This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/OCcq95tY8MI9q0R91VTepdbCWFU.roa File: OCcq95tY8MI9q0R91VTepdbCWFU.roa (raw, json) Hash identifier: lyT+pC7GAnn3BwaVLLn9TDAI8JC2aqvQJ4uMXEAhc58= Subject key identifier: 38:27:2A:F7:9B:58:F0:C2:3D:AB:44:7D:D5:54:DE:A5:D6:C2:58:55 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B3613415B02B0BDFC28D9CC663D9FA3 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/OCcq95tY8MI9q0R91VTepdbCWFU.roa Signing time: Thu 01 Jan 2026 20:18:20 +0000 ROA not before: Thu 01 Jan 2026 20:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214785 IP address blocks: 45.134.144.0/24 maxlen: 24 45.155.224.0/24 maxlen: 24 103.211.100.0/24 maxlen: 24 103.211.102.0/24 maxlen: 24 172.110.212.0/24 maxlen: 24 172.110.213.0/24 maxlen: 24 172.110.214.0/24 maxlen: 24 185.245.1.0/24 maxlen: 24 185.245.2.0/24 maxlen: 24 193.107.216.0/24 maxlen: 24 194.120.144.0/24 maxlen: 24 194.120.164.0/24 maxlen: 24 194.145.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:13:41:5b:02:b0:bd:fc:28:d9:cc:66:3d:9f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38272af79b58f0c23dab447dd554dea5d6c25855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:80:14:98:a8:71:e6:a4:fb:79:af:d0:13:54: c2:a2:01:27:ae:0d:ae:52:67:bc:1a:4c:07:5e:82: 86:73:e3:d2:a6:0b:34:f6:87:a3:88:ea:34:70:3e: 11:7e:69:25:5b:27:5d:cb:3e:99:01:5e:33:70:34: 02:7a:d8:ec:b7:ed:43:8e:75:3b:c3:ef:ab:a8:8f: ee:b2:e3:c3:2a:f3:68:3f:e5:47:d6:1e:32:8c:47: 93:a9:df:4a:6e:4d:97:46:39:72:57:e4:36:55:bf: ad:ac:c6:9f:92:de:e2:89:b2:32:b7:29:83:7a:99: 57:e5:61:a7:91:1e:7e:e2:6b:17:b5:d5:db:15:bd: c3:3d:5e:b3:71:ac:aa:12:0f:8c:f3:64:a6:f8:f7: a8:cc:a1:63:79:02:af:98:05:29:52:5c:15:4b:64: 55:73:4c:a5:5d:75:5a:11:a8:1e:be:6d:98:5f:07: f8:15:fa:1b:ee:f7:44:ba:52:89:b9:9f:f1:42:2e: 33:f7:9a:a6:96:d1:87:69:e0:2b:08:66:7c:9a:ac: 77:96:04:01:a0:91:19:16:3c:40:e7:7d:73:93:f9: f1:91:37:9a:29:d4:f5:20:c8:ed:5f:a8:b7:95:c2: e3:d1:87:89:ff:f1:f5:2c:c0:ce:2f:6e:dd:8e:5f: 63:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:27:2A:F7:9B:58:F0:C2:3D:AB:44:7D:D5:54:DE:A5:D6:C2:58:55 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/OCcq95tY8MI9q0R91VTepdbCWFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.144.0/24 45.155.224.0/24 103.211.100.0/24 103.211.102.0/24 172.110.212.0-172.110.214.255 185.245.1.0-185.245.2.255 193.107.216.0/24 194.120.144.0/24 194.120.164.0/24 194.145.237.0/24 Signature Algorithm: sha256WithRSAEncryption 00:34:47:ca:c8:15:b1:bb:f0:ce:26:6d:67:36:c6:d9:11:87: 60:65:1f:a5:f9:7f:4b:19:5b:8f:b9:26:a9:d1:50:ad:a8:3b: db:0f:bd:e5:5a:11:20:16:ea:18:9c:0f:02:e5:9e:88:2a:05: a9:5a:e3:ab:36:33:a6:5f:e6:40:a8:d4:35:e4:27:a9:4f:a2: 5c:94:7b:6d:d2:c5:be:db:51:b2:bb:49:35:26:18:e1:8e:fe: b0:43:f4:9e:4f:4b:7a:c1:07:28:43:41:7a:bf:a7:39:db:c6: 83:14:48:3d:e8:30:78:e0:87:31:e9:b8:54:96:e1:a4:9b:6d: 3e:a1:5b:fd:b8:7a:54:e0:33:fd:40:50:ff:91:65:bd:78:53: 86:06:9a:c7:45:a6:e6:54:0e:e0:5a:f6:ed:1a:fd:38:99:88: 8e:38:f4:a7:4c:77:06:8f:e5:64:99:80:aa:78:f8:4b:fd:4e: 30:6b:e7:ab:8d:de:71:dc:b1:7a:52:af:53:93:d0:fd:12:d9: bd:be:68:1f:32:c4:cc:6b:49:8e:7e:f0:55:4e:87:21:bb:c5: 2f:3b:ae:ad:5a:48:09:7d:07:dc:49:df:a3:1c:ef:ed:1a:7b: 69:12:66:d3:77:03:f0:69:6a:3e:4a:f5:3b:52:82:16:bc:98: 32:05:0c:dd -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt7NhNBWwKwvfwo2cxmPZ+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODI3MmFmNzliNThmMGMyM2RhYjQ0N2RkNTU0ZGVhNWQ2YzI1ODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoAUmKhx5qT7ea/QE1TCogEnrg2u Ume8GkwHXoKGc+PSpgs09oejiOo0cD4RfmklWyddyz6ZAV4zcDQCetjst+1DjnU7 w++rqI/usuPDKvNoP+VH1h4yjEeTqd9Kbk2XRjlyV+Q2Vb+trMafkt7iibIytymD eplX5WGnkR5+4msXtdXbFb3DPV6zcayqEg+M82Sm+PeozKFjeQKvmAUpUlwVS2RV c0ylXXVaEagevm2YXwf4Ffob7vdEulKJuZ/xQi4z95qmltGHaeArCGZ8mqx3lgQB oJEZFjxA531zk/nxkTeaKdT1IMjtX6i3lcLj0YeJ//H1LMDOL27djl9jkwIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFDgnKvebWPDCPatEfdVU3qXWwlhVMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvT0NjcTk1dFk4TUk5cTBSOTFWVGVwZGJDV0ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQALYaQAwQA LZvgAwQAZ9NkAwQAZ9NmMAwDBAKsbtQDBACsbtYwDAMEALn1AQMEALn1AgMEAMFr 2AMEAMJ4kAMEAMJ4pAMEAMKR7TANBgkqhkiG9w0BAQsFAAOCAQEAADRHysgVsbvw ziZtZzbG2RGHYGUfpfl/Sxlbj7kmqdFQrag72w+95VoRIBbqGJwPAuWeiCoFqVrj qzYzpl/mQKjUNeQnqU+iXJR7bdLFvttRsrtJNSYY4Y7+sEP0nk9LesEHKENBer+n OdvGgxRIPegweOCHMem4VJbhpJttPqFb/bh6VOAz/UBQ/5FlvXhThgaax0Wm5lQO 4Fr27Rr9OJmIjjj0p0x3Bo/lZJmAqnj4S/1OMGvnq43ecdyxelKvU5PQ/RLZvb5o HzLEzGtJjn7wVU6HIbvFLzuurVpICX0H3Enfoxzv7Rp7aRJm03cD8GlqPkr1O1KC FryYMgUM3Q== -----END CERTIFICATE-----Generated at Wed Jan 21 09:22:10 2026 by rpki-client