This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OD9e9a14a51O0_W3FR4un6gGSLk.roa File: OD9e9a14a51O0_W3FR4un6gGSLk.roa (raw, json) Hash identifier: mozv2pbpS7AhMhDpfhi1afspXKsRqOHQyVzLbZOnmrw= Subject key identifier: 38:3F:5E:F5:AD:78:6B:9D:4E:D3:F5:B7:15:1E:2E:9F:A8:06:48:B9 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F146C69A52DD0D9D67CFEA979A1F45F Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OD9e9a14a51O0_W3FR4un6gGSLk.roa Signing time: Fri 02 Jan 2026 14:20:03 +0000 ROA not before: Fri 02 Jan 2026 14:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 147.45.49.0/24 maxlen: 24 147.45.50.0/24 maxlen: 24 147.45.51.0/24 maxlen: 24 147.45.60.0/24 maxlen: 24 147.45.84.0/24 maxlen: 24 147.45.85.0/24 maxlen: 24 147.45.86.0/24 maxlen: 24 147.45.87.0/24 maxlen: 24 147.45.116.0/24 maxlen: 24 147.45.126.0/24 maxlen: 24 147.45.177.0/24 maxlen: 24 147.45.178.0/24 maxlen: 24 147.45.179.0/24 maxlen: 24 147.45.200.0/23 maxlen: 23 147.45.202.0/23 maxlen: 23 147.45.204.0/24 maxlen: 24 147.45.217.0/24 maxlen: 24 147.45.220.0/24 maxlen: 24 147.45.221.0/24 maxlen: 24 193.233.126.0/24 maxlen: 24 193.233.127.0/24 maxlen: 24 193.233.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:6c:69:a5:2d:d0:d9:d6:7c:fe:a9:79:a1:f4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=383f5ef5ad786b9d4ed3f5b7151e2e9fa80648b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f7:0b:76:34:67:99:79:42:29:f3:e4:8f:22: b4:13:3d:ae:00:11:3f:c5:00:a3:89:89:13:ef:ae: ea:fd:f4:7c:9e:31:c5:38:50:10:81:81:8f:5f:a4: 03:8f:42:18:69:6c:55:1e:c9:de:f7:c4:d7:bb:ae: 7f:75:35:34:10:19:fc:c8:f2:c4:09:a8:57:4b:73: 42:7d:f6:1e:5a:fe:2e:78:2b:7a:13:19:d0:28:d8: dd:6f:9a:55:2d:e0:7c:3e:aa:93:d7:17:8e:dd:1a: c3:ba:e0:b1:ad:d2:a1:51:fb:74:34:b9:4d:2d:ef: 88:63:d8:59:c1:c2:04:34:7c:9f:b2:a0:ab:3d:ff: c7:81:1e:55:e8:f1:49:c6:0b:0c:18:ec:37:33:45: 48:ce:59:47:6f:78:af:68:a6:52:58:53:a1:dc:b4: c0:81:ad:78:7a:98:32:73:82:84:83:9f:85:b2:7d: 04:00:65:3c:55:b9:1c:57:7e:40:d1:8a:f8:42:6b: 9a:c1:21:c0:a8:a8:dd:b1:84:ab:c6:72:7e:cc:bd: 0f:d3:9f:63:62:36:84:aa:54:ec:8f:57:55:5d:ec: 3b:09:d0:3a:2a:5c:35:9e:0c:21:a0:6f:6b:b3:bd: b5:89:f6:0e:d6:7c:bc:4f:ae:74:8f:5d:0b:33:07: f9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3F:5E:F5:AD:78:6B:9D:4E:D3:F5:B7:15:1E:2E:9F:A8:06:48:B9 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OD9e9a14a51O0_W3FR4un6gGSLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.49.0-147.45.51.255 147.45.60.0/24 147.45.84.0/22 147.45.116.0/24 147.45.126.0/24 147.45.177.0-147.45.179.255 147.45.200.0-147.45.204.255 147.45.217.0/24 147.45.220.0/23 193.233.126.0/23 193.233.198.0/23 Signature Algorithm: sha256WithRSAEncryption 19:c0:f4:ed:54:eb:1f:04:71:6d:ad:5f:cd:e6:bc:36:b6:02: 76:f1:24:03:3d:43:16:bf:d2:3b:09:4c:52:42:96:99:bb:87: 05:33:52:38:18:e5:a9:ac:da:d6:43:cb:95:78:d5:12:a1:40: cf:db:22:ec:75:81:68:67:5a:6f:b3:11:7f:b1:38:a2:fc:0a: f6:5b:af:65:8d:13:a0:67:a7:8a:23:6f:d8:6c:8a:6e:47:e6: e8:64:22:62:55:38:25:76:d0:54:44:d2:74:a1:fe:fd:57:01: dc:39:83:f4:77:bf:dc:30:8a:9e:fc:af:0a:55:22:b2:f8:48: e0:7f:5d:cb:aa:d0:78:4f:6a:89:b0:a2:2a:21:96:c0:10:6d: 7e:00:44:aa:3d:92:80:8f:07:f4:06:e3:74:75:5b:a7:ba:b4: 88:01:9b:5b:2a:f4:18:db:95:f4:0c:36:f2:b7:a2:b6:54:2b: ab:0f:da:2c:c6:6e:cc:00:21:8d:97:74:3f:05:42:c7:b0:db: 8a:8b:fc:fa:da:fd:ed:f4:0a:fa:67:30:fa:58:b7:4a:2a:3c: 7d:76:9e:cb:55:11:22:06:cc:af:a9:60:3f:72:57:74:cc:cb: 6e:e6:5d:ec:f0:58:52:94:8a:fb:21:71:b8:c1:69:ee:1e:d4: 23:74:d9:cc -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt/FGxppS3Q2dZ8/ql5ofRfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODNmNWVmNWFkNzg2YjlkNGVkM2Y1YjcxNTFlMmU5ZmE4MDY0OGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfcLdjRnmXlCKfPkjyK0Ez2uABE/ xQCjiYkT767q/fR8njHFOFAQgYGPX6QDj0IYaWxVHsne98TXu65/dTU0EBn8yPLE CahXS3NCffYeWv4ueCt6ExnQKNjdb5pVLeB8PqqT1xeO3RrDuuCxrdKhUft0NLlN Le+IY9hZwcIENHyfsqCrPf/HgR5V6PFJxgsMGOw3M0VIzllHb3ivaKZSWFOh3LTA ga14epgyc4KEg5+Fsn0EAGU8VbkcV35A0Yr4QmuawSHAqKjdsYSrxnJ+zL0P059j YjaEqlTsj1dVXew7CdA6Klw1ngwhoG9rs721ifYO1ny8T650j10LMwf5lQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFDg/XvWteGudTtP1txUeLp+oBki5MB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvT0Q5ZTlhMTRhNTFPMF9XM0ZSNHVuNmdHU0xrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaMAwDBACTLTED BAKTLTADBACTLTwDBAKTLVQDBACTLXQDBACTLX4wDAMEAJMtsQMEApMtsDAMAwQD ky3IAwQAky3MAwQAky3ZAwQBky3cAwQBwel+AwQBwenGMA0GCSqGSIb3DQEBCwUA A4IBAQAZwPTtVOsfBHFtrV/N5rw2tgJ28SQDPUMWv9I7CUxSQpaZu4cFM1I4GOWp rNrWQ8uVeNUSoUDP2yLsdYFoZ1pvsxF/sTii/Ar2W69ljROgZ6eKI2/YbIpuR+bo ZCJiVTgldtBURNJ0of79VwHcOYP0d7/cMIqe/K8KVSKy+Ejgf13LqtB4T2qJsKIq IZbAEG1+AESqPZKAjwf0BuN0dVunurSIAZtbKvQY25X0DDbyt6K2VCurD9osxm7M ACGNl3Q/BULHsNuKi/z62v3t9Ar6ZzD6WLdKKjx9dp7LVREiBsyvqWA/cld0zMtu 5l3s8FhSlIr7IXG4wWnuHtQjdNnM -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:49 2026 by rpki-client