This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/OA8Bk3tPUiZSmiAzbm0eBXa4nuE.roa File: OA8Bk3tPUiZSmiAzbm0eBXa4nuE.roa (raw, json) Hash identifier: oWNPNPjgcKmmhmYQ0/KR/N+7+UQanOVovcIMTSyV2uo= Subject key identifier: 38:0F:01:93:7B:4F:52:26:52:9A:20:33:6E:6D:1E:05:76:B8:9E:E1 Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000 Certificate serial: 019B7F85935919FFF1310E46F0C51C8093E4 Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/OA8Bk3tPUiZSmiAzbm0eBXa4nuE.roa Signing time: Fri 02 Jan 2026 16:23:38 +0000 ROA not before: Fri 02 Jan 2026 16:23:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31287 IP address blocks: 45.15.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:93:59:19:ff:f1:31:0e:46:f0:c5:1c:80:93:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000 Validity Not Before: Jan 2 16:23:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=380f01937b4f5226529a20336e6d1e0576b89ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:c7:65:3f:a3:6b:3f:f4:4f:f2:7a:ae:65: 95:07:d2:28:b6:52:ed:2f:7e:a2:13:0f:cf:b7:49: 7b:c8:a5:cf:33:91:d0:df:0b:ed:26:18:28:f6:0f: 9e:a1:26:47:9b:c0:03:65:f1:bb:c5:8e:22:41:cc: eb:c3:a6:35:73:5d:cd:71:0e:05:dd:03:ef:d3:42: 21:ea:e1:c0:dd:63:91:0e:42:eb:fd:93:1b:d8:f5: 15:05:77:dd:13:9d:70:c1:52:40:b1:68:bc:16:78: a4:02:91:ff:43:bf:c7:39:03:db:56:03:23:55:8a: 37:1e:38:6f:c5:28:df:80:7d:5d:af:e4:cf:6a:27: 74:91:b4:20:61:01:2b:03:ef:24:89:8b:08:e2:42: ae:b6:7d:90:a4:d3:ec:4e:21:b2:37:88:d6:d5:f1: 3f:de:05:e8:1c:17:53:34:b3:0e:82:f5:69:6f:a8: 4d:f4:3a:cc:51:89:54:e9:a8:ed:7e:6b:e1:fb:44: 09:77:ea:17:13:4a:2e:57:1b:c8:e1:02:ec:ce:f9: 39:52:07:64:ac:86:ec:a2:df:cd:80:c8:f9:e1:a1: 94:ff:c5:10:0e:ff:3d:98:f1:28:4e:8c:b3:07:3d: ea:a3:f2:18:cd:fd:74:5f:2a:78:02:e9:49:aa:c0: 54:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0F:01:93:7B:4F:52:26:52:9A:20:33:6E:6D:1E:05:76:B8:9E:E1 X509v3 Authority Key Identifier: keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/OA8Bk3tPUiZSmiAzbm0eBXa4nuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.183.0/24 Signature Algorithm: sha256WithRSAEncryption 81:c4:f4:81:1e:b0:ed:23:10:2b:6b:f9:21:44:ec:b1:08:ec: a8:05:54:de:21:a0:4b:88:b6:c9:b3:d3:57:29:72:86:b5:69: f5:68:a4:d2:c9:5f:f5:df:2e:62:de:9b:72:17:a4:0f:4e:09: be:dd:16:65:14:9b:4a:f2:c7:d5:c5:4f:58:bf:bd:07:a5:90: 0a:90:78:d9:97:51:73:4f:f4:32:47:84:6d:84:4f:b8:db:dd: 94:b8:d9:69:81:73:db:bb:d6:14:a8:82:f0:2d:5d:59:ea:ce: e2:01:2f:75:ec:04:00:70:55:88:cc:94:8a:cb:a3:a7:2e:2b: ef:7d:1f:53:51:09:89:1b:c6:6b:fd:a9:f4:cc:2e:fb:31:05: c1:4d:dc:0a:30:98:95:c4:48:aa:1c:a6:c0:d1:9b:bc:6a:c9: cb:f4:9f:46:e9:40:86:d6:cd:be:10:00:50:3f:14:b5:77:1f: ca:d0:9e:1a:fd:05:78:43:05:85:20:0a:76:f2:d8:ad:5c:ae: e4:40:cb:9a:f6:8b:3f:2c:ad:30:fe:bd:08:cb:ba:ae:93:d6: 3c:14:8b:35:21:ea:e2:4d:9a:6f:7a:1c:e2:0b:3d:ce:59:f6: 9e:31:e8:19:c1:78:85:cb:1d:18:48:63:79:9e:7d:0f:5e:66: 04:13:e0:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hZNZGf/xMQ5G8MUcgJPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGExMGEyNTY3MjhmMTFhNGJiYWFkYzMyMDRiN2YwYTM1 YTUwMDAwHhcNMjYwMTAyMTYyMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODBmMDE5MzdiNGY1MjI2NTI5YTIwMzM2ZTZkMWUwNTc2Yjg5ZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArljHZT+jaz/0T/J6rmWVB9IotlLt L36iEw/Pt0l7yKXPM5HQ3wvtJhgo9g+eoSZHm8ADZfG7xY4iQczrw6Y1c13NcQ4F 3QPv00Ih6uHA3WORDkLr/ZMb2PUVBXfdE51wwVJAsWi8FnikApH/Q7/HOQPbVgMj VYo3HjhvxSjfgH1dr+TPaid0kbQgYQErA+8kiYsI4kKutn2QpNPsTiGyN4jW1fE/ 3gXoHBdTNLMOgvVpb6hN9DrMUYlU6ajtfmvh+0QJd+oXE0ouVxvI4QLszvk5Ugdk rIbsot/NgMj54aGU/8UQDv89mPEoToyzBz3qo/IYzf10Xyp4AulJqsBU4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDgPAZN7T1ImUpogM25tHgV2uJ7hMB8GA1UdIwQY MBaAFJQKEKJWco8RpLuq3DIEt/CjWlAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYt ZGNlNmQ2OTA5MjQ3LzEvT0E4QmszdFBVaVpTbWlBemJtMGVCWGE0bnVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYtZGNlNmQ2OTA5MjQ3 LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ+3MA0G CSqGSIb3DQEBCwUAA4IBAQCBxPSBHrDtIxAra/khROyxCOyoBVTeIaBLiLbJs9NX KXKGtWn1aKTSyV/13y5i3ptyF6QPTgm+3RZlFJtK8sfVxU9Yv70HpZAKkHjZl1Fz T/QyR4RthE+4292UuNlpgXPbu9YUqILwLV1Z6s7iAS917AQAcFWIzJSKy6OnLivv fR9TUQmJG8Zr/an0zC77MQXBTdwKMJiVxEiqHKbA0Zu8asnL9J9G6UCG1s2+EABQ PxS1dx/K0J4a/QV4QwWFIAp28titXK7kQMua9os/LK0w/r0Iy7quk9Y8FIs1Ieri TZpvehziCz3OWfaeMegZwXiFyx0YSGN5nn0PXmYEE+CU -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:38 2026 by rpki-client