This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O2_jIUxddVH0mumwCFZOJDo32wM.roa File: O2_jIUxddVH0mumwCFZOJDo32wM.roa (raw, json) Hash identifier: AgTdY22suutSr/CALboP9xEAK4zeXT4YIsWbDdqzHDg= Subject key identifier: 3B:6F:E3:21:4C:5D:75:51:F4:9A:E9:B0:08:56:4E:24:3A:37:DB:03 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF19FC4B83BE6F80E822B79F4D85129 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O2_jIUxddVH0mumwCFZOJDo32wM.roa Signing time: Fri 02 Jan 2026 18:21:39 +0000 ROA not before: Fri 02 Jan 2026 18:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 45.129.127.0/24 maxlen: 24 93.190.246.0/23 maxlen: 23 2a12:ecc0:200::/48 maxlen: 48 2a13:8c86:150::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:9f:c4:b8:3b:e6:f8:0e:82:2b:79:f4:d8:51:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b6fe3214c5d7551f49ae9b008564e243a37db03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:d3:fb:da:81:38:72:92:ba:7d:d0:2e:c2: 0c:7c:b1:cd:37:6c:a6:9f:8b:7a:e5:92:0f:e5:95: c8:0f:75:b7:a0:f7:52:93:2e:dd:7c:27:c2:dd:66: a9:a0:47:75:65:24:8f:47:a3:69:0e:9b:7e:48:17: fc:4e:c9:34:88:39:88:6a:1b:9f:05:ca:42:55:40: fe:50:6e:a4:c1:ce:4a:48:ef:8c:44:ec:2a:bb:e1: f1:83:84:d1:6e:3c:ba:a2:54:51:11:ec:36:72:0f: bd:9b:e1:01:44:5c:7b:96:03:a4:ef:f5:2f:f3:48: cc:99:ad:50:61:1f:dd:1a:8d:09:09:3e:ca:91:8d: b4:32:98:bf:50:19:b1:50:54:d5:66:bb:ee:99:f9: 30:96:f8:bb:93:33:0a:03:3d:fe:5a:82:67:bf:d1: f6:bf:4e:ca:81:62:c7:1a:eb:c9:e8:a5:2e:a5:90: 66:86:cd:3d:c5:b8:ba:40:c9:98:7c:14:a0:85:91: 1e:fa:8d:6b:a6:c1:9c:d6:1c:cf:4c:6c:8a:ba:9b: 72:40:06:92:97:88:fe:b8:17:92:a9:00:64:5c:91: 64:c3:7f:40:ef:a2:c8:71:ba:2e:4f:2e:f4:b2:98: 52:f0:fe:1c:64:ce:71:80:42:11:d1:99:b2:f7:a8: 2c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6F:E3:21:4C:5D:75:51:F4:9A:E9:B0:08:56:4E:24:3A:37:DB:03 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O2_jIUxddVH0mumwCFZOJDo32wM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.127.0/24 93.190.246.0/23 IPv6: 2a12:ecc0:200::/48 2a13:8c86:150::/48 Signature Algorithm: sha256WithRSAEncryption 2c:97:06:29:f2:2c:32:46:41:d2:f1:b1:dd:9e:3a:9d:b2:bb: ad:dc:07:f3:16:d0:92:4d:38:d4:ce:7a:d2:1b:3e:57:98:05: f8:f4:e8:b9:8c:a3:57:c8:60:c5:6c:10:d6:3e:17:71:da:27: f1:fa:0b:6b:21:c3:fd:d7:ba:2d:ce:92:29:db:13:fb:29:b6: eb:fe:42:1d:b8:24:14:f6:5f:b4:a5:f8:d6:63:9c:9e:6a:e2: a8:cc:2c:d0:fc:74:8a:25:0c:70:4a:ce:9b:78:62:ca:fe:16: ad:c4:ab:42:1e:4d:a1:3d:ef:c6:53:7e:a4:21:9a:6f:2b:1e: 9f:ad:b2:d6:d4:e4:6b:57:e2:32:9e:2c:5c:83:21:fa:a6:ed: 71:a3:13:5e:4f:08:6f:1f:54:a1:f0:2d:bb:89:65:ef:36:1f: 73:fd:a5:3a:f2:5c:6f:06:f3:c8:6e:54:ce:60:15:ba:ec:37: 6a:da:06:e1:82:60:c2:db:52:82:67:ca:2d:ab:54:b9:c9:b2: 13:4e:28:cb:98:65:d8:47:1d:0f:80:f6:14:65:97:16:45:f5: ae:f8:67:aa:30:58:3e:71:27:e8:81:c9:0d:b7:00:39:30:74: 9c:b0:04:b4:b2:36:af:a1:4a:d3:5e:6d:80:41:d4:39:f6:79: eb:1e:f9:68 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt/8Z/EuDvm+A6CK3n02FEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjZmZTMyMTRjNWQ3NTUxZjQ5YWU5YjAwODU2NGUyNDNhMzdkYjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9DT+9qBOHKSun3QLsIMfLHNN2ym n4t65ZIP5ZXID3W3oPdSky7dfCfC3WapoEd1ZSSPR6NpDpt+SBf8Tsk0iDmIahuf BcpCVUD+UG6kwc5KSO+MROwqu+Hxg4TRbjy6olRREew2cg+9m+EBRFx7lgOk7/Uv 80jMma1QYR/dGo0JCT7KkY20Mpi/UBmxUFTVZrvumfkwlvi7kzMKAz3+WoJnv9H2 v07KgWLHGuvJ6KUupZBmhs09xbi6QMmYfBSghZEe+o1rpsGc1hzPTGyKuptyQAaS l4j+uBeSqQBkXJFkw39A76LIcbouTy70sphS8P4cZM5xgEIR0Zmy96gs6QIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFDtv4yFMXXVR9JrpsAhWTiQ6N9sDMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvTzJfaklVeGRkVkgwbXVtd0NGWk9KRG8zMndNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQALYF/AwQB Xb72MBgEAgACMBIDBwAqEuzAAgADBwAqE4yGAVAwDQYJKoZIhvcNAQELBQADggEB ACyXBinyLDJGQdLxsd2eOp2yu63cB/MW0JJNONTOetIbPleYBfj06LmMo1fIYMVs ENY+F3HaJ/H6C2shw/3Xui3OkinbE/sptuv+Qh24JBT2X7Sl+NZjnJ5q4qjMLND8 dIolDHBKzpt4Ysr+Fq3Eq0IeTaE978ZTfqQhmm8rHp+tstbU5GtX4jKeLFyDIfqm 7XGjE15PCG8fVKHwLbuJZe82H3P9pTryXG8G88huVM5gFbrsN2raBuGCYMLbUoJn yi2rVLnJshNOKMuYZdhHHQ+A9hRllxZF9a74Z6owWD5xJ+iByQ23ADkwdJywBLSy Nq+hStNebYBB1Dn2eese+Wg= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:19 2026 by rpki-client