This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/oxM4weLdM3j7jrYJT8BJG0W0cJ4.roa File: oxM4weLdM3j7jrYJT8BJG0W0cJ4.roa (raw, json) Hash identifier: JzjynEnEp0mde9J1/ZPR8Pa7VycJrBNUsALJMI999+Q= Subject key identifier: A3:13:38:C1:E2:DD:33:78:FB:8E:B6:09:4F:C0:49:1B:45:B4:70:9E Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7 Certificate serial: 019B77593D424B37654F4D7FE0400F29F473 Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/oxM4weLdM3j7jrYJT8BJG0W0cJ4.roa Signing time: Thu 01 Jan 2026 02:18:15 +0000 ROA not before: Thu 01 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 91.212.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3d:42:4b:37:65:4f:4d:7f:e0:40:0f:29:f4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7 Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a31338c1e2dd3378fb8eb6094fc0491b45b4709e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d7:9b:7a:7e:3f:79:f0:e2:2c:61:49:f6:d4: fa:69:52:b9:e7:6b:29:0d:f9:93:79:b9:e8:29:79: 7e:33:c2:bd:42:66:1b:bd:06:b7:c4:3c:e7:88:f5: 7e:5c:d1:41:63:4a:b1:ba:7d:f6:ac:5b:02:88:ab: ba:76:c8:11:9f:1c:dd:22:2d:40:74:2e:d0:e7:d0: 4e:b0:d9:48:ad:ed:90:fb:3d:d3:02:75:25:66:38: 49:f5:b6:f7:40:7b:6d:3d:bf:97:8c:4f:cc:a3:92: 31:4d:6c:25:16:f1:8f:d8:bc:50:3a:76:4c:2e:e3: 39:18:3d:87:50:1c:61:72:ee:cb:1e:98:8e:a7:04: 9e:de:1a:88:ac:02:e0:0f:34:d5:3c:68:0b:59:06: a4:fb:46:79:83:6d:e1:40:3a:67:4e:7d:27:bc:58: 2c:89:10:e1:31:78:46:f3:0e:48:d5:39:c6:31:b4: bb:98:47:b3:c0:ae:f7:be:ff:88:d5:55:e0:00:a8: 04:53:67:cd:d5:ad:db:e1:49:8f:06:e3:7f:80:1f: 9c:dd:99:87:95:91:e4:ad:54:9a:35:2f:5b:c4:99: 87:fc:bc:57:99:56:c5:8d:a5:25:1c:4c:77:05:04: a4:f2:c6:ac:d9:43:6b:2b:25:49:d6:6a:a9:30:a0: 3a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:13:38:C1:E2:DD:33:78:FB:8E:B6:09:4F:C0:49:1B:45:B4:70:9E X509v3 Authority Key Identifier: keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/oxM4weLdM3j7jrYJT8BJG0W0cJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.43.0/24 Signature Algorithm: sha256WithRSAEncryption 40:dc:ce:79:62:85:1b:23:f5:b1:1a:82:40:2e:21:51:ba:7f: 9c:fc:8c:17:e5:ee:67:0d:82:c6:38:fc:06:e9:9d:2c:bc:f0: a4:94:cf:13:46:58:60:a1:22:cb:a2:42:f4:dd:5c:53:97:8a: cd:b0:96:1d:61:f2:73:bf:78:cf:95:87:c0:72:0c:04:a1:ae: 44:69:90:69:c2:5a:3d:08:82:bd:c8:ac:27:7e:5b:c9:cf:d4: 48:6c:98:45:5e:e0:fa:cc:ff:d0:84:db:a3:c2:dc:35:e7:e5: df:2b:0d:e4:47:d4:3b:cf:36:13:42:5f:11:fd:8a:f6:97:f3: e3:c5:ab:cb:f7:84:86:a1:92:07:75:4e:96:e2:f5:ee:63:fe: bf:1d:98:05:06:da:4c:e4:bc:f0:21:b6:12:f5:5f:72:99:32: d4:0e:94:07:e9:2c:f5:83:df:86:62:07:72:a0:b3:6e:13:2b: c0:c4:14:df:b6:25:14:3b:cd:68:76:02:8f:a2:e1:81:71:de: 92:15:d7:ae:1b:cc:ac:36:cd:95:df:d2:c6:e6:45:20:82:59: 6a:5e:58:be:69:4d:06:b4:fd:eb:12:82:f5:32:ba:a9:98:89: 6d:fa:20:5b:2e:d9:a3:bf:c8:1b:c5:89:4d:35:91:92:ff:05: 48:fd:cd:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WT1CSzdlT01/4EAPKfRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OWFkMmVjZTNlNTkxMTA5M2Q5NjQ3NTNiNjU2NDU5Yzli YzA1YTcwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzEzMzhjMWUyZGQzMzc4ZmI4ZWI2MDk0ZmMwNDkxYjQ1YjQ3MDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNeben4/efDiLGFJ9tT6aVK552sp DfmTebnoKXl+M8K9QmYbvQa3xDzniPV+XNFBY0qxun32rFsCiKu6dsgRnxzdIi1A dC7Q59BOsNlIre2Q+z3TAnUlZjhJ9bb3QHttPb+XjE/Mo5IxTWwlFvGP2LxQOnZM LuM5GD2HUBxhcu7LHpiOpwSe3hqIrALgDzTVPGgLWQak+0Z5g23hQDpnTn0nvFgs iRDhMXhG8w5I1TnGMbS7mEezwK73vv+I1VXgAKgEU2fN1a3b4UmPBuN/gB+c3ZmH lZHkrVSaNS9bxJmH/LxXmVbFjaUlHEx3BQSk8sas2UNrKyVJ1mqpMKA6bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKMTOMHi3TN4+462CU/ASRtFtHCeMB8GA1UdIwQY MBaAFEWa0uzj5ZEQk9lkdTtlZFnJvAWnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYt MmQzNGRjNmU1NjU2LzEvb3hNNHdlTGRNM2o3anJZSlQ4QkpHMFcwY0o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYtMmQzNGRjNmU1NjU2 LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9QrMA0G CSqGSIb3DQEBCwUAA4IBAQBA3M55YoUbI/WxGoJALiFRun+c/IwX5e5nDYLGOPwG 6Z0svPCklM8TRlhgoSLLokL03VxTl4rNsJYdYfJzv3jPlYfAcgwEoa5EaZBpwlo9 CIK9yKwnflvJz9RIbJhFXuD6zP/QhNujwtw15+XfKw3kR9Q7zzYTQl8R/Yr2l/Pj xavL94SGoZIHdU6W4vXuY/6/HZgFBtpM5LzwIbYS9V9ymTLUDpQH6Sz1g9+GYgdy oLNuEyvAxBTftiUUO81odgKPouGBcd6SFdeuG8ysNs2V39LG5kUggllqXli+aU0G tP3rEoL1MrqpmIlt+iBbLtmjv8gbxYlNNZGS/wVI/c1z -----END CERTIFICATE-----Generated at Wed Jan 21 12:20:18 2026 by rpki-client