This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/1-OuWPae2QmllBKFyaudDbNphGTc.roa File: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (raw, json) Hash identifier: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ= Subject key identifier: F8:EB:96:3D:A7:B6:42:69:65:04:A1:72:6A:E7:43:6C:DA:61:19:37 Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a Certificate serial: 019B7CEE54E311DAF3913755621B38E63F35 Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/1-OuWPae2QmllBKFyaudDbNphGTc.roa Signing time: Fri 02 Jan 2026 04:19:12 +0000 ROA not before: Fri 02 Jan 2026 04:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.129.52.0/24 maxlen: 32 45.129.53.0/24 maxlen: 32 45.129.54.0/24 maxlen: 32 45.129.55.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:54:e3:11:da:f3:91:37:55:62:1b:38:e6:3f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8eb963da7b642696504a1726ae7436cda611937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:94:dc:57:e4:11:c4:2a:71:9f:08:cb:7d:55: 9f:d4:2c:55:2a:f0:8e:1f:2e:7b:25:d9:f2:73:d2: ef:73:cb:89:fa:34:3c:5f:e0:06:a2:a8:2f:66:ff: 81:47:d9:74:c8:c3:34:7f:93:ab:b9:68:91:09:f6: 62:b7:d8:43:76:69:3c:de:91:ea:33:96:81:8c:58: 5e:a2:d0:03:79:60:07:5c:4f:dd:2a:03:05:8e:d8: a4:68:fa:73:c9:68:c9:d8:78:a0:af:80:42:34:4e: 5f:b5:32:da:2a:ba:c8:b7:8d:7d:a2:82:2e:0b:a1: 87:de:b2:04:ae:24:6a:cd:57:53:71:9b:d1:fa:bc: e3:cc:9c:9c:bd:e8:42:d9:e5:d3:f8:a6:e0:0c:50: cd:fa:0d:df:4b:8e:23:d7:fa:43:16:bf:cc:89:c3: 22:25:35:f4:ea:2e:a2:7a:9c:cb:da:38:04:26:87: b4:41:7f:e8:cd:c8:4d:cf:69:6a:cb:55:79:b3:d5: f1:45:46:b9:67:69:65:a9:2b:91:fd:ce:94:3c:29: e3:23:5a:c9:47:1f:c2:7b:70:f0:c7:8e:04:b4:fd: a2:42:7d:40:2d:71:cf:ac:09:b0:91:77:75:98:74: 3a:cd:3c:9b:f6:11:28:23:c3:01:54:0a:50:6b:41: c2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EB:96:3D:A7:B6:42:69:65:04:A1:72:6A:E7:43:6C:DA:61:19:37 X509v3 Authority Key Identifier: keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/1-OuWPae2QmllBKFyaudDbNphGTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.52.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:42:82:26:ed:76:64:76:4f:7f:d4:5b:58:00:e2:53:99:5f: 0d:e7:ec:17:24:ed:58:da:96:86:df:19:17:cd:7d:ca:7e:fe: 8b:a8:27:b4:ef:aa:24:29:fe:54:70:e7:c7:7f:14:4b:43:31: 12:63:e5:16:45:2f:fc:80:58:fb:fd:b2:c0:8e:50:08:61:c0: 01:2b:1d:82:fd:ac:51:e9:31:bb:47:d6:49:af:9f:43:fb:e0: cf:0e:8f:27:06:e1:d4:88:db:ec:45:64:17:a8:24:9e:e8:ad: 0b:1c:9d:ee:cb:3f:c2:18:bf:8a:1f:09:b6:59:10:0e:ed:ec: dc:f5:34:5c:83:f6:92:a4:1c:0c:de:9e:16:6d:ad:fd:13:de: 0a:76:6f:0d:93:35:3c:e3:2e:7f:74:9e:93:c8:7f:b8:c5:ec: 0a:ea:11:2a:46:04:80:26:d5:b5:ce:c3:8f:74:f3:81:29:5e: bb:48:03:9c:7f:13:e6:79:cc:2b:29:86:8f:d3:e0:00:a9:88: 97:ae:49:f8:55:8c:40:3a:fb:d9:f2:9c:17:7a:48:12:db:40: d9:b4:4c:50:a6:74:4e:99:36:50:fc:bb:68:2b:d4:d2:52:b8: 67:6e:2a:ee:ac:12:e8:e2:fc:fe:e0:2f:d3:7a:15:d6:73:95: 35:44:ec:f2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87lTjEdrzkTdVYhs45j81MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZjU0YmUxYjVlZDVmZDU5MmZhY2E0NjhkZjExMTAwOTVm M2VhMGEwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGViOTYzZGE3YjY0MjY5NjUwNGExNzI2YWU3NDM2Y2RhNjExOTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZTcV+QRxCpxnwjLfVWf1CxVKvCO Hy57Jdnyc9Lvc8uJ+jQ8X+AGoqgvZv+BR9l0yMM0f5OruWiRCfZit9hDdmk83pHq M5aBjFheotADeWAHXE/dKgMFjtikaPpzyWjJ2Higr4BCNE5ftTLaKrrIt419ooIu C6GH3rIEriRqzVdTcZvR+rzjzJycvehC2eXT+KbgDFDN+g3fS44j1/pDFr/MicMi JTX06i6iepzL2jgEJoe0QX/ozchNz2lqy1V5s9XxRUa5Z2llqSuR/c6UPCnjI1rJ Rx/Ce3Dwx44EtP2iQn1ALXHPrAmwkXd1mHQ6zTyb9hEoI8MBVApQa0HClwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPjrlj2ntkJpZQShcmrnQ2zaYRk3MB8GA1UdIwQY MBaAFO31S+G17V/VkvrKRo3xEQCV8+oKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUt OWU2MTRmNDQ2NmM1LzEvMS1PdVdQYWUyUW1sbEJLRnlhdWREYk5waEdUYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjcvNDBkODkzLWUwOTktNDE0OC1iMjhlLTllNjE0ZjQ0NjZj NS8xLzdmVkw0Ylh0WDlXUy1zcEdqZkVSQUpYejZnby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2BNDAN BgkqhkiG9w0BAQsFAAOCAQEALEKCJu12ZHZPf9RbWADiU5lfDefsFyTtWNqWht8Z F819yn7+i6gntO+qJCn+VHDnx38US0MxEmPlFkUv/IBY+/2ywI5QCGHAASsdgv2s Uekxu0fWSa+fQ/vgzw6PJwbh1Ijb7EVkF6gknuitCxyd7ss/whi/ih8JtlkQDu3s 3PU0XIP2kqQcDN6eFm2t/RPeCnZvDZM1POMuf3Sek8h/uMXsCuoRKkYEgCbVtc7D j3TzgSleu0gDnH8T5nnMKymGj9PgAKmIl65J+FWMQDr72fKcF3pIEttA2bRMUKZ0 Tpk2UPy7aCvU0lK4Z24q7qwS6OL8/uAv03oV1nOVNUTs8g== -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:03 2026 by rpki-client