This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/0i1-OTcsLdrtIGxm6KpHsFL0gyw.roa File: 0i1-OTcsLdrtIGxm6KpHsFL0gyw.roa (raw, json) Hash identifier: HqlWU31euma2LZs0fBV7UGuIyQL3lMazfFxeoUWAb38= Subject key identifier: D2:2D:7E:39:37:2C:2D:DA:ED:20:6C:66:E8:AA:47:B0:52:F4:83:2C Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80 Certificate serial: 019B797F025FEDCD887AC5FA27E5CC8BB63E Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/0i1-OTcsLdrtIGxm6KpHsFL0gyw.roa Signing time: Thu 01 Jan 2026 12:18:45 +0000 ROA not before: Thu 01 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198385 IP address blocks: 45.147.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:02:5f:ed:cd:88:7a:c5:fa:27:e5:cc:8b:b6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80 Validity Not Before: Jan 1 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d22d7e39372c2ddaed206c66e8aa47b052f4832c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:5d:6b:3d:86:fa:70:bd:91:a7:b0:bf:e1: bc:5f:eb:65:e0:a0:d3:57:99:16:ac:98:37:fa:e8: 8d:47:a2:64:40:69:d6:33:e0:a6:18:94:14:81:02: ff:39:51:1d:bd:a9:1b:60:c2:83:69:b9:18:5d:f7: f2:a5:ea:e1:0f:7a:37:2d:2d:20:3f:77:a4:ea:68: 81:6f:20:84:eb:71:a7:57:10:4a:29:10:22:90:c2: 1f:5c:e9:e7:a9:f9:39:81:49:a4:12:f5:61:b7:d0: 07:6c:02:b1:61:2a:cd:64:cf:3e:4e:e6:ae:ff:9c: 40:d3:a8:3e:81:27:e8:2f:9b:87:bd:72:c7:ce:08: 2b:aa:81:20:0f:aa:db:c7:0b:85:c7:bc:5e:96:80: 86:9e:ab:3b:c3:35:41:b2:6e:42:0a:25:c8:88:3c: 45:a8:17:5a:50:e7:f3:ff:8b:41:c8:4f:e6:41:0a: 79:7e:d1:70:3b:ac:93:d9:91:1e:e9:be:48:45:cd: fc:58:65:c8:3b:54:a5:6f:54:07:8d:1f:d1:13:74: 4f:84:31:60:e7:0c:d0:e2:46:ed:e0:26:82:e6:29: b2:b4:c3:1f:57:b4:34:b2:84:db:69:6c:8b:ad:48: 79:0e:b4:38:a3:a1:34:4f:f0:a3:83:0a:a8:99:8e: 22:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2D:7E:39:37:2C:2D:DA:ED:20:6C:66:E8:AA:47:B0:52:F4:83:2C X509v3 Authority Key Identifier: keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/0i1-OTcsLdrtIGxm6KpHsFL0gyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.41.0/24 Signature Algorithm: sha256WithRSAEncryption a7:14:4e:fb:03:5d:1a:7f:42:19:ea:47:78:ee:85:89:f2:9c: c3:85:34:a4:59:29:2a:9e:c5:71:7c:35:e4:a1:07:ce:f2:bb: c3:dd:4e:e9:a9:4e:ff:d4:ab:ec:7e:6e:45:48:ab:bf:ee:16: 5a:7d:5d:df:cd:ec:ac:f6:d4:58:f1:16:64:0e:5f:e3:0a:28: 5a:4a:b5:96:5f:7b:83:cd:25:7e:15:90:e7:5b:66:3b:a3:bc: 8b:35:0b:97:15:79:8f:14:b0:8a:9e:95:a6:43:4d:70:65:d0: 0a:38:87:51:1b:b3:61:e2:a0:af:5d:c4:e3:ce:23:47:95:25: e1:97:7f:8c:10:51:56:04:fe:92:17:7d:7b:b6:47:bd:2b:32: 9f:55:a5:c0:89:78:cf:e8:89:f1:47:67:7c:fc:a8:81:d4:9c: 9e:b9:1e:b2:c3:7c:af:5f:c3:eb:46:e5:95:ad:76:77:61:a3: 0f:e6:e9:d4:e9:9b:00:ef:cf:f9:4b:39:5b:1d:77:94:9b:a0: 80:0b:cd:02:5c:16:c4:ae:7c:eb:c6:f6:6c:05:b8:11:d9:47: 2f:31:6e:9e:8a:4e:61:b0:0f:4d:dc:b0:08:a0:2b:96:2c:c4: 6d:89:df:03:4f:16:46:2b:a8:9d:9c:4e:c7:55:34:51:32:e1: 77:bd:dc:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fwJf7c2IesX6J+XMi7Y+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjU5ZGFlZGQ0M2NjOTU3NWFjMzU5NTNlM2YzOTZlMjFi YjZkODAwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjJkN2UzOTM3MmMyZGRhZWQyMDZjNjZlOGFhNDdiMDUyZjQ4MzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGVdaz2G+nC9kaewv+G8X+tl4KDT V5kWrJg3+uiNR6JkQGnWM+CmGJQUgQL/OVEdvakbYMKDabkYXffyperhD3o3LS0g P3ek6miBbyCE63GnVxBKKRAikMIfXOnnqfk5gUmkEvVht9AHbAKxYSrNZM8+Tuau /5xA06g+gSfoL5uHvXLHzggrqoEgD6rbxwuFx7xeloCGnqs7wzVBsm5CCiXIiDxF qBdaUOfz/4tByE/mQQp5ftFwO6yT2ZEe6b5IRc38WGXIO1Slb1QHjR/RE3RPhDFg 5wzQ4kbt4CaC5imytMMfV7Q0soTbaWyLrUh5DrQ4o6E0T/CjgwqomY4iUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNItfjk3LC3a7SBsZuiqR7BS9IMsMB8GA1UdIwQY MBaAFDi1na7dQ8yVdaw1lT4/OW4hu22AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMt N2EwZjcyY2JiMmQ1LzEvMGkxLU9UY3NMZHJ0SUd4bTZLcEhzRkwwZ3l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMtN2EwZjcyY2JiMmQ1 LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZMpMA0G CSqGSIb3DQEBCwUAA4IBAQCnFE77A10af0IZ6kd47oWJ8pzDhTSkWSkqnsVxfDXk oQfO8rvD3U7pqU7/1Kvsfm5FSKu/7hZafV3fzeys9tRY8RZkDl/jCihaSrWWX3uD zSV+FZDnW2Y7o7yLNQuXFXmPFLCKnpWmQ01wZdAKOIdRG7Nh4qCvXcTjziNHlSXh l3+MEFFWBP6SF317tke9KzKfVaXAiXjP6InxR2d8/KiB1JyeuR6yw3yvX8PrRuWV rXZ3YaMP5unU6ZsA78/5SzlbHXeUm6CAC80CXBbErnzrxvZsBbgR2UcvMW6eik5h sA9N3LAIoCuWLMRtid8DTxZGK6idnE7HVTRRMuF3vdzz -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:37 2026 by rpki-client