This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/2olaVDhNeiiP_OOryqJU2C7ExIg.roa File: 2olaVDhNeiiP_OOryqJU2C7ExIg.roa (raw, json) Hash identifier: CFBBBaMUmCumEjhXa9EZ5QF+S88qsB/FZwclsZncEao= Subject key identifier: DA:89:5A:54:38:4D:7A:28:8F:FC:E3:AB:CA:A2:54:D8:2E:C4:C4:88 Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a Certificate serial: 019B77C6DC638BA30B7AD65E0EA1CB146C31 Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/2olaVDhNeiiP_OOryqJU2C7ExIg.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 45.148.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:dc:63:8b:a3:0b:7a:d6:5e:0e:a1:cb:14:6c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da895a54384d7a288ffce3abcaa254d82ec4c488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5b:12:0c:02:d7:d2:1f:91:a6:84:0f:03:07: 15:27:24:a5:75:b8:42:6d:9e:93:4e:91:44:35:40: b5:df:e7:21:4a:78:7a:b8:c2:af:81:74:04:e9:d8: 99:7a:4d:4e:24:86:6c:d0:f9:27:c9:06:30:75:03: 93:15:88:37:21:36:16:a0:68:ea:bf:76:d3:3b:e4: f7:91:ad:ef:b3:80:45:98:02:4b:9f:a6:45:71:54: 5c:8d:28:39:20:70:a0:ad:a1:21:65:e9:16:f0:96: da:51:13:27:2c:33:86:4c:e8:2b:69:7a:f1:c6:e6: 95:ed:83:1f:3e:b4:a7:e8:81:a9:96:a0:52:3a:92: 69:ea:4b:da:bb:60:d0:ae:1b:67:67:7d:ad:a9:df: 0c:c5:d3:03:4a:6d:6f:6a:86:ef:3b:80:38:0b:60: 2d:65:6e:42:5a:c9:dc:1d:c7:1b:4c:f2:da:02:7c: 60:6c:3f:1d:05:51:5c:e5:c0:7c:08:59:0d:ca:1a: b0:a1:b3:93:12:e6:db:24:c9:92:fd:5c:58:1a:53: f7:64:ea:f9:f7:e9:f9:35:7f:8a:d7:01:fc:67:51: 0b:cc:8f:f5:48:25:68:7f:98:7b:f2:e6:07:26:4b: 58:3f:68:94:59:15:b1:7b:df:04:2c:af:57:bd:38: ff:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:89:5A:54:38:4D:7A:28:8F:FC:E3:AB:CA:A2:54:D8:2E:C4:C4:88 X509v3 Authority Key Identifier: keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/2olaVDhNeiiP_OOryqJU2C7ExIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.135.0/24 Signature Algorithm: sha256WithRSAEncryption 43:4f:83:92:35:42:4c:d1:70:1c:7a:ec:ec:58:23:bb:c1:cd: cf:98:87:e9:57:bb:16:60:ec:eb:ee:fa:50:44:84:4b:b9:7c: ab:3f:c6:be:cd:a8:9b:b5:f9:3b:e1:04:29:e4:4c:7c:e9:5c: 39:39:a0:d2:7d:36:38:bf:cb:1f:8d:3a:55:41:8e:1e:57:72: e4:ff:14:c8:07:2f:ce:b6:b7:09:4f:2f:83:54:d6:82:e6:fa: 53:9e:00:47:98:18:b2:cf:d6:dc:27:40:cb:95:fc:36:44:3b: 2a:2c:a8:63:a0:1c:9c:cd:36:40:9d:32:16:7f:df:ab:0c:7a: f6:cb:a8:52:cb:29:54:f4:6c:dd:32:a5:d2:4a:06:6d:88:71: 65:9a:b6:75:c3:9c:dd:13:d6:5b:ed:e7:e9:2e:97:d5:3c:bf: 52:df:b0:84:b1:32:b1:ff:5f:11:c7:64:66:7a:e5:92:f0:c8: 6f:86:85:c1:ed:bc:62:7d:0d:9d:40:bd:f4:9c:26:10:d2:c3: 71:07:6a:78:00:16:af:fa:76:b4:14:f6:90:1b:37:03:a8:1b: f6:02:45:e7:c5:f5:70:91:c0:70:13:26:db:5f:3a:3b:30:81: 8e:01:5d:78:6e:c1:91:22:a3:d4:e3:11:4f:8d:56:22:ab:cd: 0a:1c:a1:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtxji6MLetZeDqHLFGwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZDcxODUzMzI0ZWIwNjBmYmFmYzk4ODIzMzg2MDQ5OWM5 NmM1M2EwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTg5NWE1NDM4NGQ3YTI4OGZmY2UzYWJjYWEyNTRkODJlYzRjNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FsSDALX0h+RpoQPAwcVJySldbhC bZ6TTpFENUC13+chSnh6uMKvgXQE6diZek1OJIZs0PknyQYwdQOTFYg3ITYWoGjq v3bTO+T3ka3vs4BFmAJLn6ZFcVRcjSg5IHCgraEhZekW8JbaURMnLDOGTOgraXrx xuaV7YMfPrSn6IGplqBSOpJp6kvau2DQrhtnZ32tqd8MxdMDSm1vaobvO4A4C2At ZW5CWsncHccbTPLaAnxgbD8dBVFc5cB8CFkNyhqwobOTEubbJMmS/VxYGlP3ZOr5 9+n5NX+K1wH8Z1ELzI/1SCVof5h78uYHJktYP2iUWRWxe98ELK9XvTj/XQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNqJWlQ4TXooj/zjq8qiVNguxMSIMB8GA1UdIwQY MBaAFKHXGFMyTrBg+6/JiCM4YEmclsU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUt NzA2MTM1NmJlZjFiLzEvMm9sYVZEaE5laWlQX09PcnlxSlUyQzdFeElnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUtNzA2MTM1NmJlZjFi LzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZSHMA0G CSqGSIb3DQEBCwUAA4IBAQBDT4OSNUJM0XAceuzsWCO7wc3PmIfpV7sWYOzr7vpQ RIRLuXyrP8a+zaibtfk74QQp5Ex86Vw5OaDSfTY4v8sfjTpVQY4eV3Lk/xTIBy/O trcJTy+DVNaC5vpTngBHmBiyz9bcJ0DLlfw2RDsqLKhjoByczTZAnTIWf9+rDHr2 y6hSyylU9GzdMqXSSgZtiHFlmrZ1w5zdE9Zb7efpLpfVPL9S37CEsTKx/18Rx2Rm euWS8MhvhoXB7bxifQ2dQL30nCYQ0sNxB2p4ABav+na0FPaQGzcDqBv2AkXnxfVw kcBwEybbXzo7MIGOAV14bsGRIqPU4xFPjVYiq80KHKG6 -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:44 2026 by rpki-client