This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/lOdGqbSNzBD1gehSSgv6EI7HHIY.roa File: lOdGqbSNzBD1gehSSgv6EI7HHIY.roa (raw, json) Hash identifier: EwOW1XRJHLeddtqQ81QlMW8MD6NgwzRNPrW6edVvcJM= Subject key identifier: 94:E7:46:A9:B4:8D:CC:10:F5:81:E8:52:4A:0B:FA:10:8E:C7:1C:86 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758E175190DA8E70813EC1A23A15F5B Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/lOdGqbSNzBD1gehSSgv6EI7HHIY.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34924 IP address blocks: 45.86.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e1:75:19:0d:a8:e7:08:13:ec:1a:23:a1:5f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94e746a9b48dcc10f581e8524a0bfa108ec71c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a3:62:dc:83:e0:bf:82:23:75:4b:59:5b:06: 05:74:97:6d:5a:0f:ae:69:98:5a:33:65:96:b1:4f: 95:fc:6f:44:f0:29:0c:f6:ff:1a:21:67:ac:b0:7a: 1f:a2:4f:73:fd:c5:67:1e:ac:b6:f4:11:84:4f:5e: 91:50:8b:04:7f:63:41:44:a0:91:bf:81:0f:43:a2: 45:02:6c:85:0f:8c:b5:0f:a2:7b:45:54:44:d8:e2: f2:76:30:87:77:01:98:c7:2d:96:9e:4b:18:a0:c1: 71:8d:4b:a1:5f:20:a8:d0:b8:8e:09:65:b7:e4:3a: cd:ef:04:aa:f7:d7:34:11:dd:0b:bb:67:8d:dc:53: d0:13:90:eb:35:f5:01:26:b9:00:97:06:ec:ee:f3: 1f:7e:e6:87:f2:a6:ca:fd:5f:68:77:d9:50:b4:10: c9:ae:79:bc:e2:af:b9:e6:4b:ae:98:d8:e1:7a:dd: 46:5f:57:c5:fd:d9:65:00:1f:5b:d1:31:28:7b:5e: 2f:df:dd:2b:85:e4:6e:04:34:6e:f9:75:59:08:f0: aa:1b:79:8f:a5:b9:d2:bd:4b:7c:3c:34:b5:72:9f: 16:f8:14:e9:a6:54:7b:a3:18:5e:10:bc:0a:cd:4a: f3:d1:46:41:c9:98:47:f6:d3:d5:1d:b9:64:83:ec: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E7:46:A9:B4:8D:CC:10:F5:81:E8:52:4A:0B:FA:10:8E:C7:1C:86 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/lOdGqbSNzBD1gehSSgv6EI7HHIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.127.0/24 Signature Algorithm: sha256WithRSAEncryption 81:7a:8b:8c:33:8a:e3:18:4b:47:71:dd:f9:ad:13:0d:31:48: eb:55:d2:4b:81:9d:c6:d3:3a:62:de:39:2e:03:68:3e:d6:72: 1b:9e:06:b4:cd:a0:44:5d:d3:d3:47:e9:c8:8d:d0:b3:2a:bc: 4a:17:6f:98:e8:08:31:3d:ef:63:1d:dc:41:fa:51:43:2d:83: c1:ad:00:b9:32:83:03:59:22:fb:58:17:95:57:d2:0e:99:9d: 7a:b1:06:9a:3f:ea:33:ab:8b:10:ae:5c:d5:7d:00:f5:59:b2: 42:06:d0:93:c9:13:b6:cc:bc:f6:3b:94:e5:23:1b:59:ef:e6: 84:7a:ba:19:5f:91:97:10:8b:6c:f1:a3:42:8e:55:8e:57:98: a9:2c:c0:77:57:02:ae:2c:61:1d:56:5d:68:a0:64:55:89:16: 99:d0:a3:b2:fa:03:c8:f6:0a:d3:7e:6d:c6:a0:c5:3d:35:c0: c5:6c:ff:0f:a2:93:75:dc:2e:f2:33:43:c7:10:db:bf:27:4d: 0b:6d:13:6d:8e:29:46:e0:03:d7:e2:d6:48:8b:55:ae:05:61: 2e:07:59:cf:6d:d7:70:70:da:dd:c6:52:d2:ef:15:5d:04:6f: e8:8d:30:af:8c:f9:68:8b:63:15:ce:49:bf:c1:30:0c:f2:8c: c1:57:26:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOF1GQ2o5wgT7BojoV9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGU3NDZhOWI0OGRjYzEwZjU4MWU4NTI0YTBiZmExMDhlYzcxYzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKNi3IPgv4IjdUtZWwYFdJdtWg+u aZhaM2WWsU+V/G9E8CkM9v8aIWessHofok9z/cVnHqy29BGET16RUIsEf2NBRKCR v4EPQ6JFAmyFD4y1D6J7RVRE2OLydjCHdwGYxy2WnksYoMFxjUuhXyCo0LiOCWW3 5DrN7wSq99c0Ed0Lu2eN3FPQE5DrNfUBJrkAlwbs7vMffuaH8qbK/V9od9lQtBDJ rnm84q+55kuumNjhet1GX1fF/dllAB9b0TEoe14v390rheRuBDRu+XVZCPCqG3mP pbnSvUt8PDS1cp8W+BTpplR7oxheELwKzUrz0UZByZhH9tPVHblkg+x4VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJTnRqm0jcwQ9YHoUkoL+hCOxxyGMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvbE9kR3FiU056QkQxZ2VoU1NndjZFSTdISElZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVZ/MA0G CSqGSIb3DQEBCwUAA4IBAQCBeouMM4rjGEtHcd35rRMNMUjrVdJLgZ3G0zpi3jku A2g+1nIbnga0zaBEXdPTR+nIjdCzKrxKF2+Y6AgxPe9jHdxB+lFDLYPBrQC5MoMD WSL7WBeVV9IOmZ16sQaaP+ozq4sQrlzVfQD1WbJCBtCTyRO2zLz2O5TlIxtZ7+aE eroZX5GXEIts8aNCjlWOV5ipLMB3VwKuLGEdVl1ooGRViRaZ0KOy+gPI9grTfm3G oMU9NcDFbP8PopN13C7yM0PHENu/J00LbRNtjilG4APX4tZIi1WuBWEuB1nPbddw cNrdxlLS7xVdBG/ojTCvjPloi2MVzkm/wTAM8ozBVyZf -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:43 2026 by rpki-client