This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/o7HXUZ7wql63_rY2SPAoMeVHALU.roa File: o7HXUZ7wql63_rY2SPAoMeVHALU.roa (raw, json) Hash identifier: tSjVjpZBEc5aPZsTVKoDXrBNuRrVoPjUDCvaDRxzkBc= Subject key identifier: A3:B1:D7:51:9E:F0:AA:5E:B7:FE:B6:36:48:F0:28:31:E5:47:00:B5 Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d Certificate serial: 019B7F15D378673422D6A413C39A64393046 Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/o7HXUZ7wql63_rY2SPAoMeVHALU.roa Signing time: Fri 02 Jan 2026 14:21:35 +0000 ROA not before: Fri 02 Jan 2026 14:21:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 45.153.78.0/24 maxlen: 24 45.153.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d3:78:67:34:22:d6:a4:13:c3:9a:64:39:30:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d Validity Not Before: Jan 2 14:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3b1d7519ef0aa5eb7feb63648f02831e54700b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:33:ba:4d:07:69:e6:94:6c:65:11:c0:01:0d: 1d:3e:09:c3:a5:ec:f6:df:66:7f:5f:bf:ce:a1:2b: 32:8f:39:a9:5f:d4:6a:99:fd:85:72:c9:66:ae:3c: 45:eb:f4:64:34:78:2d:60:9c:55:59:e4:03:37:d6: 6e:9f:f5:54:85:b4:74:82:51:a9:5b:30:fb:10:77: d7:b9:29:b9:c7:f9:15:e9:1f:77:b8:88:c7:53:34: 5b:2b:be:07:37:8b:f1:c0:d0:69:24:f1:cc:d3:b7: 4b:76:55:2a:59:c2:e9:39:ce:bc:93:3a:3e:8b:ab: 33:01:d8:39:71:dd:8a:22:b6:e4:a9:f6:19:0a:0b: c1:42:00:80:fc:30:ae:a7:a7:3c:1c:19:a4:ae:e0: 6a:e2:df:ba:98:53:8f:7c:bc:57:3e:20:37:88:70: 84:5e:1b:00:7d:19:13:55:50:59:64:38:37:1c:73: 02:1f:f8:99:21:56:48:5b:e8:cd:5d:3a:b4:d7:42: e0:71:4d:e5:bd:02:88:21:83:59:11:ec:0e:f4:3b: c2:63:37:a8:01:c7:a5:35:a5:2c:42:6a:3c:93:c8: 0d:aa:28:00:4f:6e:ab:a3:73:8c:20:d3:98:94:35: d5:a8:31:2f:49:d8:ce:36:e9:5d:d2:7b:0d:d4:d5: 4f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B1:D7:51:9E:F0:AA:5E:B7:FE:B6:36:48:F0:28:31:E5:47:00:B5 X509v3 Authority Key Identifier: keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/o7HXUZ7wql63_rY2SPAoMeVHALU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.78.0/23 Signature Algorithm: sha256WithRSAEncryption a4:db:75:8b:53:28:f2:d0:dc:7a:14:ce:c6:b7:26:a8:91:c9: 13:eb:0a:b8:4f:c8:a9:7e:92:76:8c:8a:f8:db:1b:61:bf:4d: d6:4a:0b:dd:b6:02:80:d4:b3:99:a3:51:04:d7:f7:bb:11:05: b8:fb:5d:67:5d:20:72:81:8d:60:92:96:6b:6c:af:2e:94:bb: d8:ca:f2:4f:7f:44:a6:63:d9:ee:3c:06:ab:a3:aa:af:62:eb: 9e:c4:7a:6a:ea:35:15:f8:1f:b9:16:a1:4e:26:3a:f1:3e:a3: 75:c4:9a:c2:46:64:ff:a8:e4:5a:a0:22:29:63:2b:0e:de:af: fb:bb:e9:5a:19:79:91:10:29:fc:8c:14:72:60:a5:a6:ec:21: 99:61:f8:df:9b:fe:39:eb:ab:be:1e:62:e2:bf:2f:ca:3f:16: 0e:67:ec:52:81:7e:ad:a2:ee:7d:c2:0f:d2:da:7d:2a:a7:d4: 6f:2c:08:ea:13:1d:8d:f5:ab:71:a4:c3:7b:bf:da:c7:39:c9: 25:0c:dc:64:88:24:b5:8a:bd:67:2b:e0:d3:ba:80:76:56:34: c1:cc:ed:ff:5b:01:17:90:27:06:3c:27:c0:1f:35:3f:c3:f4: 72:1f:bd:fc:90:90:f7:65:8f:dc:ea:ce:15:a1:9d:c4:bc:44: 0e:64:e0:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FdN4ZzQi1qQTw5pkOTBGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzOTEyMzg4MGY0Mjc0NDZkNWZmMDdjZWY5NjMzZTg2ZGM0 OTE5OGQwHhcNMjYwMTAyMTQyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2IxZDc1MTllZjBhYTVlYjdmZWI2MzY0OGYwMjgzMWU1NDcwMGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzO6TQdp5pRsZRHAAQ0dPgnDpez2 32Z/X7/OoSsyjzmpX9Rqmf2FcslmrjxF6/RkNHgtYJxVWeQDN9Zun/VUhbR0glGp WzD7EHfXuSm5x/kV6R93uIjHUzRbK74HN4vxwNBpJPHM07dLdlUqWcLpOc68kzo+ i6szAdg5cd2KIrbkqfYZCgvBQgCA/DCup6c8HBmkruBq4t+6mFOPfLxXPiA3iHCE XhsAfRkTVVBZZDg3HHMCH/iZIVZIW+jNXTq010LgcU3lvQKIIYNZEewO9DvCYzeo AcelNaUsQmo8k8gNqigAT26ro3OMINOYlDXVqDEvSdjONuld0nsN1NVPHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKOx11Ge8Kpet/62NkjwKDHlRwC1MB8GA1UdIwQY MBaAFNORI4gPQnRG1f8HzvljPobcSRmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDVFamlBOUNkRWJWX3dmTy1XTS1odHhKR1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NjFiODQtMTE0ZC00OTI5LWI2ODQt Y2NhMGFkMjY4NWNhLzEvbzdIWFVaN3dxbDYzX3JZMlNQQW9NZVZIQUxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82NjFiODQtMTE0ZC00OTI5LWI2ODQtY2NhMGFkMjY4NWNh LzEvMDVFamlBOUNkRWJWX3dmTy1XTS1odHhKR1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZlOMA0G CSqGSIb3DQEBCwUAA4IBAQCk23WLUyjy0Nx6FM7GtyaokckT6wq4T8ipfpJ2jIr4 2xthv03WSgvdtgKA1LOZo1EE1/e7EQW4+11nXSBygY1gkpZrbK8ulLvYyvJPf0Sm Y9nuPAaro6qvYuuexHpq6jUV+B+5FqFOJjrxPqN1xJrCRmT/qORaoCIpYysO3q/7 u+laGXmRECn8jBRyYKWm7CGZYfjfm/4566u+HmLivy/KPxYOZ+xSgX6tou59wg/S 2n0qp9RvLAjqEx2N9atxpMN7v9rHOcklDNxkiCS1ir1nK+DTuoB2VjTBzO3/WwEX kCcGPCfAHzU/w/RyH738kJD3ZY/c6s4VoZ3EvEQOZODi -----END CERTIFICATE-----Generated at Fri Jan 9 06:24:36 2026 by rpki-client