This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/uso1lfnFDkXQ0g32dDinU4VJGGg.roa File: uso1lfnFDkXQ0g32dDinU4VJGGg.roa (raw, json) Hash identifier: KTwcrxBeWHuXptuhMn0HECKH+KI9rwaB6i3BGJMjx/c= Subject key identifier: BA:CA:35:95:F9:C5:0E:45:D0:D2:0D:F6:74:38:A7:53:85:49:18:68 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C802C7CCD402BCDE3E41C39321D3D06 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/uso1lfnFDkXQ0g32dDinU4VJGGg.roa Signing time: Fri 02 Jan 2026 02:18:53 +0000 ROA not before: Fri 02 Jan 2026 02:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214093 IP address blocks: 45.151.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2c:7c:cd:40:2b:cd:e3:e4:1c:39:32:1d:3d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=baca3595f9c50e45d0d20df67438a75385491868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:14:57:05:91:ab:4f:a0:b8:a8:1e:5a:00:fb: 4f:78:f1:90:a5:db:6d:05:43:00:d9:7d:01:6b:be: 12:0d:66:84:3b:fe:18:8e:db:50:2c:99:64:9c:82: 33:24:65:be:15:36:85:9b:18:5f:6a:3a:77:49:e8: a1:1b:d5:92:bb:b9:73:c2:7e:6c:2a:49:16:d0:e6: a5:46:d7:49:99:af:c5:c7:a9:1d:4a:6b:88:d9:1c: 17:79:ac:06:5c:65:62:6e:60:67:2d:03:51:79:9f: 2b:66:f7:b0:54:2c:19:74:05:76:e6:d6:42:29:7a: 9c:e3:40:70:43:a5:fa:c2:ea:4b:3f:0a:93:e2:7c: 7a:56:3c:1c:0f:8f:09:31:e1:71:58:8d:5e:e5:8c: 2f:20:2c:94:8b:0d:4d:b7:07:6c:82:45:37:2e:d5: 72:bb:85:88:0c:08:e8:24:d6:03:5d:d4:e7:0f:e4: 96:3d:06:01:28:7a:1a:4a:18:1c:a4:9c:bb:55:e8: a5:e2:8e:4f:bb:33:2c:66:a4:63:11:a1:bd:a7:8e: 10:32:28:5c:d0:f6:fb:d5:5f:ce:b8:6a:40:de:1e: d2:88:36:8d:1b:4c:ff:de:9b:9e:60:82:45:fc:e8: 90:67:d0:0d:12:80:db:ea:12:4f:e7:3f:eb:54:79: 68:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CA:35:95:F9:C5:0E:45:D0:D2:0D:F6:74:38:A7:53:85:49:18:68 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/uso1lfnFDkXQ0g32dDinU4VJGGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.57.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:0b:ca:87:82:2d:4a:4e:d1:d1:27:a4:e6:d4:2e:78:a6:dd: 9c:8f:66:c5:69:da:46:4f:d2:c1:04:b8:73:dd:6b:34:03:af: b5:38:dc:14:f5:c0:88:f4:84:96:4e:ef:ff:a7:18:17:6d:06: 73:4d:ea:72:04:a1:f9:09:27:44:cb:23:b1:ba:23:ab:e4:4b: cc:23:6f:04:4c:2f:91:5b:e0:5f:80:f9:7a:05:cf:36:8d:80: ad:40:f2:1a:e0:f3:29:89:ad:c1:b0:e6:78:75:53:99:d1:a2: 06:fb:4b:2d:14:3d:68:3e:84:e4:75:ff:73:54:4a:d5:1b:d0: 94:9c:f0:cd:13:39:52:73:89:04:38:50:ab:8a:fe:b8:c4:5a: d7:17:a4:e4:fd:69:d9:99:63:25:13:3c:2d:63:96:2c:d7:7f: 12:99:86:b2:83:6b:65:ce:8f:74:44:c2:fe:21:0b:29:6a:ce: a8:1f:7d:a9:60:b1:38:58:2b:1f:5d:e5:8b:a6:5f:3b:b3:df: 17:f1:93:f9:b8:16:40:8f:92:53:8f:f7:3b:78:e9:a2:54:f4: ea:27:bf:f7:94:76:93:98:d3:0f:49:1e:e1:20:e2:9f:4f:57: e8:06:f6:af:2d:fb:85:b3:06:67:01:b4:7c:20:ae:c1:ee:4c: 35:d4:cc:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gCx8zUArzePkHDkyHT0GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWNhMzU5NWY5YzUwZTQ1ZDBkMjBkZjY3NDM4YTc1Mzg1NDkxODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xRXBZGrT6C4qB5aAPtPePGQpdtt BUMA2X0Ba74SDWaEO/4YjttQLJlknIIzJGW+FTaFmxhfajp3SeihG9WSu7lzwn5s KkkW0OalRtdJma/Fx6kdSmuI2RwXeawGXGVibmBnLQNReZ8rZvewVCwZdAV25tZC KXqc40BwQ6X6wupLPwqT4nx6VjwcD48JMeFxWI1e5YwvICyUiw1NtwdsgkU3LtVy u4WIDAjoJNYDXdTnD+SWPQYBKHoaShgcpJy7Veil4o5PuzMsZqRjEaG9p44QMihc 0Pb71V/OuGpA3h7SiDaNG0z/3pueYIJF/OiQZ9ANEoDb6hJP5z/rVHlodwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLrKNZX5xQ5F0NIN9nQ4p1OFSRhoMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvdXNvMWxmbkZEa1hRMGczMmREaW5VNFZKR0dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZc5MA0G CSqGSIb3DQEBCwUAA4IBAQAKC8qHgi1KTtHRJ6Tm1C54pt2cj2bFadpGT9LBBLhz 3Ws0A6+1ONwU9cCI9ISWTu//pxgXbQZzTepyBKH5CSdEyyOxuiOr5EvMI28ETC+R W+BfgPl6Bc82jYCtQPIa4PMpia3BsOZ4dVOZ0aIG+0stFD1oPoTkdf9zVErVG9CU nPDNEzlSc4kEOFCriv64xFrXF6Tk/WnZmWMlEzwtY5Ys138SmYayg2tlzo90RML+ IQspas6oH32pYLE4WCsfXeWLpl87s98X8ZP5uBZAj5JTj/c7eOmiVPTqJ7/3lHaT mNMPSR7hIOKfT1foBvavLfuFswZnAbR8IK7B7kw11MxH -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:29 2026 by rpki-client