This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0KlRF5Z8fZ6BT7d9gdSbJQukOMI.roa File: 0KlRF5Z8fZ6BT7d9gdSbJQukOMI.roa (raw, json) Hash identifier: Ka9b+de+mSpKgWwAQ914dJ9VVclTC4fktU/7Sks39ig= Subject key identifier: D0:A9:51:17:96:7C:7D:9E:81:4F:B7:7D:81:D4:9B:25:0B:A4:38:C2 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EABE4AEF4CFAF733458A41B7CE7941 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0KlRF5Z8fZ6BT7d9gdSbJQukOMI.roa Signing time: Thu 01 Jan 2026 00:17:34 +0000 ROA not before: Thu 01 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48925 IP address blocks: 45.8.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:be:4a:ef:4c:fa:f7:33:45:8a:41:b7:ce:79:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0a95117967c7d9e814fb77d81d49b250ba438c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:5d:c2:35:7c:44:c5:d2:1e:ee:c1:5e:e0: 97:e1:c8:c8:f1:c9:b2:bb:75:e6:5a:f1:02:95:b4: f0:a5:6c:d5:e9:91:65:c0:36:ae:0e:f0:fb:97:df: 6d:c7:58:8c:cf:6a:24:ad:5c:0d:db:a1:58:19:32: 8b:eb:43:ec:5b:85:55:c5:5f:14:0f:1c:bd:32:d4: 75:d8:5d:13:df:c4:5b:84:4e:88:8d:ba:2f:da:d9: 8a:52:51:de:8b:47:f2:84:60:60:4b:16:2b:1b:dd: 24:a3:87:cb:0c:75:e1:dd:10:e8:20:70:62:ed:b2: 76:a4:a8:33:4b:c0:e2:1c:d3:c6:93:3d:19:07:4c: 50:9a:67:12:15:e4:cc:25:1b:4f:86:a0:f3:64:8b: 59:c1:72:e3:9d:81:17:84:b4:5a:b9:97:ae:13:20: f2:b3:76:52:67:81:cf:89:68:43:ec:55:c0:75:fb: 8f:c6:73:7b:84:e1:25:ec:77:c8:ea:e3:24:03:85: 6e:10:3c:76:68:d2:71:f4:82:22:7b:c1:5f:30:bc: 57:d6:5b:66:ed:6c:be:38:ef:b7:43:fd:d6:85:2b: 42:14:82:f0:c0:28:ef:2d:47:a9:8a:4d:91:ee:a4: f2:4e:6e:92:27:3e:16:0f:9b:7d:ca:bb:bb:db:87: fd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A9:51:17:96:7C:7D:9E:81:4F:B7:7D:81:D4:9B:25:0B:A4:38:C2 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0KlRF5Z8fZ6BT7d9gdSbJQukOMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.187.0/24 Signature Algorithm: sha256WithRSAEncryption af:27:6f:89:a6:69:b0:b7:50:ca:34:e1:2f:9e:ed:64:1b:fe: b0:e4:73:23:ed:a3:c4:b0:b1:f2:01:46:15:d4:a4:6e:35:2d: 5e:de:80:ee:6e:53:65:eb:e1:89:7a:71:31:e3:43:37:83:9b: 28:7b:cd:8f:4a:2e:61:c9:73:b7:93:ee:5c:e5:84:f6:64:ad: 02:95:3b:73:7e:78:26:92:11:c7:fc:da:71:4a:c2:e8:5b:e0: 55:02:be:c4:88:95:95:d8:61:35:d6:e9:16:39:11:d4:05:bf: 84:8c:97:1f:5c:a4:55:26:1b:02:7e:b9:44:c2:70:c8:a4:28: 96:01:ff:84:eb:3c:aa:91:7d:29:60:f2:6a:c5:40:ef:8f:36: ef:26:b5:b0:56:a2:01:bc:7f:e5:a3:ed:f6:b1:ed:fd:42:c2: 01:a7:95:a0:85:84:0d:3e:60:66:d5:c9:e6:00:ea:5e:de:e4: d3:28:3f:64:09:c4:48:a8:2f:75:e9:60:81:53:ba:d4:33:9e: c2:7b:a6:63:05:60:8d:9f:b0:5a:d2:57:c8:ea:18:f3:36:bd: 2f:7c:bf:a8:e7:c4:c7:07:65:0a:81:e8:e9:92:0a:3d:a4:ca: 6a:6e:a7:9a:16:b9:56:ba:0d:69:fd:e3:46:e1:cc:de:bf:f5: c2:42:25:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26r5K70z69zNFikG3znlBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGE5NTExNzk2N2M3ZDllODE0ZmI3N2Q4MWQ0OWIyNTBiYTQzOGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpFdwjV8RMXSHu7BXuCX4cjI8cmy u3XmWvEClbTwpWzV6ZFlwDauDvD7l99tx1iMz2okrVwN26FYGTKL60PsW4VVxV8U Dxy9MtR12F0T38RbhE6Ijbov2tmKUlHei0fyhGBgSxYrG90ko4fLDHXh3RDoIHBi 7bJ2pKgzS8DiHNPGkz0ZB0xQmmcSFeTMJRtPhqDzZItZwXLjnYEXhLRauZeuEyDy s3ZSZ4HPiWhD7FXAdfuPxnN7hOEl7HfI6uMkA4VuEDx2aNJx9IIie8FfMLxX1ltm 7Wy+OO+3Q/3WhStCFILwwCjvLUepik2R7qTyTm6SJz4WD5t9yru724f90wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNCpUReWfH2egU+3fYHUmyULpDjCMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvMEtsUkY1WjhmWjZCVDdkOWdkU2JKUXVrT01JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQi7MA0G CSqGSIb3DQEBCwUAA4IBAQCvJ2+Jpmmwt1DKNOEvnu1kG/6w5HMj7aPEsLHyAUYV 1KRuNS1e3oDublNl6+GJenEx40M3g5soe82PSi5hyXO3k+5c5YT2ZK0ClTtzfngm khHH/NpxSsLoW+BVAr7EiJWV2GE11ukWORHUBb+EjJcfXKRVJhsCfrlEwnDIpCiW Af+E6zyqkX0pYPJqxUDvjzbvJrWwVqIBvH/lo+32se39QsIBp5WghYQNPmBm1cnm AOpe3uTTKD9kCcRIqC916WCBU7rUM57Ce6ZjBWCNn7Ba0lfI6hjzNr0vfL+o58TH B2UKgejpkgo9pMpqbqeaFrlWug1p/eNG4czev/XCQiV2 -----END CERTIFICATE-----Generated at Mon Jan 19 18:01:34 2026 by rpki-client