This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa File: dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa (raw, json) Hash identifier: Ff78hIKwiWd51/Bth5HBmfNxfzKtqYOa3kRFT0AYoJo= Subject key identifier: 76:75:5C:B8:85:6A:E3:7A:C1:F0:F0:4D:C9:85:FF:25:E1:14:14:9D Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019B7C128B72517891F82CD64CD2D455A431 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16262 IP address blocks: 45.10.174.0/24 maxlen: 24 45.81.33.0/24 maxlen: 24 45.150.238.0/24 maxlen: 24 45.150.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8b:72:51:78:91:f8:2c:d6:4c:d2:d4:55:a4:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76755cb8856ae37ac1f0f04dc985ff25e114149d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:be:5f:58:76:df:46:bb:26:2b:4c:6e:5c: 9c:68:6d:ab:fd:a8:f5:7c:76:c5:3c:a8:29:b7:b9: 60:4d:dc:2f:5b:03:89:6f:59:4f:0d:37:85:89:72: 27:76:bd:b2:1a:c9:11:df:43:cd:77:fe:ef:16:f8: 02:28:9e:1f:48:32:ae:a9:bc:0d:a6:e4:3e:16:a2: 94:d4:34:6a:71:60:51:e7:43:30:da:b4:0d:18:db: b0:6c:ea:3d:a2:f7:65:9e:18:90:bf:38:b1:69:85: 67:ab:9a:f6:36:f8:3c:95:30:48:9f:46:b5:0a:17: f5:2a:ae:e8:4b:cb:07:24:c5:c8:3a:3f:3a:94:4a: 47:e3:ac:26:c9:04:76:bb:5f:d4:92:10:d8:01:27: 64:3e:b5:67:3b:d5:d8:6b:c4:27:6c:db:8b:2c:e7: c5:6d:b4:f9:c4:c6:19:4d:47:7f:4e:85:18:49:5d: 93:26:90:89:11:79:d9:cf:ba:5a:ea:04:c9:27:7f: c9:2e:6d:58:68:70:b3:b8:dd:d5:f9:f0:a1:9a:d2: 44:ee:b4:a9:2f:b7:11:4a:f9:9e:7d:4a:68:59:d2: e5:5f:a2:16:c7:43:84:6a:a9:d6:ae:68:0a:d2:a9: d1:93:32:3c:00:41:fa:64:9d:37:92:f9:3b:b0:7d: b0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:75:5C:B8:85:6A:E3:7A:C1:F0:F0:4D:C9:85:FF:25:E1:14:14:9D X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/dnVcuIVq43rB8PBNyYX_JeEUFJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.174.0/24 45.81.33.0/24 45.150.238.0/23 Signature Algorithm: sha256WithRSAEncryption 84:1f:34:ce:1e:48:8a:a2:a8:b8:37:8a:84:96:65:36:65:f6: 7e:a0:83:27:49:5d:75:c7:0c:62:29:df:d8:af:da:b2:0e:0b: 60:49:4b:2c:81:f7:44:9e:95:59:a3:28:0e:a9:af:3d:4b:bf: fd:56:73:f4:a2:1f:39:d7:9d:06:b8:5a:a5:3c:59:96:af:11: 50:b5:8e:ec:7d:f5:8b:44:9b:69:a6:9f:20:47:2b:fe:9a:55: 8a:d2:de:81:1b:9f:1e:5a:bb:c3:a9:a6:f2:07:93:7c:9c:8e: 71:1f:3a:22:91:ae:17:78:65:c9:2e:06:17:71:3c:54:06:b7: af:d3:ad:bc:6d:0e:c3:b4:87:b3:a8:bd:54:07:ad:71:8f:af: 49:2f:ed:7c:b1:b9:92:e4:85:ff:d4:e5:36:5d:df:5d:93:ca: 18:74:52:78:3d:fa:f9:b8:a2:d7:12:c0:f5:56:bc:2d:bc:3b: 73:4b:75:08:b6:97:7a:4b:51:b6:95:60:23:eb:7a:02:0c:71: bb:86:dd:26:d4:a1:94:20:8a:96:f4:10:ac:0a:91:99:86:48: 1f:32:8e:6f:c7:f3:46:81:c0:7f:44:a4:a4:ab:77:74:54:f1: 83:f3:52:a5:c2:a0:a8:66:82:87:79:31:2c:9b:1a:07:dc:05: 05:e6:11:50 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EotyUXiR+CzWTNLUVaQxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Njc1NWNiODg1NmFlMzdhYzFmMGYwNGRjOTg1ZmYyNWUxMTQxNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTm+X1h230a7JitMblycaG2r/aj1 fHbFPKgpt7lgTdwvWwOJb1lPDTeFiXIndr2yGskR30PNd/7vFvgCKJ4fSDKuqbwN puQ+FqKU1DRqcWBR50Mw2rQNGNuwbOo9ovdlnhiQvzixaYVnq5r2Nvg8lTBIn0a1 Chf1Kq7oS8sHJMXIOj86lEpH46wmyQR2u1/UkhDYASdkPrVnO9XYa8QnbNuLLOfF bbT5xMYZTUd/ToUYSV2TJpCJEXnZz7pa6gTJJ3/JLm1YaHCzuN3V+fChmtJE7rSp L7cRSvmefUpoWdLlX6IWx0OEaqnWrmgK0qnRkzI8AEH6ZJ03kvk7sH2wcQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHZ1XLiFauN6wfDwTcmF/yXhFBSdMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvZG5WY3VJVnE0M3JCOFBCTnlZWF9KZUVVRkowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQquAwQA LVEhAwQBLZbuMA0GCSqGSIb3DQEBCwUAA4IBAQCEHzTOHkiKoqi4N4qElmU2ZfZ+ oIMnSV11xwxiKd/Yr9qyDgtgSUssgfdEnpVZoygOqa89S7/9VnP0oh85150GuFql PFmWrxFQtY7sffWLRJtppp8gRyv+mlWK0t6BG58eWrvDqabyB5N8nI5xHzoika4X eGXJLgYXcTxUBrev0628bQ7DtIezqL1UB61xj69JL+18sbmS5IX/1OU2Xd9dk8oY dFJ4Pfr5uKLXEsD1VrwtvDtzS3UItpd6S1G2lWAj63oCDHG7ht0m1KGUIIqW9BCs CpGZhkgfMo5vx/NGgcB/RKSkq3d0VPGD81KlwqCoZoKHeTEsmxoH3AUF5hFQ -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:10 2026 by rpki-client