This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/obFwaT_4MZtX-dKod3UGli-Mmuo.roa File: obFwaT_4MZtX-dKod3UGli-Mmuo.roa (raw, json) Hash identifier: S1tcUGtkx7R83UYo2rACVKW3cgPV5XEnzrmsW37TA/Q= Subject key identifier: A1:B1:70:69:3F:F8:31:9B:57:F9:D2:A8:77:75:06:96:2F:8C:9A:EA Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019B7BA3C57752E83D2878BB91A8A6669586 Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/obFwaT_4MZtX-dKod3UGli-Mmuo.roa Signing time: Thu 01 Jan 2026 22:18:09 +0000 ROA not before: Thu 01 Jan 2026 22:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28753 IP address blocks: 45.14.81.0/24 maxlen: 24 185.45.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c5:77:52:e8:3d:28:78:bb:91:a8:a6:66:95:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1b170693ff8319b57f9d2a8777506962f8c9aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9b:ab:9e:0f:2e:55:0e:7e:a0:44:29:26:e1: d0:fb:6f:2d:df:82:9d:01:49:98:52:92:b4:7a:ae: 1a:dc:45:d5:f8:da:65:40:30:00:a7:43:81:15:7e: 11:bf:9b:0a:58:f1:97:2d:af:ed:44:8a:bb:ee:59: 21:02:3e:8d:99:d9:d5:13:b9:58:db:dd:a6:d8:43: ab:2b:20:6e:83:25:eb:d0:32:c5:d5:1a:43:e6:b5: c2:8b:09:a6:fc:b8:1a:ed:24:33:6e:06:e3:40:d7: f1:90:6e:76:b2:7d:b5:84:47:6f:97:0d:83:4a:09: d6:bf:ad:47:41:7f:f0:11:e7:75:77:fc:9a:72:aa: 19:c4:70:d6:5d:96:cd:32:8c:df:e1:e5:38:66:cc: 36:6c:77:48:05:c6:cf:06:58:c3:59:ee:c8:c0:c3: 9b:ed:69:c1:3b:01:3c:bd:a9:5e:dd:56:c6:1b:ee: c6:d4:41:2d:39:8e:52:9a:0c:80:cf:ba:a3:d0:1a: 27:1b:f9:5e:b9:d5:d5:0c:23:d0:78:34:2d:cf:08: b0:ff:68:8d:ab:c4:53:96:55:45:d5:29:73:b8:58: 6a:4a:f8:9e:48:26:b8:7a:01:3c:12:52:de:31:2a: 22:5d:07:d6:c6:86:eb:8e:9a:4f:7e:6d:90:ce:92: de:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B1:70:69:3F:F8:31:9B:57:F9:D2:A8:77:75:06:96:2F:8C:9A:EA X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/obFwaT_4MZtX-dKod3UGli-Mmuo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.81.0/24 185.45.94.0/24 Signature Algorithm: sha256WithRSAEncryption 70:f1:48:99:bc:65:09:b3:b1:97:11:2d:1a:02:08:73:8b:f8: 57:4d:4c:c5:2f:71:46:71:46:b8:bf:db:7f:20:c9:95:db:67: 72:46:33:d3:b8:18:25:28:77:c1:1e:53:e1:29:e8:f9:3e:0f: 5b:db:04:22:81:6b:39:80:ff:68:f1:43:30:23:21:c0:ea:ca: e7:9d:6d:99:9f:47:95:46:dd:75:ca:0c:05:5b:06:9b:9f:ee: da:17:87:f6:97:da:0e:a4:52:c0:71:4b:7a:62:86:74:53:72: ad:3b:69:de:59:3b:41:3d:e5:29:44:f8:38:1a:6f:dc:89:71: ec:34:f4:72:f0:74:16:0b:c2:64:16:7d:2a:a5:de:0b:c3:e1: e1:24:53:9d:25:af:ff:99:fd:5a:6c:4c:72:a9:6a:ac:a2:b4: 9f:06:60:e2:a5:a7:6d:d1:5e:3f:50:21:e2:97:08:a5:38:98: c6:39:f9:12:6b:3f:f5:a5:4c:77:bd:5c:66:32:6f:e8:1c:d0: 10:df:fc:58:34:05:7a:e2:05:8f:ad:49:b5:01:4e:c4:77:73: f6:39:5b:11:c5:dd:29:d6:ab:4e:5d:64:6c:a4:74:7f:84:43: 06:b4:47:1b:55:96:4d:d0:71:43:8a:9d:d4:cc:51:f9:4b:38: 99:62:18:63 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o8V3Uug9KHi7kaimZpWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWIxNzA2OTNmZjgzMTliNTdmOWQyYTg3Nzc1MDY5NjJmOGM5YWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZurng8uVQ5+oEQpJuHQ+28t34Kd AUmYUpK0eq4a3EXV+NplQDAAp0OBFX4Rv5sKWPGXLa/tRIq77lkhAj6NmdnVE7lY 292m2EOrKyBugyXr0DLF1RpD5rXCiwmm/Lga7SQzbgbjQNfxkG52sn21hEdvlw2D SgnWv61HQX/wEed1d/yacqoZxHDWXZbNMozf4eU4Zsw2bHdIBcbPBljDWe7IwMOb 7WnBOwE8vale3VbGG+7G1EEtOY5SmgyAz7qj0BonG/leudXVDCPQeDQtzwiw/2iN q8RTllVF1SlzuFhqSvieSCa4egE8ElLeMSoiXQfWxobrjppPfm2QzpLetwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKGxcGk/+DGbV/nSqHd1BpYvjJrqMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvb2JGd2FUXzRNWnRYLWRLb2QzVUdsaS1NbXVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQ5RAwQA uS1eMA0GCSqGSIb3DQEBCwUAA4IBAQBw8UiZvGUJs7GXES0aAghzi/hXTUzFL3FG cUa4v9t/IMmV22dyRjPTuBglKHfBHlPhKej5Pg9b2wQigWs5gP9o8UMwIyHA6srn nW2Zn0eVRt11ygwFWwabn+7aF4f2l9oOpFLAcUt6YoZ0U3KtO2neWTtBPeUpRPg4 Gm/ciXHsNPRy8HQWC8JkFn0qpd4Lw+HhJFOdJa//mf1abExyqWqsorSfBmDipadt 0V4/UCHilwilOJjGOfkSaz/1pUx3vVxmMm/oHNAQ3/xYNAV64gWPrUm1AU7Ed3P2 OVsRxd0p1qtOXWRspHR/hEMGtEcbVZZN0HFDip3UzFH5SziZYhhj -----END CERTIFICATE-----Generated at Wed Jan 7 17:19:32 2026 by rpki-client