This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/O1rNzvRwKl6vTU_ykriXJLKMTfE.roa File: O1rNzvRwKl6vTU_ykriXJLKMTfE.roa (raw, json) Hash identifier: cMg6CgAQOaopNdwApex1GmDSfWpvN+uvDUY++vWUD+o= Subject key identifier: 3B:5A:CD:CE:F4:70:2A:5E:AF:4D:4F:F2:92:B8:97:24:B2:8C:4D:F1 Certificate issuer: /CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3 Certificate serial: 019B7EA57A175671EBA53B3A287A5E074328 Authority key identifier: 28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/O1rNzvRwKl6vTU_ykriXJLKMTfE.roa Signing time: Fri 02 Jan 2026 12:18:52 +0000 ROA not before: Fri 02 Jan 2026 12:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208638 IP address blocks: 45.91.16.0/22 maxlen: 24 2a0e:e40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:7a:17:56:71:eb:a5:3b:3a:28:7a:5e:07:43:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3 Validity Not Before: Jan 2 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b5acdcef4702a5eaf4d4ff292b89724b28c4df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:67:6b:a8:56:19:a9:4a:8e:6d:c6:ef:c4:ef: 35:f5:5e:24:12:c9:a6:35:1a:c4:90:48:e9:62:0d: f8:85:64:5d:4c:3b:c4:60:52:a9:6c:09:c2:4e:c0: b2:12:0f:52:94:88:98:7f:62:00:01:ce:b2:c8:4e: 4f:00:ec:22:c1:d3:60:d2:68:bc:1c:44:aa:6a:e6: de:92:0c:43:d6:b5:21:5d:58:a1:31:d5:3c:0e:c9: 28:e5:90:33:31:03:52:a1:7e:7c:06:05:d3:6d:72: 2b:28:c1:07:db:7a:1b:68:d7:eb:d1:12:f4:0e:03: dd:0f:8f:ac:d3:19:82:2a:5a:b8:9e:62:b3:f9:e1: 1f:23:16:2e:76:2a:41:93:19:01:a0:87:45:3a:b1: b1:04:a2:40:71:8e:3c:ea:6a:d8:4a:ec:9a:ed:af: 4c:96:b4:31:31:fe:42:cb:d5:c0:45:b9:12:7f:37: e2:f8:b9:d2:41:e7:54:95:0b:bf:cf:fd:91:8c:3a: d9:2d:a0:a8:e6:09:2e:c9:b3:01:b1:d9:45:aa:c8: 4d:2f:01:2b:f8:2f:f0:83:fb:d6:6c:08:23:d6:ea: a1:50:19:4b:72:9a:04:68:7a:b8:cb:13:37:dd:e6: 54:cf:80:35:ee:d3:97:bc:2a:28:41:a5:b1:a0:72: 47:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5A:CD:CE:F4:70:2A:5E:AF:4D:4F:F2:92:B8:97:24:B2:8C:4D:F1 X509v3 Authority Key Identifier: keyid:28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/O1rNzvRwKl6vTU_ykriXJLKMTfE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.16.0/22 IPv6: 2a0e:e40::/29 Signature Algorithm: sha256WithRSAEncryption 78:15:7e:ab:03:7f:64:64:38:44:a5:2d:0b:14:d8:97:2f:ee: 90:35:7f:e6:6f:8a:2f:d7:38:f9:b8:2d:35:13:bb:72:13:e5: 83:78:7d:ab:ce:59:af:58:40:ef:b0:67:7c:1f:27:1a:31:aa: 15:66:a0:1e:ea:a5:e9:be:23:2e:18:18:ff:55:ed:f8:b0:a9: 27:5f:63:2b:b4:6e:b0:6f:1b:8c:b3:14:5f:cc:20:0f:e0:46: b8:7c:20:9e:cd:1e:21:fe:ca:cb:e5:2b:44:af:d7:b8:1e:44: 22:86:04:a7:de:0b:76:44:10:b5:cb:71:02:e7:75:ea:93:82: 1a:d3:49:86:20:87:30:d7:e9:8a:f0:db:dc:6a:db:81:68:fa: a3:69:8c:d7:f4:8d:5e:f1:68:33:d5:ba:ca:6a:e9:a3:f4:59: d3:4e:fe:cd:e0:d7:5c:b0:5c:0b:aa:ab:06:7f:7b:75:d5:35: ee:3f:2c:0b:09:9d:88:d9:b8:a8:bc:09:7b:1d:dc:f2:dc:8e: e7:04:73:db:8b:71:55:ca:8f:27:99:48:a1:64:84:ea:65:e7: 0f:45:b0:d2:27:08:ab:ad:bd:1d:da:0b:8f:fc:fd:3b:4e:5b: 0e:26:72:20:9f:f0:b3:56:5f:46:de:5c:4f:16:e0:48:c1:a0: 58:54:d9:59 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pXoXVnHrpTs6KHpeB0MoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MDU4NTdiYTdiZDVkYzgyMGM2MTYyNmM2MzM0OWUzYjdm YWE3ZDMwHhcNMjYwMTAyMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjVhY2RjZWY0NzAyYTVlYWY0ZDRmZjI5MmI4OTcyNGIyOGM0ZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWdrqFYZqUqObcbvxO819V4kEsmm NRrEkEjpYg34hWRdTDvEYFKpbAnCTsCyEg9SlIiYf2IAAc6yyE5PAOwiwdNg0mi8 HESqaubekgxD1rUhXVihMdU8Dsko5ZAzMQNSoX58BgXTbXIrKMEH23obaNfr0RL0 DgPdD4+s0xmCKlq4nmKz+eEfIxYudipBkxkBoIdFOrGxBKJAcY486mrYSuya7a9M lrQxMf5Cy9XARbkSfzfi+LnSQedUlQu/z/2RjDrZLaCo5gkuybMBsdlFqshNLwEr +C/wg/vWbAgj1uqhUBlLcpoEaHq4yxM33eZUz4A17tOXvCooQaWxoHJHVQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDtazc70cCper01P8pK4lySyjE3xMB8GA1UdIwQY MBaAFCgFhXunvV3IIMYWJsYzSeO3+qfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0FXRmU2ZTlYY2dneGhZbXhqTko0N2Y2cDlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8zNWExOWUtZWRhYi00NGM5LTkxNmEt MTZiNWViZGQyMDQwLzEvTzFyTnp2UndLbDZ2VFVfeWtyaVhKTEtNVGZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8zNWExOWUtZWRhYi00NGM5LTkxNmEtMTZiNWViZGQyMDQw LzEvS0FXRmU2ZTlYY2dneGhZbXhqTko0N2Y2cDlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVsQMA0E AgACMAcDBQMqDg5AMA0GCSqGSIb3DQEBCwUAA4IBAQB4FX6rA39kZDhEpS0LFNiX L+6QNX/mb4ov1zj5uC01E7tyE+WDeH2rzlmvWEDvsGd8HycaMaoVZqAe6qXpviMu GBj/Ve34sKknX2MrtG6wbxuMsxRfzCAP4Ea4fCCezR4h/srL5StEr9e4HkQihgSn 3gt2RBC1y3EC53Xqk4Ia00mGIIcw1+mK8NvcatuBaPqjaYzX9I1e8Wgz1brKaumj 9FnTTv7N4NdcsFwLqqsGf3t11TXuPywLCZ2I2biovAl7Hdzy3I7nBHPbi3FVyo8n mUihZITqZecPRbDSJwirrb0d2guP/P07TlsOJnIgn/CzVl9G3lxPFuBIwaBYVNlZ -----END CERTIFICATE-----Generated at Tue Feb 10 04:28:10 2026 by rpki-client