This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/OVwVV0u6mJBhfYtSaY2l0o5kYw0.roa File: OVwVV0u6mJBhfYtSaY2l0o5kYw0.roa (raw, json) Hash identifier: tx3hkLfc3TC5UcoBMbPeFsEp4hR2aCEn9vjo3l+XOeY= Subject key identifier: 39:5C:15:57:4B:BA:98:90:61:7D:8B:52:69:8D:A5:D2:8E:64:63:0D Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638 Certificate serial: 019B7C13622286CBEF60E08DFFD776AB71AE Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/OVwVV0u6mJBhfYtSaY2l0o5kYw0.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60256 IP address blocks: 5.145.112.0/23 maxlen: 23 5.145.113.0/24 maxlen: 24 5.145.118.0/24 maxlen: 24 5.145.119.0/24 maxlen: 24 2a04:2f00:1::/48 maxlen: 48 2a04:2f00:2::/48 maxlen: 48 2a04:2f01:1::/48 maxlen: 48 2a04:2f01:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:62:22:86:cb:ef:60:e0:8d:ff:d7:76:ab:71:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=395c15574bba9890617d8b52698da5d28e64630d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:66:58:a6:1e:c6:1b:ea:ae:11:11:98:a8: b1:ac:a7:8d:b1:2c:4c:6f:1f:f8:18:28:b2:82:de: 7c:b7:5a:6d:f3:c9:1a:22:c5:c9:65:33:14:7b:ea: 45:b3:43:f1:7e:45:01:22:e6:6e:83:11:ae:96:58: 91:5a:c9:1a:5f:66:02:a4:b3:bb:05:19:c5:a8:e1: 8f:1e:47:64:5e:b5:6e:20:d9:49:8b:9c:ce:2f:ba: e1:9a:53:13:88:8a:e5:e2:7b:70:ef:5c:a6:3d:90: 2d:29:2f:be:e5:93:8f:66:99:75:dc:04:08:0d:3e: 04:91:d9:2b:ac:3c:e0:81:ae:89:e8:1d:62:35:02: bc:fd:4b:6b:d4:4e:60:6b:00:dc:a1:9e:cc:e7:9f: 94:9f:48:5c:ec:6a:bf:60:b2:6c:7e:c0:0f:a2:f0: 74:29:ad:dc:ea:25:f9:cc:cd:dc:ba:6f:6c:46:fb: d7:d5:66:ed:62:fe:c3:d2:f1:d5:01:c9:55:57:3c: f1:8c:85:1e:5e:94:71:da:48:91:2a:73:f4:f4:2b: 1e:0a:bb:03:df:af:87:a5:ad:ca:6c:c3:35:5c:a1: a1:bd:26:5b:28:b1:63:74:20:78:9a:dd:1b:97:f6: a4:05:06:3b:7e:13:f5:7c:0d:b3:ba:76:30:be:2c: 73:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5C:15:57:4B:BA:98:90:61:7D:8B:52:69:8D:A5:D2:8E:64:63:0D X509v3 Authority Key Identifier: keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/OVwVV0u6mJBhfYtSaY2l0o5kYw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.145.112.0/23 5.145.118.0/23 IPv6: 2a04:2f00:1::-2a04:2f00:2:ffff:ffff:ffff:ffff:ffff 2a04:2f01:1::-2a04:2f01:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5a:77:29:19:96:b8:6f:74:b6:90:9e:9e:19:f0:fa:ae:6e:e9: 7d:94:48:25:8a:fe:7c:0e:ec:8f:38:a6:75:df:77:6f:9f:2b: 33:27:ea:3f:94:56:b4:89:42:e2:2a:79:be:6f:e9:ff:82:91: c4:03:0e:7f:94:3d:1d:79:9c:52:6d:65:86:18:b0:8b:d0:c0: bd:76:a0:3d:04:f1:00:e8:e0:34:53:90:93:01:93:f9:4a:97: 5b:a8:cd:da:0c:0d:60:34:40:ee:94:ed:6f:e0:38:38:5d:63: 60:05:fe:78:0e:6a:e7:59:85:4c:5d:35:ec:8a:b6:30:6e:5a: c7:f8:7b:d4:54:23:af:99:bc:b6:86:f3:b6:c4:34:c0:e8:87: c5:d0:84:70:33:79:7c:97:18:64:e5:2e:05:45:dd:9b:a1:b7: 5a:ba:fa:63:e4:e6:31:30:68:ce:79:b7:88:e6:16:ff:28:06: 15:16:34:a3:2a:ac:10:89:8d:c0:5a:d8:6d:59:77:f9:4c:36: 24:75:7b:25:50:07:49:cb:f3:bc:05:fa:41:90:91:63:68:22: c2:83:09:64:ef:25:85:91:4d:76:b6:6a:ea:f2:3e:39:ee:c8: eb:90:d4:ac:a8:29:76:18:76:f4:46:2b:d6:a4:04:50:59:f5: 0b:6b:9e:85 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt8E2IihsvvYOCN/9d2q3GuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZTI2OTQ2NTJhYTI5ODUxMWVkYWZiZTE4ZDJiMWNkYmM3 OTI2MzgwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTVjMTU1NzRiYmE5ODkwNjE3ZDhiNTI2OThkYTVkMjhlNjQ2MzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMtmWKYexhvqrhERmKixrKeNsSxM bx/4GCiygt58t1pt88kaIsXJZTMUe+pFs0PxfkUBIuZugxGulliRWskaX2YCpLO7 BRnFqOGPHkdkXrVuINlJi5zOL7rhmlMTiIrl4ntw71ymPZAtKS++5ZOPZpl13AQI DT4EkdkrrDzgga6J6B1iNQK8/Utr1E5gawDcoZ7M55+Un0hc7Gq/YLJsfsAPovB0 Ka3c6iX5zM3cum9sRvvX1WbtYv7D0vHVAclVVzzxjIUeXpRx2kiRKnP09CseCrsD 36+Hpa3KbMM1XKGhvSZbKLFjdCB4mt0bl/akBQY7fhP1fA2zunYwvixzMwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFDlcFVdLupiQYX2LUmmNpdKOZGMNMB8GA1UdIwQY MBaAFNbiaUZSqimFEe2vvhjSsc28eSY4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODkt YjQyMzY0ODk1MDgzLzEvT1Z3VlYwdTZtSkJoZll0U2FZMmwwbzVrWXcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODktYjQyMzY0ODk1MDgz LzEvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDASBAIAATAMAwQBBZFwAwQB BZF2MC4EAgACMCgwEgMHACoELwAAAQMHACoELwAAAjASAwcAKgQvAQABAwcAKgQv AQACMA0GCSqGSIb3DQEBCwUAA4IBAQBadykZlrhvdLaQnp4Z8Pqubul9lEgliv58 DuyPOKZ133dvnyszJ+o/lFa0iULiKnm+b+n/gpHEAw5/lD0deZxSbWWGGLCL0MC9 dqA9BPEA6OA0U5CTAZP5SpdbqM3aDA1gNEDulO1v4Dg4XWNgBf54DmrnWYVMXTXs irYwblrH+HvUVCOvmby2hvO2xDTA6IfF0IRwM3l8lxhk5S4FRd2bobdauvpj5OYx MGjOebeI5hb/KAYVFjSjKqwQiY3AWthtWXf5TDYkdXslUAdJy/O8BfpBkJFjaCLC gwlk7yWFkU12tmrq8j457sjrkNSsqCl2GHb0RivWpARQWfULa56F -----END CERTIFICATE-----Generated at Mon Jan 26 12:27:02 2026 by rpki-client