This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/oxS76504E-QOeHkwlIpZj9zrXis.roa File: oxS76504E-QOeHkwlIpZj9zrXis.roa (raw, json) Hash identifier: FkDF/lt7EB2+x6Go/eHE5SAyhxY1+M2DCQUU47W6MiM= Subject key identifier: A3:14:BB:EB:9D:38:13:E4:0E:78:79:30:94:8A:59:8F:DC:EB:5E:2B Certificate issuer: /CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253 Certificate serial: 019B77C6AE1FB31F2531DF2E9E3537472D39 Authority key identifier: 10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/oxS76504E-QOeHkwlIpZj9zrXis.roa Signing time: Thu 01 Jan 2026 04:17:48 +0000 ROA not before: Thu 01 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34934 IP address blocks: 45.152.253.0/24 maxlen: 24 45.152.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ae:1f:b3:1f:25:31:df:2e:9e:35:37:47:2d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253 Validity Not Before: Jan 1 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a314bbeb9d3813e40e787930948a598fdceb5e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:68:09:f2:71:e3:02:85:e3:c7:9b:a9:d3:af: fa:a3:41:18:51:c3:e5:4c:20:19:ec:f9:1d:30:20: 05:21:bc:87:e0:f6:dd:19:65:70:33:95:82:76:2e: 36:29:b1:37:db:df:5b:ef:1e:89:79:d2:62:42:29: 04:c2:b9:d1:6b:4f:11:3b:d5:77:5a:6d:46:44:f8: 1e:27:65:dc:39:6f:64:f8:65:f1:19:c4:a7:62:39: e2:8f:fa:aa:f7:73:85:d0:a1:78:78:f4:5b:ec:29: 76:30:30:8f:a0:cf:54:0c:6d:5e:ca:7f:f4:e2:26: bd:57:f9:42:16:38:50:11:33:e9:08:a0:92:6e:58: 48:c9:ce:df:b8:bf:8f:75:5d:ce:b1:a9:ff:88:45: 7c:59:21:70:18:64:a8:b8:7f:b6:9d:f9:a0:e4:03: 5a:14:14:61:e1:2a:ac:65:c4:f5:09:72:c3:eb:1d: 75:29:7c:e8:d9:21:59:0f:27:3b:cd:2b:91:1d:b3: e9:cc:dd:ee:f6:ba:61:e6:5c:4f:fc:b2:e6:88:ea: 04:d5:e9:18:95:87:6b:87:95:69:68:93:d8:1b:0c: f0:d4:ee:e6:bf:30:2f:f3:33:64:b0:e1:f9:7a:9c: 3b:4a:42:e9:bf:36:2e:ba:86:91:61:55:26:16:f6: 53:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:14:BB:EB:9D:38:13:E4:0E:78:79:30:94:8A:59:8F:DC:EB:5E:2B X509v3 Authority Key Identifier: keyid:10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/oxS76504E-QOeHkwlIpZj9zrXis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.253.0-45.152.254.255 Signature Algorithm: sha256WithRSAEncryption 09:c4:bf:58:c3:5d:dc:21:36:55:39:96:eb:7a:d6:5c:bd:cd: 5c:e6:94:52:54:a2:79:89:42:69:13:0c:92:96:d7:46:24:67: d6:de:ee:9c:b1:64:2d:76:db:55:2a:cb:82:eb:3d:7b:08:0e: db:71:54:c9:bb:de:6e:e5:aa:6c:1f:7d:04:89:f1:d4:08:10: 57:b4:dc:1c:66:6d:2e:41:bf:4c:b3:d8:8c:02:48:69:c6:7c: 51:0b:3f:1f:56:af:26:a6:c7:5a:33:38:6e:0a:f0:1f:60:b0: bf:19:9b:c2:5b:16:0e:08:66:36:18:35:0e:ce:97:c5:94:10: 92:00:fb:73:73:67:4c:93:1d:9e:6a:9d:41:3e:7d:6e:5b:0e: 59:05:36:18:c5:fd:45:32:7a:ed:a8:95:2f:5d:f5:79:a8:b8: 90:a8:10:1d:6c:db:1d:a9:aa:7a:f4:39:74:93:91:bb:b7:c4: 6b:4d:77:d5:ac:4c:b4:30:5a:b7:ee:03:fa:4f:a9:36:72:1e: dc:bb:f8:09:04:eb:c2:32:40:b1:65:df:56:e2:9b:10:f3:e1: aa:dd:1f:d5:a7:09:9c:1f:97:0b:a7:76:8e:ec:a1:3e:aa:6c: 7f:fa:1f:f6:4e:93:5a:e7:5b:66:fe:18:af:cc:96:44:f7:89: c0:20:25:7d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xq4fsx8lMd8unjU3Ry05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwODZhN2MwZGVhNzNkZDBmOTRlMmU5ZmUxYWM5YWI2NzAx YjIyNTMwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzE0YmJlYjlkMzgxM2U0MGU3ODc5MzA5NDhhNTk4ZmRjZWI1ZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGgJ8nHjAoXjx5up06/6o0EYUcPl TCAZ7PkdMCAFIbyH4PbdGWVwM5WCdi42KbE3299b7x6JedJiQikEwrnRa08RO9V3 Wm1GRPgeJ2XcOW9k+GXxGcSnYjnij/qq93OF0KF4ePRb7Cl2MDCPoM9UDG1eyn/0 4ia9V/lCFjhQETPpCKCSblhIyc7fuL+PdV3Osan/iEV8WSFwGGSouH+2nfmg5ANa FBRh4SqsZcT1CXLD6x11KXzo2SFZDyc7zSuRHbPpzN3u9rph5lxP/LLmiOoE1ekY lYdrh5VpaJPYGwzw1O7mvzAv8zNksOH5epw7SkLpvzYuuoaRYVUmFvZTRwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKMUu+udOBPkDnh5MJSKWY/c614rMB8GA1UdIwQY MBaAFBCGp8Depz3Q+U4un+GsmrZwGyJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUlhbndONm5QZEQ1VGk2ZjRheWF0bkFiSWxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NjkwZDAtYTJhYi00Yjc0LWIxMDQt ZDllMWI4MWRkMWM3LzEvb3hTNzY1MDRFLVFPZUhrd2xJcFpqOXpyWGlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85NjkwZDAtYTJhYi00Yjc0LWIxMDQtZDllMWI4MWRkMWM3 LzEvRUlhbndONm5QZEQ1VGk2ZjRheWF0bkFiSWxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtmP0D BAAtmP4wDQYJKoZIhvcNAQELBQADggEBAAnEv1jDXdwhNlU5lut61ly9zVzmlFJU onmJQmkTDJKW10YkZ9be7pyxZC1221Uqy4LrPXsIDttxVMm73m7lqmwffQSJ8dQI EFe03BxmbS5Bv0yz2IwCSGnGfFELPx9Wryamx1ozOG4K8B9gsL8Zm8JbFg4IZjYY NQ7Ol8WUEJIA+3NzZ0yTHZ5qnUE+fW5bDlkFNhjF/UUyeu2olS9d9XmouJCoEB1s 2x2pqnr0OXSTkbu3xGtNd9WsTLQwWrfuA/pPqTZyHty7+AkE68IyQLFl31bimxDz 4ardH9WnCZwflwundo7soT6qbH/6H/ZOk1rnW2b+GK/MlkT3icAgJX0= -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:51 2026 by rpki-client