This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ON_ctMOAUZaapm2VNE4MUGlm5s0.roa File: ON_ctMOAUZaapm2VNE4MUGlm5s0.roa (raw, json) Hash identifier: 4OAfdVogeIliIwtkxx+7QSj3X/gCNixWQKVjGlrxtEc= Subject key identifier: 38:DF:DC:B4:C3:80:51:96:9A:A6:6D:95:34:4E:0C:50:69:66:E6:CD Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F838CFE55593FED46DD36A527C693BB Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ON_ctMOAUZaapm2VNE4MUGlm5s0.roa Signing time: Fri 02 Jan 2026 16:21:26 +0000 ROA not before: Fri 02 Jan 2026 16:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210940 IP address blocks: 45.154.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:8c:fe:55:59:3f:ed:46:dd:36:a5:27:c6:93:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38dfdcb4c38051969aa66d95344e0c506966e6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:43:12:81:82:00:2b:23:03:bd:08:96:a3:62: f7:75:33:df:82:6c:54:db:b6:81:28:bd:6f:ed:6e: bc:73:19:a7:8e:4a:e6:88:2d:ee:94:91:c2:6c:e2: 51:9b:de:d6:76:a2:b5:23:58:7e:c7:75:6e:0f:9e: 8d:71:c0:c7:42:46:ee:85:b4:63:91:6d:20:e1:08: ba:5c:0c:72:c6:98:9b:bd:4c:6d:f9:6d:17:cd:0e: 19:d1:65:9f:85:d7:4f:e2:c1:ab:df:0d:77:43:e7: 1a:b5:44:eb:1b:0b:ca:60:a4:36:ec:67:9f:25:b4: 40:3b:3f:ea:16:b8:66:6a:40:92:01:1f:cd:6d:bc: 6b:64:22:f3:73:aa:4c:87:79:e6:77:6b:e4:fd:e5: fa:29:63:c1:ec:a4:c9:81:e5:52:d3:ae:0b:ff:2c: 18:c1:84:26:e7:39:96:d8:0a:6d:7d:6c:b6:80:27: 58:04:26:c6:a0:9a:7c:b9:b6:84:ae:2f:88:dd:21: 1f:20:04:4e:ca:25:7d:2a:fe:ad:3a:1b:3e:98:86: 61:44:94:bd:c8:a9:f7:c6:9f:02:d1:5c:b9:ab:a6: 31:6b:3e:c8:b7:8b:8b:26:3a:ad:ed:be:89:66:e9: e5:49:39:11:17:6f:bc:f7:31:28:03:b9:01:32:f6: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DF:DC:B4:C3:80:51:96:9A:A6:6D:95:34:4E:0C:50:69:66:E6:CD X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ON_ctMOAUZaapm2VNE4MUGlm5s0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.159.0/24 Signature Algorithm: sha256WithRSAEncryption 85:64:aa:29:82:9a:62:59:ad:d8:69:10:1d:13:c6:c7:1f:e6: cc:de:f0:ae:a2:29:f2:aa:58:8c:9f:ed:4e:a9:ec:8d:a9:6c: 9a:eb:42:c4:f6:27:c0:ca:64:29:98:5c:7e:d7:d9:f8:1b:5d: 88:0d:d5:b0:4d:b2:65:1f:03:cc:04:03:1b:48:c1:15:23:b9: dd:95:4b:45:cb:42:65:de:f2:b3:12:55:9d:bf:d7:a3:ba:e3: b1:4d:8f:ec:10:fb:4d:2a:b1:7b:d5:c3:65:c7:54:e5:3b:76: c2:f0:da:c8:89:fa:0b:93:71:32:4c:84:1f:c4:57:db:e0:46: 46:56:45:1f:7b:9c:1f:92:c9:60:af:d4:1b:c1:ff:3d:4e:0f: 9c:1e:ec:95:cf:3c:8c:18:04:fb:d6:01:98:99:2b:78:dd:51: ea:95:e1:1c:f8:36:01:18:e6:5c:50:d4:a3:d0:ca:d5:17:26: 11:50:e3:f3:13:72:d6:f8:d9:26:c1:fb:76:6b:59:cd:66:d0: 30:5f:09:07:98:d1:79:11:47:6b:82:45:db:e6:7e:4d:6f:01: 5c:0e:e9:19:32:0c:37:01:08:da:6f:20:66:40:79:80:3e:59: 6b:09:07:27:40:7c:c7:b8:f5:e1:2d:3d:00:85:e6:a8:61:79: 7f:38:c8:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g4z+VVk/7UbdNqUnxpO7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGRmZGNiNGMzODA1MTk2OWFhNjZkOTUzNDRlMGM1MDY5NjZlNmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00MSgYIAKyMDvQiWo2L3dTPfgmxU 27aBKL1v7W68cxmnjkrmiC3ulJHCbOJRm97WdqK1I1h+x3VuD56NccDHQkbuhbRj kW0g4Qi6XAxyxpibvUxt+W0XzQ4Z0WWfhddP4sGr3w13Q+catUTrGwvKYKQ27Gef JbRAOz/qFrhmakCSAR/NbbxrZCLzc6pMh3nmd2vk/eX6KWPB7KTJgeVS064L/ywY wYQm5zmW2AptfWy2gCdYBCbGoJp8ubaEri+I3SEfIAROyiV9Kv6tOhs+mIZhRJS9 yKn3xp8C0Vy5q6Yxaz7It4uLJjqt7b6JZunlSTkRF2+89zEoA7kBMvbvswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDjf3LTDgFGWmqZtlTRODFBpZubNMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvT05fY3RNT0FVWmFhcG0yVk5FNE1VR2xtNXMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZqfMA0G CSqGSIb3DQEBCwUAA4IBAQCFZKopgppiWa3YaRAdE8bHH+bM3vCuoinyqliMn+1O qeyNqWya60LE9ifAymQpmFx+19n4G12IDdWwTbJlHwPMBAMbSMEVI7ndlUtFy0Jl 3vKzElWdv9ejuuOxTY/sEPtNKrF71cNlx1TlO3bC8NrIifoLk3EyTIQfxFfb4EZG VkUfe5wfkslgr9Qbwf89Tg+cHuyVzzyMGAT71gGYmSt43VHqleEc+DYBGOZcUNSj 0MrVFyYRUOPzE3LW+Nkmwft2a1nNZtAwXwkHmNF5EUdrgkXb5n5NbwFcDukZMgw3 AQjabyBmQHmAPllrCQcnQHzHuPXhLT0AheaoYXl/OMiw -----END CERTIFICATE-----Generated at Mon Jan 19 18:05:55 2026 by rpki-client