This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/o5usRUvaTvh6G2keAnUfVT8NAfA.roa File: o5usRUvaTvh6G2keAnUfVT8NAfA.roa (raw, json) Hash identifier: pPdHXR2AOGXsw+/jHJo3zUy9fjtPG7RWk5boxOB8T1s= Subject key identifier: A3:9B:AC:45:4B:DA:4E:F8:7A:1B:69:1E:02:75:1F:55:3F:0D:01:F0 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019B7AC9598C02AF298FD3C6FF1EA56B9786 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/o5usRUvaTvh6G2keAnUfVT8NAfA.roa Signing time: Thu 01 Jan 2026 18:19:34 +0000 ROA not before: Thu 01 Jan 2026 18:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 176.46.132.0/24 maxlen: 24 176.46.140.0/24 maxlen: 24 176.46.145.0/24 maxlen: 24 176.46.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:59:8c:02:af:29:8f:d3:c6:ff:1e:a5:6b:97:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Jan 1 18:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a39bac454bda4ef87a1b691e02751f553f0d01f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a8:27:90:aa:70:b9:d4:5b:9f:bb:8b:91:7c: ec:e6:72:ac:9d:aa:35:d2:75:53:c5:52:7f:fe:e2: 97:e1:d9:db:a7:61:b3:38:6c:c6:b0:80:94:ae:fc: f0:ce:6b:8e:07:70:ac:93:9a:77:f1:41:57:b5:9f: e7:73:1b:59:a7:10:36:a7:ed:b9:87:5d:6f:09:74: c2:9e:5d:a0:da:b1:62:39:f2:5a:01:34:25:d1:ee: 80:ea:1d:83:02:30:5f:e9:f7:e7:a6:3b:ef:7b:e6: 6a:96:c5:40:08:79:79:e2:04:45:5f:06:73:0e:90: 20:37:06:da:64:c8:62:c6:7f:f1:8e:04:72:0b:99: e7:37:ee:c8:b9:0f:6b:13:d6:55:00:a2:49:e6:80: 78:8c:c3:c2:1c:bc:82:b2:cd:bb:a1:b5:c0:05:b5: c0:ed:d7:fd:39:7f:43:e6:af:4a:8d:5d:d0:d9:60: 85:81:90:1b:bb:84:94:39:3d:8f:6f:3f:22:84:18: da:a4:02:52:f2:b5:7b:5c:dd:09:93:3b:9c:9c:f0: 5b:15:53:ba:fb:77:00:0b:f5:bd:ab:3c:ad:47:8c: 92:66:de:ca:74:dc:6f:6e:7e:87:14:69:87:c1:eb: f8:ff:ed:44:e0:ff:81:d7:b0:0f:86:4b:f5:9b:bf: 54:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9B:AC:45:4B:DA:4E:F8:7A:1B:69:1E:02:75:1F:55:3F:0D:01:F0 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/o5usRUvaTvh6G2keAnUfVT8NAfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.46.132.0/24 176.46.140.0/24 176.46.145.0/24 176.46.151.0/24 Signature Algorithm: sha256WithRSAEncryption 42:78:f7:b6:1e:63:fc:08:9f:39:6b:d2:2d:1e:da:35:1a:31: d8:43:5f:9e:0b:0f:db:8a:90:20:42:95:f5:c9:68:71:47:99: b6:60:f2:ec:1a:55:5a:60:88:3e:e3:81:66:70:c4:1d:11:11: ca:0c:7a:12:0d:c6:ef:06:37:6f:b8:84:6f:07:b0:ae:e4:0c: de:ba:58:b0:a4:0e:1c:c9:0e:16:b7:55:ba:c3:c4:27:0b:16: 97:d5:46:67:f5:e4:2b:fc:df:78:d3:7a:27:0c:31:5c:a2:2a: 44:dd:2d:8d:9b:62:b9:65:45:18:7b:0f:dc:db:ce:24:d6:b4: 4a:8f:d7:ac:83:25:d5:b2:47:00:33:db:79:7a:40:4e:50:0b: 4a:4a:67:9b:23:f9:10:1b:b0:de:8e:05:dc:ab:c5:fc:63:5b: d3:e7:6e:25:a3:f9:65:21:8e:f6:f3:2a:38:e7:44:a1:29:21: f0:0d:72:a0:a1:cc:ab:06:aa:72:a8:5d:af:c1:e0:24:6f:d5: d4:bf:6a:f0:e5:56:d3:b4:66:1a:1a:5f:63:26:5e:48:ad:d7: a7:51:26:6d:67:95:13:26:6e:4a:e2:60:11:33:cf:68:dd:56: 4a:a4:71:73:b2:8a:db:06:2c:89:75:b3:f7:3d:bf:eb:8d:5b: e8:0b:3c:40 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6yVmMAq8pj9PG/x6la5eGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwMTAxMTgxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzliYWM0NTRiZGE0ZWY4N2ExYjY5MWUwMjc1MWY1NTNmMGQwMWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6gnkKpwudRbn7uLkXzs5nKsnao1 0nVTxVJ//uKX4dnbp2GzOGzGsICUrvzwzmuOB3Csk5p38UFXtZ/ncxtZpxA2p+25 h11vCXTCnl2g2rFiOfJaATQl0e6A6h2DAjBf6ffnpjvve+ZqlsVACHl54gRFXwZz DpAgNwbaZMhixn/xjgRyC5nnN+7IuQ9rE9ZVAKJJ5oB4jMPCHLyCss27obXABbXA 7df9OX9D5q9KjV3Q2WCFgZAbu4SUOT2Pbz8ihBjapAJS8rV7XN0JkzucnPBbFVO6 +3cAC/W9qzytR4ySZt7KdNxvbn6HFGmHwev4/+1E4P+B17APhkv1m79U+wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKObrEVL2k74ehtpHgJ1H1U/DQHwMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvbzV1c1JVdmFUdmg2RzJrZUFuVWZWVDhOQWZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAsC6EAwQA sC6MAwQAsC6RAwQAsC6XMA0GCSqGSIb3DQEBCwUAA4IBAQBCePe2HmP8CJ85a9It Hto1GjHYQ1+eCw/bipAgQpX1yWhxR5m2YPLsGlVaYIg+44FmcMQdERHKDHoSDcbv BjdvuIRvB7Cu5AzeuliwpA4cyQ4Wt1W6w8QnCxaX1UZn9eQr/N9403onDDFcoipE 3S2Nm2K5ZUUYew/c284k1rRKj9esgyXVskcAM9t5ekBOUAtKSmebI/kQG7DejgXc q8X8Y1vT524lo/llIY728yo450ShKSHwDXKgocyrBqpyqF2vweAkb9XUv2rw5VbT tGYaGl9jJl5IrdenUSZtZ5UTJm5K4mARM89o3VZKpHFzsorbBiyJdbP3Pb/rjVvo CzxA -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:42 2026 by rpki-client