This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/RoKhjHsA9qOTHog4qN5z9txoamQ.roa File: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (raw, json) Hash identifier: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4= Subject key identifier: 46:82:A1:8C:7B:00:F6:A3:93:1E:88:38:A8:DE:73:F6:DC:68:6A:64 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019B77C6F2B598EC303F2B190BE67917F93C Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/RoKhjHsA9qOTHog4qN5z9txoamQ.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 45.133.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f2:b5:98:ec:30:3f:2b:19:0b:e6:79:17:f9:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4682a18c7b00f6a3931e8838a8de73f6dc686a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5c:ab:65:38:12:a9:ca:40:ed:b9:eb:b6:e6: b1:d5:99:75:88:0a:62:ec:31:e9:ef:0c:10:a9:64: 43:aa:22:62:82:8a:8c:ff:71:1b:86:8e:c6:c4:c9: 24:31:38:7d:f7:86:bf:31:d4:77:8c:9b:11:24:bd: 45:98:39:9d:c2:82:4f:3d:7b:5c:16:43:98:70:2c: f1:36:4b:61:57:ff:35:f1:0a:72:18:b4:c6:7a:7e: 40:9b:79:92:e6:8e:d2:81:7f:40:42:77:4f:20:f9: c6:40:cb:98:14:92:93:cf:51:fc:ae:b7:61:b0:04: 0d:0f:ea:b3:6a:16:f6:8c:ec:66:31:01:0d:62:92: 1a:47:86:08:01:77:f0:da:b0:97:80:48:07:fc:f0: fd:bb:57:61:a2:b1:e5:7a:3c:b2:9b:2c:e4:1d:b7: 55:cc:f0:18:db:89:c0:a8:96:f3:ac:c6:22:ce:24: 4f:fb:d0:9b:b7:4f:d4:79:f6:6f:2a:c8:c7:c9:df: b2:20:2e:39:be:52:91:9d:e6:4f:61:3c:50:c3:e3: a7:ff:ac:b0:3f:46:6e:83:cc:28:3c:0c:35:8a:17: 13:2b:9a:93:8e:20:11:e1:c8:3f:89:90:e9:30:d2: 22:7c:f2:6f:c2:b9:63:19:a1:88:b4:14:5e:10:52: 5d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:82:A1:8C:7B:00:F6:A3:93:1E:88:38:A8:DE:73:F6:DC:68:6A:64 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/RoKhjHsA9qOTHog4qN5z9txoamQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.116.0/24 Signature Algorithm: sha256WithRSAEncryption 13:89:6d:99:b9:3e:08:bb:54:fe:50:9e:75:fc:6c:95:1b:0f: aa:67:75:ca:63:01:cf:d3:11:7d:4e:2b:cc:b2:88:fc:c6:c9: e3:66:0c:98:20:cd:d2:a0:b8:59:f0:c7:a1:d7:48:8c:55:92: 2d:89:54:74:b6:78:31:a8:61:9c:f4:7a:ed:c8:30:0d:72:39: 6d:0b:78:b9:be:43:e7:42:b5:84:d8:da:73:b1:7a:0f:66:67: 47:a9:8c:f7:c1:ca:8f:18:8d:06:c0:31:f6:58:cb:74:d0:35: 47:39:69:81:05:f0:3c:02:bb:24:59:a6:2c:f4:8f:f3:c1:f7: a6:2a:4e:4f:e5:ce:e2:c7:b7:a1:8d:3c:e4:e8:82:02:f3:d4: 48:40:95:d2:2d:83:5e:25:a4:15:4e:c5:ab:ad:b1:e8:86:44: 1c:4d:1c:85:60:ff:31:85:e9:0e:58:a0:a1:0d:bf:a7:5e:a7: e5:42:93:ad:63:02:40:64:08:1f:2a:9d:6e:c9:ac:e8:e6:dd: 4a:6d:88:3e:fa:ad:40:e4:a7:45:34:24:65:fd:d7:a6:90:1d: aa:5c:2e:a2:c9:ae:f3:4e:14:05:c2:a4:66:32:d3:58:a4:91: 45:d7:d2:c8:35:0a:fb:74:ac:13:a3:06:f2:ee:d1:87:a0:e6: e0:68:6a:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvK1mOwwPysZC+Z5F/k8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjgyYTE4YzdiMDBmNmEzOTMxZTg4MzhhOGRlNzNmNmRjNjg2YTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllyrZTgSqcpA7bnrtuax1Zl1iApi 7DHp7wwQqWRDqiJigoqM/3Ebho7GxMkkMTh994a/MdR3jJsRJL1FmDmdwoJPPXtc FkOYcCzxNkthV/818QpyGLTGen5Am3mS5o7SgX9AQndPIPnGQMuYFJKTz1H8rrdh sAQND+qzahb2jOxmMQENYpIaR4YIAXfw2rCXgEgH/PD9u1dhorHlejyymyzkHbdV zPAY24nAqJbzrMYiziRP+9Cbt0/UefZvKsjHyd+yIC45vlKRneZPYTxQw+On/6yw P0Zug8woPAw1ihcTK5qTjiAR4cg/iZDpMNIifPJvwrljGaGItBReEFJdRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEaCoYx7APajkx6IOKjec/bcaGpkMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvUm9LaGpIc0E5cU9USG9nNHFONXo5dHhvYW1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYV0MA0G CSqGSIb3DQEBCwUAA4IBAQATiW2ZuT4Iu1T+UJ51/GyVGw+qZ3XKYwHP0xF9TivM soj8xsnjZgyYIM3SoLhZ8Meh10iMVZItiVR0tngxqGGc9HrtyDANcjltC3i5vkPn QrWE2NpzsXoPZmdHqYz3wcqPGI0GwDH2WMt00DVHOWmBBfA8ArskWaYs9I/zwfem Kk5P5c7ix7ehjTzk6IIC89RIQJXSLYNeJaQVTsWrrbHohkQcTRyFYP8xhekOWKCh Db+nXqflQpOtYwJAZAgfKp1uyazo5t1KbYg++q1A5KdFNCRl/demkB2qXC6iya7z ThQFwqRmMtNYpJFF19LINQr7dKwTowby7tGHoObgaGo2 -----END CERTIFICATE-----Generated at Sun Jan 18 06:36:46 2026 by rpki-client