This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/o45AvLtTXWpofzL1ORN3GJy42Sw.roa File: o45AvLtTXWpofzL1ORN3GJy42Sw.roa (raw, json) Hash identifier: Kb4YnS6qGzK3YXYEHAE784icfkL1K33dQHPHFIXS48c= Subject key identifier: A3:8E:40:BC:BB:53:5D:6A:68:7F:32:F5:39:13:77:18:9C:B8:D9:2C Certificate issuer: /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b Certificate serial: 019B7C80D68DE20225940E37613522B1D9AA Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/o45AvLtTXWpofzL1ORN3GJy42Sw.roa Signing time: Fri 02 Jan 2026 02:19:36 +0000 ROA not before: Fri 02 Jan 2026 02:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12453 IP address blocks: 2.56.160.0/22 maxlen: 22 91.223.248.0/24 maxlen: 24 185.31.52.0/22 maxlen: 22 185.85.32.0/22 maxlen: 22 185.155.124.0/22 maxlen: 22 185.224.24.0/22 maxlen: 22 194.32.208.0/24 maxlen: 24 194.59.177.0/24 maxlen: 24 195.93.174.0/23 maxlen: 23 2a0d:5dc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d6:8d:e2:02:25:94:0e:37:61:35:22:b1:d9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b Validity Not Before: Jan 2 02:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a38e40bcbb535d6a687f32f5391377189cb8d92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:12:ad:84:4e:4b:93:35:f2:62:83:01:38:05: b1:74:ee:d0:7b:14:dd:19:9f:db:7d:49:58:62:ec: 1f:13:6d:f8:19:85:a1:04:74:a8:5b:ab:2c:18:2f: ee:dd:77:29:cd:a2:f1:98:6a:04:07:81:2d:b3:4b: 7c:ce:e6:ed:77:3e:b6:b9:ae:59:7e:25:ce:95:f0: f7:1e:d9:13:f8:84:2d:1a:ee:64:2d:02:04:a4:6f: 91:f4:65:2b:67:d2:7b:be:cc:5e:97:d3:c6:d3:1f: 5c:0f:9d:94:96:bd:92:65:6d:ec:22:c1:9d:e5:2d: 8d:33:da:67:ba:4f:96:5f:58:e6:21:01:e5:a7:a3: 55:0d:d2:20:5d:8d:fc:ed:6a:50:8e:6a:91:c9:50: b9:5a:69:d1:62:6f:13:e5:75:dd:74:0f:06:e0:24: 90:35:15:88:bc:3e:5e:f0:18:07:5e:20:e3:79:c6: 23:13:e9:1d:41:ef:03:ba:6d:d7:71:85:63:c2:cd: c0:81:c0:c5:83:2b:0e:d4:b5:80:3b:bd:4b:91:0c: b2:f6:f4:fb:8c:2f:3f:7b:8a:f4:53:50:47:72:8c: 0d:1d:cc:3a:1a:93:da:ad:84:64:c9:97:d5:74:80: d1:63:43:eb:32:ed:cc:5b:30:9e:46:16:f2:4d:7e: aa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8E:40:BC:BB:53:5D:6A:68:7F:32:F5:39:13:77:18:9C:B8:D9:2C X509v3 Authority Key Identifier: keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/o45AvLtTXWpofzL1ORN3GJy42Sw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.160.0/22 91.223.248.0/24 185.31.52.0/22 185.85.32.0/22 185.155.124.0/22 185.224.24.0/22 194.32.208.0/24 194.59.177.0/24 195.93.174.0/23 IPv6: 2a0d:5dc0::/29 Signature Algorithm: sha256WithRSAEncryption 4f:18:95:35:95:1e:80:62:04:da:b2:20:78:fb:c7:45:36:c3: a5:25:a1:a3:f1:75:5c:af:7e:60:bf:13:17:ca:94:9e:04:17: 1a:46:dc:b6:0a:61:00:93:5c:87:ed:1d:e4:25:69:d3:6b:75: 7c:85:0f:77:ed:14:4d:5c:4c:ea:ba:a6:53:bc:c9:10:d0:d9: 8b:3b:47:f4:21:21:c1:0b:8d:3b:c5:a2:86:11:27:ca:d4:05: cb:66:2b:e9:db:8c:f9:fb:f4:b3:07:7f:fe:1c:aa:de:7f:ff: 2c:46:4c:08:64:03:4c:7e:54:f6:08:a3:ea:9b:33:bb:66:31: 81:7f:5d:6f:62:1d:1d:3b:0c:bf:b7:40:8d:a2:5f:fb:20:88: 71:5c:3c:f5:24:f6:4b:41:27:78:39:43:3c:4e:a9:f6:b0:5d: 2e:f5:34:5b:a5:8a:1f:97:3d:15:9f:5e:5b:1e:44:97:8f:1b: a0:bd:56:9d:d7:c7:f7:7c:e7:8b:33:80:f9:e3:97:a1:e9:fc: 40:9f:91:c3:83:8f:cd:83:f5:40:6c:a3:92:6c:29:e0:0f:a7: 17:7d:99:4e:39:48:de:19:8e:e9:16:52:63:b7:0a:bf:48:7d: 4e:65:a2:a4:a7:32:23:9a:14:91:25:42:3b:84:12:e1:ca:53: 45:07:cd:31 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt8gNaN4gIllA43YTUisdmqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0OTVhY2JhZmU0NmVmMmY0ZDZjNTFmY2YyM2JkNzJmNjM5 Y2ZkMGIwHhcNMjYwMTAyMDIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzhlNDBiY2JiNTM1ZDZhNjg3ZjMyZjUzOTEzNzcxODljYjhkOTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/BKthE5LkzXyYoMBOAWxdO7QexTd GZ/bfUlYYuwfE234GYWhBHSoW6ssGC/u3XcpzaLxmGoEB4Ets0t8zubtdz62ua5Z fiXOlfD3HtkT+IQtGu5kLQIEpG+R9GUrZ9J7vsxel9PG0x9cD52Ulr2SZW3sIsGd 5S2NM9pnuk+WX1jmIQHlp6NVDdIgXY387WpQjmqRyVC5WmnRYm8T5XXddA8G4CSQ NRWIvD5e8BgHXiDjecYjE+kdQe8Dum3XcYVjws3AgcDFgysO1LWAO71LkQyy9vT7 jC8/e4r0U1BHcowNHcw6GpParYRkyZfVdIDRY0PrMu3MWzCeRhbyTX6qJwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFKOOQLy7U11qaH8y9TkTdxicuNksMB8GA1UdIwQY MBaAFOSVrLr+Ru8vTWxR/PI71y9jnP0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUpXc3V2NUc3eTlOYkZIODhqdlhMMk9jX1FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy80NDA4NzctMzE5ZC00NjMwLWE2OTEt Nzk5MWI0ZTRiZmEyLzEvbzQ1QXZMdFRYV3BvZnpMMU9STjNHSnk0MlN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy80NDA4NzctMzE5ZC00NjMwLWE2OTEtNzk5MWI0ZTRiZmEy LzEvNUpXc3V2NUc3eTlOYkZIODhqdlhMMk9jX1FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQCAjigAwQA W9/4AwQCuR80AwQCuVUgAwQCuZt8AwQCueAYAwQAwiDQAwQAwjuxAwQBw12uMA0E AgACMAcDBQMqDV3AMA0GCSqGSIb3DQEBCwUAA4IBAQBPGJU1lR6AYgTasiB4+8dF NsOlJaGj8XVcr35gvxMXypSeBBcaRty2CmEAk1yH7R3kJWnTa3V8hQ937RRNXEzq uqZTvMkQ0NmLO0f0ISHBC407xaKGESfK1AXLZivp24z5+/SzB3/+HKref/8sRkwI ZANMflT2CKPqmzO7ZjGBf11vYh0dOwy/t0CNol/7IIhxXDz1JPZLQSd4OUM8Tqn2 sF0u9TRbpYoflz0Vn15bHkSXjxugvVad18f3fOeLM4D545eh6fxAn5HDg4/Ng/VA bKOSbCngD6cXfZlOOUjeGY7pFlJjtwq/SH1OZaKkpzIjmhSRJUI7hBLhylNFB80x -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:02 2026 by rpki-client