This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/_rkoOQmmtVtFnbLuubGb2FPnExg.roa File: _rkoOQmmtVtFnbLuubGb2FPnExg.roa (raw, json) Hash identifier: CzxwuD95bHpNiF0gIsEuyjsHFs3IQ3s6b3cEWVvW62w= Subject key identifier: FE:B9:28:39:09:A6:B5:5B:45:9D:B2:EE:B9:B1:9B:D8:53:E7:13:18 Certificate issuer: /CN=a4b707300e869467be5e5273222d90e0b618f924 Certificate serial: 019B77C77005ABEFBF02CDF6EB685342518A Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/_rkoOQmmtVtFnbLuubGb2FPnExg.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 912 IP address blocks: 45.152.56.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:70:05:ab:ef:bf:02:cd:f6:eb:68:53:42:51:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924 Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=feb9283909a6b55b459db2eeb9b19bd853e71318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:62:6a:c3:e6:0c:33:e8:e9:57:d4:6c:db: 0f:f4:e4:a0:f4:0c:7b:2c:95:99:ca:41:c9:79:a2: 44:34:41:08:12:84:4c:62:9b:b0:c2:b5:a4:01:f4: ee:d3:46:57:dc:32:f7:9a:bd:2e:b5:a7:81:d8:01: 7c:fd:1c:23:0a:1b:e9:50:e4:e3:1a:b6:9e:1a:ea: 8f:50:8b:85:52:ea:54:10:14:46:da:9e:54:b2:d0: 08:c5:fd:a5:22:57:a9:a8:6a:0a:24:45:53:ab:9b: a4:b1:67:bf:42:b1:96:d0:0a:cb:a1:09:78:13:5a: 6c:6f:5b:af:f6:e3:3b:77:10:b0:72:cf:fa:b3:85: 88:45:25:66:47:f0:d1:08:e5:12:b2:e5:45:ec:7d: 4a:c1:b7:6d:fe:74:67:25:28:21:b1:ec:c2:20:2d: ef:85:6b:c9:39:7d:70:c4:f0:8a:77:20:76:51:25: de:a2:d1:20:1d:66:d9:bb:2d:da:fe:08:0a:16:65: 3d:f6:84:e8:e9:74:be:98:46:a9:a9:4d:59:c3:94: 85:be:51:90:28:42:c6:2d:43:3a:10:99:5c:97:6c: ad:fa:0a:e6:aa:84:e5:5b:30:a3:69:92:ed:bb:06: f6:54:ff:44:36:3c:72:fa:21:2b:4c:d6:75:79:81: c5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B9:28:39:09:A6:B5:5B:45:9D:B2:EE:B9:B1:9B:D8:53:E7:13:18 X509v3 Authority Key Identifier: keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/_rkoOQmmtVtFnbLuubGb2FPnExg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.56.0/22 Signature Algorithm: sha256WithRSAEncryption 94:50:63:d1:91:d4:86:cc:15:47:db:02:b4:05:6b:e1:33:77: 7b:e9:37:da:62:7f:55:f4:54:cc:f1:0b:54:35:e0:99:ab:6d: ca:b2:53:78:9b:cf:3d:bf:63:f0:9d:6e:8d:50:26:c6:22:07: 34:18:86:d9:9f:16:1d:02:80:75:a8:87:7a:53:85:d1:01:3d: eb:8d:7c:4a:96:68:13:b4:2c:6a:65:e0:ed:98:86:ae:f2:7c: 84:4b:98:a4:c3:ac:5b:0c:fe:8d:a2:07:c4:13:25:04:05:24: 68:57:04:d2:a7:c4:31:e2:21:21:78:14:9c:19:0f:c5:dc:fb: cc:4b:23:2c:b1:ee:1c:86:30:87:9f:8c:1a:f0:83:8c:06:65: 24:4b:84:eb:b0:86:e8:0e:78:28:17:ac:39:ec:c6:81:3e:38: 03:b7:51:60:fe:ec:d0:bb:e5:c7:4c:2b:d7:03:5b:a8:31:33: 12:c7:61:29:1f:2f:4a:bf:97:98:c8:e2:9c:20:61:33:cc:20: 86:d5:a8:fb:04:03:57:71:bb:51:b0:02:b2:57:58:1c:8d:50: a6:47:0d:97:d7:c4:4a:44:c3:18:e9:0e:6b:a0:f5:45:74:ad: 8a:1d:bf:ad:61:6e:05:c6:3c:25:4d:30:54:45:dd:74:05:27: 3c:57:da:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3AFq++/As3262hTQlGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjcwNzMwMGU4Njk0NjdiZTVlNTI3MzIyMmQ5MGUwYjYx OGY5MjQwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWI5MjgzOTA5YTZiNTViNDU5ZGIyZWViOWIxOWJkODUzZTcxMzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJViasPmDDPo6VfUbNsP9OSg9Ax7 LJWZykHJeaJENEEIEoRMYpuwwrWkAfTu00ZX3DL3mr0utaeB2AF8/RwjChvpUOTj GraeGuqPUIuFUupUEBRG2p5UstAIxf2lIlepqGoKJEVTq5uksWe/QrGW0ArLoQl4 E1psb1uv9uM7dxCwcs/6s4WIRSVmR/DRCOUSsuVF7H1Kwbdt/nRnJSghsezCIC3v hWvJOX1wxPCKdyB2USXeotEgHWbZuy3a/ggKFmU99oTo6XS+mEapqU1Zw5SFvlGQ KELGLUM6EJlcl2yt+grmqoTlWzCjaZLtuwb2VP9ENjxy+iErTNZ1eYHFnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP65KDkJprVbRZ2y7rmxm9hT5xMYMB8GA1UdIwQY MBaAFKS3BzAOhpRnvl5ScyItkOC2GPkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTct M2U1NWM0OWYyZDRlLzEvX3Jrb09RbW10VnRGbmJMdXViR2IyRlBuRXhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTctM2U1NWM0OWYyZDRl LzEvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZg4MA0G CSqGSIb3DQEBCwUAA4IBAQCUUGPRkdSGzBVH2wK0BWvhM3d76TfaYn9V9FTM8QtU NeCZq23KslN4m889v2PwnW6NUCbGIgc0GIbZnxYdAoB1qId6U4XRAT3rjXxKlmgT tCxqZeDtmIau8nyES5ikw6xbDP6NogfEEyUEBSRoVwTSp8Qx4iEheBScGQ/F3PvM SyMsse4chjCHn4wa8IOMBmUkS4TrsIboDngoF6w57MaBPjgDt1Fg/uzQu+XHTCvX A1uoMTMSx2EpHy9Kv5eYyOKcIGEzzCCG1aj7BANXcbtRsAKyV1gcjVCmRw2X18RK RMMY6Q5roPVFdK2KHb+tYW4FxjwlTTBURd10BSc8V9p9 -----END CERTIFICATE-----Generated at Mon Jan 12 04:03:43 2026 by rpki-client