This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/OfqA5pqJ4fJkpwDwUYuXxU3k4C8.roa File: OfqA5pqJ4fJkpwDwUYuXxU3k4C8.roa (raw, json) Hash identifier: Nh/1DT2PYHL73mgdwju8HsKlz3EXBSwiw8LM7YgOmrc= Subject key identifier: 39:FA:80:E6:9A:89:E1:F2:64:A7:00:F0:51:8B:97:C5:4D:E4:E0:2F Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019B7C8057D1A312F391014D0263392844A1 Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/OfqA5pqJ4fJkpwDwUYuXxU3k4C8.roa Signing time: Fri 02 Jan 2026 02:19:04 +0000 ROA not before: Fri 02 Jan 2026 02:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 45.147.156.0/24 maxlen: 24 45.147.157.0/24 maxlen: 24 45.147.158.0/24 maxlen: 24 77.111.116.0/24 maxlen: 24 77.111.117.0/24 maxlen: 24 77.111.121.0/24 maxlen: 24 77.111.123.0/24 maxlen: 24 92.61.102.0/24 maxlen: 24 92.61.103.0/24 maxlen: 24 92.61.106.0/24 maxlen: 24 92.61.109.0/24 maxlen: 24 185.112.240.0/24 maxlen: 24 185.112.241.0/24 maxlen: 24 185.112.242.0/24 maxlen: 24 185.112.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:57:d1:a3:12:f3:91:01:4d:02:63:39:28:44:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jan 2 02:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39fa80e69a89e1f264a700f0518b97c54de4e02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:40:aa:07:38:f5:32:40:c1:8f:9d:75:0f:7a: ac:ff:07:da:fe:d5:3d:40:b9:f3:b4:21:19:ca:ba: 38:52:4a:74:e3:53:38:e3:c3:ff:ec:b3:33:d8:fc: 5c:a6:52:58:0d:00:ae:2f:ab:2c:ba:65:34:01:97: de:43:e9:e2:31:b5:77:31:d7:cf:af:e3:91:a6:a1: c5:8c:9e:9f:42:01:5f:d0:05:9e:99:64:e8:5a:2b: 32:25:82:ee:86:58:58:5f:d5:10:a3:41:cf:61:75: f8:74:3e:c6:88:8b:d5:dd:e7:ff:0f:dc:e5:de:81: 76:1f:ca:14:22:33:8e:48:41:d4:f7:25:36:f2:05: fc:ae:85:90:ab:a9:1a:e8:ec:1d:10:bb:76:9a:21: a7:da:5f:f9:f4:47:5f:f2:04:06:10:7d:5b:2a:ec: c3:37:21:1f:30:9a:ca:c1:5b:c1:f6:3c:54:9e:f7: 5d:01:84:90:4a:ed:ff:27:f7:e9:8a:cb:01:1d:6f: 9f:78:31:d8:94:85:22:55:18:e8:ba:4c:12:fd:33: 0d:40:2e:a2:4c:17:d4:0e:75:07:9f:72:b2:78:a8: 13:be:a4:6e:ce:6a:33:73:fe:08:9f:68:24:73:4c: 3d:ed:9c:34:40:fe:98:09:c9:b9:02:11:8b:3c:c7: 87:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FA:80:E6:9A:89:E1:F2:64:A7:00:F0:51:8B:97:C5:4D:E4:E0:2F X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/OfqA5pqJ4fJkpwDwUYuXxU3k4C8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.156.0-45.147.158.255 77.111.116.0/23 77.111.121.0/24 77.111.123.0/24 92.61.102.0/23 92.61.106.0/24 92.61.109.0/24 185.112.240.0/22 Signature Algorithm: sha256WithRSAEncryption 50:6e:20:a8:10:f0:50:a9:00:c1:e4:cc:18:80:fd:4d:9f:3e: fb:eb:b3:43:fa:75:5d:8b:1a:df:49:c6:1e:cf:6a:6b:73:e0: 3d:ee:16:42:a8:16:b6:26:92:38:a1:18:b2:f9:f1:79:25:7b: 20:27:ef:37:06:cf:f3:44:b8:6a:2a:02:ab:0a:41:b7:b1:8f: 6b:3e:49:9f:ea:66:db:d4:b8:13:22:e4:77:9b:94:22:eb:d1: 8a:82:df:b6:57:d2:d6:e0:d4:94:b8:2c:56:6e:62:6e:1d:10: a7:18:d4:0f:5c:ed:75:0b:4d:ea:f2:b8:9f:c0:94:7c:e2:f4: 75:95:67:f2:4a:e8:9a:65:dc:6c:25:79:7e:82:c9:81:45:9d: f3:0c:80:02:7d:fb:c9:5e:47:e5:df:2d:75:d9:19:bc:f8:dd: 15:80:12:9e:ab:f6:da:c7:48:40:08:2c:56:25:4b:3f:61:d0: 54:43:27:74:a2:bd:e4:ec:38:22:4c:fb:e9:44:80:f4:66:05: e4:55:0b:48:3a:b8:18:a8:7d:0c:95:b9:df:8b:f6:d2:f4:f7: d9:b9:8d:ad:39:3a:6e:7c:9a:c0:ae:2d:3a:59:1d:e2:c9:f0: 05:f1:2a:4b:e4:91:78:12:76:73:37:e3:93:71:35:3c:bb:59: 3c:43:34:1e -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt8gFfRoxLzkQFNAmM5KEShMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwMTAyMDIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWZhODBlNjlhODllMWYyNjRhNzAwZjA1MThiOTdjNTRkZTRlMDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUCqBzj1MkDBj511D3qs/wfa/tU9 QLnztCEZyro4Ukp041M448P/7LMz2PxcplJYDQCuL6ssumU0AZfeQ+niMbV3MdfP r+ORpqHFjJ6fQgFf0AWemWToWisyJYLuhlhYX9UQo0HPYXX4dD7GiIvV3ef/D9zl 3oF2H8oUIjOOSEHU9yU28gX8roWQq6ka6OwdELt2miGn2l/59Edf8gQGEH1bKuzD NyEfMJrKwVvB9jxUnvddAYSQSu3/J/fpissBHW+feDHYlIUiVRjoukwS/TMNQC6i TBfUDnUHn3KyeKgTvqRuzmozc/4In2gkc0w97Zw0QP6YCcm5AhGLPMeHvwIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFDn6gOaaieHyZKcA8FGLl8VN5OAvMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvT2ZxQTVwcUo0ZkprcHdEd1VZdVh4VTNrNEM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4MAwDBAItk5wD BAAtk54DBAFNb3QDBABNb3kDBABNb3sDBAFcPWYDBABcPWoDBABcPW0DBAK5cPAw DQYJKoZIhvcNAQELBQADggEBAFBuIKgQ8FCpAMHkzBiA/U2fPvvrs0P6dV2LGt9J xh7Pamtz4D3uFkKoFrYmkjihGLL58XkleyAn7zcGz/NEuGoqAqsKQbexj2s+SZ/q ZtvUuBMi5HeblCLr0YqC37ZX0tbg1JS4LFZuYm4dEKcY1A9c7XULTeryuJ/AlHzi 9HWVZ/JK6Jpl3GwleX6CyYFFnfMMgAJ9+8leR+XfLXXZGbz43RWAEp6r9trHSEAI LFYlSz9h0FRDJ3SiveTsOCJM++lEgPRmBeRVC0g6uBiofQyVud+L9tL099m5ja05 Om58msCuLTpZHeLJ8AXxKkvkkXgSdnM345NxNTy7WTxDNB4= -----END CERTIFICATE-----Generated at Wed Jan 21 05:21:22 2026 by rpki-client