This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/OX8T0Loeee2SJyDfY3tEnifOFiY.roa File: OX8T0Loeee2SJyDfY3tEnifOFiY.roa (raw, json) Hash identifier: WUtUuVCFbswJZDfkLKymBevKbkG13uZEO19XKdd+n8M= Subject key identifier: 39:7F:13:D0:BA:1E:79:ED:92:27:20:DF:63:7B:44:9E:27:CE:16:26 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019B7A5B2CB0B34F6207FBD372638889CA89 Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/OX8T0Loeee2SJyDfY3tEnifOFiY.roa Signing time: Thu 01 Jan 2026 16:19:14 +0000 ROA not before: Thu 01 Jan 2026 16:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 45.135.8.0/24 maxlen: 24 45.135.10.0/24 maxlen: 24 45.136.216.0/24 maxlen: 24 45.136.218.0/24 maxlen: 24 45.138.76.0/24 maxlen: 24 45.138.78.0/24 maxlen: 24 45.139.32.0/24 maxlen: 24 45.139.34.0/24 maxlen: 24 91.228.231.0/24 maxlen: 24 91.228.251.0/24 maxlen: 24 91.229.25.0/24 maxlen: 24 185.76.150.0/24 maxlen: 24 193.35.231.0/24 maxlen: 24 193.110.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:2c:b0:b3:4f:62:07:fb:d3:72:63:88:89:ca:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jan 1 16:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=397f13d0ba1e79ed922720df637b449e27ce1626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9f:4e:c2:ff:45:84:9e:f2:4a:1b:7e:9e:cf: 40:63:41:89:3b:48:4c:c5:02:dc:d7:16:5b:7b:58: c9:89:b3:5c:c6:9a:22:b3:4b:b2:73:97:a4:24:54: 78:13:ec:9f:4d:f1:de:da:25:5a:9a:bf:91:a8:1d: 3e:22:d7:04:50:39:5c:2a:61:63:de:16:3c:22:ee: 1e:c5:30:4d:c4:06:0a:48:36:fc:b8:5f:05:b3:b8: 8d:ef:19:dc:ce:d2:02:3c:a9:88:df:de:43:5c:35: 29:74:15:96:b1:45:ed:16:2f:19:29:19:2f:c0:c4: 6f:59:cc:df:e9:44:6a:8e:d2:18:27:39:e0:a8:52: 82:4a:ba:66:95:93:d1:f5:56:1c:3d:94:2b:36:47: 46:08:11:6f:c7:84:b9:3a:25:06:33:5e:4f:05:bd: 90:0c:9c:a3:34:ca:72:c1:d7:5e:b7:f2:de:bf:e1: 32:26:22:7b:df:16:e3:15:95:3f:d2:b1:2d:b9:56: f9:23:b9:50:b9:06:d5:63:ad:54:ed:a3:f8:56:fc: 97:d3:51:68:50:24:88:7c:c1:d9:ab:3c:25:59:f4: a5:58:a0:37:0d:9a:9d:f5:96:d7:ee:18:2f:3c:c9: 87:1f:d4:ea:a9:5a:65:80:48:5c:08:d8:bd:10:a3: 38:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7F:13:D0:BA:1E:79:ED:92:27:20:DF:63:7B:44:9E:27:CE:16:26 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/OX8T0Loeee2SJyDfY3tEnifOFiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.8.0/24 45.135.10.0/24 45.136.216.0/24 45.136.218.0/24 45.138.76.0/24 45.138.78.0/24 45.139.32.0/24 45.139.34.0/24 91.228.231.0/24 91.228.251.0/24 91.229.25.0/24 185.76.150.0/24 193.35.231.0/24 193.110.134.0/23 Signature Algorithm: sha256WithRSAEncryption 37:b2:70:2b:16:3f:ce:42:8f:9d:c3:18:38:67:b2:87:41:a8: bc:44:3e:85:39:75:9f:8f:d3:30:60:90:0b:a2:43:4a:21:26: 7b:1e:3e:bf:d6:f3:2c:84:bb:15:ff:3a:64:f3:97:82:40:9f: 1d:f7:77:05:31:c7:ce:46:3a:32:b4:92:36:f4:28:20:0b:bf: 35:8c:c2:d9:80:e5:60:4e:0b:87:15:47:0b:48:a9:7b:e0:95: 44:eb:9f:9b:75:62:a5:c6:2c:38:5d:c3:79:16:a9:90:f2:d7: f3:7a:06:ff:ab:f4:72:9c:18:3f:9a:9f:54:78:ec:86:79:ec: 90:15:fa:df:96:5b:6e:f8:93:e7:e5:24:32:d0:d8:f8:44:96: 69:5c:77:83:99:be:9c:7d:8a:a3:f2:43:21:f7:75:b6:1d:14: a6:80:45:b4:b4:1f:51:9d:f2:0f:05:06:43:ea:43:c6:c8:63: af:62:ae:cc:b7:7d:3d:d8:c4:8f:8f:e5:91:7d:1e:6f:9e:e4: 4e:b9:6b:c7:2d:c6:45:b4:42:88:20:71:89:eb:f0:01:e9:de: 92:41:5c:8d:4c:0d:4a:06:2d:01:23:f5:8e:e5:e3:0c:95:33: e5:29:58:ad:63:da:76:d7:86:16:fe:d5:80:25:46:e0:f4:cd: 39:5a:52:c6 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt6Wyyws09iB/vTcmOIicqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwMTAxMTYxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTdmMTNkMGJhMWU3OWVkOTIyNzIwZGY2MzdiNDQ5ZTI3Y2UxNjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ9Owv9FhJ7ySht+ns9AY0GJO0hM xQLc1xZbe1jJibNcxpois0uyc5ekJFR4E+yfTfHe2iVamr+RqB0+ItcEUDlcKmFj 3hY8Iu4exTBNxAYKSDb8uF8Fs7iN7xncztICPKmI395DXDUpdBWWsUXtFi8ZKRkv wMRvWczf6URqjtIYJzngqFKCSrpmlZPR9VYcPZQrNkdGCBFvx4S5OiUGM15PBb2Q DJyjNMpywddet/Lev+EyJiJ73xbjFZU/0rEtuVb5I7lQuQbVY61U7aP4VvyX01Fo UCSIfMHZqzwlWfSlWKA3DZqd9ZbX7hgvPMmHH9TqqVplgEhcCNi9EKM4yQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFDl/E9C6Hnntkicg32N7RJ4nzhYmMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvT1g4VDBMb2VlZTJTSnlEZlkzdEVuaWZPRmlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQALYcIAwQA LYcKAwQALYjYAwQALYjaAwQALYpMAwQALYpOAwQALYsgAwQALYsiAwQAW+TnAwQA W+T7AwQAW+UZAwQAuUyWAwQAwSPnAwQBwW6GMA0GCSqGSIb3DQEBCwUAA4IBAQA3 snArFj/OQo+dwxg4Z7KHQai8RD6FOXWfj9MwYJALokNKISZ7Hj6/1vMshLsV/zpk 85eCQJ8d93cFMcfORjoytJI29CggC781jMLZgOVgTguHFUcLSKl74JVE65+bdWKl xiw4XcN5FqmQ8tfzegb/q/RynBg/mp9UeOyGeeyQFfrflltu+JPn5SQy0Nj4RJZp XHeDmb6cfYqj8kMh93W2HRSmgEW0tB9RnfIPBQZD6kPGyGOvYq7Mt3092MSPj+WR fR5vnuROuWvHLcZFtEKIIHGJ6/AB6d6SQVyNTA1KBi0BI/WO5eMMlTPlKVitY9p2 14YW/tWAJUbg9M05WlLG -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:04 2026 by rpki-client