This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/xOuFRTLHDbbMEhKqi9aiLEUo2kA.roa File: xOuFRTLHDbbMEhKqi9aiLEUo2kA.roa (raw, json) Hash identifier: EELHcZVf2cz0S4yWN9gbTUNVwaT1jOiA4YdDZsp4DqM= Subject key identifier: C4:EB:85:45:32:C7:0D:B6:CC:12:12:AA:8B:D6:A2:2C:45:28:DA:40 Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b Certificate serial: 019B7911122551C23C71BF528B723C63BDFB Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/xOuFRTLHDbbMEhKqi9aiLEUo2kA.roa Signing time: Thu 01 Jan 2026 10:18:40 +0000 ROA not before: Thu 01 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198310 IP address blocks: 45.152.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:12:25:51:c2:3c:71:bf:52:8b:72:3c:63:bd:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b Validity Not Before: Jan 1 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4eb854532c70db6cc1212aa8bd6a22c4528da40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:22:ee:66:3e:69:12:80:93:3f:3c:0f:9c: c7:e1:03:7c:a5:cf:a1:e5:d1:36:17:89:3c:b4:78: a7:e4:10:fb:f4:14:19:51:5f:c9:4f:4d:a9:77:b3: d1:ce:61:48:42:c4:a2:0b:a4:dc:f7:2c:b0:54:bd: a5:3c:53:ac:81:c0:87:20:ee:af:ed:1c:0f:3a:1e: 52:09:02:c4:90:28:e7:b1:d7:b8:86:fb:98:99:5d: f7:e7:50:3d:9e:01:57:75:42:26:e5:36:8d:3f:98: e4:9e:8d:68:9a:23:bc:91:cf:f5:94:08:e8:62:e0: 84:b6:08:47:28:66:9c:2e:e9:33:4e:a0:05:7e:aa: 57:8a:65:06:15:5e:7e:ac:50:b1:b8:c9:b2:c9:4f: 71:dd:fe:bd:2d:4c:3d:b1:66:6e:82:3b:14:2c:fc: 86:8c:ec:40:14:f2:84:ea:81:c8:b7:4e:bd:61:6b: 2c:51:7f:df:b1:59:d3:f5:0c:93:a3:ab:41:2d:01: e2:b8:0c:be:ba:78:e3:37:10:0a:d4:49:ae:a7:8c: 3c:87:ff:34:f5:a3:02:b3:d1:af:df:46:33:e7:30: ad:4d:41:1d:b8:8d:67:98:58:7b:14:ac:16:a1:8f: 34:31:03:64:f3:2c:6b:18:89:73:dd:3f:cc:de:36: 71:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EB:85:45:32:C7:0D:B6:CC:12:12:AA:8B:D6:A2:2C:45:28:DA:40 X509v3 Authority Key Identifier: keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/xOuFRTLHDbbMEhKqi9aiLEUo2kA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.27.0/24 Signature Algorithm: sha256WithRSAEncryption ba:bf:ca:2b:10:e3:2d:8b:cb:38:59:25:7e:b1:45:87:f6:c4: bb:da:4b:66:eb:bd:31:a2:d5:29:93:b3:aa:09:cc:39:c7:3b: 93:09:e8:5e:8e:82:98:77:d6:8a:dd:31:c1:7a:60:df:15:e8: 31:de:b6:84:2a:00:1e:7d:00:9b:90:d8:68:f7:df:7f:a2:73: 4f:c7:8d:a4:0c:b5:c6:8d:6c:48:e5:19:08:bc:eb:c9:9e:9c: 98:07:44:ba:2c:0b:da:9a:74:0b:b0:ee:7b:51:d9:b1:45:7c: b5:9e:7e:ea:ed:f1:35:83:68:b2:23:ac:5f:04:c4:89:fc:73: 17:bd:33:1e:f6:fd:e8:29:d0:93:1c:e7:10:be:06:02:90:4d: 3f:c4:7d:aa:e7:6a:dd:3f:f5:3e:4c:35:1e:c1:05:59:01:c0: 4e:fc:b4:ab:6f:ab:18:3a:31:e9:82:82:b9:6a:2f:7d:7d:78: bd:57:df:56:8f:f7:16:52:b4:93:0f:59:50:62:ea:b5:e3:9d: f8:ec:55:9d:90:22:1b:80:10:e5:ac:d3:2c:41:01:99:54:a9: f0:3e:78:70:a4:55:80:28:36:4e:4e:73:42:2a:9d:15:67:aa: d4:41:c5:ed:75:df:f3:f6:2c:2a:86:77:89:6e:c5:48:8c:9d: 2a:72:42:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ERIlUcI8cb9Si3I8Y737MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOTVhMDY5NjY5ZWQ1YTc2NmVlZThlYmRjMzJlMzlmYjE0 ODQxMGIwHhcNMjYwMTAxMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGViODU0NTMyYzcwZGI2Y2MxMjEyYWE4YmQ2YTIyYzQ1MjhkYTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkwi7mY+aRKAkz88D5zH4QN8pc+h 5dE2F4k8tHin5BD79BQZUV/JT02pd7PRzmFIQsSiC6Tc9yywVL2lPFOsgcCHIO6v 7RwPOh5SCQLEkCjnsde4hvuYmV3351A9ngFXdUIm5TaNP5jkno1omiO8kc/1lAjo YuCEtghHKGacLukzTqAFfqpXimUGFV5+rFCxuMmyyU9x3f69LUw9sWZugjsULPyG jOxAFPKE6oHIt069YWssUX/fsVnT9QyTo6tBLQHiuAy+unjjNxAK1Emup4w8h/80 9aMCs9Gv30Yz5zCtTUEduI1nmFh7FKwWoY80MQNk8yxrGIlz3T/M3jZx/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMTrhUUyxw22zBISqovWoixFKNpAMB8GA1UdIwQY MBaAFB6VoGlmntWnZu7o69wy45+xSEELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBXZ2FXYWUxYWRtN3VqcjNETGpuN0ZJUVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xMDc0NTYtZGY1My00MjRkLTkzMjAt OTMzYmZhNTkyYjFkLzEveE91RlJUTEhEYmJNRWhLcWk5YWlMRVVvMmtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xMDc0NTYtZGY1My00MjRkLTkzMjAtOTMzYmZhNTkyYjFk LzEvSHBXZ2FXYWUxYWRtN3VqcjNETGpuN0ZJUVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZgbMA0G CSqGSIb3DQEBCwUAA4IBAQC6v8orEOMti8s4WSV+sUWH9sS72ktm670xotUpk7Oq Ccw5xzuTCehejoKYd9aK3THBemDfFegx3raEKgAefQCbkNho999/onNPx42kDLXG jWxI5RkIvOvJnpyYB0S6LAvamnQLsO57UdmxRXy1nn7q7fE1g2iyI6xfBMSJ/HMX vTMe9v3oKdCTHOcQvgYCkE0/xH2q52rdP/U+TDUewQVZAcBO/LSrb6sYOjHpgoK5 ai99fXi9V99Wj/cWUrSTD1lQYuq145347FWdkCIbgBDlrNMsQQGZVKnwPnhwpFWA KDZOTnNCKp0VZ6rUQcXtdd/z9iwqhneJbsVIjJ0qckI5 -----END CERTIFICATE-----Generated at Mon Feb 2 08:08:22 2026 by rpki-client