This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Ao3_1JnAIKQ53g26ra_p2Xc31no.roa File: Ao3_1JnAIKQ53g26ra_p2Xc31no.roa (raw, json) Hash identifier: y8RwxUjPjtLfgJxidbonDN274hmASscDzTWiI7c8qRI= Subject key identifier: 02:8D:FF:D4:99:C0:20:A4:39:DE:0D:BA:AD:AF:E9:D9:77:37:D6:7A Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019BDFA9BCD405904D84E2F714FE15579DBC Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Ao3_1JnAIKQ53g26ra_p2Xc31no.roa Signing time: Wed 21 Jan 2026 08:26:41 +0000 ROA not before: Wed 21 Jan 2026 08:26:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57844 IP address blocks: 45.83.182.0/24 maxlen: 24 45.83.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:a9:bc:d4:05:90:4d:84:e2:f7:14:fe:15:57:9d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 21 08:26:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=028dffd499c020a439de0dbaadafe9d97737d67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:00:d9:06:3a:da:4b:51:4e:9f:35:46:c2:e9: b0:e7:4e:e9:ff:bc:18:17:0c:83:2e:8c:6e:d1:81: 54:c9:76:6d:36:e4:50:56:cc:f5:8d:1b:67:04:ce: c9:41:73:53:00:34:40:68:6e:47:8a:e9:32:ac:6b: 99:bc:ef:69:53:3e:1f:6b:01:1c:e7:f2:2d:8a:66: 66:79:52:4b:cc:72:0d:96:d8:c7:5c:4b:e6:f5:4a: 3d:91:45:5a:28:2b:1c:29:47:2f:a8:d6:41:11:7d: 20:28:8b:24:77:db:60:35:3d:23:d3:f5:53:c7:f9: 14:7b:48:cc:92:bd:d6:f8:eb:f3:16:09:5c:c5:0a: 3a:8d:69:c4:ef:b2:18:45:2e:a8:e6:2b:d6:45:5c: d2:73:ae:c1:aa:6b:60:16:70:ff:80:19:f4:14:e9: 86:18:7d:f8:61:96:33:e8:ce:b4:e2:e1:79:76:ca: c8:1c:dd:24:03:8a:cd:b4:3d:4e:a0:2a:da:c0:0c: fb:3d:15:ed:52:43:f0:5f:50:bc:03:14:4e:68:d4: 23:14:7f:43:eb:0b:7d:a4:aa:9e:d0:0d:1b:74:fe: 0d:14:74:76:19:cb:87:9c:56:c4:f7:b9:59:c9:ea: f1:26:b4:49:de:98:fb:1d:f0:63:92:f9:81:5f:3c: 07:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8D:FF:D4:99:C0:20:A4:39:DE:0D:BA:AD:AF:E9:D9:77:37:D6:7A X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Ao3_1JnAIKQ53g26ra_p2Xc31no.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.182.0/23 Signature Algorithm: sha256WithRSAEncryption 86:72:5b:2b:c8:f5:3e:0e:f2:fc:c3:b7:f7:19:5b:f6:51:99: ab:64:42:35:67:4f:7b:4b:18:bb:7b:b5:ed:15:6b:48:26:6a: d8:84:ab:dd:70:b7:b0:b9:4c:99:13:b9:51:3e:44:89:d4:09: 48:ef:48:70:32:75:7b:bc:97:fe:9b:e0:79:a2:01:55:7d:23: d7:3a:36:2a:e9:b1:05:62:1c:cf:ff:4d:28:f4:92:b5:b1:57: 67:3c:d9:60:70:27:1d:6d:66:f1:7e:f6:0e:65:ef:49:d5:db: c6:af:bb:fc:8d:a8:50:60:ab:d9:2e:67:85:ea:c4:4d:b4:80: c9:d1:54:09:8d:81:9c:6f:c9:3a:d8:47:5b:87:31:39:05:78: 4d:9b:d8:47:97:81:80:ec:5f:e8:89:90:36:41:3b:ed:40:39: 1c:8b:c7:3c:b9:26:9c:aa:9d:24:34:8c:c6:53:24:c9:66:4d: eb:4c:14:bf:31:b3:e3:e2:b4:7f:a7:1e:2e:8b:31:c6:cd:b8: 2c:95:5c:76:bf:77:f5:63:34:f0:14:7a:a3:40:c3:61:31:a5: 9e:77:92:eb:55:03:54:ae:f2:84:47:8f:8c:53:b0:ef:0c:66: 27:4c:62:bb:70:7c:91:36:14:25:29:92:0f:db:ec:74:af:d2: 25:32:84:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvfqbzUBZBNhOL3FP4VV528MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTIxMDgyNjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjhkZmZkNDk5YzAyMGE0MzlkZTBkYmFhZGFmZTlkOTc3MzdkNjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzADZBjraS1FOnzVGwumw507p/7wY FwyDLoxu0YFUyXZtNuRQVsz1jRtnBM7JQXNTADRAaG5HiukyrGuZvO9pUz4fawEc 5/ItimZmeVJLzHINltjHXEvm9Uo9kUVaKCscKUcvqNZBEX0gKIskd9tgNT0j0/VT x/kUe0jMkr3W+OvzFglcxQo6jWnE77IYRS6o5ivWRVzSc67BqmtgFnD/gBn0FOmG GH34YZYz6M604uF5dsrIHN0kA4rNtD1OoCrawAz7PRXtUkPwX1C8AxROaNQjFH9D 6wt9pKqe0A0bdP4NFHR2GcuHnFbE97lZyerxJrRJ3pj7HfBjkvmBXzwHjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAKN/9SZwCCkOd4Nuq2v6dl3N9Z6MB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvQW8zXzFKbkFJS1E1M2cyNnJhX3AyWGMzMW5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVO2MA0G CSqGSIb3DQEBCwUAA4IBAQCGclsryPU+DvL8w7f3GVv2UZmrZEI1Z097Sxi7e7Xt FWtIJmrYhKvdcLewuUyZE7lRPkSJ1AlI70hwMnV7vJf+m+B5ogFVfSPXOjYq6bEF YhzP/00o9JK1sVdnPNlgcCcdbWbxfvYOZe9J1dvGr7v8jahQYKvZLmeF6sRNtIDJ 0VQJjYGcb8k62EdbhzE5BXhNm9hHl4GA7F/oiZA2QTvtQDkci8c8uSacqp0kNIzG UyTJZk3rTBS/MbPj4rR/px4uizHGzbgslVx2v3f1YzTwFHqjQMNhMaWed5LrVQNU rvKER4+MU7DvDGYnTGK7cHyRNhQlKZIP2+x0r9IlMoQs -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:26 2026 by rpki-client