This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/DoG1nIvAyF6Ofk7B7oBXD9fCbWY.roa File: DoG1nIvAyF6Ofk7B7oBXD9fCbWY.roa (raw, json) Hash identifier: 9biYSv6POYCwfleLHgkM4hjjkLE1P6h07qcPCt2vZ8Q= Subject key identifier: 0E:81:B5:9C:8B:C0:C8:5E:8E:7E:4E:C1:EE:80:57:0F:D7:C2:6D:66 Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6 Certificate serial: 019B79ECD54ADB065174A110018A5F72F1D8 Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/DoG1nIvAyF6Ofk7B7oBXD9fCbWY.roa Signing time: Thu 01 Jan 2026 14:18:42 +0000 ROA not before: Thu 01 Jan 2026 14:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 45.147.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 05:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d5:4a:db:06:51:74:a1:10:01:8a:5f:72:f1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6 Validity Not Before: Jan 1 14:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e81b59c8bc0c85e8e7e4ec1ee80570fd7c26d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:83:d2:01:00:75:3d:61:b3:2d:7b:d4:2f:93: fc:64:6b:8c:88:ab:6e:e1:e5:d2:01:25:1f:41:40: 6f:32:c9:6a:21:7d:b6:66:39:21:72:a6:79:c3:8e: 71:e7:40:72:45:2b:f3:d1:9c:b8:01:c2:77:b8:e1: 44:cd:18:97:be:9e:fc:02:82:15:a6:a8:8b:d8:bf: e9:a1:cd:8c:e2:35:a5:ad:ae:33:dd:71:7f:d5:93: b4:ff:48:7a:bb:1e:b8:75:2d:64:7f:1f:b3:4d:60: 26:f7:e2:6b:9d:41:a8:3f:23:8d:42:30:49:e4:a9: d9:03:f3:3d:91:d4:c2:7c:c9:e3:67:39:9f:65:1b: 1f:00:f9:42:dc:1b:57:27:bc:10:df:74:da:53:07: 11:5f:1c:a2:45:ce:c1:2d:be:2f:5d:9e:18:90:a4: 27:75:6c:a9:a6:c1:9e:7e:8d:e6:ce:25:09:09:2d: 5b:91:e6:3d:f6:76:1b:b4:b9:5b:10:8c:05:4e:d4: b3:5d:2f:84:34:57:28:cc:2b:32:e2:a2:50:b2:3e: 62:69:cd:3d:26:84:65:b6:6b:43:28:1a:78:e3:a6: 2d:c6:ed:35:1e:06:7b:9e:ab:7e:cd:54:2e:a2:63: 4e:c4:2e:7b:63:ab:43:35:9b:ac:23:66:d2:5e:36: d7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:81:B5:9C:8B:C0:C8:5E:8E:7E:4E:C1:EE:80:57:0F:D7:C2:6D:66 X509v3 Authority Key Identifier: keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/DoG1nIvAyF6Ofk7B7oBXD9fCbWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.166.0/24 Signature Algorithm: sha256WithRSAEncryption 69:e5:eb:a9:f1:67:5d:d9:27:09:11:36:14:c4:da:8d:87:68: 24:56:b7:67:de:89:fe:16:8e:a5:2d:41:09:df:db:a8:26:77: 3e:2e:0a:fc:a0:f5:5e:e1:d4:7a:cd:ae:73:15:4b:f0:be:f8: 93:66:cf:6d:de:9a:16:2f:1c:f5:e1:29:f0:23:c1:69:2c:a6: 2e:81:bc:2f:b4:ff:77:6c:c0:6c:bb:21:41:04:f4:45:4a:93: 12:78:93:87:1c:2d:be:3f:40:ac:77:50:d4:0b:67:08:66:2b: 31:33:86:c8:ad:79:55:20:2f:85:6e:9f:16:2b:bd:7b:fc:27: d6:12:2e:81:4b:ea:8f:9f:03:24:40:c3:ef:b6:8e:bf:66:a5: fb:bb:b1:06:99:a0:b2:85:31:a3:3d:89:e9:a5:d1:2c:ad:3d: 64:1b:0b:17:85:af:a9:f8:74:45:87:42:0f:19:44:ab:eb:e1: 17:7f:d5:cc:94:27:18:2e:66:9c:a9:a8:00:32:fc:48:69:e0: ce:60:a0:40:d7:e6:b6:51:08:57:b1:c7:10:a8:14:86:5a:b7: 72:f7:4c:f3:f3:a2:27:97:db:c8:90:2e:0a:c6:f2:4f:08:c5: 0d:fc:be:63:e9:45:be:40:ac:fa:4a:a7:d6:f6:69:b9:2e:45: 1f:60:01:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57NVK2wZRdKEQAYpfcvHYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MjFhMzlhZWQ5ZGE0ZWUzYWI2NjM5ZDI0NDUwOGZhMWU4 ZDIwZjYwHhcNMjYwMTAxMTQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTgxYjU5YzhiYzBjODVlOGU3ZTRlYzFlZTgwNTcwZmQ3YzI2ZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIPSAQB1PWGzLXvUL5P8ZGuMiKtu 4eXSASUfQUBvMslqIX22ZjkhcqZ5w45x50ByRSvz0Zy4AcJ3uOFEzRiXvp78AoIV pqiL2L/poc2M4jWlra4z3XF/1ZO0/0h6ux64dS1kfx+zTWAm9+JrnUGoPyONQjBJ 5KnZA/M9kdTCfMnjZzmfZRsfAPlC3BtXJ7wQ33TaUwcRXxyiRc7BLb4vXZ4YkKQn dWyppsGefo3mziUJCS1bkeY99nYbtLlbEIwFTtSzXS+ENFcozCsy4qJQsj5iac09 JoRltmtDKBp446Ytxu01HgZ7nqt+zVQuomNOxC57Y6tDNZusI2bSXjbXewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA6BtZyLwMhejn5Owe6AVw/Xwm1mMB8GA1UdIwQY MBaAFIgho5rtnaTuOrZjnSRFCPoejSD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAt ZjYwZDZmNzE4MmExLzEvRG9HMW5JdkF5RjZPZms3QjdvQlhEOWZDYldZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAtZjYwZDZmNzE4MmEx LzEvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZOmMA0G CSqGSIb3DQEBCwUAA4IBAQBp5eup8Wdd2ScJETYUxNqNh2gkVrdn3on+Fo6lLUEJ 39uoJnc+Lgr8oPVe4dR6za5zFUvwvviTZs9t3poWLxz14SnwI8FpLKYugbwvtP93 bMBsuyFBBPRFSpMSeJOHHC2+P0Csd1DUC2cIZisxM4bIrXlVIC+Fbp8WK717/CfW Ei6BS+qPnwMkQMPvto6/ZqX7u7EGmaCyhTGjPYnppdEsrT1kGwsXha+p+HRFh0IP GUSr6+EXf9XMlCcYLmacqagAMvxIaeDOYKBA1+a2UQhXsccQqBSGWrdy90zz86In l9vIkC4KxvJPCMUN/L5j6UW+QKz6SqfW9mm5LkUfYAGk -----END CERTIFICATE-----Generated at Sat Jan 10 15:21:55 2026 by rpki-client