This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/o43yV46tUCettjH0kRv7oqNolP8.roa File: o43yV46tUCettjH0kRv7oqNolP8.roa (raw, json) Hash identifier: RBU44rx424a90gKy+6zTDM6bwGFn0Mmg9XsrebbEcho= Subject key identifier: A3:8D:F2:57:8E:AD:50:27:AD:B6:31:F4:91:1B:FB:A2:A3:68:94:FF Certificate issuer: /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916 Certificate serial: 019B7C11E365D378979697D38C88CB5B2E59 Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/o43yV46tUCettjH0kRv7oqNolP8.roa Signing time: Fri 02 Jan 2026 00:18:25 +0000 ROA not before: Fri 02 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213986 IP address blocks: 45.152.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:e3:65:d3:78:97:96:97:d3:8c:88:cb:5b:2e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916 Validity Not Before: Jan 2 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a38df2578ead5027adb631f4911bfba2a36894ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b3:af:3d:2b:35:12:68:e2:ad:5c:08:74:e0: 1d:76:01:e3:c8:d0:5d:a9:76:32:d7:26:9c:0c:b7: cf:03:f8:13:13:0b:d5:43:a0:23:4c:bf:e6:ed:f9: 18:f2:41:c4:64:c5:0c:db:9b:49:d9:9c:32:43:7b: 25:eb:15:1c:85:13:36:f2:06:e1:a2:39:7e:00:da: b9:b1:cf:5b:84:ab:b6:a7:9d:b5:db:7b:19:21:41: 73:a5:4f:aa:33:63:05:a4:c4:ef:b7:7e:ee:ae:9b: ad:48:56:44:ca:9b:36:18:e0:68:e9:63:0a:15:d1: 51:47:68:5b:be:cf:1c:3b:ff:d1:4e:03:76:ee:51: 84:77:d8:b5:cc:04:90:c2:cf:96:e5:7e:87:a8:5d: ee:a1:98:be:21:2d:be:01:5a:29:d3:f7:51:fe:25: ad:e2:aa:21:b4:f6:d7:11:0b:f3:15:50:36:97:f6: 8d:bd:fa:47:ee:ea:b1:a3:dc:a0:da:94:f3:f3:73: 1f:ce:f5:c8:26:e7:67:74:4a:b2:8e:4f:ff:31:59: b4:61:bf:56:97:fb:2a:d4:67:ad:53:6b:db:c5:4c: 30:7e:c9:ef:91:ac:58:27:08:63:58:0b:6c:7b:f1: a4:8a:c2:90:98:49:6d:7d:6c:4e:fb:07:08:31:e6: 75:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8D:F2:57:8E:AD:50:27:AD:B6:31:F4:91:1B:FB:A2:A3:68:94:FF X509v3 Authority Key Identifier: keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/o43yV46tUCettjH0kRv7oqNolP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.132.0/23 Signature Algorithm: sha256WithRSAEncryption 60:00:8f:cc:90:75:ce:a5:5d:e2:f9:4e:21:64:f6:f6:83:d7: 92:8b:88:10:d3:74:9a:8a:40:84:eb:e8:ca:3e:54:84:a7:03: 0d:2f:94:13:01:e0:ac:5b:a7:f5:5e:ce:4b:af:08:4e:67:d0: e0:07:eb:0e:50:12:93:e7:77:83:18:86:6d:45:43:47:44:a4: b7:31:d9:4b:94:ad:40:29:2e:88:1b:0d:0c:72:2a:d9:b4:5d: 4a:24:55:9a:e0:68:70:c6:8b:72:02:83:73:99:80:54:a7:3e: 4b:2d:fd:0e:aa:56:7b:19:02:66:6e:25:69:7d:67:1f:90:1b: f6:4b:b8:50:81:2d:04:84:ca:be:b9:e3:23:5f:af:86:a8:88: 91:e5:9c:da:97:ef:20:2f:6d:ac:47:1e:f5:65:56:66:5f:bf: e2:ee:69:b1:39:ea:77:2f:08:e3:16:a5:1e:83:7f:1d:3f:80: b9:a8:5f:3b:6c:08:3f:21:be:eb:8d:30:ff:a3:55:b5:59:c3: aa:c5:d3:a6:b5:0e:3c:45:e0:33:cc:b9:74:1f:28:c9:3e:4e: 32:88:91:4c:cb:41:9f:c0:dc:ae:26:cf:5e:cb:bb:06:ba:8c: 16:2e:d5:62:00:81:6c:33:10:c8:62:59:e2:31:5f:f4:10:cb: 68:73:3c:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EeNl03iXlpfTjIjLWy5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNmRkYjcyZTcyNjgyOThjMTcxNDU4MzEzMWJiZTRhZTRl ZjA5MTYwHhcNMjYwMTAyMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzhkZjI1NzhlYWQ1MDI3YWRiNjMxZjQ5MTFiZmJhMmEzNjg5NGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbOvPSs1EmjirVwIdOAddgHjyNBd qXYy1yacDLfPA/gTEwvVQ6AjTL/m7fkY8kHEZMUM25tJ2ZwyQ3sl6xUchRM28gbh ojl+ANq5sc9bhKu2p52123sZIUFzpU+qM2MFpMTvt37urputSFZEyps2GOBo6WMK FdFRR2hbvs8cO//RTgN27lGEd9i1zASQws+W5X6HqF3uoZi+IS2+AVop0/dR/iWt 4qohtPbXEQvzFVA2l/aNvfpH7uqxo9yg2pTz83MfzvXIJudndEqyjk//MVm0Yb9W l/sq1GetU2vbxUwwfsnvkaxYJwhjWAtse/GkisKQmEltfWxO+wcIMeZ1UQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKON8leOrVAnrbYx9JEb+6KjaJT/MB8GA1UdIwQY MBaAFGxt23LnJoKYwXFFgxMbvkrk7wkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkczYmN1Y21ncGpCY1VXREV4dS1TdVR2Q1JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZDc3NjQtMWE1OC00NWU2LWFkODMt MzJhNjA5MTJlZjQwLzEvbzQzeVY0NnRVQ2V0dGpIMGtSdjdvcU5vbFA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9kZDc3NjQtMWE1OC00NWU2LWFkODMtMzJhNjA5MTJlZjQw LzEvYkczYmN1Y21ncGpCY1VXREV4dS1TdVR2Q1JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZiEMA0G CSqGSIb3DQEBCwUAA4IBAQBgAI/MkHXOpV3i+U4hZPb2g9eSi4gQ03SaikCE6+jK PlSEpwMNL5QTAeCsW6f1Xs5LrwhOZ9DgB+sOUBKT53eDGIZtRUNHRKS3MdlLlK1A KS6IGw0McirZtF1KJFWa4GhwxotyAoNzmYBUpz5LLf0OqlZ7GQJmbiVpfWcfkBv2 S7hQgS0EhMq+ueMjX6+GqIiR5Zzal+8gL22sRx71ZVZmX7/i7mmxOep3LwjjFqUe g38dP4C5qF87bAg/Ib7rjTD/o1W1WcOqxdOmtQ48ReAzzLl0HyjJPk4yiJFMy0Gf wNyuJs9ey7sGuowWLtViAIFsMxDIYlniMV/0EMtoczwl -----END CERTIFICATE-----Generated at Tue Feb 10 01:28:24 2026 by rpki-client