This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/iO3SkKO1UQLda-9awSqU8lYbgSU.roa File: iO3SkKO1UQLda-9awSqU8lYbgSU.roa (raw, json) Hash identifier: rqIW3vWhfYP/PXzk9vOJK+ndWvAPgxulGED/LkU7CuE= Subject key identifier: 88:ED:D2:90:A3:B5:51:02:DD:6B:EF:5A:C1:2A:94:F2:56:1B:81:25 Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61 Certificate serial: 019B7FF21E0412FA126703352B5F3CCD3026 Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/iO3SkKO1UQLda-9awSqU8lYbgSU.roa Signing time: Fri 02 Jan 2026 18:22:12 +0000 ROA not before: Fri 02 Jan 2026 18:22:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34177 IP address blocks: 45.85.55.0/24 maxlen: 24 2a0e:b886::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:1e:04:12:fa:12:67:03:35:2b:5f:3c:cd:30:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61 Validity Not Before: Jan 2 18:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88edd290a3b55102dd6bef5ac12a94f2561b8125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:6d:4a:7e:54:8c:8d:9c:ac:a7:f2:3b:00: 92:54:9e:e7:5e:64:9b:39:59:ba:f6:cd:80:1a:55: 9b:7a:19:07:a6:4f:46:4d:dd:5f:8b:fe:e8:c5:b3: 56:a8:60:b4:fb:d3:7a:cc:47:99:e5:e0:c9:54:f0: 4a:d9:18:2e:85:0f:0f:5a:12:f9:4a:2d:79:71:4e: c2:bf:da:58:6b:a1:97:47:bf:3b:5e:a0:36:63:73: 54:0c:da:6f:a7:09:67:91:8d:ce:7d:21:b3:92:b0: 1e:4b:68:f8:12:ee:ba:8b:6a:0f:d9:67:25:20:22: 7e:de:7c:f1:76:b7:57:58:3c:b4:fe:e8:e2:a6:44: 7c:73:7d:01:f2:49:50:ea:76:5c:6e:2e:c1:f0:89: 51:85:41:06:9c:40:8a:4b:41:37:5c:a7:06:90:3c: 15:99:fb:fe:04:85:08:28:03:82:97:b4:f7:2f:7e: 5c:35:f1:5f:aa:61:23:55:c8:32:5d:68:8f:90:0e: 3b:ae:c0:d9:1b:43:31:ab:30:7d:e3:ad:40:a7:ff: 1c:57:5d:e0:da:e8:79:6e:18:e5:2b:c8:37:25:2c: 9b:a4:10:47:26:54:c5:0a:cc:cd:e1:cb:e6:6f:a8: bd:ab:10:3a:76:dc:c0:d9:4e:02:e1:17:8a:6e:b1: e4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:ED:D2:90:A3:B5:51:02:DD:6B:EF:5A:C1:2A:94:F2:56:1B:81:25 X509v3 Authority Key Identifier: keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/iO3SkKO1UQLda-9awSqU8lYbgSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.55.0/24 IPv6: 2a0e:b886::/31 Signature Algorithm: sha256WithRSAEncryption 4f:2d:27:11:ca:f3:0c:83:62:18:30:a6:1a:16:9d:44:b9:4d: 74:ba:4b:11:fe:e1:4f:e1:e3:0b:df:35:c2:ff:06:6a:18:3a: da:39:ab:28:ae:e5:21:4e:ff:51:88:05:95:3c:ac:35:4f:50: 79:1a:88:1b:a3:de:c3:a4:78:7c:5a:46:0f:95:8b:82:64:c1: 0f:4f:36:3e:0b:29:1d:fb:19:b5:b9:c6:c7:2c:f4:31:6b:1d: 41:0b:a0:9e:93:2b:c4:a9:d2:99:94:f1:9b:6e:51:0f:b3:df: 89:43:08:31:07:ab:f9:a2:ff:88:1a:54:a3:7d:f6:28:6d:3f: f4:f6:7f:3e:1e:d8:db:c6:04:d8:8d:80:fe:62:a8:f5:fd:d7: 0c:58:91:08:77:29:da:a2:09:30:bd:26:04:04:c5:1c:55:27: eb:d7:da:fe:78:5a:16:24:e5:7d:e9:7d:76:de:aa:b1:09:10: dc:e7:4c:53:b9:56:21:b4:5f:14:54:cd:ae:0f:df:9b:89:c7: af:78:f3:b2:e9:3b:98:a4:f4:b2:df:fe:4d:47:cb:7d:60:9d: f5:a6:0a:2f:eb:02:83:3b:fc:2e:74:12:15:fc:62:87:d9:a7: 5e:29:af:7e:bf:56:e9:5e:9e:bf:37:2b:5b:03:0d:0b:cc:05: 4d:9a:2c:e1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8h4EEvoSZwM1K188zTAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjM5ZDZjOGIyM2ZjZGMyMGU1MzE3NGU5MmZiM2Y1NmNh YThiNjEwHhcNMjYwMTAyMTgyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGVkZDI5MGEzYjU1MTAyZGQ2YmVmNWFjMTJhOTRmMjU2MWI4MTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJltSn5UjI2crKfyOwCSVJ7nXmSb OVm69s2AGlWbehkHpk9GTd1fi/7oxbNWqGC0+9N6zEeZ5eDJVPBK2RguhQ8PWhL5 Si15cU7Cv9pYa6GXR787XqA2Y3NUDNpvpwlnkY3OfSGzkrAeS2j4Eu66i2oP2Wcl ICJ+3nzxdrdXWDy0/ujipkR8c30B8klQ6nZcbi7B8IlRhUEGnECKS0E3XKcGkDwV mfv+BIUIKAOCl7T3L35cNfFfqmEjVcgyXWiPkA47rsDZG0MxqzB9461Ap/8cV13g 2uh5bhjlK8g3JSybpBBHJlTFCszN4cvmb6i9qxA6dtzA2U4C4ReKbrHkuQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIjt0pCjtVEC3WvvWsEqlPJWG4ElMB8GA1UdIwQY MBaAFEnznWyLI/zcIOUxdOkvs/VsqothMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAt N2E1MDQzYzkxOGY5LzEvaU8zU2tLTzFVUUxkYS05YXdTcVU4bFliZ1NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAtN2E1MDQzYzkxOGY5 LzEvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALVU3MA0E AgACMAcDBQEqDriGMA0GCSqGSIb3DQEBCwUAA4IBAQBPLScRyvMMg2IYMKYaFp1E uU10uksR/uFP4eML3zXC/wZqGDraOasoruUhTv9RiAWVPKw1T1B5Gogbo97DpHh8 WkYPlYuCZMEPTzY+Cykd+xm1ucbHLPQxax1BC6CekyvEqdKZlPGbblEPs9+JQwgx B6v5ov+IGlSjffYobT/09n8+HtjbxgTYjYD+Yqj1/dcMWJEIdynaogkwvSYEBMUc VSfr19r+eFoWJOV96X123qqxCRDc50xTuVYhtF8UVM2uD9+bicevePOy6TuYpPSy 3/5NR8t9YJ31pgov6wKDO/wudBIV/GKH2adeKa9+v1bpXp6/NytbAw0LzAVNmizh -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:43 2026 by rpki-client