This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_o2dnU-5BQpraWq8gcut2eytE3U.roa File: _o2dnU-5BQpraWq8gcut2eytE3U.roa (raw, json) Hash identifier: 0AI8UrNRs2DQPxfAixSJomrWfgJCSQS5+7Z/3pE0bcE= Subject key identifier: FE:8D:9D:9D:4F:B9:05:0A:6B:69:6A:BC:81:CB:AD:D9:EC:AD:13:75 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DE95E2787EFA17B5D53EB45C9EBAE Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_o2dnU-5BQpraWq8gcut2eytE3U.roa Signing time: Thu 01 Jan 2026 12:17:33 +0000 ROA not before: Thu 01 Jan 2026 12:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41798 IP address blocks: 45.144.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e9:5e:27:87:ef:a1:7b:5d:53:eb:45:c9:eb:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe8d9d9d4fb9050a6b696abc81cbadd9ecad1375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a6:70:61:64:47:e7:24:23:2d:a0:ae:43:a3: 40:35:d7:e9:bc:20:95:6f:63:b4:4c:3c:0d:82:12: fb:c4:ea:01:39:2c:bb:d6:d9:ba:c2:84:7e:9d:25: 66:7e:5c:69:64:43:e8:8f:53:b3:7e:0f:62:40:b1: e9:df:23:aa:42:15:5c:14:5b:e9:d2:80:60:fc:60: 5b:19:75:6d:4f:76:e6:35:05:66:7f:6d:4a:0c:9e: 2e:72:41:a1:66:22:c9:65:9d:1a:d4:2f:56:36:75: 31:2d:94:64:5f:59:ca:d8:46:f5:55:87:7b:5b:e0: 1b:6a:2d:57:b3:d4:7b:85:29:cc:0f:70:d5:dc:99: 00:8e:8d:fd:cc:4c:6b:34:bd:1d:52:24:8f:38:8d: ba:da:21:d3:bb:7f:c3:01:21:d7:b8:c9:5c:09:c4: 80:23:f6:8b:bc:1f:dc:c9:7a:62:f2:98:99:26:44: 81:1b:f4:8a:64:33:14:4b:63:19:b2:1a:ee:3e:6e: a0:3d:27:04:ad:da:3f:6c:34:cf:4d:89:48:3b:6b: f3:8c:9f:6b:db:e6:a5:8c:15:54:57:f9:4f:b6:41: 3a:3a:35:51:41:11:f0:b8:2d:a5:a4:39:e1:31:45: dc:28:20:99:27:3d:d2:61:fc:d0:21:ef:f9:eb:f1: 4e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8D:9D:9D:4F:B9:05:0A:6B:69:6A:BC:81:CB:AD:D9:EC:AD:13:75 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_o2dnU-5BQpraWq8gcut2eytE3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.175.0/24 Signature Algorithm: sha256WithRSAEncryption 16:8d:ac:fa:5c:cf:b4:af:ce:7a:b7:9a:15:31:f3:c0:d4:bc: 72:7b:49:49:bb:97:94:1d:15:b5:de:35:e4:22:e6:7c:18:c5: ac:7c:79:21:20:04:cc:86:d8:19:75:0a:a3:54:76:d7:b6:9a: 11:72:12:0c:30:33:7a:86:94:41:74:b5:d3:5f:69:5e:f3:17: 8f:0e:6c:d8:4c:59:98:8f:94:69:23:ae:ff:90:c4:ca:40:4f: 01:19:c2:0e:7c:4f:c4:eb:77:bb:48:ef:fc:d1:1c:10:38:b6: 5e:e0:ae:55:50:4c:11:20:01:7c:00:bd:14:15:00:1f:77:ac: 58:52:0d:ff:79:6e:2b:27:d5:58:b8:d3:5f:c3:53:ac:ff:28: 8d:17:4e:8d:0c:b3:7c:98:94:0f:0d:d1:bb:d0:68:4e:a4:38: d4:91:b9:bb:74:15:81:d6:6c:a9:df:84:b8:dd:17:fd:95:0a: dd:bc:74:77:0f:ce:d0:8e:de:42:e7:0b:7f:a0:dd:12:81:5e: b8:ff:df:03:5a:d8:f8:59:cf:3f:fa:a7:fb:1f:17:db:e5:e0: 7f:58:40:94:df:43:ae:e2:2a:47:d2:1a:53:23:7d:7e:b8:9f: d6:c3:c8:5c:da:c5:21:75:bd:4c:82:7e:44:af:80:7a:58:db: 3b:30:24:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5feleJ4fvoXtdU+tFyeuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZThkOWQ5ZDRmYjkwNTBhNmI2OTZhYmM4MWNiYWRkOWVjYWQxMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqZwYWRH5yQjLaCuQ6NANdfpvCCV b2O0TDwNghL7xOoBOSy71tm6woR+nSVmflxpZEPoj1Ozfg9iQLHp3yOqQhVcFFvp 0oBg/GBbGXVtT3bmNQVmf21KDJ4uckGhZiLJZZ0a1C9WNnUxLZRkX1nK2Eb1VYd7 W+Abai1Xs9R7hSnMD3DV3JkAjo39zExrNL0dUiSPOI262iHTu3/DASHXuMlcCcSA I/aLvB/cyXpi8piZJkSBG/SKZDMUS2MZshruPm6gPScErdo/bDTPTYlIO2vzjJ9r 2+aljBVUV/lPtkE6OjVRQRHwuC2lpDnhMUXcKCCZJz3SYfzQIe/56/FOSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP6NnZ1PuQUKa2lqvIHLrdnsrRN1MB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvX28yZG5VLTVCUXByYVdxOGdjdXQyZXl0RTNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZCvMA0G CSqGSIb3DQEBCwUAA4IBAQAWjaz6XM+0r856t5oVMfPA1Lxye0lJu5eUHRW13jXk IuZ8GMWsfHkhIATMhtgZdQqjVHbXtpoRchIMMDN6hpRBdLXTX2le8xePDmzYTFmY j5RpI67/kMTKQE8BGcIOfE/E63e7SO/80RwQOLZe4K5VUEwRIAF8AL0UFQAfd6xY Ug3/eW4rJ9VYuNNfw1Os/yiNF06NDLN8mJQPDdG70GhOpDjUkbm7dBWB1myp34S4 3Rf9lQrdvHR3D87Qjt5C5wt/oN0SgV64/98DWtj4Wc8/+qf7Hxfb5eB/WECU30Ou 4ipH0hpTI31+uJ/Ww8hc2sUhdb1Mgn5Er4B6WNs7MCTz -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:36 2026 by rpki-client