This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/ovfxiPaVz0-xay5q5Zj6zS69Ic8.roa File: ovfxiPaVz0-xay5q5Zj6zS69Ic8.roa (raw, json) Hash identifier: W4GWKNzxx0OFecL5XCcFwfyUup5/r9meKHE/Pk1WXCc= Subject key identifier: A2:F7:F1:88:F6:95:CF:4F:B1:6B:2E:6A:E5:98:FA:CD:2E:BD:21:CF Certificate issuer: /CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334 Certificate serial: 019B77C68FD2DE3E33328823D3B0102939F8 Authority key identifier: D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/ovfxiPaVz0-xay5q5Zj6zS69Ic8.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34959 IP address blocks: 45.139.24.0/22 maxlen: 22 194.55.234.0/23 maxlen: 23 194.55.244.0/23 maxlen: 23 2a0f:1140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8f:d2:de:3e:33:32:88:23:d3:b0:10:29:39:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334 Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2f7f188f695cf4fb16b2e6ae598facd2ebd21cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b9:97:9a:2f:27:43:da:3d:a5:14:d9:ea:25: 6a:23:74:ab:f9:11:e3:ab:8a:29:8e:9a:7a:21:0d: cd:67:28:12:8e:f7:34:ab:fe:60:6f:96:2a:eb:0c: b5:7d:1d:1b:b1:06:10:2f:4b:e2:20:cb:ea:02:93: c3:98:38:b7:ff:6f:12:f5:4b:66:d2:9b:69:10:a8: d1:0c:39:9d:76:56:7c:49:e2:14:b6:4b:5c:7e:c4: 01:e4:8d:0b:29:fb:7a:f9:be:dd:5f:41:ad:00:5b: 5a:e4:69:53:7d:ab:57:9b:02:74:98:a3:80:ed:9f: 39:4f:d4:5a:7d:f3:a3:6c:d6:f0:66:eb:4d:c6:1f: 4d:9b:0e:7e:5a:ab:12:88:ca:33:b7:45:c7:90:28: 0a:7f:6b:ba:ac:ce:15:5d:b1:a7:36:6a:b5:70:31: 8c:76:db:a6:7d:1f:5e:53:a0:19:98:e1:b0:db:f0: 53:2a:f6:58:51:11:51:3a:7c:48:9e:5f:a8:70:85: 7f:49:cd:fb:c9:77:06:dd:2d:12:01:aa:33:fe:5b: bb:88:b5:9e:17:52:bd:cf:d4:c4:8d:69:46:f8:14: b1:8d:99:6a:e9:58:2f:09:90:84:e3:a1:d8:49:a9: e9:62:6a:fe:36:c6:d2:ff:25:45:16:5a:13:39:3a: 9d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F7:F1:88:F6:95:CF:4F:B1:6B:2E:6A:E5:98:FA:CD:2E:BD:21:CF X509v3 Authority Key Identifier: keyid:D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/ovfxiPaVz0-xay5q5Zj6zS69Ic8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.24.0/22 194.55.234.0/23 194.55.244.0/23 IPv6: 2a0f:1140::/32 Signature Algorithm: sha256WithRSAEncryption 13:d2:3e:f4:6d:9a:2b:b4:92:42:ba:19:5d:9a:f4:60:97:19: 01:5d:99:be:9d:86:f9:47:28:6a:17:37:bb:08:26:41:c5:d4: b4:52:87:3a:8b:2b:54:5c:dd:74:f2:20:db:9e:b0:29:c8:a5: eb:54:ac:74:bb:f4:5c:8f:68:68:09:38:f8:77:d8:0b:0c:5b: 97:dd:72:84:78:ac:b2:22:83:2e:5c:da:c5:6f:31:dd:91:94: 4c:18:b1:90:c1:e3:ce:4a:fd:34:24:43:4f:d6:40:27:f4:ae: 66:c3:b8:cf:64:ca:ca:5b:14:15:15:f8:57:2b:a3:5c:e2:1b: 3c:4e:7a:b9:aa:d2:76:ea:f4:33:7f:e8:bf:42:44:2e:0c:4b: 75:49:ef:09:1c:db:9e:19:5b:b8:45:85:c7:2d:85:0f:c6:fa: 0d:27:30:ea:79:9c:df:b5:92:8c:07:a3:5e:5e:5c:e7:c0:85: 51:05:e3:20:8a:26:b4:4b:e2:f2:c0:52:44:1b:58:e8:39:79: 5b:76:53:d6:f1:a5:da:db:6e:70:cf:5a:e4:21:fa:01:17:fe: 47:53:ff:58:a0:2b:3e:7c:84:fa:0d:af:2f:c3:a6:ef:0b:c9: 5e:00:0e:c0:ab:6d:19:dc:1a:60:08:84:a2:e0:0c:f0:e9:13: 15:97:75:78 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3xo/S3j4zMogj07AQKTn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZmI0NTJhMGFlMzNkZmE1MmFhYWFjYmE3OTRkZjFhZjZi YzQzMzQwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmY3ZjE4OGY2OTVjZjRmYjE2YjJlNmFlNTk4ZmFjZDJlYmQyMWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbmXmi8nQ9o9pRTZ6iVqI3Sr+RHj q4opjpp6IQ3NZygSjvc0q/5gb5Yq6wy1fR0bsQYQL0viIMvqApPDmDi3/28S9Utm 0ptpEKjRDDmddlZ8SeIUtktcfsQB5I0LKft6+b7dX0GtAFta5GlTfatXmwJ0mKOA 7Z85T9RaffOjbNbwZutNxh9Nmw5+WqsSiMozt0XHkCgKf2u6rM4VXbGnNmq1cDGM dtumfR9eU6AZmOGw2/BTKvZYURFROnxInl+ocIV/Sc37yXcG3S0SAaoz/lu7iLWe F1K9z9TEjWlG+BSxjZlq6VgvCZCE46HYSanpYmr+NsbS/yVFFloTOTqd1QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKL38Yj2lc9PsWsuauWY+s0uvSHPMB8GA1UdIwQY MBaAFNb7RSoK4z36Uqqqy6eU3xr2vEM0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZ0RktncmpQZnBTcXFyTHA1VGZHdmE4UXpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYmRkN2UtYTcyOS00OWFkLTg1YWEt Zjc1OTYyZDMwZTM2LzEvb3ZmeGlQYVZ6MC14YXk1cTVaajZ6UzY5SWM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8zYmRkN2UtYTcyOS00OWFkLTg1YWEtZjc1OTYyZDMwZTM2 LzEvMXZ0RktncmpQZnBTcXFyTHA1VGZHdmE4UXpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLYsYAwQB wjfqAwQBwjf0MA0EAgACMAcDBQAqDxFAMA0GCSqGSIb3DQEBCwUAA4IBAQAT0j70 bZortJJCuhldmvRglxkBXZm+nYb5RyhqFze7CCZBxdS0Uoc6iytUXN108iDbnrAp yKXrVKx0u/Rcj2hoCTj4d9gLDFuX3XKEeKyyIoMuXNrFbzHdkZRMGLGQwePOSv00 JENP1kAn9K5mw7jPZMrKWxQVFfhXK6Nc4hs8Tnq5qtJ26vQzf+i/QkQuDEt1Se8J HNueGVu4RYXHLYUPxvoNJzDqeZzftZKMB6NeXlznwIVRBeMgiia0S+LywFJEG1jo OXlbdlPW8aXa225wz1rkIfoBF/5HU/9YoCs+fIT6Da8vw6bvC8leAA7Aq20Z3Bpg CISi4Azw6RMVl3V4 -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:55 2026 by rpki-client