This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/CkXdOhZWGA_PjrJGIO7uPyCP0SA.roa File: CkXdOhZWGA_PjrJGIO7uPyCP0SA.roa (raw, json) Hash identifier: UBjOO8sW6npsmygvfCwsY25Q9EBtCEAX4TXS2i7/Fnw= Subject key identifier: 0A:45:DD:3A:16:56:18:0F:CF:8E:B2:46:20:EE:EE:3F:20:8F:D1:20 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37F28B9A262B8E26532BA984981A1E Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/CkXdOhZWGA_PjrJGIO7uPyCP0SA.roa Signing time: Fri 02 Jan 2026 10:19:14 +0000 ROA not before: Fri 02 Jan 2026 10:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 65544 IP address blocks: 45.156.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f2:8b:9a:26:2b:8e:26:53:2b:a9:84:98:1a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a45dd3a1656180fcf8eb24620eeee3f208fd120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:c1:43:f7:e6:b5:2a:7c:35:31:de:06:a0: 67:52:8d:94:1b:79:8c:da:0e:b9:cc:b3:41:6e:14: 6c:e4:4d:7c:5d:2b:84:5a:6e:bd:a0:8d:32:f5:2b: 6b:9b:47:63:48:d9:09:61:91:4a:a1:ac:d5:9b:a7: 68:5a:24:e6:4b:19:48:ae:d1:62:e5:9f:06:12:1c: 12:87:29:80:7f:52:69:95:ba:5a:d9:a6:cc:9f:56: bf:b7:8b:5a:8c:88:62:e8:e1:6c:25:2f:82:eb:57: 57:2f:62:57:a2:93:17:45:45:ed:db:5c:67:c5:f0: a6:c0:07:57:bc:9d:bb:ae:17:05:65:d9:86:8a:fd: 39:11:e1:e8:8e:d2:10:c6:75:19:35:bd:4e:36:92: 3f:b6:81:80:19:29:02:84:a4:3d:c7:54:5a:ce:39: 6f:09:2e:27:e5:20:4e:a2:c2:f5:32:04:a3:81:e1: c9:56:df:e6:f2:36:79:ea:9b:22:79:5d:52:83:a2: ef:e7:21:96:45:15:9f:5f:df:b8:58:40:90:de:c1: bd:92:81:0d:d2:09:2a:82:5e:28:b1:ae:58:4d:ed: a3:40:64:f3:08:34:74:91:2e:d3:13:ab:6e:15:4d: fd:79:1e:3a:db:57:1d:61:36:89:c4:ce:cf:80:51: bd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:45:DD:3A:16:56:18:0F:CF:8E:B2:46:20:EE:EE:3F:20:8F:D1:20 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/CkXdOhZWGA_PjrJGIO7uPyCP0SA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.15.0/24 Signature Algorithm: sha256WithRSAEncryption b3:cd:75:40:51:99:79:6a:67:af:61:50:ea:44:ec:6b:3d:9f: af:15:bc:37:c0:12:38:f5:0d:e9:c9:1e:f6:2e:d4:99:e2:2a: e6:59:90:c9:b8:fa:ae:25:4d:ad:06:68:44:78:e3:c7:b6:91: 62:07:72:6f:89:32:ba:0b:29:9f:9d:b3:eb:24:20:9e:fd:69: ed:10:8b:bd:45:78:84:80:0e:8f:d5:a7:f8:4c:89:59:b5:e4: da:e4:00:02:27:2e:83:e2:e4:1e:73:bd:f7:61:8a:9e:4d:4b: 43:96:fb:54:87:af:e7:ae:fe:32:b5:58:d9:f8:ba:54:79:65: 69:43:48:31:b2:a4:18:7c:e2:34:80:69:bc:b0:69:a1:a6:ed: 78:90:ab:e5:31:fd:08:3f:d4:35:c5:a5:f4:cb:82:93:63:80: 7a:a9:4c:b2:f2:9e:94:59:f6:63:78:0b:5d:f4:4f:ff:3a:d4: 47:f3:94:15:5e:94:cc:01:29:d2:a7:ef:31:6a:c3:cd:cf:93: 30:fa:71:8f:5e:cd:ce:3b:87:f0:e4:6f:31:e7:7e:b0:a7:34: d3:de:48:29:0d:68:b6:bb:64:53:b4:90:2d:84:f5:39:de:66: 30:96:a0:dd:ac:da:13:8b:1d:ab:a8:37:b3:06:f5:7c:3b:18: 8f:a7:c4:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N/KLmiYrjiZTK6mEmBoeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTQ1ZGQzYTE2NTYxODBmY2Y4ZWIyNDYyMGVlZWUzZjIwOGZkMTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojLBQ/fmtSp8NTHeBqBnUo2UG3mM 2g65zLNBbhRs5E18XSuEWm69oI0y9Strm0djSNkJYZFKoazVm6doWiTmSxlIrtFi 5Z8GEhwShymAf1Jplbpa2abMn1a/t4tajIhi6OFsJS+C61dXL2JXopMXRUXt21xn xfCmwAdXvJ27rhcFZdmGiv05EeHojtIQxnUZNb1ONpI/toGAGSkChKQ9x1Razjlv CS4n5SBOosL1MgSjgeHJVt/m8jZ56psieV1Sg6Lv5yGWRRWfX9+4WECQ3sG9koEN 0gkqgl4osa5YTe2jQGTzCDR0kS7TE6tuFU39eR4621cdYTaJxM7PgFG9PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFApF3ToWVhgPz46yRiDu7j8gj9EgMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvQ2tYZE9oWldHQV9QanJKR0lPN3VQeUNQMFNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZwPMA0G CSqGSIb3DQEBCwUAA4IBAQCzzXVAUZl5amevYVDqROxrPZ+vFbw3wBI49Q3pyR72 LtSZ4irmWZDJuPquJU2tBmhEeOPHtpFiB3JviTK6CymfnbPrJCCe/WntEIu9RXiE gA6P1af4TIlZteTa5AACJy6D4uQec733YYqeTUtDlvtUh6/nrv4ytVjZ+LpUeWVp Q0gxsqQYfOI0gGm8sGmhpu14kKvlMf0IP9Q1xaX0y4KTY4B6qUyy8p6UWfZjeAtd 9E//OtRH85QVXpTMASnSp+8xasPNz5Mw+nGPXs3OO4fw5G8x536wpzTT3kgpDWi2 u2RTtJAthPU53mYwlqDdrNoTix2rqDezBvV8OxiPp8RO -----END CERTIFICATE-----Generated at Mon Jan 26 14:11:51 2026 by rpki-client