This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/0QB4hGdmgQ23kjW-TUuSRzgPgow.roa File: 0QB4hGdmgQ23kjW-TUuSRzgPgow.roa (raw, json) Hash identifier: 6Se7JsiswvT1Isj5Z4FQYmLgX+k5jQ8Jw0+TE5Kr+c4= Subject key identifier: D1:00:78:84:67:66:81:0D:B7:92:35:BE:4D:4B:92:47:38:0F:82:8C Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019B7D5B7F1848BAD7DE4AC7B8C134656B64 Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/0QB4hGdmgQ23kjW-TUuSRzgPgow.roa Signing time: Fri 02 Jan 2026 06:18:26 +0000 ROA not before: Fri 02 Jan 2026 06:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31655 IP address blocks: 83.245.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:7f:18:48:ba:d7:de:4a:c7:b8:c1:34:65:6b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Jan 2 06:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d10078846766810db79235be4d4b9247380f828c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a7:df:57:4b:16:43:70:f9:cd:66:4b:64:2e: 1c:0e:32:3f:30:59:47:32:0f:36:bd:6a:f0:3e:f5: b2:39:80:07:3a:43:6c:cf:a4:44:01:e8:2d:c9:ad: d9:81:3d:db:f5:3f:75:5a:a2:54:ba:d5:dc:05:98: 64:40:e8:87:66:f3:07:1e:87:04:3a:14:5b:e3:28: a6:2c:77:49:12:11:49:63:69:1e:bc:fe:97:9b:70: 8e:13:82:26:f9:af:f1:dc:6d:88:0c:b4:68:f6:6a: 19:6a:a4:94:a2:a5:fd:9f:54:2a:91:9b:41:d2:f0: 85:fe:3c:9e:03:d9:67:75:ac:dc:3f:3d:5f:cb:d0: 69:52:fa:5f:45:1a:42:cb:21:4b:f5:bc:38:8c:df: 2c:a1:00:82:de:9e:5b:26:19:11:62:db:39:57:46: 0c:26:e0:b1:14:72:f1:0c:53:24:a0:3e:34:e2:bd: 12:e9:dd:72:92:eb:50:fd:b7:7c:a7:d8:bb:d7:f4: f4:1b:a9:25:7c:52:4e:70:3b:12:72:7e:7d:36:d5: 95:38:af:43:3b:d1:bc:2e:42:00:48:bb:d5:30:42: 4a:a6:3b:1f:2f:fc:b9:fa:a5:6c:25:35:d5:ef:44: 48:e5:13:42:b0:ee:eb:d4:c4:c0:7d:3d:99:e3:19: 02:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:00:78:84:67:66:81:0D:B7:92:35:BE:4D:4B:92:47:38:0F:82:8C X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/0QB4hGdmgQ23kjW-TUuSRzgPgow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.245.6.0/24 Signature Algorithm: sha256WithRSAEncryption 55:e6:f9:44:92:51:42:ae:53:8d:61:a8:c7:0e:82:31:0e:31: 41:fa:27:28:61:5a:9e:ce:25:0e:c6:70:88:7e:73:17:c8:b1: 88:46:d9:7d:a4:86:81:d6:45:27:ff:22:85:a8:c1:4e:49:2a: eb:84:03:df:68:1e:c1:9e:fb:f4:47:42:7d:bc:a2:39:a7:e4: c3:de:bf:ad:d6:b6:0b:30:86:c7:7f:36:b6:de:b7:02:a4:bf: d0:69:7d:31:56:00:47:ff:02:0b:0f:10:fe:ea:58:5b:6a:3c: b9:6c:87:60:4f:88:80:02:59:6d:1f:0a:46:bc:e0:c0:84:69: ba:f6:c2:8d:5c:1f:fb:5b:be:14:68:62:f5:4f:99:85:33:d4: 8e:5d:06:09:4a:72:29:dd:14:a6:9f:9a:15:9d:83:8e:5a:5b: c3:d1:cc:3a:2a:00:2f:96:88:2f:7b:17:f5:84:4d:fd:dc:4b: e3:c0:61:30:cb:4f:d4:f5:9e:01:dd:e2:b9:39:7c:06:fe:14: 2b:30:62:aa:fb:1c:8c:9c:84:18:67:03:34:1d:c0:14:0b:d5: eb:86:fa:19:d5:c8:5d:46:4f:44:15:de:6d:05:22:49:38:84: ed:d6:10:bb:c6:11:29:1b:ed:72:ce:81:a9:5a:30:a3:f0:95: 38:a6:60:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W38YSLrX3krHuME0ZWtkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjYwMTAyMDYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTAwNzg4NDY3NjY4MTBkYjc5MjM1YmU0ZDRiOTI0NzM4MGY4MjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqffV0sWQ3D5zWZLZC4cDjI/MFlH Mg82vWrwPvWyOYAHOkNsz6REAegtya3ZgT3b9T91WqJUutXcBZhkQOiHZvMHHocE OhRb4yimLHdJEhFJY2kevP6Xm3COE4Im+a/x3G2IDLRo9moZaqSUoqX9n1QqkZtB 0vCF/jyeA9lndazcPz1fy9BpUvpfRRpCyyFL9bw4jN8soQCC3p5bJhkRYts5V0YM JuCxFHLxDFMkoD404r0S6d1ykutQ/bd8p9i71/T0G6klfFJOcDsScn59NtWVOK9D O9G8LkIASLvVMEJKpjsfL/y5+qVsJTXV70RI5RNCsO7r1MTAfT2Z4xkCrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNEAeIRnZoENt5I1vk1Lkkc4D4KMMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvMFFCNGhHZG1nUTIza2pXLVRVdVNSemdQZ293LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU/UGMA0G CSqGSIb3DQEBCwUAA4IBAQBV5vlEklFCrlONYajHDoIxDjFB+icoYVqeziUOxnCI fnMXyLGIRtl9pIaB1kUn/yKFqMFOSSrrhAPfaB7Bnvv0R0J9vKI5p+TD3r+t1rYL MIbHfza23rcCpL/QaX0xVgBH/wILDxD+6lhbajy5bIdgT4iAAlltHwpGvODAhGm6 9sKNXB/7W74UaGL1T5mFM9SOXQYJSnIp3RSmn5oVnYOOWlvD0cw6KgAvlogvexf1 hE393EvjwGEwy0/U9Z4B3eK5OXwG/hQrMGKq+xyMnIQYZwM0HcAUC9XrhvoZ1chd Rk9EFd5tBSJJOITt1hC7xhEpG+1yzoGpWjCj8JU4pmBo -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:13 2026 by rpki-client