This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/OW2i0Vv3eqlIhzi4Ce-giYKAHvo.roa File: OW2i0Vv3eqlIhzi4Ce-giYKAHvo.roa (raw, json) Hash identifier: 2ZqSdW69STHjs36+tEpGmZ3SaSTt9SUQC7OzgPN8IYo= Subject key identifier: 39:6D:A2:D1:5B:F7:7A:A9:48:87:38:B8:09:EF:A0:89:82:80:1E:FA Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019B7C135EB5086AD356C0A4434A970942B9 Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/OW2i0Vv3eqlIhzi4Ce-giYKAHvo.roa Signing time: Fri 02 Jan 2026 00:20:02 +0000 ROA not before: Fri 02 Jan 2026 00:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197731 IP address blocks: 45.91.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5e:b5:08:6a:d3:56:c0:a4:43:4a:97:09:42:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=396da2d15bf77aa9488738b809efa08982801efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:67:c3:c1:34:37:f3:10:b1:d0:7e:24:01: 85:5c:86:f1:09:ee:94:20:99:d2:38:22:67:9d:24: 8a:51:11:60:a4:44:db:9b:c5:dd:cd:b2:c7:14:3d: 75:76:ad:55:b2:31:f6:44:d0:11:13:dd:50:af:63: 1f:95:a8:fc:98:c3:2f:bf:fc:85:f3:5d:93:4d:35: 16:3a:82:cf:08:5e:cf:8c:79:ec:e9:7a:e9:ec:cc: 61:da:90:55:b3:55:46:7a:39:5e:12:a2:59:dc:10: 5a:a2:d8:40:ca:2f:74:b3:25:2f:bb:c3:6b:a7:ba: e8:46:18:d4:8d:1f:fc:c1:14:ec:42:7e:f1:88:23: 35:35:5d:f5:74:93:37:ea:59:2c:71:ba:cb:e7:1a: 7b:66:e5:10:3b:4d:54:39:46:a9:73:5a:c0:a5:fa: f1:82:db:8c:9e:f4:ba:a1:af:10:ba:52:df:72:ac: 44:09:8f:8d:27:4b:66:ea:a8:09:4e:85:d6:3a:70: 8f:9a:f6:b2:00:2c:a5:25:14:ee:da:60:44:1f:b8: 4c:3a:3a:be:36:2b:b1:ca:1c:f2:32:1f:b1:d2:dd: db:64:79:f4:c0:10:b3:5f:90:4d:70:d2:10:31:be: 45:e1:0d:14:c0:93:e5:02:74:9e:8c:fa:90:1e:55: da:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6D:A2:D1:5B:F7:7A:A9:48:87:38:B8:09:EF:A0:89:82:80:1E:FA X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/OW2i0Vv3eqlIhzi4Ce-giYKAHvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.118.0/23 Signature Algorithm: sha256WithRSAEncryption 40:94:fc:96:77:7b:35:0a:a7:46:32:84:51:fc:db:88:5e:8d: 72:b9:dd:5d:de:e3:72:85:07:8f:a4:b5:c2:aa:89:f8:30:b8: a2:9b:fb:a8:b5:f9:01:70:46:db:3b:0e:35:66:a2:42:53:71: 39:f3:db:da:12:80:9d:9f:27:80:7e:dd:74:1c:7e:03:69:0e: dd:5f:98:1a:18:8e:65:4c:a4:e2:3e:68:99:cf:e0:ea:a8:6f: c1:80:b4:54:3b:76:7d:10:4e:c1:3d:46:73:cf:cd:b0:8d:c5: da:74:e8:7e:c7:d5:81:b0:24:59:50:45:56:72:81:a7:43:e9: 61:85:74:bc:1a:95:82:64:02:88:21:9f:bb:00:9c:f0:a4:d0: 39:23:bb:d0:08:c0:af:d6:bc:95:e5:31:43:fb:8d:88:14:8b: 1b:d1:69:aa:f8:b2:9c:d9:39:df:37:8c:9a:33:63:b4:9c:c9: 35:53:91:9a:55:e0:dd:95:74:9b:a0:ce:f0:56:0e:a2:3e:3f: 71:19:0c:ec:17:b1:ac:1d:ad:e1:60:9e:73:41:51:57:6a:cf: 1b:b7:ef:eb:1d:42:60:ec:c6:15:07:6d:df:08:ae:1e:5a:a8: e3:4e:48:57:64:2a:c4:2c:cb:8f:4c:10:3b:53:b8:84:9f:34: 13:70:78:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E161CGrTVsCkQ0qXCUK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTZkYTJkMTViZjc3YWE5NDg4NzM4YjgwOWVmYTA4OTgyODAxZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tJnw8E0N/MQsdB+JAGFXIbxCe6U IJnSOCJnnSSKURFgpETbm8XdzbLHFD11dq1VsjH2RNARE91Qr2Mflaj8mMMvv/yF 812TTTUWOoLPCF7PjHns6Xrp7Mxh2pBVs1VGejleEqJZ3BBaothAyi90syUvu8Nr p7roRhjUjR/8wRTsQn7xiCM1NV31dJM36lkscbrL5xp7ZuUQO01UOUapc1rApfrx gtuMnvS6oa8QulLfcqxECY+NJ0tm6qgJToXWOnCPmvayACylJRTu2mBEH7hMOjq+ NiuxyhzyMh+x0t3bZHn0wBCzX5BNcNIQMb5F4Q0UwJPlAnSejPqQHlXa6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDltotFb93qpSIc4uAnvoImCgB76MB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvT1cyaTBWdjNlcWxJaHppNENlLWdpWUtBSHZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVt2MA0G CSqGSIb3DQEBCwUAA4IBAQBAlPyWd3s1CqdGMoRR/NuIXo1yud1d3uNyhQePpLXC qon4MLiim/uotfkBcEbbOw41ZqJCU3E589vaEoCdnyeAft10HH4DaQ7dX5gaGI5l TKTiPmiZz+DqqG/BgLRUO3Z9EE7BPUZzz82wjcXadOh+x9WBsCRZUEVWcoGnQ+lh hXS8GpWCZAKIIZ+7AJzwpNA5I7vQCMCv1ryV5TFD+42IFIsb0Wmq+LKc2TnfN4ya M2O0nMk1U5GaVeDdlXSboM7wVg6iPj9xGQzsF7GsHa3hYJ5zQVFXas8bt+/rHUJg 7MYVB23fCK4eWqjjTkhXZCrELMuPTBA7U7iEnzQTcHj7 -----END CERTIFICATE-----Generated at Tue Jan 27 00:05:30 2026 by rpki-client