdXBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYF/AwQB Xb72MA0GCSqGSIb3DQEBCwUAA4IBAQBwExWnjefoGRW2csX/s65COtmEHg7/AEgf VSXeAvRCQ705UhYKczvm6aNoptXTRIyawN9OI6f31qh36U+MrHe0WO0CmKHQc1eN ZpJkfrX8qeD6HlRLgdOiX4hoFO/81VF0SmheiJwd26oCsxNw0zzByqKpg1z9r3UI DoUXVy8e2Sgy6THL9kHEGh8fzBpKBoyH6PCakxVjFhrYIZWJ0q2j6hPCcXrAyUSX LDbZcWhenKBVYXhS15f1xHeouSQdnjvi4IzTjZG342PCuyVH3oJ6EnCxyI0OBsNf 5W7Bb8DHDvRZg9K/PtcosgbzBKVW99q5tDyVbgtVr+tSHEnxRqmF -----END CERTIFICATE-----Generated at Sun Jan 25 15:35:48 2026 by rpki-client