This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oC19hvGZ2Kf4OPp4KvsFN9mq59c.roa File: oC19hvGZ2Kf4OPp4KvsFN9mq59c.roa (raw, json) Hash identifier: eNkuykaUWv1AG/f1nx/3PAiHoG+RmQAvvjnN/OPx5uc= Subject key identifier: A0:2D:7D:86:F1:99:D8:A7:F8:38:FA:78:2A:FB:05:37:D9:AA:E7:D7 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1360CA26AD6BF78E26CE9420203B1B Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oC19hvGZ2Kf4OPp4KvsFN9mq59c.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 45.147.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:60:ca:26:ad:6b:f7:8e:26:ce:94:20:20:3b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a02d7d86f199d8a7f838fa782afb0537d9aae7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0a:6c:63:93:41:1d:82:a7:26:8f:ef:0b:4f: dc:64:86:57:f8:8f:58:e1:77:4d:a9:c7:ee:5a:17: 08:a6:63:cb:6c:db:3e:d1:aa:66:6f:28:9d:cd:d0: 0a:cd:35:68:e3:92:85:c1:67:a1:68:af:87:08:e5: 9d:51:d2:ce:78:a7:53:45:48:43:9a:3c:f5:34:bc: 4d:19:ca:fa:6c:6a:db:b1:2c:e4:17:25:0c:bc:85: 37:7d:3a:42:4b:ef:65:da:f7:ff:87:93:16:9b:86: 54:dd:c4:b0:b3:69:cf:b1:f9:6f:ff:ca:cb:04:3d: d2:06:67:ed:8d:65:39:9b:76:e5:3a:ab:87:2b:09: 73:30:7a:f6:1e:e1:64:d5:34:18:97:5c:7c:05:fd: f0:58:85:6e:75:fe:17:42:74:28:5d:c7:e1:06:23: 40:34:f1:94:5e:e1:99:27:a2:c2:b5:ec:79:df:44: a7:80:09:76:0a:ec:c9:a3:bd:d7:63:c8:86:e1:b6: 72:6a:e5:c8:1f:b6:33:81:4e:cf:01:d7:1e:f7:e9: 15:07:26:a3:f7:12:45:bf:e4:93:ee:4d:15:93:f4: 83:a2:31:66:56:c5:b6:0b:a2:1e:1b:75:d9:c4:a6: 96:fc:4d:09:92:b4:fd:c9:ce:ab:b1:03:37:98:ad: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2D:7D:86:F1:99:D8:A7:F8:38:FA:78:2A:FB:05:37:D9:AA:E7:D7 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oC19hvGZ2Kf4OPp4KvsFN9mq59c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.227.0/24 Signature Algorithm: sha256WithRSAEncryption 97:dd:6d:7d:2c:73:c9:dc:e4:f1:4e:fd:32:8e:ac:d4:89:43: be:be:2d:43:ff:e9:4f:ad:55:d2:2d:7e:a6:7c:a9:bc:5d:d2: ff:47:2a:f5:82:b6:bc:bf:36:08:53:d3:ca:15:cb:b9:f7:d3: 97:8b:37:71:ce:a8:59:20:61:f9:12:4a:0c:9f:ee:0f:59:cf: 42:4f:6c:f8:77:13:ae:bf:d1:4d:62:66:31:73:a1:ae:a6:1e: f9:c7:03:ef:17:87:82:dc:0e:bd:35:a0:ca:59:b5:52:58:b4: 5e:03:f1:e0:7e:f4:b6:66:73:c8:fa:d8:a9:91:6e:6c:87:7b: 25:36:97:0f:0e:a7:a1:84:3d:f2:b2:59:dd:9d:ca:5d:f4:5e: 2f:b9:dd:10:18:c4:14:e5:c4:e0:a6:97:66:e2:be:99:df:e3: cd:26:82:2f:b9:52:31:85:9f:09:cd:2f:18:0e:8b:17:9f:5d: ab:57:3a:72:1e:31:ed:fe:81:a3:15:4c:62:e0:3c:ad:77:a1: 83:ad:0c:c5:61:f1:33:01:e1:0b:de:3f:2a:61:8a:16:3d:79: 5d:7e:ea:69:35:a6:9f:76:8b:61:3f:46:af:8b:88:e4:6c:61: 5a:f2:cd:ff:84:46:3c:16:04:49:f4:a4:b7:8d:a4:c4:a9:11: dd:8e:7b:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E2DKJq1r944mzpQgIDsbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDJkN2Q4NmYxOTlkOGE3ZjgzOGZhNzgyYWZiMDUzN2Q5YWFlN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wpsY5NBHYKnJo/vC0/cZIZX+I9Y 4XdNqcfuWhcIpmPLbNs+0apmbyidzdAKzTVo45KFwWehaK+HCOWdUdLOeKdTRUhD mjz1NLxNGcr6bGrbsSzkFyUMvIU3fTpCS+9l2vf/h5MWm4ZU3cSws2nPsflv/8rL BD3SBmftjWU5m3blOquHKwlzMHr2HuFk1TQYl1x8Bf3wWIVudf4XQnQoXcfhBiNA NPGUXuGZJ6LCtex530SngAl2CuzJo73XY8iG4bZyauXIH7YzgU7PAdce9+kVByaj 9xJFv+ST7k0Vk/SDojFmVsW2C6IeG3XZxKaW/E0JkrT9yc6rsQM3mK1NZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKAtfYbxmdin+Dj6eCr7BTfZqufXMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvb0MxOWh2R1oyS2Y0T1BwNEt2c0ZOOW1xNTljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZPjMA0G CSqGSIb3DQEBCwUAA4IBAQCX3W19LHPJ3OTxTv0yjqzUiUO+vi1D/+lPrVXSLX6m fKm8XdL/Ryr1gra8vzYIU9PKFcu599OXizdxzqhZIGH5EkoMn+4PWc9CT2z4dxOu v9FNYmYxc6Guph75xwPvF4eC3A69NaDKWbVSWLReA/HgfvS2ZnPI+tipkW5sh3sl NpcPDqehhD3yslndncpd9F4vud0QGMQU5cTgppdm4r6Z3+PNJoIvuVIxhZ8JzS8Y DosXn12rVzpyHjHt/oGjFUxi4Dytd6GDrQzFYfEzAeEL3j8qYYoWPXldfuppNaaf dothP0avi4jkbGFa8s3/hEY8FgRJ9KS3jaTEqRHdjnsv -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:30 2026 by rpki-client