This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/uOpNXNqtHI5fhaitzbdVAYNd-lI.roa File: uOpNXNqtHI5fhaitzbdVAYNd-lI.roa (raw, json) Hash identifier: rovI3vjkbKEi6l+iPvXBuVPVhZOqOPsoOuCNHyVt+3A= Subject key identifier: B8:EA:4D:5C:DA:AD:1C:8E:5F:85:A8:AD:CD:B7:55:01:83:5D:FA:52 Certificate issuer: /CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e Certificate serial: 019B76EB69FAFB98EFA078C5374732874D7F Authority key identifier: 6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/uOpNXNqtHI5fhaitzbdVAYNd-lI.roa Signing time: Thu 01 Jan 2026 00:18:18 +0000 ROA not before: Thu 01 Jan 2026 00:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 45.159.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:69:fa:fb:98:ef:a0:78:c5:37:47:32:87:4d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e Validity Not Before: Jan 1 00:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8ea4d5cdaad1c8e5f85a8adcdb75501835dfa52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a9:fa:53:80:01:f0:fd:03:c2:7c:31:08:58: 58:35:cd:c9:68:9c:c5:e0:97:07:15:f1:d3:21:24: cc:3c:9f:4e:e7:7d:98:c9:de:6e:10:54:ff:c5:18: e1:8c:ba:ef:86:27:0e:ef:3e:b9:b2:73:10:62:97: ae:08:25:85:1e:72:cd:01:31:73:57:0a:28:76:77: e5:79:d6:65:31:76:13:7c:4b:c8:1e:8f:60:37:84: ae:45:9a:07:b4:77:98:4e:99:1b:fb:5f:50:11:b5: f8:98:66:77:fe:70:a8:9c:04:9e:86:8c:be:3a:26: d7:54:fd:b6:31:97:86:af:c8:52:93:31:df:1e:e9: e1:96:86:d0:a9:22:7c:71:8d:cd:f3:c4:51:f6:78: 23:64:39:f4:31:37:33:96:f3:58:c1:2d:31:a7:f3: b3:d1:b7:e8:32:7f:df:1f:f8:2a:01:92:1e:81:c1: 72:21:b0:f7:18:3e:0c:d1:7e:d9:4c:c5:35:40:d6: 76:fb:3b:a2:d9:ee:02:4e:5e:02:ef:81:f3:a8:b6: ad:e1:27:16:0a:26:79:95:ae:ae:35:bf:a6:1d:5f: 96:8b:ff:0a:20:77:d3:09:cf:fa:db:b9:93:2b:e7: 78:5c:d5:4b:cd:2e:d2:90:92:ca:c5:ba:49:ed:a2: 64:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EA:4D:5C:DA:AD:1C:8E:5F:85:A8:AD:CD:B7:55:01:83:5D:FA:52 X509v3 Authority Key Identifier: keyid:6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/uOpNXNqtHI5fhaitzbdVAYNd-lI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.80.0/24 Signature Algorithm: sha256WithRSAEncryption 67:54:82:74:63:91:d7:77:bb:35:bc:e8:a9:c5:2c:77:8b:c5: bd:48:31:df:d1:0a:f9:63:ec:eb:8c:b7:b4:57:9f:e8:44:14: 74:7a:ae:61:99:ac:f6:e9:09:cd:9f:1e:2b:e3:d4:48:b9:52: 16:a0:a0:f2:04:04:36:10:a2:e6:67:b8:ab:7e:4a:d5:b2:f4: f6:1c:15:b7:1c:f2:0e:60:29:0f:16:85:87:d4:7a:8d:fb:57: e6:7f:95:d7:2f:be:20:c9:be:ae:c4:b9:60:81:39:ac:84:d2: 39:04:a1:d5:23:d5:49:e7:01:19:eb:68:4e:e3:eb:3d:b3:2a: 40:ad:5d:f0:d0:70:cf:da:74:0a:fe:ef:33:8c:3c:56:ff:8f: 07:4c:37:49:dd:9f:46:03:c9:f6:99:11:79:6e:02:32:cd:db: 87:b4:b8:4d:51:47:be:2f:56:ea:55:da:0a:6e:0d:70:66:b5: 75:41:30:c1:67:9b:45:02:c6:ee:61:e6:02:d2:65:8f:7c:7d: 89:63:8b:c3:9c:0a:d7:3d:59:63:a8:ac:43:a6:5e:cd:27:50: da:2c:5e:0b:8c:ea:b8:0b:be:33:60:d7:e8:8a:77:ca:7f:4f: d5:b3:cc:7d:7b:33:db:93:d9:f4:d9:e5:82:5e:b9:e0:ed:6c: 65:fb:53:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt262n6+5jvoHjFN0cyh01/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWYyM2E2M2FkNjI1YTdlZDMwZGE2ZGEyY2RjOWU4YjVi YjgwM2UwHhcNMjYwMTAxMDAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGVhNGQ1Y2RhYWQxYzhlNWY4NWE4YWRjZGI3NTUwMTgzNWRmYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnan6U4AB8P0DwnwxCFhYNc3JaJzF 4JcHFfHTISTMPJ9O532Yyd5uEFT/xRjhjLrvhicO7z65snMQYpeuCCWFHnLNATFz VwoodnfledZlMXYTfEvIHo9gN4SuRZoHtHeYTpkb+19QEbX4mGZ3/nConASehoy+ OibXVP22MZeGr8hSkzHfHunhlobQqSJ8cY3N88RR9ngjZDn0MTczlvNYwS0xp/Oz 0bfoMn/fH/gqAZIegcFyIbD3GD4M0X7ZTMU1QNZ2+zui2e4CTl4C74HzqLat4ScW CiZ5la6uNb+mHV+Wi/8KIHfTCc/627mTK+d4XNVLzS7SkJLKxbpJ7aJkDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLjqTVzarRyOX4Worc23VQGDXfpSMB8GA1UdIwQY MBaAFG+fI6Y61iWn7TDabaLNyei1u4A+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU4anBqcldKYWZ0TU5wdG9zM0o2TFc3Z0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNzJkZTQtNjM2Ni00N2ZhLWI2ZjYt ZDQyYmQ2ODI2MzhkLzEvdU9wTlhOcXRISTVmaGFpdHpiZFZBWU5kLWxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNzJkZTQtNjM2Ni00N2ZhLWI2ZjYtZDQyYmQ2ODI2Mzhk LzEvYjU4anBqcldKYWZ0TU5wdG9zM0o2TFc3Z0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ9QMA0G CSqGSIb3DQEBCwUAA4IBAQBnVIJ0Y5HXd7s1vOipxSx3i8W9SDHf0Qr5Y+zrjLe0 V5/oRBR0eq5hmaz26QnNnx4r49RIuVIWoKDyBAQ2EKLmZ7irfkrVsvT2HBW3HPIO YCkPFoWH1HqN+1fmf5XXL74gyb6uxLlggTmshNI5BKHVI9VJ5wEZ62hO4+s9sypA rV3w0HDP2nQK/u8zjDxW/48HTDdJ3Z9GA8n2mRF5bgIyzduHtLhNUUe+L1bqVdoK bg1wZrV1QTDBZ5tFAsbuYeYC0mWPfH2JY4vDnArXPVljqKxDpl7NJ1DaLF4LjOq4 C74zYNfoinfKf0/Vs8x9ezPbk9n02eWCXrng7Wxl+1PX -----END CERTIFICATE-----Generated at Sun Jan 18 10:02:54 2026 by rpki-client