This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oXr-OXMQDlIYBwTEuUb02K5FEWs.roa File: oXr-OXMQDlIYBwTEuUb02K5FEWs.roa (raw, json) Hash identifier: v4KuKroQQAeom7scztrCxWsUL7/efzNpf/MjG5frSpY= Subject key identifier: A1:7A:FE:39:73:10:0E:52:18:07:04:C4:B9:46:F4:D8:AE:45:11:6B Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F845366FD41BD5999FB62C9940C9856 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oXr-OXMQDlIYBwTEuUb02K5FEWs.roa Signing time: Fri 02 Jan 2026 16:22:17 +0000 ROA not before: Fri 02 Jan 2026 16:22:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212826 IP address blocks: 45.152.11.0/24 maxlen: 24 46.161.208.0/23 maxlen: 23 46.161.212.0/23 maxlen: 23 46.161.214.0/23 maxlen: 23 195.60.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:53:66:fd:41:bd:59:99:fb:62:c9:94:0c:98:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a17afe3973100e52180704c4b946f4d8ae45116b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2a:4e:9c:70:4a:04:01:85:53:95:4c:9c:fe: 93:65:81:0c:6f:a8:ee:d0:78:80:d7:9e:a2:6f:31: b5:65:6d:7c:f6:ac:fb:c5:ff:9e:8c:e3:1b:06:ef: 77:ab:bd:b1:63:5e:54:80:18:a9:b8:f8:cf:cf:74: 7c:da:b7:64:5c:d2:ce:28:61:fd:1f:3e:bf:45:bc: 16:3b:4c:69:0c:3e:87:1a:fb:e3:24:fe:9d:4c:7e: d2:a2:2f:cf:69:2c:9d:e2:06:0b:7d:8d:8a:c7:01: e6:ea:4e:7b:1a:e6:f8:84:e5:5e:9e:ba:10:0d:f6: cd:e7:18:e3:47:a2:8c:55:cb:70:b5:28:7b:f7:a6: 20:ed:86:e0:49:a0:93:b7:9c:84:10:b8:38:a3:b4: 1b:58:ac:79:10:c1:91:00:95:45:a2:05:6b:6a:fc: aa:fc:8c:43:f0:ee:4f:5b:13:f4:ef:e1:2b:d5:50: 35:6b:86:3f:17:a1:b8:f6:58:df:45:7f:74:a0:e5: ee:7d:10:da:68:3e:0a:b2:dd:e0:94:5a:f3:de:61: d8:02:30:6f:69:73:ab:21:5b:67:de:11:31:f9:73: 7a:2b:33:8c:16:ac:cf:4c:5a:b7:83:26:d0:0b:9a: cf:4a:8d:f9:ce:8a:1f:be:88:0a:bf:0c:c2:06:f9: f6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7A:FE:39:73:10:0E:52:18:07:04:C4:B9:46:F4:D8:AE:45:11:6B X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oXr-OXMQDlIYBwTEuUb02K5FEWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.11.0/24 46.161.208.0/23 46.161.212.0/22 195.60.176.0/24 Signature Algorithm: sha256WithRSAEncryption b4:b4:03:a8:94:ad:f5:8e:74:9c:b3:76:46:63:38:1e:b2:ce: 61:c9:50:a5:eb:2b:7d:81:16:0d:d9:ea:80:30:55:ca:87:6b: 63:fe:d3:e8:b9:20:c6:4f:8d:95:55:55:57:9e:88:77:37:b4: d7:a5:9a:7a:7e:ba:ed:43:3d:20:38:c3:1b:20:79:d0:44:92: 0a:b2:7d:0e:a9:a4:6b:7f:c5:6a:8d:9f:63:0b:91:d7:62:98: c0:6c:e3:c0:a7:0d:8e:cf:a0:c4:da:00:df:2c:d0:36:cf:64: 7a:8f:14:fe:0f:26:4f:73:ba:fe:ae:3a:d2:bd:df:a0:d9:42: 7e:72:d8:86:86:75:ea:96:1c:5c:88:85:26:1a:71:70:d2:69: ea:fb:e9:ac:69:b1:cd:f1:c3:6c:bf:14:d0:a3:71:24:35:06: f7:84:57:50:7d:c7:a4:fd:bc:dc:9b:d2:63:2b:a3:de:b5:de: d0:14:b0:d4:c6:ff:ce:da:8d:d1:b3:95:8f:25:45:76:da:23: 2c:f6:9f:65:7e:3b:0c:9c:02:cf:70:bb:5b:b6:80:b7:42:b6: b6:91:c5:fe:11:90:ec:27:f8:f6:6b:9d:19:09:e2:f1:f6:9e: fb:19:ce:09:b5:e4:51:e8:0e:b5:1f:91:a9:61:81:7c:8d:02: 76:e8:d1:bb -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hFNm/UG9WZn7YsmUDJhWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTdhZmUzOTczMTAwZTUyMTgwNzA0YzRiOTQ2ZjRkOGFlNDUxMTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCpOnHBKBAGFU5VMnP6TZYEMb6ju 0HiA156ibzG1ZW189qz7xf+ejOMbBu93q72xY15UgBipuPjPz3R82rdkXNLOKGH9 Hz6/RbwWO0xpDD6HGvvjJP6dTH7Soi/PaSyd4gYLfY2KxwHm6k57Gub4hOVenroQ DfbN5xjjR6KMVctwtSh796Yg7YbgSaCTt5yEELg4o7QbWKx5EMGRAJVFogVravyq /IxD8O5PWxP07+Er1VA1a4Y/F6G49ljfRX90oOXufRDaaD4Kst3glFrz3mHYAjBv aXOrIVtn3hEx+XN6KzOMFqzPTFq3gybQC5rPSo35zoofvogKvwzCBvn2aQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKF6/jlzEA5SGAcExLlG9NiuRRFrMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvb1hyLU9YTVFEbElZQndURXVVYjAySzVGRVdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALZgLAwQB LqHQAwQCLqHUAwQAwzywMA0GCSqGSIb3DQEBCwUAA4IBAQC0tAOolK31jnScs3ZG Yzgess5hyVCl6yt9gRYN2eqAMFXKh2tj/tPouSDGT42VVVVXnoh3N7TXpZp6frrt Qz0gOMMbIHnQRJIKsn0OqaRrf8VqjZ9jC5HXYpjAbOPApw2Oz6DE2gDfLNA2z2R6 jxT+DyZPc7r+rjrSvd+g2UJ+ctiGhnXqlhxciIUmGnFw0mnq++msabHN8cNsvxTQ o3EkNQb3hFdQfcek/bzcm9JjK6Petd7QFLDUxv/O2o3Rs5WPJUV22iMs9p9lfjsM nALPcLtbtoC3Qra2kcX+EZDsJ/j2a50ZCeLx9p77Gc4JteRR6A61H5GpYYF8jQJ2 6NG7 -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:00 2026 by rpki-client