This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/tklVWYVDGXe5URD0QFeTFCI-yOg.roa File: tklVWYVDGXe5URD0QFeTFCI-yOg.roa (raw, json) Hash identifier: gNNzPMTDn7JasW09Gz6g9NSXq8GJJJOIAedRgSZzHrE= Subject key identifier: B6:49:55:59:85:43:19:77:B9:51:10:F4:40:57:93:14:22:3E:C8:E8 Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019B7CEE5319525B3D0D5907A1C1CFC9F887 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/tklVWYVDGXe5URD0QFeTFCI-yOg.roa Signing time: Fri 02 Jan 2026 04:19:12 +0000 ROA not before: Fri 02 Jan 2026 04:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44547 IP address blocks: 45.158.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:53:19:52:5b:3d:0d:59:07:a1:c1:cf:c9:f8:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b649555985431977b95110f440579314223ec8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a3:80:93:58:4d:fb:1b:c3:32:93:f7:47:37: a7:5a:18:b4:8e:a8:1e:f1:18:72:49:b3:b2:4b:4f: 28:62:12:8c:5b:89:1d:e6:40:1e:25:a0:13:54:da: cd:c3:af:c9:95:1a:1c:64:67:63:fd:7e:c4:4a:06: a1:9e:45:df:94:d9:59:15:00:96:79:11:32:34:5f: ed:7d:0f:2e:a6:8c:5c:b5:5b:1d:90:dc:45:5b:12: 98:33:6d:0f:23:49:67:10:7e:58:e2:23:0e:a4:63: e4:5a:5b:ed:c5:4f:27:aa:76:86:96:0f:01:f1:a4: 62:0f:47:e7:a3:0f:bb:b6:7a:8f:1b:c1:4c:2a:dc: e2:e1:85:4e:aa:b2:97:9f:94:03:c6:7b:86:5f:71: ca:d5:0a:27:aa:57:3f:38:e6:b5:80:39:45:5a:58: b3:1e:6f:a8:88:93:cb:de:a2:90:06:f1:50:f1:e9: 20:4e:33:58:b3:c3:f9:62:cc:5b:f2:3b:1d:c0:03: 5e:76:d7:2f:a9:2c:28:c0:de:7e:03:05:42:a7:01: 47:28:2a:44:48:fc:f7:eb:31:1b:8d:87:b9:0a:cb: 45:97:f4:07:f6:0d:98:04:e0:e7:8b:6e:01:6e:50: 62:57:31:04:28:ff:5a:cb:7e:1f:95:c1:75:fb:e1: c5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:49:55:59:85:43:19:77:B9:51:10:F4:40:57:93:14:22:3E:C8:E8 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/tklVWYVDGXe5URD0QFeTFCI-yOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.14.0/24 Signature Algorithm: sha256WithRSAEncryption ad:07:79:a5:79:0e:7f:06:04:ee:5e:e2:df:fc:94:a6:b6:19: 55:e3:5b:04:ed:59:e4:b8:3f:2b:e6:f5:46:b2:82:55:55:ec: 68:d0:64:fc:d8:76:65:ac:11:aa:b4:3a:8f:60:f0:22:30:24: 5d:c8:24:f8:3f:b2:b7:0f:40:88:ba:e8:22:c5:06:fa:f1:b5: 23:a2:48:9f:04:17:d3:84:2a:93:74:0f:7a:3f:43:c1:72:34: d3:e3:3f:88:b3:00:fa:0c:c4:77:e8:c2:b2:63:5b:a1:00:9a: 46:0a:0d:66:d4:97:4c:42:a2:b4:05:e7:31:09:6a:94:ea:ea: 44:33:5f:6e:d7:71:25:2f:42:94:8d:12:aa:6c:70:75:a4:d2: 9a:e5:f8:b9:22:f7:72:a3:80:c4:37:b0:b8:2b:4e:90:3a:34: 4b:87:6f:f8:1a:21:27:96:82:8f:61:81:85:6b:0f:5f:36:e7: 64:16:b1:c0:12:64:5a:3c:b4:c7:8f:3a:cf:4d:1e:ff:30:2f: 78:33:a7:33:6d:29:e5:81:07:a0:c5:78:04:d5:31:ad:7d:2c: 12:8e:9a:8b:c5:09:3b:1e:2c:3c:5e:e2:3d:67:f0:96:57:ac: af:8f:e5:8d:47:41:79:02:13:5c:b6:f8:a2:ec:cb:b6:ce:83: a5:1a:ba:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87lMZUls9DVkHocHPyfiHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjQ5NTU1OTg1NDMxOTc3Yjk1MTEwZjQ0MDU3OTMxNDIyM2VjOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaOAk1hN+xvDMpP3RzenWhi0jqge 8RhySbOyS08oYhKMW4kd5kAeJaATVNrNw6/JlRocZGdj/X7ESgahnkXflNlZFQCW eREyNF/tfQ8upoxctVsdkNxFWxKYM20PI0lnEH5Y4iMOpGPkWlvtxU8nqnaGlg8B 8aRiD0fnow+7tnqPG8FMKtzi4YVOqrKXn5QDxnuGX3HK1Qonqlc/OOa1gDlFWliz Hm+oiJPL3qKQBvFQ8ekgTjNYs8P5Ysxb8jsdwANedtcvqSwowN5+AwVCpwFHKCpE SPz36zEbjYe5CstFl/QH9g2YBODni24BblBiVzEEKP9ay34flcF1++HFeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLZJVVmFQxl3uVEQ9EBXkxQiPsjoMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvdGtsVldZVkRHWGU1VVJEMFFGZVRGQ0kteU9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ4OMA0G CSqGSIb3DQEBCwUAA4IBAQCtB3mleQ5/BgTuXuLf/JSmthlV41sE7VnkuD8r5vVG soJVVexo0GT82HZlrBGqtDqPYPAiMCRdyCT4P7K3D0CIuugixQb68bUjokifBBfT hCqTdA96P0PBcjTT4z+IswD6DMR36MKyY1uhAJpGCg1m1JdMQqK0BecxCWqU6upE M19u13ElL0KUjRKqbHB1pNKa5fi5Ivdyo4DEN7C4K06QOjRLh2/4GiEnloKPYYGF aw9fNudkFrHAEmRaPLTHjzrPTR7/MC94M6czbSnlgQegxXgE1TGtfSwSjpqLxQk7 Hiw8XuI9Z/CWV6yvj+WNR0F5AhNctvii7Mu2zoOlGrr4 -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:51 2026 by rpki-client