This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/OdLu_HTcQvIodFBv5wrW_bitNt8.roa File: OdLu_HTcQvIodFBv5wrW_bitNt8.roa (raw, json) Hash identifier: Lh3p2rmlivj/4TCynBLAARFyup/lYvxOvhDJIyFzt24= Subject key identifier: 39:D2:EE:FC:74:DC:42:F2:28:74:50:6F:E7:0A:D6:FD:B8:AD:36:DF Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019B7AC80B29D69B026D84D9FE83062B7952 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/OdLu_HTcQvIodFBv5wrW_bitNt8.roa Signing time: Thu 01 Jan 2026 18:18:08 +0000 ROA not before: Thu 01 Jan 2026 18:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57393 IP address blocks: 45.93.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:0b:29:d6:9b:02:6d:84:d9:fe:83:06:2b:79:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jan 1 18:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39d2eefc74dc42f22874506fe70ad6fdb8ad36df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ff:88:26:6f:a5:62:13:9a:cc:6d:8f:49:fa: 86:cf:c6:dd:ba:f0:8f:74:1a:3f:80:aa:66:8a:35: 64:4e:d4:66:9c:0c:b1:b4:77:93:fc:e3:85:21:70: 4c:3a:e1:cb:c0:a7:9e:f3:41:af:f4:58:20:75:f1: 89:2e:f9:3f:db:5f:45:13:5d:2c:12:d6:cf:6e:a1: 4a:e0:96:da:cf:48:58:09:cd:68:48:d3:8d:b8:78: 10:09:3b:e3:48:be:3f:df:9b:ba:0f:cb:10:19:78: 75:4f:5f:5e:e2:2c:05:2e:16:7f:c9:a6:92:3e:b1: 98:4f:7c:24:2f:ea:1d:31:14:ed:41:4e:bc:4a:ae: bd:81:04:e6:6c:95:1b:52:e8:65:32:a7:e7:af:fb: c1:64:5e:95:21:b2:e5:eb:1a:61:73:45:c8:67:ac: 58:07:15:28:89:a1:dd:cc:11:a1:f4:1c:96:3c:bb: 4b:90:3d:7c:cd:ed:6e:fa:7d:e0:62:47:98:4c:59: f2:7c:36:d1:b1:a9:f5:a5:73:80:73:f5:cd:d3:c2: 38:1b:b1:b1:47:81:af:18:83:4c:16:e3:df:b6:76: 35:bb:9d:b9:e6:a7:6b:66:d3:bb:36:7b:10:67:51: 97:50:5e:79:bf:de:69:09:39:54:c7:e7:d8:6d:c3: 32:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D2:EE:FC:74:DC:42:F2:28:74:50:6F:E7:0A:D6:FD:B8:AD:36:DF X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/OdLu_HTcQvIodFBv5wrW_bitNt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.62.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:89:3c:bb:f4:32:30:7e:8f:36:a8:2f:ad:d4:ee:88:67:2f: 38:ba:5b:6e:29:93:36:c2:eb:e6:5c:44:41:6c:5e:16:88:b3: c4:7b:a2:2f:48:f3:00:e0:29:72:88:e5:3e:fb:a0:38:8a:39: ea:14:af:89:9e:86:0d:d7:fa:86:21:a4:5e:61:88:1c:99:fa: 3f:ca:d4:96:60:b2:82:ab:33:84:39:ec:e4:2b:05:08:4b:0c: e9:16:f6:b8:17:0f:68:b9:11:30:bd:0f:52:01:dc:50:b9:e3: 32:ea:f5:ff:fb:61:2d:ac:ba:e7:a8:d7:15:c3:15:82:ff:c6: b0:b6:9f:98:39:cc:b0:c4:93:eb:89:3f:f4:df:9d:5b:94:af: a4:93:32:66:97:67:99:c3:1c:11:f6:af:60:6d:c1:db:07:6b: 64:19:c0:de:57:e0:66:47:40:43:9c:d8:ec:7b:47:e9:ba:d7: cf:09:1c:79:e0:a3:e5:e7:cc:62:56:e6:b2:3e:88:fd:77:12: 70:4f:1a:14:79:f1:63:14:04:ef:dc:d0:e7:59:a2:4f:6d:c1: 18:17:62:4d:72:b4:94:21:78:db:1b:29:b3:28:3d:78:72:99: 52:f8:c2:61:c3:23:58:0f:ce:08:c9:df:f0:21:bd:df:89:7b: 7f:ab:87:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yAsp1psCbYTZ/oMGK3lSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjYwMTAxMTgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWQyZWVmYzc0ZGM0MmYyMjg3NDUwNmZlNzBhZDZmZGI4YWQzNmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf+IJm+lYhOazG2PSfqGz8bduvCP dBo/gKpmijVkTtRmnAyxtHeT/OOFIXBMOuHLwKee80Gv9FggdfGJLvk/219FE10s EtbPbqFK4Jbaz0hYCc1oSNONuHgQCTvjSL4/35u6D8sQGXh1T19e4iwFLhZ/yaaS PrGYT3wkL+odMRTtQU68Sq69gQTmbJUbUuhlMqfnr/vBZF6VIbLl6xphc0XIZ6xY BxUoiaHdzBGh9ByWPLtLkD18ze1u+n3gYkeYTFnyfDbRsan1pXOAc/XN08I4G7Gx R4GvGINMFuPftnY1u5255qdrZtO7NnsQZ1GXUF55v95pCTlUx+fYbcMy4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDnS7vx03ELyKHRQb+cK1v24rTbfMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvT2RMdV9IVGNRdklvZEZCdjV3cldfYml0TnQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLV0+MA0G CSqGSIb3DQEBCwUAA4IBAQCPiTy79DIwfo82qC+t1O6IZy84ultuKZM2wuvmXERB bF4WiLPEe6IvSPMA4ClyiOU++6A4ijnqFK+JnoYN1/qGIaReYYgcmfo/ytSWYLKC qzOEOezkKwUISwzpFva4Fw9ouREwvQ9SAdxQueMy6vX/+2EtrLrnqNcVwxWC/8aw tp+YOcywxJPriT/0351blK+kkzJml2eZwxwR9q9gbcHbB2tkGcDeV+BmR0BDnNjs e0fputfPCRx54KPl58xiVuayPoj9dxJwTxoUefFjFATv3NDnWaJPbcEYF2JNcrSU IXjbGymzKD14cplS+MJhwyNYD84Iyd/wIb3fiXt/q4e+ -----END CERTIFICATE-----Generated at Tue Jan 20 22:01:22 2026 by rpki-client