This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Oi68t9ke4px9ULNvzi_7z0KNBRc.roa File: Oi68t9ke4px9ULNvzi_7z0KNBRc.roa (raw, json) Hash identifier: eR8neMzAZebR3JOUAkE/cmsXgqCsYEHJqOkuTpGrJ2g= Subject key identifier: 3A:2E:BC:B7:D9:1E:E2:9C:7D:50:B3:6F:CE:2F:FB:CF:42:8D:05:17 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA556700C4ADB41FFC63B2AAFD7405A Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Oi68t9ke4px9ULNvzi_7z0KNBRc.roa Signing time: Thu 01 Jan 2026 22:19:51 +0000 ROA not before: Thu 01 Jan 2026 22:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 45.128.199.0/24 maxlen: 24 45.146.55.0/24 maxlen: 24 45.159.246.0/24 maxlen: 24 194.5.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:56:70:0c:4a:db:41:ff:c6:3b:2a:af:d7:40:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a2ebcb7d91ee29c7d50b36fce2ffbcf428d0517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:dc:b1:04:b9:da:3b:e3:7d:36:22:64:dd: 65:d1:f3:23:83:64:fc:af:bc:69:43:7e:21:a2:ec: a5:12:ea:7f:9c:cb:f7:5d:2a:da:f7:53:64:8c:4b: 1f:31:b8:57:81:3a:ea:cb:f2:43:41:18:01:ce:61: e8:14:d3:da:c7:cf:80:d6:aa:3f:0e:e3:27:33:23: e2:44:33:57:82:d3:ea:b8:88:87:62:fa:da:24:c8: de:94:a7:7c:b7:3f:b4:16:0d:fa:1f:62:01:75:75: 44:bd:8b:c1:4e:c3:10:e1:d3:4c:71:46:4f:c2:45: e4:67:e7:e3:42:46:df:61:97:65:7b:3f:69:c2:66: bb:2a:58:c9:34:1f:58:3b:54:e3:23:d5:31:54:c7: 44:e0:ae:c6:e3:89:cc:fe:a1:3c:05:9b:3d:a2:86: 27:80:42:cc:30:0d:a2:a1:7a:f6:28:e7:2b:2a:ee: 7f:36:d0:52:2f:7a:33:a1:b3:f5:bc:ec:b5:a3:2c: 39:eb:38:97:24:0c:b0:3a:dc:e1:50:39:72:92:b7: 71:5c:ab:5e:21:d4:3b:71:11:8b:76:20:81:19:f4: 92:f9:b1:4f:b0:90:3d:37:34:1b:16:25:52:ad:9a: 8e:8d:23:66:d7:e8:92:51:ee:ab:07:c1:5a:e2:30: 79:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2E:BC:B7:D9:1E:E2:9C:7D:50:B3:6F:CE:2F:FB:CF:42:8D:05:17 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Oi68t9ke4px9ULNvzi_7z0KNBRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.199.0/24 45.146.55.0/24 45.159.246.0/24 194.5.52.0/24 Signature Algorithm: sha256WithRSAEncryption 29:d8:d6:f0:43:fc:9f:7b:5e:49:49:c7:c0:69:f6:ef:02:6b: 6d:9a:a2:d5:36:ad:2f:dc:27:dd:e4:f1:79:70:b1:00:b6:2e: 56:3d:47:4c:07:43:fc:e0:d1:e4:50:a4:70:42:7d:3b:d4:93: a1:57:96:59:67:18:9a:be:9b:ee:e4:f1:90:fd:1e:f2:78:f2: b1:14:01:6a:68:9b:c8:a4:74:b1:f3:b2:bf:2d:27:06:2f:19: 5a:4f:79:37:35:1d:f9:af:8d:58:b4:f3:47:d4:2a:e2:cd:a7: a7:7a:68:a6:a1:62:84:80:b5:dc:94:2b:ee:11:50:cb:f1:76: 09:f3:79:15:ae:04:7e:81:26:e4:a4:df:2c:72:e0:47:07:e5: 6b:11:f6:86:f8:e0:03:86:5d:c1:b3:1b:ab:90:4c:3d:18:ce: 2e:ef:59:fe:c9:cd:43:20:dc:9c:e5:45:ff:b6:8b:0c:0a:01: 12:c5:a9:55:0e:e8:5a:fa:a8:c6:fe:dc:6c:16:09:2f:ab:dd: 99:5c:86:0f:dc:6d:a5:75:fe:ba:42:d5:d8:88:38:bb:70:93: 40:5d:a9:94:c9:7a:b1:d6:eb:d1:d7:42:2c:e6:99:c0:fb:e4: ed:d5:7d:fa:47:7b:b8:c2:b3:21:55:ea:7e:87:f3:c5:eb:59: 22:56:6d:8c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7pVZwDErbQf/GOyqv10BaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTJlYmNiN2Q5MWVlMjljN2Q1MGIzNmZjZTJmZmJjZjQyOGQwNTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRjcsQS52jvjfTYiZN1l0fMjg2T8 r7xpQ34houylEup/nMv3XSra91NkjEsfMbhXgTrqy/JDQRgBzmHoFNPax8+A1qo/ DuMnMyPiRDNXgtPquIiHYvraJMjelKd8tz+0Fg36H2IBdXVEvYvBTsMQ4dNMcUZP wkXkZ+fjQkbfYZdlez9pwma7KljJNB9YO1TjI9UxVMdE4K7G44nM/qE8BZs9ooYn gELMMA2ioXr2KOcrKu5/NtBSL3ozobP1vOy1oyw56ziXJAywOtzhUDlykrdxXKte IdQ7cRGLdiCBGfSS+bFPsJA9NzQbFiVSrZqOjSNm1+iSUe6rB8Fa4jB5XwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDouvLfZHuKcfVCzb84v+89CjQUXMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvT2k2OHQ5a2U0cHg5VUxOdnppXzd6MEtOQlJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYDHAwQA LZI3AwQALZ/2AwQAwgU0MA0GCSqGSIb3DQEBCwUAA4IBAQAp2NbwQ/yfe15JScfA afbvAmttmqLVNq0v3Cfd5PF5cLEAti5WPUdMB0P84NHkUKRwQn071JOhV5ZZZxia vpvu5PGQ/R7yePKxFAFqaJvIpHSx87K/LScGLxlaT3k3NR35r41YtPNH1Crizaen emimoWKEgLXclCvuEVDL8XYJ83kVrgR+gSbkpN8scuBHB+VrEfaG+OADhl3Bsxur kEw9GM4u71n+yc1DINyc5UX/tosMCgESxalVDuha+qjG/txsFgkvq92ZXIYP3G2l df66QtXYiDi7cJNAXamUyXqx1uvR10Is5pnA++Tt1X36R3u4wrMhVep+h/PF61ki Vm2M -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:49 2026 by rpki-client