This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/OflZg6TFsEKRZGwqwFjxO_4uzgA.roa File: OflZg6TFsEKRZGwqwFjxO_4uzgA.roa (raw, json) Hash identifier: 9iTUJuItwJxSzT9lJ39rRuHUjdkumJ61tcp/ZIi1CnM= Subject key identifier: 39:F9:59:83:A4:C5:B0:42:91:64:6C:2A:C0:58:F1:3B:FE:2E:CE:00 Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2 Certificate serial: 019B7BA4C27216ECB55F122532A78D9AF7D3 Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/OflZg6TFsEKRZGwqwFjxO_4uzgA.roa Signing time: Thu 01 Jan 2026 22:19:13 +0000 ROA not before: Thu 01 Jan 2026 22:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200031 IP address blocks: 45.159.164.0/22 maxlen: 24 91.195.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c2:72:16:ec:b5:5f:12:25:32:a7:8d:9a:f7:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2 Validity Not Before: Jan 1 22:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39f95983a4c5b04291646c2ac058f13bfe2ece00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dd:b1:73:ae:f5:5b:6c:04:9f:29:d8:ba:3c: 7d:95:af:5f:22:7b:d1:0d:89:71:31:e4:6b:f4:61: ea:af:28:07:72:32:a0:db:3f:05:94:13:73:7e:0d: a7:ff:1f:84:60:a6:ab:18:8a:3b:33:d9:30:6e:3e: 43:50:c6:9e:bd:af:48:bb:a8:ad:fa:12:83:8a:2c: a6:20:6e:94:f5:f9:00:ee:14:c2:e9:3b:fb:e5:d9: 49:e2:34:a4:3a:96:50:c9:43:c5:87:ee:2e:98:c8: 51:ad:dc:a4:df:87:83:fc:f9:a3:62:b4:83:78:12: b0:1e:f9:ef:0e:5f:17:9c:2d:36:33:a8:26:e4:d4: cc:1f:93:a3:16:4c:77:47:06:dc:5f:ed:ec:ca:13: 11:82:84:77:57:80:76:42:78:ab:1c:a8:a2:1f:cf: cc:39:21:1a:a8:39:af:08:69:2a:6a:59:40:ea:6e: 17:10:46:be:47:ac:ac:50:4d:7c:e8:52:ba:0f:6f: 4e:71:b6:11:ac:13:66:44:5e:36:87:fe:9e:7b:d1: bb:d4:7c:cc:60:2c:bc:cd:33:c4:18:d2:bb:05:e7: 87:72:42:06:00:ae:2d:28:49:f1:c4:e0:b8:5b:12: ff:9a:6e:ad:a8:47:21:ad:62:a9:c4:4f:b6:27:4a: 6b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F9:59:83:A4:C5:B0:42:91:64:6C:2A:C0:58:F1:3B:FE:2E:CE:00 X509v3 Authority Key Identifier: keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/OflZg6TFsEKRZGwqwFjxO_4uzgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.164.0/22 91.195.56.0/23 Signature Algorithm: sha256WithRSAEncryption a0:b0:69:4e:3c:6a:6e:c1:ae:17:db:30:80:c6:7a:44:20:6f: a9:a7:11:78:bb:f1:ab:1a:cb:4a:3c:11:02:9f:20:12:35:12: b2:27:ea:f5:5b:13:d3:e6:2b:64:3d:52:db:47:4a:2a:dd:60: cf:5d:e2:f1:d8:4b:1f:9f:d6:03:b5:24:99:d0:db:15:3d:40: 11:47:61:3f:b3:31:25:01:1e:74:a0:5c:11:64:6b:6a:e5:9b: 2a:71:e7:6a:0e:52:47:03:d9:8d:d7:84:76:5c:c4:52:5e:a3: 75:38:23:87:18:0c:0e:12:85:e4:0b:a4:1c:62:5c:c0:0f:e6: 44:a6:8f:00:95:5d:1e:e7:6d:61:a3:49:a3:39:c6:a1:f6:f0: 70:08:3a:f9:a1:dc:ce:03:62:65:65:79:5a:a6:83:9c:3f:41: 0d:ba:fd:37:a9:ce:52:dc:7f:85:e0:50:a8:79:f4:96:0b:54: 29:3d:09:e2:26:d8:53:68:52:f4:df:e5:d9:a5:86:32:ef:8a: ab:b4:a0:be:0f:00:42:34:59:ea:8d:79:9e:e2:ca:2a:2e:ca: ba:8e:be:1a:29:58:e7:f1:00:88:6f:23:6b:b0:e9:18:c9:d1: 7b:7a:68:64:0d:de:41:54:68:7b:37:a8:49:c7:9c:20:91:df: 2e:13:5c:84 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pMJyFuy1XxIlMqeNmvfTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmY2U1NWQxNWViMTE5ZTUyZDZmYWZjZDM5NzNlMmY2ZDRm MjIzZjIwHhcNMjYwMTAxMjIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWY5NTk4M2E0YzViMDQyOTE2NDZjMmFjMDU4ZjEzYmZlMmVjZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t2xc671W2wEnynYujx9la9fInvR DYlxMeRr9GHqrygHcjKg2z8FlBNzfg2n/x+EYKarGIo7M9kwbj5DUMaeva9Iu6it +hKDiiymIG6U9fkA7hTC6Tv75dlJ4jSkOpZQyUPFh+4umMhRrdyk34eD/PmjYrSD eBKwHvnvDl8XnC02M6gm5NTMH5OjFkx3RwbcX+3syhMRgoR3V4B2QnirHKiiH8/M OSEaqDmvCGkqallA6m4XEEa+R6ysUE186FK6D29OcbYRrBNmRF42h/6ee9G71HzM YCy8zTPEGNK7BeeHckIGAK4tKEnxxOC4WxL/mm6tqEchrWKpxE+2J0prWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDn5WYOkxbBCkWRsKsBY8Tv+Ls4AMB8GA1UdIwQY MBaAFL/OVdFesRnlLW+vzTlz4vbU8iPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTct MDUyY2YwMWQyMDQ4LzEvT2ZsWmc2VEZzRUtSWkd3cXdGanhPXzR1emdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTctMDUyY2YwMWQyMDQ4 LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZ+kAwQB W8M4MA0GCSqGSIb3DQEBCwUAA4IBAQCgsGlOPGpuwa4X2zCAxnpEIG+ppxF4u/Gr GstKPBECnyASNRKyJ+r1WxPT5itkPVLbR0oq3WDPXeLx2Esfn9YDtSSZ0NsVPUAR R2E/szElAR50oFwRZGtq5ZsqcedqDlJHA9mN14R2XMRSXqN1OCOHGAwOEoXkC6Qc YlzAD+ZEpo8AlV0e521ho0mjOcah9vBwCDr5odzOA2JlZXlapoOcP0ENuv03qc5S 3H+F4FCoefSWC1QpPQniJthTaFL03+XZpYYy74qrtKC+DwBCNFnqjXme4soqLsq6 jr4aKVjn8QCIbyNrsOkYydF7emhkDd5BVGh7N6hJx5wgkd8uE1yE -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:45 2026 by rpki-client