This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/f2xHXHMuYDn0X5Hx_WOxhcp_OSM.roa File: f2xHXHMuYDn0X5Hx_WOxhcp_OSM.roa (raw, json) Hash identifier: jVp5NZgxrwcVz5kDb28HKubLbBcKUnHD4R0wpzd6ys4= Subject key identifier: 7F:6C:47:5C:73:2E:60:39:F4:5F:91:F1:FD:63:B1:85:CA:7F:39:23 Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0 Certificate serial: 019B7F8536412C2E0087D4CE54891F754ADE Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/f2xHXHMuYDn0X5Hx_WOxhcp_OSM.roa Signing time: Fri 02 Jan 2026 16:23:15 +0000 ROA not before: Fri 02 Jan 2026 16:23:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209784 IP address blocks: 45.148.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:36:41:2c:2e:00:87:d4:ce:54:89:1f:75:4a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0 Validity Not Before: Jan 2 16:23:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f6c475c732e6039f45f91f1fd63b185ca7f3923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:db:81:a6:7c:d0:68:b4:b0:05:2d:93:21: c3:64:40:49:a8:6c:50:cd:66:29:02:d8:bf:a7:a1: c7:d7:f6:fe:3b:76:dc:2a:bd:d1:a1:78:9d:dc:70: 25:0d:f6:9b:bd:79:04:81:f3:3f:c2:cd:ff:7e:ca: 02:e0:0c:14:3c:35:5c:90:ae:96:12:54:d7:fe:c0: 20:39:9e:10:c1:75:b6:99:94:76:4f:24:d2:b9:2d: 66:9b:06:ac:12:aa:5f:17:b2:a8:f1:db:05:92:5a: 35:e2:8a:98:69:5f:cc:f9:5f:00:7e:41:93:8c:3e: 8d:e3:7b:aa:56:fe:ce:03:d0:d1:5d:de:bf:e3:d0: 4d:6a:ab:50:eb:4d:ab:d3:b5:1c:e4:75:bc:0b:6a: 3f:35:15:6c:51:0f:20:86:8b:48:30:57:86:1f:5a: bd:40:96:aa:66:32:97:17:89:9d:0c:0e:e5:41:58: dc:bc:40:96:f5:9d:14:5d:b8:5b:54:d6:ce:00:7f: ad:46:40:11:45:0c:ec:73:7f:29:a7:f3:3b:04:32: 9b:96:c3:1c:b9:f2:df:07:df:e3:31:c8:57:69:1a: cd:91:65:df:98:df:7d:d7:34:ff:9f:86:ba:3c:a0: d0:8f:5e:87:ff:a9:5f:22:f8:d3:08:ec:63:2f:41: 0a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6C:47:5C:73:2E:60:39:F4:5F:91:F1:FD:63:B1:85:CA:7F:39:23 X509v3 Authority Key Identifier: keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/f2xHXHMuYDn0X5Hx_WOxhcp_OSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.211.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:6a:9a:40:bc:f9:06:c8:90:e9:33:02:fa:4b:21:8f:1f:62: ac:e7:54:59:88:2e:cf:c4:6c:1a:53:8f:b3:08:2f:f3:76:e6: 34:05:a5:13:e7:e3:3b:cc:a1:4a:35:05:5e:8d:ed:e6:83:31: 84:be:2f:98:a3:a4:4b:59:ad:67:1d:0f:27:f1:0a:54:55:e2: 9e:a0:69:f4:a5:9f:a8:1e:f6:24:3a:f2:22:2f:1e:f4:f6:22: 02:97:8c:85:80:79:9d:9b:a3:f2:2e:d2:b2:4c:6a:3f:d2:9f: a9:18:de:85:04:28:07:f7:d6:8d:93:95:dd:fe:b3:ae:75:13: 1f:b2:02:de:90:5c:2f:86:e1:99:c4:0b:9c:c1:d7:1d:20:c2: 9b:75:79:0f:01:a1:c3:28:0e:a0:1a:05:9d:14:08:97:f5:43: f4:d8:25:b6:73:dd:fd:4f:81:d4:1e:91:85:14:43:02:ea:ec: 49:11:db:82:06:da:23:51:79:5c:ed:0d:1c:37:f3:4e:4e:2e: 66:5a:8a:f4:a1:35:31:50:a0:83:25:61:a6:76:53:d0:69:da: d6:07:bc:0a:ab:92:5e:b4:be:4c:ae:33:77:44:3a:17:fe:cf: d3:c4:71:91:3b:55:8a:ed:99:d8:6f:7b:54:6f:03:45:83:0e: 31:8e:b4:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hTZBLC4Ah9TOVIkfdUreMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNzhiYWVlNmI2ZWM1NDI1YTE2YjFmYzAwYzUyYzMwZWQ5 NWEzZjAwHhcNMjYwMTAyMTYyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjZjNDc1YzczMmU2MDM5ZjQ1ZjkxZjFmZDYzYjE4NWNhN2YzOTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqTbgaZ80Gi0sAUtkyHDZEBJqGxQ zWYpAti/p6HH1/b+O3bcKr3RoXid3HAlDfabvXkEgfM/ws3/fsoC4AwUPDVckK6W ElTX/sAgOZ4QwXW2mZR2TyTSuS1mmwasEqpfF7Ko8dsFklo14oqYaV/M+V8AfkGT jD6N43uqVv7OA9DRXd6/49BNaqtQ602r07Uc5HW8C2o/NRVsUQ8ghotIMFeGH1q9 QJaqZjKXF4mdDA7lQVjcvECW9Z0UXbhbVNbOAH+tRkARRQzsc38pp/M7BDKblsMc ufLfB9/jMchXaRrNkWXfmN991zT/n4a6PKDQj16H/6lfIvjTCOxjL0EKNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH9sR1xzLmA59F+R8f1jsYXKfzkjMB8GA1UdIwQY MBaAFCB4uu5rbsVCWhax/ADFLDDtlaPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDct Y2E1MWZiNDA4OTAxLzEvZjJ4SFhITXVZRG4wWDVIeF9XT3hoY3BfT1NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDctY2E1MWZiNDA4OTAx LzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZTTMA0G CSqGSIb3DQEBCwUAA4IBAQCMappAvPkGyJDpMwL6SyGPH2Ks51RZiC7PxGwaU4+z CC/zduY0BaUT5+M7zKFKNQVeje3mgzGEvi+Yo6RLWa1nHQ8n8QpUVeKeoGn0pZ+o HvYkOvIiLx709iICl4yFgHmdm6PyLtKyTGo/0p+pGN6FBCgH99aNk5Xd/rOudRMf sgLekFwvhuGZxAucwdcdIMKbdXkPAaHDKA6gGgWdFAiX9UP02CW2c939T4HUHpGF FEMC6uxJEduCBtojUXlc7Q0cN/NOTi5mWor0oTUxUKCDJWGmdlPQadrWB7wKq5Je tL5MrjN3RDoX/s/TxHGRO1WK7ZnYb3tUbwNFgw4xjrQE -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:19 2026 by rpki-client