This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/GOmV_75Dv1jwn9wiVioc2BSPZTo.roa File: GOmV_75Dv1jwn9wiVioc2BSPZTo.roa (raw, json) Hash identifier: pRTwblvRoqzlcA6ZsWJlwN1cr9uhPXOkl31rFqoTMf8= Subject key identifier: 18:E9:95:FF:BE:43:BF:58:F0:9F:DC:22:56:2A:1C:D8:14:8F:65:3A Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 019B7B36AC1E0468531134AA4D0D3985A6AF Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/GOmV_75Dv1jwn9wiVioc2BSPZTo.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 45.134.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ac:1e:04:68:53:11:34:aa:4d:0d:39:85:a6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18e995ffbe43bf58f09fdc22562a1cd8148f653a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:da:d4:f7:ea:d1:7f:7d:1d:61:9b:ea:8d: 84:81:a0:c2:60:44:b2:3c:1c:5e:7a:7c:5c:da:7b: 96:38:bf:07:15:27:2e:52:84:a9:f2:4d:7b:da:c0: 6a:92:52:ea:cd:94:75:5f:21:12:3d:c8:f1:92:ec: ef:19:c5:10:73:c9:0d:34:4d:25:b0:51:29:c2:31: d3:b6:f8:6c:6a:6d:f7:b2:61:5f:ba:c2:7c:dc:ab: e1:cf:3f:dc:f9:20:28:43:5b:a2:81:b7:63:cb:89: 0e:e5:34:d4:6b:50:b7:cb:5b:e5:c6:d8:b6:a9:51: 7f:e0:b7:8e:08:2a:4f:84:45:54:f6:9f:3c:1f:02: f1:21:d9:a1:9d:24:06:f5:de:3e:70:69:e0:e4:4e: ba:65:70:8a:f9:bd:8f:d8:1f:a3:ae:40:09:a5:4e: dc:57:04:85:5d:18:39:49:00:83:a1:63:fd:c6:6a: b9:a2:41:66:47:84:5c:ea:6d:14:49:d4:d3:1d:66: ec:50:b7:85:bd:cf:5f:fe:f5:96:9e:0f:68:3e:20: 70:73:15:c0:cc:11:12:ef:5c:19:f7:3a:96:aa:bb: b5:ac:79:14:61:12:43:1a:a2:b1:11:cb:7a:7c:5d: ba:da:62:5c:3c:dd:54:c9:8e:0b:e9:9f:fd:8d:a6: 62:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E9:95:FF:BE:43:BF:58:F0:9F:DC:22:56:2A:1C:D8:14:8F:65:3A X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/GOmV_75Dv1jwn9wiVioc2BSPZTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.75.0/24 Signature Algorithm: sha256WithRSAEncryption 59:6f:f7:5f:76:63:41:84:c6:f3:43:37:b5:04:38:fa:0c:2b: 4f:3f:90:24:2a:cb:c8:02:0b:d2:93:f7:91:51:45:30:cb:15: 53:83:6f:d4:62:04:97:a1:f3:85:a8:db:96:94:dc:76:72:ec: 78:35:2c:54:dd:0c:ad:c3:af:47:ef:b4:78:da:4e:d0:8f:64: 07:9a:45:59:31:00:34:c0:31:7b:1b:e7:1b:82:73:09:59:eb: 11:21:4b:c5:34:39:11:58:cc:7a:0d:13:56:16:78:c8:51:55: 6d:e3:02:2e:b7:30:df:6c:32:91:67:45:c6:30:0a:ee:62:b6: a4:7f:93:dc:7b:c6:f1:75:43:ab:a8:3f:d6:7c:d4:8d:5a:51: 90:c8:6d:42:c4:f2:dc:76:96:1a:7e:8b:b9:41:38:4f:5e:d7: 42:fb:2c:32:55:cf:28:0c:97:d1:9a:73:56:44:dc:b6:7f:00: dc:76:da:76:db:af:48:30:04:53:f9:26:d7:4b:db:4d:7a:a9: bb:b1:e9:aa:65:0d:fb:e2:b1:3d:8c:96:3b:af:f5:83:48:f4: f8:95:4b:48:d6:5c:57:78:46:a4:1e:df:83:98:19:7d:03:e2: 3e:74:42:65:72:75:48:d6:45:e2:10:02:47:a6:9e:bf:9b:94: 62:79:a8:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NqweBGhTETSqTQ05haavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGU5OTVmZmJlNDNiZjU4ZjA5ZmRjMjI1NjJhMWNkODE0OGY2NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf3a1Pfq0X99HWGb6o2EgaDCYESy PBxeenxc2nuWOL8HFScuUoSp8k172sBqklLqzZR1XyESPcjxkuzvGcUQc8kNNE0l sFEpwjHTtvhsam33smFfusJ83Kvhzz/c+SAoQ1uigbdjy4kO5TTUa1C3y1vlxti2 qVF/4LeOCCpPhEVU9p88HwLxIdmhnSQG9d4+cGng5E66ZXCK+b2P2B+jrkAJpU7c VwSFXRg5SQCDoWP9xmq5okFmR4Rc6m0USdTTHWbsULeFvc9f/vWWng9oPiBwcxXA zBES71wZ9zqWqru1rHkUYRJDGqKxEct6fF262mJcPN1UyY4L6Z/9jaZiDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBjplf++Q79Y8J/cIlYqHNgUj2U6MB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvR09tVl83NUR2MWp3bjl3aVZpb2MyQlNQWlRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYZLMA0G CSqGSIb3DQEBCwUAA4IBAQBZb/dfdmNBhMbzQze1BDj6DCtPP5AkKsvIAgvSk/eR UUUwyxVTg2/UYgSXofOFqNuWlNx2cux4NSxU3Qytw69H77R42k7Qj2QHmkVZMQA0 wDF7G+cbgnMJWesRIUvFNDkRWMx6DRNWFnjIUVVt4wIutzDfbDKRZ0XGMAruYrak f5Pce8bxdUOrqD/WfNSNWlGQyG1CxPLcdpYafou5QThPXtdC+ywyVc8oDJfRmnNW RNy2fwDcdtp2269IMART+SbXS9tNeqm7semqZQ374rE9jJY7r/WDSPT4lUtI1lxX eEakHt+DmBl9A+I+dEJlcnVI1kXiEAJHpp6/m5RieagH -----END CERTIFICATE-----Generated at Fri Jan 2 19:22:54 2026 by rpki-client