This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/DeOjOOwis1AR2KZCrmSrlAIMW_U.roa File: DeOjOOwis1AR2KZCrmSrlAIMW_U.roa (raw, json) Hash identifier: YRk1DmfcABvQ8nayCmElnZfNEWkWQiqPKIgK2NRobvo= Subject key identifier: 0D:E3:A3:38:EC:22:B3:50:11:D8:A6:42:AE:64:AB:94:02:0C:5B:F5 Certificate issuer: /CN=d4e2971e5d8169c940af020db027bedad8991590 Certificate serial: 019B79ECC85AFB6476CA0A4A9C803520BF9C Authority key identifier: D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/DeOjOOwis1AR2KZCrmSrlAIMW_U.roa Signing time: Thu 01 Jan 2026 14:18:39 +0000 ROA not before: Thu 01 Jan 2026 14:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48294 IP address blocks: 45.86.222.0/23 maxlen: 23 45.91.36.0/22 maxlen: 22 84.252.104.0/24 maxlen: 24 91.132.128.0/22 maxlen: 22 185.70.32.0/22 maxlen: 22 185.124.0.0/22 maxlen: 22 185.126.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c8:5a:fb:64:76:ca:0a:4a:9c:80:35:20:bf:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4e2971e5d8169c940af020db027bedad8991590 Validity Not Before: Jan 1 14:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0de3a338ec22b35011d8a642ae64ab94020c5bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bc:ee:9c:55:1b:cf:a6:1d:5b:a8:04:9f:d7: a9:e5:1f:67:03:36:a9:8d:6d:43:6f:39:6d:28:e4: ea:50:24:2f:53:ce:d6:7d:a6:aa:5b:72:3b:63:13: 92:f1:46:c3:b2:ac:70:86:45:85:96:88:bb:b7:f9: 74:91:46:82:18:00:2c:c8:2b:d4:a6:6f:bd:b4:c1: 5b:69:a5:fe:da:59:63:97:f8:1d:e3:c3:b8:75:14: 82:a5:3f:18:ed:76:8f:3d:18:4e:05:a6:19:6d:3a: dc:9c:cc:c0:f4:31:3f:89:eb:b4:e5:4d:07:17:1a: 58:de:58:06:08:46:c1:7e:53:e8:31:ed:ca:0a:e1: 76:89:3a:bc:eb:23:dd:95:cf:3c:93:57:53:2e:a4: d7:ec:8b:9d:c7:4f:76:e5:48:b0:6f:f5:f4:91:93: 2a:d9:82:eb:43:5b:e5:09:b4:5e:47:e8:fd:61:e2: 0c:b2:c6:9a:7d:fa:5c:c1:f5:10:02:2a:dc:9c:ac: a8:bc:e0:1f:15:14:1a:e6:80:ff:e4:c2:57:e4:97: fe:75:94:bd:68:da:a1:00:fd:2a:22:43:45:43:9b: 0c:35:db:ce:37:e4:49:29:fe:53:99:06:f2:4c:87: b4:82:75:23:43:f5:49:e5:a6:43:17:87:d3:6b:8f: c9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E3:A3:38:EC:22:B3:50:11:D8:A6:42:AE:64:AB:94:02:0C:5B:F5 X509v3 Authority Key Identifier: keyid:D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/DeOjOOwis1AR2KZCrmSrlAIMW_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.222.0/23 45.91.36.0/22 84.252.104.0/24 91.132.128.0/22 185.70.32.0/22 185.124.0.0/22 185.126.160.0/22 Signature Algorithm: sha256WithRSAEncryption 39:2c:59:a2:2c:61:59:c8:36:51:ca:fc:bf:0e:65:90:f0:ef: 04:b7:c9:f1:eb:07:bd:b5:45:dc:9b:0c:dd:fd:36:4b:1b:d4: ca:c3:e9:23:f9:9d:5e:ef:84:97:9e:86:b4:ef:e8:4c:e7:5d: 38:30:20:78:24:1e:da:91:d3:f9:5a:6a:8e:a7:ad:18:27:b3: 54:1c:83:9c:2c:a8:54:58:89:4b:4f:08:7c:0b:08:8e:76:5c: 0d:09:73:2b:7e:44:29:12:ff:df:42:7a:9f:bd:8c:d6:18:e5: d8:68:1c:3d:bd:36:45:54:4b:78:9d:fb:ce:bd:a4:35:23:ca: 6e:ce:0c:5a:63:be:fd:7c:cb:55:bf:24:23:fe:d1:be:af:b8: 13:2c:78:7e:4d:51:fd:77:ae:ad:70:19:cb:9c:4e:78:03:b8: 1c:64:ea:72:02:41:23:33:c2:cf:d2:98:48:99:11:37:61:da: 38:32:e2:38:48:68:2e:b8:a8:bd:0c:78:01:0f:94:f6:dd:b9: cc:83:fa:97:35:e3:ac:2b:45:1b:d7:11:04:7c:bf:4b:4b:93: 15:82:57:56:be:1a:48:b4:eb:83:26:ed:e4:6f:84:3d:a5:6e: 75:9c:c3:33:e9:73:99:8c:d9:79:ec:04:00:8e:60:f6:3e:8a: d5:8c:42:c1 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt57Mha+2R2ygpKnIA1IL+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZTI5NzFlNWQ4MTY5Yzk0MGFmMDIwZGIwMjdiZWRhZDg5 OTE1OTAwHhcNMjYwMTAxMTQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGUzYTMzOGVjMjJiMzUwMTFkOGE2NDJhZTY0YWI5NDAyMGM1YmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LzunFUbz6YdW6gEn9ep5R9nAzap jW1DbzltKOTqUCQvU87WfaaqW3I7YxOS8UbDsqxwhkWFloi7t/l0kUaCGAAsyCvU pm+9tMFbaaX+2lljl/gd48O4dRSCpT8Y7XaPPRhOBaYZbTrcnMzA9DE/ieu05U0H FxpY3lgGCEbBflPoMe3KCuF2iTq86yPdlc88k1dTLqTX7Iudx0925Uiwb/X0kZMq 2YLrQ1vlCbReR+j9YeIMssaaffpcwfUQAircnKyovOAfFRQa5oD/5MJX5Jf+dZS9 aNqhAP0qIkNFQ5sMNdvON+RJKf5TmQbyTIe0gnUjQ/VJ5aZDF4fTa4/JQQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFA3jozjsIrNQEdimQq5kq5QCDFv1MB8GA1UdIwQY MBaAFNTilx5dgWnJQK8CDbAnvtrYmRWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU9LWEhsMkJhY2xBcndJTnNDZS0ydGlaRlpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NzhhZWEtNmI5NC00OWEzLWFhN2Yt MTg5NDkwZDYwZWE2LzEvRGVPak9Pd2lzMUFSMktaQ3JtU3JsQUlNV19VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80NzhhZWEtNmI5NC00OWEzLWFhN2YtMTg5NDkwZDYwZWE2 LzEvMU9LWEhsMkJhY2xBcndJTnNDZS0ydGlaRlpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBLVbeAwQC LVskAwQAVPxoAwQCW4SAAwQCuUYgAwQCuXwAAwQCuX6gMA0GCSqGSIb3DQEBCwUA A4IBAQA5LFmiLGFZyDZRyvy/DmWQ8O8Et8nx6we9tUXcmwzd/TZLG9TKw+kj+Z1e 74SXnoa07+hM5104MCB4JB7akdP5WmqOp60YJ7NUHIOcLKhUWIlLTwh8CwiOdlwN CXMrfkQpEv/fQnqfvYzWGOXYaBw9vTZFVEt4nfvOvaQ1I8puzgxaY779fMtVvyQj /tG+r7gTLHh+TVH9d66tcBnLnE54A7gcZOpyAkEjM8LP0phImRE3Ydo4MuI4SGgu uKi9DHgBD5T23bnMg/qXNeOsK0Ub1xEEfL9LS5MVgldWvhpItOuDJu3kb4Q9pW51 nMMz6XOZjNl57AQAjmD2PorVjELB -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:21 2026 by rpki-client