This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/ouJaEQWtvmFumgJq9J4xuKYfm-c.roa File: ouJaEQWtvmFumgJq9J4xuKYfm-c.roa (raw, json) Hash identifier: nfdbWTCbcJ3Xc4MwIK1l68EqEVj2FxQz/gW67KQoXRI= Subject key identifier: A2:E2:5A:11:05:AD:BE:61:6E:9A:02:6A:F4:9E:31:B8:A6:1F:9B:E7 Certificate issuer: /CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3 Certificate serial: 019B791114DA26ADF05A0DC9FCF797B7A024 Authority key identifier: A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/ouJaEQWtvmFumgJq9J4xuKYfm-c.roa Signing time: Thu 01 Jan 2026 10:18:41 +0000 ROA not before: Thu 01 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208058 IP address blocks: 45.145.39.0/24 maxlen: 24 2a13:5a40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:14:da:26:ad:f0:5a:0d:c9:fc:f7:97:b7:a0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3 Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2e25a1105adbe616e9a026af49e31b8a61f9be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:13:08:18:35:78:17:07:fc:cc:b1:18:e0:3e: 8c:fc:e7:d4:ab:41:d2:af:16:dc:6c:76:66:3e:a7: 8c:07:2e:83:ad:c2:19:c0:06:9d:dd:18:f2:ae:3f: 7b:c8:0d:4e:8c:7f:25:79:4d:eb:09:21:b6:0d:67: 04:a3:56:dc:05:ad:93:6e:21:fa:f8:ec:be:a5:80: 6c:65:94:b9:e1:7d:f5:eb:74:ed:c6:f2:81:71:79: c5:10:fa:62:a4:81:d2:5d:c4:da:64:b6:61:69:27: 09:f5:e7:88:86:25:4c:8e:31:53:c2:cc:a6:c1:f5: 59:55:31:31:43:dc:bf:c2:d1:54:23:b3:b0:05:1d: 9b:4d:1b:b3:1c:92:80:51:44:76:86:da:33:57:a1: b6:48:c9:76:d8:60:f3:ce:ab:d4:e1:cb:6f:b3:37: a3:d7:0e:a4:5e:a6:9b:6c:9a:36:8c:0a:e7:51:ef: 0d:ac:2a:a9:48:0f:47:af:d1:ea:ae:70:1d:66:54: 16:78:19:b4:59:e7:9a:bf:47:d0:81:27:ee:59:53: a4:b8:70:a2:c0:bd:7c:08:97:41:49:1c:65:b2:76: ac:25:f2:63:ae:43:35:bf:59:5a:3f:ea:7f:66:98: a0:b1:d4:85:53:63:24:93:57:0a:ec:36:fe:a6:cb: de:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E2:5A:11:05:AD:BE:61:6E:9A:02:6A:F4:9E:31:B8:A6:1F:9B:E7 X509v3 Authority Key Identifier: keyid:A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/ouJaEQWtvmFumgJq9J4xuKYfm-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.39.0/24 IPv6: 2a13:5a40::/32 Signature Algorithm: sha256WithRSAEncryption 30:59:37:ed:73:6f:d0:bd:a7:20:ab:58:c9:13:d3:fb:97:93: 52:72:72:7d:3c:88:8c:66:ca:94:e1:0f:1b:43:08:15:9a:b7: 94:65:db:b0:2b:e1:2c:1b:dc:a3:93:62:0c:fb:de:29:b4:c7: 6b:8b:ef:f8:fb:5a:80:3a:22:6c:f9:ea:7b:6d:74:ed:ba:a7: d5:dd:64:6a:da:02:31:51:d9:3a:7b:b0:36:1d:f7:f2:66:f0: 33:6f:8b:e7:9b:eb:9e:56:0d:2f:15:96:f7:ae:2f:5b:fe:1a: 6c:0c:79:e7:84:5c:4a:51:06:cf:44:8c:cc:bc:4f:f3:ed:5d: 00:b4:da:be:95:9e:fe:98:aa:d3:de:0b:ee:1a:24:e1:e3:99: 9d:de:f8:74:13:09:ff:72:aa:22:6c:86:53:9c:73:5f:4a:4e: 64:24:0a:d4:70:5c:65:c2:a1:93:60:c9:a7:61:37:3e:b0:77: cf:a9:1d:0e:75:dd:8f:6d:10:1c:19:72:d2:63:1a:63:ca:ad: 83:44:c5:e5:88:ee:03:04:5b:16:11:73:d2:21:46:bc:8f:4e: 40:37:30:69:a9:bb:da:c0:f2:b9:d8:7a:57:27:30:16:68:49: 39:3d:0d:b1:14:8b:7b:5e:28:7a:ab:df:23:69:99:40:74:19: 6b:7d:91:f5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ERTaJq3wWg3J/PeXt6AkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NWNmODllZTU2Mjc5N2U3NzVhYTRkMWQxZjdlNDVmNDY2 YTczYzMwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmUyNWExMTA1YWRiZTYxNmU5YTAyNmFmNDllMzFiOGE2MWY5YmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hMIGDV4Fwf8zLEY4D6M/OfUq0HS rxbcbHZmPqeMBy6DrcIZwAad3Rjyrj97yA1OjH8leU3rCSG2DWcEo1bcBa2TbiH6 +Oy+pYBsZZS54X3163TtxvKBcXnFEPpipIHSXcTaZLZhaScJ9eeIhiVMjjFTwsym wfVZVTExQ9y/wtFUI7OwBR2bTRuzHJKAUUR2htozV6G2SMl22GDzzqvU4ctvszej 1w6kXqabbJo2jArnUe8NrCqpSA9Hr9HqrnAdZlQWeBm0Weeav0fQgSfuWVOkuHCi wL18CJdBSRxlsnasJfJjrkM1v1laP+p/ZpigsdSFU2Mkk1cK7Db+psve6QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKLiWhEFrb5hbpoCavSeMbimH5vnMB8GA1UdIwQY MBaAFKVc+J7lYnl+d1qk0dH35F9GanPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iNzJjYjAtMGU1Ny00NjhjLTg5ZjAt YWJjYjFlNzU4MmIzLzEvb3VKYUVRV3R2bUZ1bWdKcTlKNHh1S1lmbS1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iNzJjYjAtMGU1Ny00NjhjLTg5ZjAtYWJjYjFlNzU4MmIz LzEvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALZEnMA0E AgACMAcDBQAqE1pAMA0GCSqGSIb3DQEBCwUAA4IBAQAwWTftc2/Qvacgq1jJE9P7 l5NScnJ9PIiMZsqU4Q8bQwgVmreUZduwK+EsG9yjk2IM+94ptMdri+/4+1qAOiJs +ep7bXTtuqfV3WRq2gIxUdk6e7A2HffyZvAzb4vnm+ueVg0vFZb3ri9b/hpsDHnn hFxKUQbPRIzMvE/z7V0AtNq+lZ7+mKrT3gvuGiTh45md3vh0Ewn/cqoibIZTnHNf Sk5kJArUcFxlwqGTYMmnYTc+sHfPqR0Odd2PbRAcGXLSYxpjyq2DRMXliO4DBFsW EXPSIUa8j05ANzBpqbvawPK52HpXJzAWaEk5PQ2xFIt7Xih6q98jaZlAdBlrfZH1 -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:58 2026 by rpki-client