This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/S38OHsxGDLfSGAptZ4hy9dtBOZ8.roa File: S38OHsxGDLfSGAptZ4hy9dtBOZ8.roa (raw, json) Hash identifier: wqzK+x9/Xxfga5YK9LI/Y8F4PtsvXI3mI+6CYKYud0I= Subject key identifier: 4B:7F:0E:1E:CC:46:0C:B7:D2:18:0A:6D:67:88:72:F5:DB:41:39:9F Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C802F735E7800CDB64395387E07B7B3 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/S38OHsxGDLfSGAptZ4hy9dtBOZ8.roa Signing time: Fri 02 Jan 2026 02:18:54 +0000 ROA not before: Fri 02 Jan 2026 02:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215738 IP address blocks: 45.137.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2f:73:5e:78:00:cd:b6:43:95:38:7e:07:b7:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b7f0e1ecc460cb7d2180a6d678872f5db41399f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:60:c0:f5:0c:50:49:97:18:b8:d1:82:68:b2: 93:d0:bc:66:ff:0c:14:8a:36:8f:41:db:2a:fd:1b: 16:6c:11:10:16:3f:5d:4a:6e:a5:66:5d:fb:8c:09: 05:26:a4:f9:76:53:13:6f:62:73:07:30:26:9f:ff: ae:12:93:c5:7f:80:68:6b:ce:53:70:ab:85:e8:40: e6:da:1d:cf:53:c9:01:d7:7e:02:5b:04:d4:f5:bd: 43:cf:9b:5e:07:10:5d:6c:0f:64:2e:6b:0f:e9:0e: 4d:d2:e9:06:45:64:da:35:98:da:4d:1a:f3:71:ec: 07:3f:af:6c:44:dd:00:62:0a:52:0c:84:85:b2:25: ac:26:26:e8:18:3b:3a:8c:c0:4e:0a:83:73:0e:d4: 36:eb:5c:99:65:d5:22:0b:32:5d:27:fe:18:37:cc: af:81:96:93:c1:d3:0f:4e:82:db:86:2a:57:ba:01: da:50:13:b3:2f:ba:79:b4:ce:3f:e8:bf:8d:9d:6d: b9:eb:bc:47:f4:e1:d8:00:4d:a5:d1:eb:af:fd:f3: 34:8a:06:b3:2c:2f:29:e9:16:ef:f0:61:8e:19:49: 1b:64:68:ff:6f:ca:d6:28:31:6d:da:fb:4a:57:d2: 63:2f:c2:15:8a:ad:e3:e9:77:af:ce:fc:af:1e:d7: 0e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7F:0E:1E:CC:46:0C:B7:D2:18:0A:6D:67:88:72:F5:DB:41:39:9F X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/S38OHsxGDLfSGAptZ4hy9dtBOZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.68.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:ac:dc:87:14:6f:7d:75:2f:d4:dc:2a:55:ea:63:67:9c:07: ea:98:66:ec:92:eb:73:28:f8:25:ea:e0:8e:77:ed:e3:ac:c7: 51:b5:78:0c:15:cc:6c:f6:0b:19:05:fe:3d:94:7f:77:9c:a8: f8:99:5b:7c:2a:e5:d4:a2:62:c8:f6:9f:66:48:fe:7b:1e:c9: fb:2d:64:69:ad:19:cd:89:3f:7c:2c:33:3e:d9:7d:57:96:29: 87:92:26:9a:3a:68:33:33:92:c2:13:03:24:c3:30:b3:e4:48: 7b:2e:a9:e8:54:46:d1:c5:50:e1:22:34:cc:f5:a5:c0:a0:bf: 51:89:17:0b:32:df:2f:78:f7:54:7b:5e:7a:c7:3e:4c:59:02: 9f:2f:e8:fb:d8:33:5f:27:47:1c:3a:26:7f:f1:87:b8:ca:1e: d2:ba:08:e3:99:23:9a:ab:96:11:f9:f0:d7:1d:3c:05:9f:72: a1:3e:31:55:53:50:3a:37:84:b9:0b:03:9d:e3:3a:5b:a6:35: cb:d8:41:9f:91:46:1d:d8:c3:78:20:63:2c:66:cb:77:a6:37: dd:bf:a2:6d:42:6c:6a:3d:b6:86:27:56:eb:7f:a7:57:f9:b1: 12:b6:92:c3:04:1d:3d:8b:d6:8b:e2:16:e6:14:dd:6a:55:b1: d7:23:b7:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gC9zXngAzbZDlTh+B7ezMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjdmMGUxZWNjNDYwY2I3ZDIxODBhNmQ2Nzg4NzJmNWRiNDEzOTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmDA9QxQSZcYuNGCaLKT0Lxm/wwU ijaPQdsq/RsWbBEQFj9dSm6lZl37jAkFJqT5dlMTb2JzBzAmn/+uEpPFf4Boa85T cKuF6EDm2h3PU8kB134CWwTU9b1Dz5teBxBdbA9kLmsP6Q5N0ukGRWTaNZjaTRrz cewHP69sRN0AYgpSDISFsiWsJiboGDs6jMBOCoNzDtQ261yZZdUiCzJdJ/4YN8yv gZaTwdMPToLbhipXugHaUBOzL7p5tM4/6L+NnW2567xH9OHYAE2l0euv/fM0igaz LC8p6Rbv8GGOGUkbZGj/b8rWKDFt2vtKV9JjL8IViq3j6XevzvyvHtcO4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEt/Dh7MRgy30hgKbWeIcvXbQTmfMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvUzM4T0hzeEdETGZTR0FwdFo0aHk5ZHRCT1o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYlEMA0G CSqGSIb3DQEBCwUAA4IBAQAerNyHFG99dS/U3CpV6mNnnAfqmGbskutzKPgl6uCO d+3jrMdRtXgMFcxs9gsZBf49lH93nKj4mVt8KuXUomLI9p9mSP57Hsn7LWRprRnN iT98LDM+2X1XlimHkiaaOmgzM5LCEwMkwzCz5Eh7LqnoVEbRxVDhIjTM9aXAoL9R iRcLMt8vePdUe156xz5MWQKfL+j72DNfJ0ccOiZ/8Ye4yh7SugjjmSOaq5YR+fDX HTwFn3KhPjFVU1A6N4S5CwOd4zpbpjXL2EGfkUYd2MN4IGMsZst3pjfdv6JtQmxq PbaGJ1brf6dX+bEStpLDBB09i9aL4hbmFN1qVbHXI7dR -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:15 2026 by rpki-client