This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/Clokdo8iEnkyRg1-72rcFdu0uTM.roa File: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (raw, json) Hash identifier: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4= Subject key identifier: 0A:5A:24:76:8F:22:12:79:32:46:0D:7E:EF:6A:DC:15:DB:B4:B9:33 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019B7DCA9D3D9E400D88BF0332BD40EF9156 Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/Clokdo8iEnkyRg1-72rcFdu0uTM.roa Signing time: Fri 02 Jan 2026 08:19:49 +0000 ROA not before: Fri 02 Jan 2026 08:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 185.177.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:9d:3d:9e:40:0d:88:bf:03:32:bd:40:ef:91:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Jan 2 08:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a5a24768f22127932460d7eef6adc15dbb4b933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:61:c7:f1:db:f0:e4:76:94:83:e3:b1:cb:05: a6:a6:40:6b:5b:3a:33:78:2b:f6:a2:76:28:91:7d: d8:15:07:73:5e:85:52:0b:bb:09:cd:94:6e:19:9a: a2:20:07:43:41:ef:cd:6e:05:da:f5:30:6a:17:12: 46:37:b0:33:36:90:50:af:24:b8:7d:cd:80:f2:13: ee:fd:29:46:05:a6:ce:1f:76:9e:f1:17:76:ec:3d: 91:38:18:99:98:e9:9c:86:28:30:a5:34:27:f1:23: 3b:3d:91:b6:64:91:0f:a4:ea:45:a1:af:a5:cf:02: 10:f9:7d:7a:54:e0:77:86:3a:df:cd:54:48:ac:46: 5a:84:38:58:78:bf:5f:a5:7f:c0:01:53:ca:30:30: 7d:8f:b9:db:23:0e:be:36:b7:46:ea:70:de:20:7d: fb:7d:37:af:5a:b8:b8:05:88:00:65:62:54:cc:43: c7:29:0f:2f:ab:39:2a:be:6f:80:11:01:ae:88:69: 83:ee:3f:62:96:53:2e:d6:30:e5:00:07:14:64:33: 45:ea:41:6a:a2:94:f7:42:70:06:0a:51:0a:cf:0c: 22:fe:6c:44:64:d6:19:43:29:1e:ce:83:fb:36:9a: 4c:20:5e:33:a8:fb:b5:ca:bb:b1:be:f4:56:00:53: c4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5A:24:76:8F:22:12:79:32:46:0D:7E:EF:6A:DC:15:DB:B4:B9:33 X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/Clokdo8iEnkyRg1-72rcFdu0uTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.229.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:e8:78:08:8d:b2:e5:d7:8b:55:e1:52:55:29:cb:a8:49:a1: d6:12:cb:2e:77:c8:6f:e9:d2:3c:af:aa:5b:2c:97:04:e7:3b: b3:2c:c3:27:b1:4f:bb:7f:16:36:79:be:68:16:09:4b:e3:df: 75:0c:b1:01:66:2f:be:35:9f:c5:66:76:6d:27:a1:74:8d:b1: 1e:e5:68:a4:fb:58:aa:11:0a:68:02:25:40:74:3c:f0:06:a0: 8e:64:28:4d:08:87:03:95:f9:40:5d:ae:d5:8f:36:32:8a:3f: 6d:68:a4:33:fd:0e:e1:39:c5:fa:71:35:46:38:6b:3a:f7:f5: 63:8d:aa:42:66:60:b0:58:0d:7a:91:18:f0:0e:7b:83:e1:84: c0:22:38:7d:bc:50:c5:ca:f9:b3:aa:d8:e7:1b:8f:69:fb:7f: 15:c4:c8:5d:8d:c0:cf:1d:29:22:11:d6:2d:0f:ac:b5:67:43: 6f:83:a3:83:c4:23:d8:24:98:f1:c9:34:94:d4:63:1b:87:15: 82:bd:54:9e:7d:17:4f:1c:5c:48:eb:42:62:49:04:a4:cd:63: 39:7c:14:4a:7d:c4:a2:e4:b4:13:9e:a5:ba:0f:dc:f6:ae:29: f7:ae:75:8a:a9:06:55:d7:bb:73:1f:4b:d9:68:d4:d9:74:56: ab:aa:f8:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yp09nkANiL8DMr1A75FWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwMTAyMDgxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTVhMjQ3NjhmMjIxMjc5MzI0NjBkN2VlZjZhZGMxNWRiYjRiOTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42HH8dvw5HaUg+OxywWmpkBrWzoz eCv2onYokX3YFQdzXoVSC7sJzZRuGZqiIAdDQe/NbgXa9TBqFxJGN7AzNpBQryS4 fc2A8hPu/SlGBabOH3ae8Rd27D2ROBiZmOmchigwpTQn8SM7PZG2ZJEPpOpFoa+l zwIQ+X16VOB3hjrfzVRIrEZahDhYeL9fpX/AAVPKMDB9j7nbIw6+NrdG6nDeIH37 fTevWri4BYgAZWJUzEPHKQ8vqzkqvm+AEQGuiGmD7j9illMu1jDlAAcUZDNF6kFq opT3QnAGClEKzwwi/mxEZNYZQykezoP7NppMIF4zqPu1yruxvvRWAFPEpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFApaJHaPIhJ5MkYNfu9q3BXbtLkzMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvQ2xva2RvOGlFbmt5UmcxLTcycmNGZHUwdVRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubHlMA0G CSqGSIb3DQEBCwUAA4IBAQAt6HgIjbLl14tV4VJVKcuoSaHWEssud8hv6dI8r6pb LJcE5zuzLMMnsU+7fxY2eb5oFglL4991DLEBZi++NZ/FZnZtJ6F0jbEe5Wik+1iq EQpoAiVAdDzwBqCOZChNCIcDlflAXa7VjzYyij9taKQz/Q7hOcX6cTVGOGs69/Vj japCZmCwWA16kRjwDnuD4YTAIjh9vFDFyvmzqtjnG49p+38VxMhdjcDPHSkiEdYt D6y1Z0Nvg6ODxCPYJJjxyTSU1GMbhxWCvVSefRdPHFxI60JiSQSkzWM5fBRKfcSi 5LQTnqW6D9z2rin3rnWKqQZV17tzH0vZaNTZdFarqvga -----END CERTIFICATE-----Generated at Mon Jan 19 18:00:53 2026 by rpki-client