This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa File: OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa (raw, json) Hash identifier: ZPmtBIJ2La5bnUm+sApv+AeoWDVjiZhyYSZEHB1jKmo= Subject key identifier: 39:0F:BA:55:37:69:D6:FC:3D:1A:B8:CD:2C:59:AF:23:D2:58:3A:BB Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Certificate serial: 019B7A59ABF4B6588EE75B2EE937DAA0C28C Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa Signing time: Thu 01 Jan 2026 16:17:35 +0000 ROA not before: Thu 01 Jan 2026 16:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 45.157.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:ab:f4:b6:58:8e:e7:5b:2e:e9:37:da:a0:c2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7 Validity Not Before: Jan 1 16:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=390fba553769d6fc3d1ab8cd2c59af23d2583abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ff:15:d4:c8:3d:38:fb:21:fe:2f:89:e5:ba: af:e1:2f:f9:af:03:78:8e:46:6a:9e:32:ee:8c:6c: 92:41:37:44:c1:1c:2b:79:a4:13:a7:cc:7d:8a:b0: ee:ed:ed:05:d9:4a:84:f4:ca:42:b4:d4:26:05:42: d2:f8:ef:ce:48:f2:db:98:ba:d8:55:e5:7c:15:68: 6e:c1:95:4a:44:d5:d4:3b:b2:fa:d7:f7:aa:f6:f7: 98:da:db:f7:a7:fe:41:6d:18:b2:29:b4:e7:2d:f8: e3:03:73:b3:8c:32:7f:cd:57:b6:47:cf:57:1b:36: 58:62:96:c3:bd:05:50:bf:08:46:19:09:e2:89:c8: a2:e0:26:f0:c3:eb:bc:4a:05:e7:1c:9b:df:5a:f7: fa:2e:18:c4:32:da:71:02:d1:c6:22:3d:6a:e6:3e: 8a:13:bf:e0:81:33:ce:0b:64:0d:27:92:eb:98:f3: 29:82:b7:39:bc:d6:7c:52:4a:33:14:98:7f:5d:77: 03:05:04:cd:ab:39:4b:81:1c:a5:29:ec:e1:2b:d6: e6:ca:5a:25:d5:1d:36:a9:eb:1b:96:6e:55:6d:93: ef:19:75:8a:81:c5:de:6c:7d:ab:de:ae:da:bc:7f: 05:b0:88:b8:4b:b3:08:01:86:66:4d:13:ff:fb:f6: b8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0F:BA:55:37:69:D6:FC:3D:1A:B8:CD:2C:59:AF:23:D2:58:3A:BB X509v3 Authority Key Identifier: keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/OQ-6VTdp1vw9GrjNLFmvI9JYOrs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.72.0/23 Signature Algorithm: sha256WithRSAEncryption 87:58:9f:ae:55:29:21:f4:11:07:8e:95:1c:e7:0f:1a:4a:da: 6d:b3:ba:19:14:c0:89:38:84:31:a0:c3:e9:0f:b1:34:c4:13: ff:96:ec:bd:11:08:89:06:83:fd:5a:95:4c:2e:5c:0b:b6:21: a2:8e:f6:12:78:29:de:3c:3a:45:88:8f:93:d9:9e:51:07:27: a5:eb:ea:23:9b:d8:c4:ab:08:33:81:e2:d2:3e:4b:cd:11:43: ef:88:7d:1d:6e:86:0d:b9:40:8c:b1:a5:4d:b7:a2:41:bc:f5: de:26:d6:1d:fc:37:db:6f:75:a4:dd:4c:45:52:4c:d7:52:a6: e2:bc:69:1c:4b:cd:80:c4:2e:58:da:e7:5a:19:66:ab:e9:fa: 34:ae:df:db:05:a0:40:8f:d7:b0:33:28:e6:04:7b:62:ff:6d: 66:16:e4:27:a6:6f:a1:4b:da:f5:fc:5e:59:c1:bb:79:73:5d: 79:3d:b7:44:e9:a8:f5:4b:70:6e:15:bf:3f:60:6e:1a:d4:8e: e4:c9:e6:41:4a:93:f5:a7:34:56:a6:21:4f:a9:cb:4d:a9:a3: db:f1:9f:4a:ba:32:1d:7c:1f:bc:bf:08:7e:3e:f9:c4:07:10: 37:b6:ed:99:83:07:d9:48:c7:13:fb:a4:5f:13:28:2c:cf:24: 62:44:b3:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wav0tliO51su6TfaoMKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx MTliZDcwHhcNMjYwMTAxMTYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTBmYmE1NTM3NjlkNmZjM2QxYWI4Y2QyYzU5YWYyM2QyNTgzYWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf8V1Mg9OPsh/i+J5bqv4S/5rwN4 jkZqnjLujGySQTdEwRwreaQTp8x9irDu7e0F2UqE9MpCtNQmBULS+O/OSPLbmLrY VeV8FWhuwZVKRNXUO7L61/eq9veY2tv3p/5BbRiyKbTnLfjjA3OzjDJ/zVe2R89X GzZYYpbDvQVQvwhGGQniicii4Cbww+u8SgXnHJvfWvf6LhjEMtpxAtHGIj1q5j6K E7/ggTPOC2QNJ5LrmPMpgrc5vNZ8UkozFJh/XXcDBQTNqzlLgRylKezhK9bmylol 1R02qesblm5VbZPvGXWKgcXebH2r3q7avH8FsIi4S7MIAYZmTRP/+/a4BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDkPulU3adb8PRq4zSxZryPSWDq7MB8GA1UdIwQY MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt YjZmMmFjODZlZjI3LzEvT1EtNlZUZHAxdnc5R3JqTkxGbXZJOUpZT3JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3 LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZ1IMA0G CSqGSIb3DQEBCwUAA4IBAQCHWJ+uVSkh9BEHjpUc5w8aStpts7oZFMCJOIQxoMPp D7E0xBP/luy9EQiJBoP9WpVMLlwLtiGijvYSeCnePDpFiI+T2Z5RByel6+ojm9jE qwgzgeLSPkvNEUPviH0dboYNuUCMsaVNt6JBvPXeJtYd/Dfbb3Wk3UxFUkzXUqbi vGkcS82AxC5Y2udaGWar6fo0rt/bBaBAj9ewMyjmBHti/21mFuQnpm+hS9r1/F5Z wbt5c115PbdE6aj1S3BuFb8/YG4a1I7kyeZBSpP1pzRWpiFPqctNqaPb8Z9KujId fB+8vwh+PvnEBxA3tu2ZgwfZSMcT+6RfEygszyRiRLPF -----END CERTIFICATE-----Generated at Mon Jan 5 03:59:20 2026 by rpki-client