This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/OWLHCHd9PzwYuf4K0_kZdtVaf0E.roa File: OWLHCHd9PzwYuf4K0_kZdtVaf0E.roa (raw, json) Hash identifier: KEQHIqucfizSKjP6vLqh6UbFn5gCSs2ZygaSNjoQJ6Q= Subject key identifier: 39:62:C7:08:77:7D:3F:3C:18:B9:FE:0A:D3:F9:19:76:D5:5A:7F:41 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758F8E683212A62E5638148DEB473E3 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/OWLHCHd9PzwYuf4K0_kZdtVaf0E.roa Signing time: Thu 01 Jan 2026 02:17:58 +0000 ROA not before: Thu 01 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213392 IP address blocks: 45.86.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f8:e6:83:21:2a:62:e5:63:81:48:de:b4:73:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3962c708777d3f3c18b9fe0ad3f91976d55a7f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a3:16:af:35:80:76:17:c9:a1:21:9f:39:27: 5d:74:77:25:d6:cb:5b:16:26:aa:2c:7f:3e:82:70: 8f:aa:dd:c3:b7:1c:03:ff:6c:af:58:3c:00:21:a7: 4d:a9:16:53:7e:ff:1c:4c:3a:2e:8c:96:c1:d4:41: db:f8:66:d3:23:52:5d:ba:cf:7c:4f:7f:d6:8e:2f: 08:7c:9b:2d:76:f6:22:3c:c7:13:ee:a7:67:2e:6a: c7:c3:61:84:dd:35:c4:b0:f8:b1:09:bf:13:aa:f3: 7d:61:11:c2:01:6f:4b:47:51:47:35:fe:e2:fd:60: 0a:f3:f8:bc:77:bb:59:48:d1:dd:1a:43:bf:31:b5: ae:3d:92:a3:0b:91:40:57:fa:f5:16:78:c8:cb:45: ab:f8:2e:76:82:81:29:84:bc:6b:69:64:50:68:fd: 64:0e:ef:98:aa:e5:ca:a2:29:6e:1a:e9:d3:da:3f: 8d:84:48:55:1e:7f:cd:bf:29:c1:38:37:4a:2f:e7: 57:e3:c3:5f:09:32:ea:2e:2b:28:bb:02:74:ed:a5: ed:99:7e:5f:b9:97:f0:17:c5:4c:87:72:f2:99:56: ee:b8:2d:25:8f:da:1b:26:c3:f9:47:80:b3:90:7d: db:87:90:90:90:28:75:38:20:2f:97:ed:0a:ab:9c: bb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:62:C7:08:77:7D:3F:3C:18:B9:FE:0A:D3:F9:19:76:D5:5A:7F:41 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/OWLHCHd9PzwYuf4K0_kZdtVaf0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.126.0/24 Signature Algorithm: sha256WithRSAEncryption 26:d4:7d:28:56:03:7b:36:db:35:17:2c:5c:00:1e:42:4e:cb: 7d:26:5b:f9:95:dc:d8:0f:fe:0f:a8:97:53:37:bc:8a:ca:4e: 19:03:81:ca:7b:15:6f:18:f7:9d:9a:50:57:fb:ca:e0:52:1e: dd:7a:07:07:a6:f3:33:a5:6d:a6:9c:58:1b:8d:eb:0f:e1:b6: 58:75:21:fa:79:92:40:b3:38:62:42:3c:32:a7:f1:ce:71:20: 1f:ec:3e:6b:2d:eb:4d:94:8c:0c:dd:80:72:7b:be:4b:ab:98: ef:f8:0b:c2:bd:0a:17:d2:bf:69:c9:96:96:68:75:1f:3c:fd: a7:c4:5b:f0:8a:87:59:e9:d0:99:19:c0:6b:fb:b6:eb:c1:f3: 8a:ab:94:b1:e8:3b:3c:95:b5:82:ea:59:87:81:e8:0e:9b:34: ed:46:c4:9e:b3:39:fb:35:4c:d3:09:56:c9:a4:df:e3:2a:29: d9:c1:0a:e8:b5:ef:5a:e9:1c:20:6c:fe:91:53:e3:6d:47:5f: 4a:f4:30:b0:4a:40:bd:0f:32:a3:24:aa:6f:ba:b1:7d:b8:9a: 35:c4:89:c2:3b:64:82:45:66:aa:05:35:e9:6d:cc:36:d1:06: aa:d4:7f:7a:45:c6:5e:a7:70:a8:48:d2:db:60:94:b3:36:1b: 31:ef:f3:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPjmgyEqYuVjgUjetHPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTYyYzcwODc3N2QzZjNjMThiOWZlMGFkM2Y5MTk3NmQ1NWE3ZjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKMWrzWAdhfJoSGfOSdddHcl1stb FiaqLH8+gnCPqt3DtxwD/2yvWDwAIadNqRZTfv8cTDoujJbB1EHb+GbTI1Jdus98 T3/Wji8IfJstdvYiPMcT7qdnLmrHw2GE3TXEsPixCb8TqvN9YRHCAW9LR1FHNf7i /WAK8/i8d7tZSNHdGkO/MbWuPZKjC5FAV/r1FnjIy0Wr+C52goEphLxraWRQaP1k Du+YquXKoiluGunT2j+NhEhVHn/NvynBODdKL+dX48NfCTLqLisouwJ07aXtmX5f uZfwF8VMh3LymVbuuC0lj9obJsP5R4CzkH3bh5CQkCh1OCAvl+0Kq5y7NQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDlixwh3fT88GLn+CtP5GXbVWn9BMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvT1dMSENIZDlQendZdWY0SzBfa1pkdFZhZjBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVZ+MA0G CSqGSIb3DQEBCwUAA4IBAQAm1H0oVgN7Nts1FyxcAB5CTst9Jlv5ldzYD/4PqJdT N7yKyk4ZA4HKexVvGPedmlBX+8rgUh7degcHpvMzpW2mnFgbjesP4bZYdSH6eZJA szhiQjwyp/HOcSAf7D5rLetNlIwM3YBye75Lq5jv+AvCvQoX0r9pyZaWaHUfPP2n xFvwiodZ6dCZGcBr+7brwfOKq5Sx6Ds8lbWC6lmHgegOmzTtRsSeszn7NUzTCVbJ pN/jKinZwQrote9a6RwgbP6RU+NtR19K9DCwSkC9DzKjJKpvurF9uJo1xInCO2SC RWaqBTXpbcw20Qaq1H96RcZep3CoSNLbYJSzNhsx7/Mv -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:46 2026 by rpki-client