This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/odsSUTtPJPY75I9Zu_ls8a1wvOc.roa File: odsSUTtPJPY75I9Zu_ls8a1wvOc.roa (raw, json) Hash identifier: 8zQ2Vdy6wu34NWAET+jUEJ6+Fe7oiwnmUhMA5ElAuFs= Subject key identifier: A1:DB:12:51:3B:4F:24:F6:3B:E4:8F:59:BB:F9:6C:F1:AD:70:BC:E7 Certificate issuer: /CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091 Certificate serial: 019B78A29F8195609200A31205E0F4F5FEF1 Authority key identifier: 22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/odsSUTtPJPY75I9Zu_ls8a1wvOc.roa Signing time: Thu 01 Jan 2026 08:18:02 +0000 ROA not before: Thu 01 Jan 2026 08:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209427 IP address blocks: 45.66.90.0/24 maxlen: 24 45.66.91.0/24 maxlen: 24 2a09:6644::/48 maxlen: 48 2a09:6644:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.mft rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9f:81:95:60:92:00:a3:12:05:e0:f4:f5:fe:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=220ab0d7ae01c7ba7da69d71a91472b390cd7091 Validity Not Before: Jan 1 08:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1db12513b4f24f63be48f59bbf96cf1ad70bce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:15:95:eb:8c:7f:8c:23:63:aa:ad:90:22: 79:5e:f6:54:2a:ac:08:1a:2c:72:e4:2d:c6:78:d6: 3b:36:ff:dc:29:25:f3:ef:88:4a:4a:33:ed:13:1f: 24:d5:dd:19:e9:2d:e3:cd:54:90:ed:c8:24:24:cb: 91:2b:7f:61:41:77:4b:33:cd:9b:ac:b4:19:b2:5d: 4a:19:c0:80:04:0b:1d:9a:1a:26:8a:3b:70:72:92: 55:32:7a:d8:a1:02:e7:78:c2:6f:55:28:da:a9:22: bb:e9:8a:4d:0c:1f:f6:6c:44:9d:69:36:91:88:2d: 59:93:13:1f:63:ee:ba:0f:9a:02:0a:68:6d:cf:c5: a0:5c:8c:ba:b6:a9:3f:17:68:01:cb:16:81:d2:97: 45:dc:f5:d7:a8:5e:17:48:c0:72:cc:ae:42:75:58: e6:c2:af:2e:69:3d:d7:53:5f:6c:0a:43:76:a5:77: bd:c1:d5:1c:d8:70:99:2f:21:30:4a:91:42:15:5d: b0:53:8a:d6:98:df:67:93:71:dd:fa:d6:ae:88:4e: 3c:62:1e:be:06:ca:af:58:93:3a:53:74:20:4c:c3: 17:b0:31:c7:50:29:ee:6d:0a:f1:52:10:a3:53:8f: 0f:28:d7:0c:d6:9f:e8:51:9b:1d:b2:e9:ef:27:bb: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DB:12:51:3B:4F:24:F6:3B:E4:8F:59:BB:F9:6C:F1:AD:70:BC:E7 X509v3 Authority Key Identifier: keyid:22:0A:B0:D7:AE:01:C7:BA:7D:A6:9D:71:A9:14:72:B3:90:CD:70:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igqw164Bx7p9pp1xqRRys5DNcJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/odsSUTtPJPY75I9Zu_ls8a1wvOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f04658-fad7-423c-bb42-82fa3d260869/1/Igqw164Bx7p9pp1xqRRys5DNcJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.90.0/23 IPv6: 2a09:6644::/47 Signature Algorithm: sha256WithRSAEncryption 6b:2f:41:86:ba:72:5a:49:26:51:5d:2c:90:15:36:87:cb:13: 70:cd:e9:05:33:fe:d5:59:36:ed:85:00:52:63:11:ce:1d:b2: 7c:2a:ea:38:cf:77:48:e5:85:69:87:15:8d:bb:8a:1c:d8:9a: 8d:8e:09:fa:0e:ae:28:e2:00:bc:62:4c:48:de:92:41:19:8f: c9:24:fc:25:d8:7e:66:6d:8b:27:04:8c:42:7e:4a:4f:a0:bf: 94:b3:98:9f:4e:c9:ae:5a:50:99:d0:3a:49:42:37:ba:a4:a5: fb:db:f2:7e:5b:09:3a:d8:84:f5:67:3e:67:ed:5a:4b:a9:54: 34:80:97:ac:d2:25:f5:c2:9c:96:de:58:26:6f:49:c2:24:c1: 58:4e:63:17:0c:c1:ad:39:f6:a4:26:9f:94:73:73:09:e4:ff: a1:ea:07:5c:80:09:f2:14:f1:5a:c1:12:b6:7f:6f:1f:a0:7c: f1:09:ba:d4:f7:2a:43:f0:dc:7b:3f:d7:12:75:95:98:14:4d: 38:aa:e5:63:42:8f:40:0c:0a:b3:24:01:6f:ef:61:bb:49:04: ad:1e:d3:93:65:4a:07:52:f8:e5:dc:3c:da:79:d6:d8:01:8b: 58:55:72:10:55:26:df:e4:5a:57:b9:6b:0d:15:e2:b5:7b:d4: 1e:b4:6a:3f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4op+BlWCSAKMSBeD09f7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMGFiMGQ3YWUwMWM3YmE3ZGE2OWQ3MWE5MTQ3MmIzOTBj ZDcwOTEwHhcNMjYwMTAxMDgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWRiMTI1MTNiNGYyNGY2M2JlNDhmNTliYmY5NmNmMWFkNzBiY2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygQVleuMf4wjY6qtkCJ5XvZUKqwI Gixy5C3GeNY7Nv/cKSXz74hKSjPtEx8k1d0Z6S3jzVSQ7cgkJMuRK39hQXdLM82b rLQZsl1KGcCABAsdmhomijtwcpJVMnrYoQLneMJvVSjaqSK76YpNDB/2bESdaTaR iC1ZkxMfY+66D5oCCmhtz8WgXIy6tqk/F2gByxaB0pdF3PXXqF4XSMByzK5CdVjm wq8uaT3XU19sCkN2pXe9wdUc2HCZLyEwSpFCFV2wU4rWmN9nk3Hd+tauiE48Yh6+ BsqvWJM6U3QgTMMXsDHHUCnubQrxUhCjU48PKNcM1p/oUZsdsunvJ7vYLQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKHbElE7TyT2O+SPWbv5bPGtcLznMB8GA1UdIwQY MBaAFCIKsNeuAce6faadcakUcrOQzXCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDIt ODJmYTNkMjYwODY5LzEvb2RzU1VUdFBKUFk3NUk5WnVfbHM4YTF3dk9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mMDQ2NTgtZmFkNy00MjNjLWJiNDItODJmYTNkMjYwODY5 LzEvSWdxdzE2NEJ4N3A5cHAxeHFSUnlzNUROY0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBLUJaMA8E AgACMAkDBwEqCWZEAAAwDQYJKoZIhvcNAQELBQADggEBAGsvQYa6clpJJlFdLJAV NofLE3DN6QUz/tVZNu2FAFJjEc4dsnwq6jjPd0jlhWmHFY27ihzYmo2OCfoOriji ALxiTEjekkEZj8kk/CXYfmZtiycEjEJ+Sk+gv5SzmJ9Oya5aUJnQOklCN7qkpfvb 8n5bCTrYhPVnPmftWkupVDSAl6zSJfXCnJbeWCZvScIkwVhOYxcMwa059qQmn5Rz cwnk/6HqB1yACfIU8VrBErZ/bx+gfPEJutT3KkPw3Hs/1xJ1lZgUTTiq5WNCj0AM CrMkAW/vYbtJBK0e05NlSgdS+OXcPNp51tgBi1hVchBVJt/kWle5aw0V4rV71B60 aj8= -----END CERTIFICATE-----Generated at Tue Jan 27 00:11:06 2026 by rpki-client