This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/odS4gJ1H-haIP2hfRvP__EIClnA.roa File: odS4gJ1H-haIP2hfRvP__EIClnA.roa (raw, json) Hash identifier: frbBPZZ05GoX1i3mLnaN+IdXbfyMrpl7+ZrlTRvKVwQ= Subject key identifier: A1:D4:B8:80:9D:47:FA:16:88:3F:68:5F:46:F3:FF:FC:42:02:96:70 Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Certificate serial: 019B7AC955866F3C02E8BFCB106817855416 Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/odS4gJ1H-haIP2hfRvP__EIClnA.roa Signing time: Thu 01 Jan 2026 18:19:33 +0000 ROA not before: Thu 01 Jan 2026 18:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44547 IP address blocks: 45.143.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:55:86:6f:3c:02:e8:bf:cb:10:68:17:85:54:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423 Validity Not Before: Jan 1 18:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1d4b8809d47fa16883f685f46f3fffc42029670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5d:12:0f:07:98:71:b5:74:6a:94:83:fd:1c: 04:c1:2d:cc:a4:b0:16:1b:d2:f3:4a:23:26:dd:00: 52:df:69:5e:1d:62:8a:40:d0:41:27:06:eb:bb:e5: e9:07:f4:02:dc:18:35:16:e5:4e:bb:ae:49:28:07: 53:97:6e:a0:0d:15:17:0f:0f:0d:27:ec:0e:30:c3: 08:c6:9e:b6:62:56:ef:47:3c:06:3c:80:b5:2b:03: d5:d5:b5:68:01:11:47:31:6d:0c:c2:2a:71:60:11: 95:15:ba:9a:68:fc:04:59:5b:53:ba:97:2d:26:f4: a7:20:93:c4:5f:33:de:4d:6c:82:dc:34:6b:c8:a4: 76:02:1d:0c:2a:2d:03:8b:07:b0:dd:67:08:40:83: 18:f0:74:15:3e:8c:6c:af:90:12:8f:1f:14:c3:b9: d9:6f:cb:f8:5a:55:a0:ad:ad:55:d6:64:25:d5:36: 45:57:20:77:58:19:b5:5b:6c:b8:48:9e:ca:f4:c6: d8:3d:77:9f:84:f3:fc:17:b8:03:f3:e3:a3:8e:9e: e1:ab:52:b5:29:d1:5b:d8:a7:49:b3:c5:34:9e:ba: 55:22:af:f5:d2:41:77:4a:46:7a:5a:47:51:be:70: 97:ef:a1:3f:95:1d:f3:62:45:85:e3:f7:9c:f9:41: 2a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D4:B8:80:9D:47:FA:16:88:3F:68:5F:46:F3:FF:FC:42:02:96:70 X509v3 Authority Key Identifier: keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/odS4gJ1H-haIP2hfRvP__EIClnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.4.0/24 Signature Algorithm: sha256WithRSAEncryption 59:f5:22:e2:8a:11:9d:bc:56:dc:32:35:e1:6a:67:41:4e:2f: dc:6c:86:81:54:e1:f6:04:4c:f1:b6:3b:fb:69:f8:ca:d2:82: 47:1b:01:e5:da:1c:30:52:96:40:a0:9a:08:40:bc:8f:4a:ea: 5b:ad:7f:cf:ab:95:8d:76:98:85:26:8f:97:6e:a0:40:cc:77: 44:f9:5c:89:5c:1d:c5:99:07:e1:28:25:3a:dd:d2:7c:9c:d8: 36:a0:a5:98:e8:74:a8:25:25:6f:95:cb:59:b4:a0:93:28:d0: 15:f6:b5:9f:92:d1:0e:12:86:ac:96:76:fa:9f:d3:ca:40:7d: a6:c3:5f:e5:cd:b1:ef:79:96:db:e5:37:d6:06:fd:36:e8:d6: b1:0a:c7:db:bf:bd:72:a9:2d:e3:01:06:dd:94:91:c4:ac:78: 36:0f:05:f0:79:ff:a1:e8:f7:88:fd:ea:b9:05:01:a6:a1:9c: 0c:34:75:a4:08:39:0d:5f:09:65:c5:fc:58:be:af:93:df:65: 43:0c:bb:e4:79:d2:cd:b6:c8:74:13:1b:1a:09:0e:a8:2e:17: 7a:14:fe:f0:d8:2d:73:bd:df:5b:29:ad:01:1a:a7:4f:c7:f0: bf:82:c7:ff:ef:e4:6d:86:a8:76:9f:aa:29:80:37:6f:14:93: 26:27:11:85 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6yVWGbzwC6L/LEGgXhVQWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3 Y2Q0MjMwHhcNMjYwMTAxMTgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWQ0Yjg4MDlkNDdmYTE2ODgzZjY4NWY0NmYzZmZmYzQyMDI5NjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV0SDweYcbV0apSD/RwEwS3MpLAW G9LzSiMm3QBS32leHWKKQNBBJwbru+XpB/QC3Bg1FuVOu65JKAdTl26gDRUXDw8N J+wOMMMIxp62YlbvRzwGPIC1KwPV1bVoARFHMW0MwipxYBGVFbqaaPwEWVtTupct JvSnIJPEXzPeTWyC3DRryKR2Ah0MKi0Diwew3WcIQIMY8HQVPoxsr5ASjx8Uw7nZ b8v4WlWgra1V1mQl1TZFVyB3WBm1W2y4SJ7K9MbYPXefhPP8F7gD8+Ojjp7hq1K1 KdFb2KdJs8U0nrpVIq/10kF3SkZ6WkdRvnCX76E/lR3zYkWF4/ec+UEqYQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKHUuICdR/oWiD9oX0bz//xCApZwMB8GA1UdIwQY MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli LWExYjdjZWVmYTE2Yy8xL29kUzRnSjFILWhhSVAyaGZSdlBfX0VJQ2xuQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2 Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtjwQw DQYJKoZIhvcNAQELBQADggEBAFn1IuKKEZ28VtwyNeFqZ0FOL9xshoFU4fYETPG2 O/tp+MrSgkcbAeXaHDBSlkCgmghAvI9K6lutf8+rlY12mIUmj5duoEDMd0T5XIlc HcWZB+EoJTrd0nyc2DagpZjodKglJW+Vy1m0oJMo0BX2tZ+S0Q4ShqyWdvqf08pA fabDX+XNse95ltvlN9YG/Tbo1rEKx9u/vXKpLeMBBt2UkcSseDYPBfB5/6Ho94j9 6rkFAaahnAw0daQIOQ1fCWXF/Fi+r5PfZUMMu+R50s22yHQTGxoJDqguF3oU/vDY LXO931sprQEap0/H8L+Cx//v5G2GqHafqimAN28UkyYnEYU= -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:47 2026 by rpki-client