This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0mi0bAeums4lst_8DRXIa2_Dm8c.roa File: 0mi0bAeums4lst_8DRXIa2_Dm8c.roa (raw, json) Hash identifier: eM/E6VbgdsMflM7BJqxaw/cXgGBXTTDHC2e+D0BLX8U= Subject key identifier: D2:68:B4:6C:07:AE:9A:CE:25:B2:DF:FC:0D:15:C8:6B:6F:C3:9B:C7 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B35FD895B85AFE597ABDD2420CAEB64 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0mi0bAeums4lst_8DRXIa2_Dm8c.roa Signing time: Thu 01 Jan 2026 20:18:14 +0000 ROA not before: Thu 01 Jan 2026 20:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.135.238.0/24 maxlen: 24 185.235.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:fd:89:5b:85:af:e5:97:ab:dd:24:20:ca:eb:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d268b46c07ae9ace25b2dffc0d15c86b6fc39bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6c:d6:ff:9f:95:b7:83:c9:e9:7b:c7:22:b0: 6c:9b:b0:c3:d3:1c:c9:a5:ba:b8:21:e2:15:c2:2d: c5:33:a5:3b:6e:09:bc:3e:48:8a:08:eb:bc:cd:cb: f5:59:18:3d:44:cc:76:7d:b3:a6:36:e1:c7:03:1b: 73:c1:a4:35:4f:83:c3:2a:93:f9:4d:bc:79:91:15: 26:14:0f:0b:0b:49:29:c8:e8:2c:30:4c:0d:9d:b9: ff:d8:de:c2:35:ee:9a:d1:bd:6a:de:bd:d5:48:36: c8:0b:28:f6:46:54:3e:b8:f5:f2:11:d2:55:aa:83: 62:89:22:77:44:20:95:72:2b:a8:c2:ab:29:9d:2d: 10:c9:02:0d:56:f6:f7:84:00:a9:28:55:b8:e8:6f: cd:fc:7d:89:4a:ca:a5:d0:8f:eb:3e:42:aa:5d:87: bd:95:b7:1e:8a:7b:82:ff:cc:09:ca:36:66:65:b4: 89:d5:a6:3d:fb:00:4c:d5:8f:50:73:10:2f:7e:32: 27:11:5b:b7:6c:42:29:ea:f9:ee:5d:e6:ae:3a:1f: d5:90:18:1f:61:d0:18:7c:22:a0:aa:19:34:a3:5d: bc:fb:04:5f:f7:2f:9d:52:d2:eb:12:83:a6:60:28: 37:dd:cb:6c:a1:50:46:33:b6:cd:c3:f3:e6:6a:b0: 03:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:68:B4:6C:07:AE:9A:CE:25:B2:DF:FC:0D:15:C8:6B:6F:C3:9B:C7 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0mi0bAeums4lst_8DRXIa2_Dm8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.238.0/24 185.235.164.0/24 Signature Algorithm: sha256WithRSAEncryption 83:e9:ce:12:0c:f5:4f:db:12:69:bf:4c:6d:55:9e:f5:fe:61: 41:20:96:8c:fd:4b:9d:69:73:62:82:73:13:2a:25:16:f9:4b: 6c:ce:ef:be:bf:4b:37:e3:5b:bd:c3:25:f0:3b:81:9d:45:79: 00:d5:8d:d1:c6:9f:3a:db:ad:05:6f:23:33:f0:ea:56:1a:1c: f6:cb:e8:c1:09:50:7f:85:74:de:79:51:8f:3b:cc:80:fb:aa: 4b:9a:3b:1d:c2:e3:40:55:26:eb:02:34:cc:c9:46:6e:98:ca: 42:ac:02:ea:3a:bd:79:9f:4d:96:9c:8e:e9:3f:a4:7f:74:ae: 6a:73:ef:71:7d:16:36:a7:73:f8:4e:13:51:8f:78:c6:0c:53: 35:0e:4c:da:f6:f0:bb:d2:46:0c:48:c8:be:a8:40:fc:b7:84: 5d:ad:94:3c:23:c0:f4:ee:59:29:4e:a1:22:9c:2e:9c:64:67: 9c:66:4e:ac:c6:76:be:81:6f:28:f9:ac:94:73:c2:11:86:6d: 9d:c8:d1:31:64:38:01:5b:10:3c:33:05:08:ed:c0:e8:27:f5: 25:de:82:00:40:cc:92:46:22:f1:9e:64:46:68:59:ca:3c:09: 7b:c4:dc:58:ac:b5:de:55:ad:a4:c2:85:6c:b2:92:91:99:4a: 0b:40:88:1e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Nf2JW4Wv5Zer3SQgyutkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjY4YjQ2YzA3YWU5YWNlMjViMmRmZmMwZDE1Yzg2YjZmYzM5YmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mzW/5+Vt4PJ6XvHIrBsm7DD0xzJ pbq4IeIVwi3FM6U7bgm8PkiKCOu8zcv1WRg9RMx2fbOmNuHHAxtzwaQ1T4PDKpP5 Tbx5kRUmFA8LC0kpyOgsMEwNnbn/2N7CNe6a0b1q3r3VSDbICyj2RlQ+uPXyEdJV qoNiiSJ3RCCVciuowqspnS0QyQINVvb3hACpKFW46G/N/H2JSsql0I/rPkKqXYe9 lbceinuC/8wJyjZmZbSJ1aY9+wBM1Y9QcxAvfjInEVu3bEIp6vnuXeauOh/VkBgf YdAYfCKgqhk0o128+wRf9y+dUtLrEoOmYCg33ctsoVBGM7bNw/PmarADzwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNJotGwHrprOJbLf/A0VyGtvw5vHMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvMG1pMGJBZXVtczRsc3RfOERSWElhMl9EbThjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYfuAwQA ueukMA0GCSqGSIb3DQEBCwUAA4IBAQCD6c4SDPVP2xJpv0xtVZ71/mFBIJaM/Uud aXNignMTKiUW+Utszu++v0s341u9wyXwO4GdRXkA1Y3Rxp86260FbyMz8OpWGhz2 y+jBCVB/hXTeeVGPO8yA+6pLmjsdwuNAVSbrAjTMyUZumMpCrALqOr15n02WnI7p P6R/dK5qc+9xfRY2p3P4ThNRj3jGDFM1Dkza9vC70kYMSMi+qED8t4RdrZQ8I8D0 7lkpTqEinC6cZGecZk6sxna+gW8o+ayUc8IRhm2dyNExZDgBWxA8MwUI7cDoJ/Ul 3oIAQMySRiLxnmRGaFnKPAl7xNxYrLXeVa2kwoVsspKRmUoLQIge -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:37 2026 by rpki-client