This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/kOm60nL452mtiYNcQ1MeyFmOk_o.roa File: kOm60nL452mtiYNcQ1MeyFmOk_o.roa (raw, json) Hash identifier: I2UQMu6hqrbitekzOex2s4TwNRegO405AEsyAGOsafo= Subject key identifier: 90:E9:BA:D2:72:F8:E7:69:AD:89:83:5C:43:53:1E:C8:59:8E:93:FA Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a Certificate serial: 019B77C6DE782E2014B601F4295CCBBE8E13 Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/kOm60nL452mtiYNcQ1MeyFmOk_o.roa Signing time: Thu 01 Jan 2026 04:18:00 +0000 ROA not before: Thu 01 Jan 2026 04:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 45.148.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:de:78:2e:20:14:b6:01:f4:29:5c:cb:be:8e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a Validity Not Before: Jan 1 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90e9bad272f8e769ad89835c43531ec8598e93fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:22:66:ee:bb:e7:82:14:47:9c:4f:b7:c4:74: d8:07:44:ab:40:46:a9:9c:cb:ef:cf:ce:49:ca:ee: 9d:f1:cc:c9:f5:ed:46:69:06:c1:03:7f:b8:ba:f0: bd:bc:f5:ea:a0:e5:c1:54:39:4c:87:74:3c:8f:13: 00:a7:55:ef:ca:55:44:a7:5b:b2:7f:5e:6a:df:41: e4:ca:d7:2e:ed:9b:97:5b:9f:f9:fd:c0:f2:4f:ad: 84:25:c6:db:28:4b:56:7d:fe:5c:bb:c3:63:2c:2c: b4:20:b1:62:90:cb:c1:71:7c:60:9f:12:57:b5:7b: 32:57:ac:a9:d4:d4:42:5b:45:ce:6f:6e:b4:3e:d6: 3a:59:16:21:17:30:2e:6f:af:ec:14:e0:48:02:ec: 06:5d:67:6a:1b:42:fe:ca:9a:93:41:77:6c:2b:8f: e4:d3:e4:d4:db:f6:31:07:79:f0:e5:ef:c4:ce:ba: d3:81:b2:ae:9a:42:b7:98:9b:9c:9a:bb:6e:a1:3a: 64:f3:98:05:45:b5:75:48:77:01:56:5c:6b:33:89: 23:16:f8:d9:b8:14:ae:b2:18:3f:7b:e5:e1:6c:5b: 16:ec:78:27:18:7e:b9:4a:b1:8b:2e:8c:e6:50:b0: 79:12:49:0c:1e:bf:e0:2b:26:12:41:b8:7e:18:92: e2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E9:BA:D2:72:F8:E7:69:AD:89:83:5C:43:53:1E:C8:59:8E:93:FA X509v3 Authority Key Identifier: keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/kOm60nL452mtiYNcQ1MeyFmOk_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.135.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:17:5e:18:72:38:48:ba:51:2d:e6:f2:b3:7f:ee:62:5d:63: f9:69:08:13:c6:b7:da:cb:54:1a:6e:b1:48:1b:ab:d6:14:5c: 45:78:8a:82:3a:84:df:a7:0f:83:70:a9:2d:92:98:91:75:84: e2:93:3a:05:0c:47:20:dc:d0:93:98:93:fa:1b:cd:ad:6b:0c: 48:d2:13:60:8a:5f:33:8f:c4:66:da:4b:7c:7f:19:c6:40:3c: 93:ed:99:f4:04:f7:26:d3:80:78:6b:48:ca:ca:c4:89:ff:fe: 8e:1c:cf:c7:8f:e6:b3:c0:3c:8a:e0:9a:e3:bc:85:59:15:6b: 07:bf:99:f1:07:50:03:87:04:e1:9a:81:e2:c4:e8:a6:ed:25: 08:6b:57:7b:53:0d:95:3a:ff:c4:f1:66:c3:3c:a7:de:c4:c7: 33:13:94:04:10:e2:03:db:56:d4:f4:c7:c7:81:23:26:1a:b2: 5d:ff:af:0f:37:d6:d4:33:0f:9f:40:7b:21:df:d8:1d:9e:d1: 5e:e5:61:c5:e6:30:8b:ef:01:2f:23:9f:3c:c7:21:ec:1d:d1: 11:d7:41:10:e4:dd:79:9a:7e:6b:9b:85:5b:75:e6:e5:a0:13: fc:ae:ac:e3:6e:be:47:b2:44:49:bd:ab:7e:b4:1d:b6:bc:25: a3:26:e0:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xt54LiAUtgH0KVzLvo4TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZDcxODUzMzI0ZWIwNjBmYmFmYzk4ODIzMzg2MDQ5OWM5 NmM1M2EwHhcNMjYwMTAxMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGU5YmFkMjcyZjhlNzY5YWQ4OTgzNWM0MzUzMWVjODU5OGU5M2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCJm7rvnghRHnE+3xHTYB0SrQEap nMvvz85Jyu6d8czJ9e1GaQbBA3+4uvC9vPXqoOXBVDlMh3Q8jxMAp1XvylVEp1uy f15q30Hkytcu7ZuXW5/5/cDyT62EJcbbKEtWff5cu8NjLCy0ILFikMvBcXxgnxJX tXsyV6yp1NRCW0XOb260PtY6WRYhFzAub6/sFOBIAuwGXWdqG0L+ypqTQXdsK4/k 0+TU2/YxB3nw5e/EzrrTgbKumkK3mJucmrtuoTpk85gFRbV1SHcBVlxrM4kjFvjZ uBSushg/e+XhbFsW7HgnGH65SrGLLozmULB5EkkMHr/gKyYSQbh+GJLiowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJDputJy+OdprYmDXENTHshZjpP6MB8GA1UdIwQY MBaAFKHXGFMyTrBg+6/JiCM4YEmclsU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUt NzA2MTM1NmJlZjFiLzEva09tNjBuTDQ1Mm10aVlOY1ExTWV5Rm1Pa19vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUtNzA2MTM1NmJlZjFi LzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZSHMA0G CSqGSIb3DQEBCwUAA4IBAQBcF14YcjhIulEt5vKzf+5iXWP5aQgTxrfay1QabrFI G6vWFFxFeIqCOoTfpw+DcKktkpiRdYTikzoFDEcg3NCTmJP6G82tawxI0hNgil8z j8Rm2kt8fxnGQDyT7Zn0BPcm04B4a0jKysSJ//6OHM/Hj+azwDyK4JrjvIVZFWsH v5nxB1ADhwThmoHixOim7SUIa1d7Uw2VOv/E8WbDPKfexMczE5QEEOID21bU9MfH gSMmGrJd/68PN9bUMw+fQHsh39gdntFe5WHF5jCL7wEvI588xyHsHdER10EQ5N15 mn5rm4VbdebloBP8rqzjbr5HskRJvat+tB22vCWjJuCp -----END CERTIFICATE-----Generated at Mon Jan 19 10:37:59 2026 by rpki-client