This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/OFjegJjxvcb4sj9nFgT2lfhHX4s.roa File: OFjegJjxvcb4sj9nFgT2lfhHX4s.roa (raw, json) Hash identifier: IYubfyClKzPMzSFo0EthrRHOvnb4H46ku4bTbgAoW7k= Subject key identifier: 38:58:DE:80:98:F1:BD:C6:F8:B2:3F:67:16:04:F6:95:F8:47:5F:8B Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019B7A59ACB7A52AA09EE197873B546DB6C6 Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/OFjegJjxvcb4sj9nFgT2lfhHX4s.roa Signing time: Thu 01 Jan 2026 16:17:35 +0000 ROA not before: Thu 01 Jan 2026 16:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 45.157.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:ac:b7:a5:2a:a0:9e:e1:97:87:3b:54:6d:b6:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jan 1 16:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3858de8098f1bdc6f8b23f671604f695f8475f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:db:f7:85:48:8e:18:e1:4a:1b:fd:d8:e7:98: 1c:c6:15:bd:82:00:6f:7a:84:42:54:48:6f:72:4a: 62:16:e8:34:63:e0:6b:fe:2c:d1:3e:10:17:3d:2d: fb:ef:16:18:cc:93:26:3e:16:7d:53:20:97:87:5f: 63:14:2f:50:45:aa:cc:76:24:3f:7e:16:00:a8:2b: 13:28:b0:e9:a7:1d:9e:ad:d0:9b:26:09:45:72:20: ff:e9:4e:56:a2:4f:9f:d6:ac:dd:ce:54:a8:cf:d1: 31:24:ee:38:6a:03:bc:b8:9b:78:5f:66:b7:8b:d6: ea:95:37:ac:ed:0b:e5:71:1a:9f:34:12:a9:95:36: 58:49:1e:cf:5a:8b:7f:c2:d4:f0:6c:fe:b3:62:8d: 04:77:1a:f3:76:16:b8:b7:c1:5e:26:81:3d:fa:73: 48:bd:2e:90:76:29:1b:e3:03:84:37:63:f4:60:07: 12:37:29:bd:6e:f8:c7:f4:12:40:a7:e8:1d:d3:da: 5d:52:0d:5c:0c:8c:c5:8a:cc:66:49:83:71:92:25: 24:db:ff:87:b4:22:fb:0a:61:07:ee:fb:04:93:72: 25:c5:73:4b:50:ee:81:f9:17:68:9a:e2:56:d0:61: 85:2f:3c:64:43:5f:7d:ea:89:df:26:aa:c5:38:54: a6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:58:DE:80:98:F1:BD:C6:F8:B2:3F:67:16:04:F6:95:F8:47:5F:8B X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/OFjegJjxvcb4sj9nFgT2lfhHX4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.72.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:ef:e5:4e:d5:ab:a6:d1:e5:7e:38:b5:10:31:81:df:83:fe: 31:84:5d:bd:a8:e3:a2:a3:75:37:01:94:ec:af:4c:9a:33:7c: b6:a0:c0:5f:82:e3:6d:75:9d:b0:4f:30:8d:3a:01:6f:c9:22: d3:cf:02:cd:ac:06:56:3e:ad:e6:9f:9b:c9:5f:e8:0f:60:72: 1f:ba:f3:c7:a5:b9:ba:30:5a:77:72:e8:da:d6:c0:17:bc:07: 02:26:21:1d:3c:12:ba:07:85:de:94:4a:33:fb:04:de:76:24: e3:fa:c3:d9:e1:3e:96:89:05:e3:e1:f6:66:c6:21:e2:02:ee: a4:79:ce:03:0f:2d:59:93:02:75:fe:0a:9e:91:3e:e9:b7:0c: c8:a7:f5:ef:6c:a4:af:cb:45:dc:a7:99:24:5f:b8:85:2f:a3: e9:1b:ff:2d:21:f4:b7:a1:fa:16:15:2f:27:b2:89:bf:57:d0: e0:b3:6f:e0:4c:99:62:c0:d3:7f:63:27:a8:26:3b:f8:94:a9: da:50:3b:b2:46:31:b8:1a:b6:08:3b:f2:19:62:80:7c:46:cd: af:be:ec:13:0e:22:66:bb:d2:11:38:58:a4:ca:e5:68:27:fb: bd:5a:3e:55:4e:21:5c:fd:f5:20:e2:09:c7:5f:95:72:61:fb: b3:e0:53:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Way3pSqgnuGXhztUbbbGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMTAxMTYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODU4ZGU4MDk4ZjFiZGM2ZjhiMjNmNjcxNjA0ZjY5NWY4NDc1ZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNv3hUiOGOFKG/3Y55gcxhW9ggBv eoRCVEhvckpiFug0Y+Br/izRPhAXPS377xYYzJMmPhZ9UyCXh19jFC9QRarMdiQ/ fhYAqCsTKLDppx2erdCbJglFciD/6U5Wok+f1qzdzlSoz9ExJO44agO8uJt4X2a3 i9bqlTes7QvlcRqfNBKplTZYSR7PWot/wtTwbP6zYo0Edxrzdha4t8FeJoE9+nNI vS6Qdikb4wOEN2P0YAcSNym9bvjH9BJAp+gd09pdUg1cDIzFisxmSYNxkiUk2/+H tCL7CmEH7vsEk3IlxXNLUO6B+RdomuJW0GGFLzxkQ1996onfJqrFOFSm0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDhY3oCY8b3G+LI/ZxYE9pX4R1+LMB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvT0ZqZWdKanh2Y2I0c2o5bkZnVDJsZmhIWDRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZ1IMA0G CSqGSIb3DQEBCwUAA4IBAQAq7+VO1aum0eV+OLUQMYHfg/4xhF29qOOio3U3AZTs r0yaM3y2oMBfguNtdZ2wTzCNOgFvySLTzwLNrAZWPq3mn5vJX+gPYHIfuvPHpbm6 MFp3cuja1sAXvAcCJiEdPBK6B4XelEoz+wTediTj+sPZ4T6WiQXj4fZmxiHiAu6k ec4DDy1ZkwJ1/gqekT7ptwzIp/XvbKSvy0Xcp5kkX7iFL6PpG/8tIfS3ofoWFS8n som/V9Dgs2/gTJliwNN/YyeoJjv4lKnaUDuyRjG4GrYIO/IZYoB8Rs2vvuwTDiJm u9IROFikyuVoJ/u9Wj5VTiFc/fUg4gnHX5VyYfuz4FNy -----END CERTIFICATE-----Generated at Mon Jan 5 03:56:30 2026 by rpki-client