This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/oK-l_3d_vcNuFOm12ibmb0cbNHs.roa File: oK-l_3d_vcNuFOm12ibmb0cbNHs.roa (raw, json) Hash identifier: lVkSdNlZrQRcuVVCpchBeA9OcY08H6oNlvysY5acQSI= Subject key identifier: A0:AF:A5:FF:77:7F:BD:C3:6E:14:E9:B5:DA:26:E6:6F:47:1B:34:7B Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F8383967F093D85DF4A4E9BD867B668 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/oK-l_3d_vcNuFOm12ibmb0cbNHs.roa Signing time: Fri 02 Jan 2026 16:21:23 +0000 ROA not before: Fri 02 Jan 2026 16:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 45.65.114.0/24 maxlen: 24 45.65.115.0/24 maxlen: 24 194.15.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:83:96:7f:09:3d:85:df:4a:4e:9b:d8:67:b6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0afa5ff777fbdc36e14e9b5da26e66f471b347b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:36:77:72:24:b0:19:e6:11:eb:3a:1e:b7:0d: 2b:6e:6b:14:1c:30:09:86:e2:e3:3b:86:49:c3:7c: 0b:bc:0e:5d:1e:68:d4:a1:1a:3a:58:4d:7b:67:b4: e9:9e:b4:c1:23:08:8b:4d:cc:e3:0d:4b:b5:c4:c7: 88:39:67:a9:2f:f9:db:c3:82:ac:5b:ff:37:18:6e: 80:8c:73:cf:7e:7c:7f:8c:2c:07:e9:7a:5a:41:da: 74:41:f9:5f:c0:73:cf:b1:e2:ab:06:65:b4:7a:86: 45:1c:d2:08:b3:5b:b1:04:8f:30:fa:83:99:66:3c: 48:2c:8e:15:b6:f8:c1:36:40:d7:87:3e:33:01:79: da:3b:21:b1:34:f6:af:a6:19:3b:60:0c:68:77:6b: 31:70:bd:35:bf:f2:da:0c:f0:0f:69:66:be:c7:c9: bb:5d:5c:2a:19:e6:17:a9:f8:b0:bc:7d:85:7b:74: 88:2b:ff:5f:59:15:42:df:96:bd:02:5e:ca:22:05: ed:44:4c:fb:b4:bb:30:1d:a6:8b:da:ec:b2:c2:5d: c9:31:97:6a:60:fb:c6:73:41:4c:90:f8:3e:89:20: a9:46:96:52:47:3f:42:29:9a:88:dd:8f:ec:9a:86: fc:87:97:b3:37:5e:ae:a2:95:67:2d:5f:05:32:7d: 0c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AF:A5:FF:77:7F:BD:C3:6E:14:E9:B5:DA:26:E6:6F:47:1B:34:7B X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/oK-l_3d_vcNuFOm12ibmb0cbNHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.114.0/23 194.15.97.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:90:fb:a4:c7:c5:91:50:41:b9:00:a5:4d:09:2b:07:8c:8c: 10:12:80:38:20:2c:bd:cd:ac:06:dd:10:33:90:85:72:a1:4a: c5:f0:f0:a6:64:88:2b:c7:fc:d2:c3:a6:d4:97:7d:f9:2c:a7: 3b:28:ff:c9:94:37:0e:98:cc:0e:28:e2:16:dc:7e:c3:ed:e1: 83:2f:78:4a:6e:1f:d9:7d:23:11:fa:9b:dc:12:11:c6:cf:9d: 8f:35:fd:2a:31:6b:8a:55:c8:a4:9c:aa:b3:39:24:1a:4e:39: 14:ed:9a:fb:45:a1:63:cd:44:bd:86:98:f0:1f:ce:52:72:18: 97:e4:d3:88:56:ad:12:a6:be:d7:f8:53:40:71:fa:35:64:10: 18:8d:47:7f:42:f6:48:64:88:3e:c6:e0:f4:e1:41:d1:34:89: 3c:b0:1b:27:03:9c:4b:4d:be:2e:1f:d3:9d:15:11:f8:f9:f6: 80:10:19:11:3d:2f:85:1f:73:8c:c4:2b:df:6a:26:bd:97:32: ac:f3:5d:dc:4b:dc:8f:78:9f:7e:55:41:d1:a9:47:57:33:9f: b8:c0:bf:8d:de:a6:fe:27:3f:56:d6:75:fa:28:dc:4d:49:65: 96:4e:3b:26:77:4d:f5:64:68:01:4b:b8:f8:29:74:89:62:64: d6:e9:4b:b3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g4OWfwk9hd9KTpvYZ7ZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGFmYTVmZjc3N2ZiZGMzNmUxNGU5YjVkYTI2ZTY2ZjQ3MWIzNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTZ3ciSwGeYR6zoetw0rbmsUHDAJ huLjO4ZJw3wLvA5dHmjUoRo6WE17Z7TpnrTBIwiLTczjDUu1xMeIOWepL/nbw4Ks W/83GG6AjHPPfnx/jCwH6XpaQdp0QflfwHPPseKrBmW0eoZFHNIIs1uxBI8w+oOZ ZjxILI4VtvjBNkDXhz4zAXnaOyGxNPavphk7YAxod2sxcL01v/LaDPAPaWa+x8m7 XVwqGeYXqfiwvH2Fe3SIK/9fWRVC35a9Al7KIgXtREz7tLswHaaL2uyywl3JMZdq YPvGc0FMkPg+iSCpRpZSRz9CKZqI3Y/smob8h5ezN16uopVnLV8FMn0MlwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKCvpf93f73DbhTptdom5m9HGzR7MB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvb0stbF8zZF92Y051Rk9tMTJpYm1iMGNiTkhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLUFyAwQA wg9hMA0GCSqGSIb3DQEBCwUAA4IBAQBLkPukx8WRUEG5AKVNCSsHjIwQEoA4ICy9 zawG3RAzkIVyoUrF8PCmZIgrx/zSw6bUl335LKc7KP/JlDcOmMwOKOIW3H7D7eGD L3hKbh/ZfSMR+pvcEhHGz52PNf0qMWuKVciknKqzOSQaTjkU7Zr7RaFjzUS9hpjw H85SchiX5NOIVq0Spr7X+FNAcfo1ZBAYjUd/QvZIZIg+xuD04UHRNIk8sBsnA5xL Tb4uH9OdFRH4+faAEBkRPS+FH3OMxCvfaia9lzKs813cS9yPeJ9+VUHRqUdXM5+4 wL+N3qb+Jz9W1nX6KNxNSWWWTjsmd031ZGgBS7j4KXSJYmTW6Uuz -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:59 2026 by rpki-client