This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/dOFQf5AeWGROir3bR0l9oDiF_LY.roa File: dOFQf5AeWGROir3bR0l9oDiF_LY.roa (raw, json) Hash identifier: NCU9gdpQPYAW35UhF4+gLu5Dhpwg+184qJ8TDUdFqxY= Subject key identifier: 74:E1:50:7F:90:1E:58:64:4E:8A:BD:DB:47:49:7D:A0:38:85:FC:B6 Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba Certificate serial: 019B7F85373683310075A97193111A167F5C Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/dOFQf5AeWGROir3bR0l9oDiF_LY.roa Signing time: Fri 02 Jan 2026 16:23:15 +0000 ROA not before: Fri 02 Jan 2026 16:23:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208123 IP address blocks: 45.159.40.0/22 maxlen: 22 2a0f:6e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:37:36:83:31:00:75:a9:71:93:11:1a:16:7f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba Validity Not Before: Jan 2 16:23:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74e1507f901e58644e8abddb47497da03885fcb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0d:ea:df:3c:bd:a0:67:52:a4:c6:53:1e:dd: 5c:4d:5d:03:e4:17:9e:f6:ff:d0:0e:d4:6e:b6:85: f7:c5:b5:40:d4:ec:4f:70:5e:9f:6a:44:59:8b:8c: cf:8c:03:52:6f:18:5d:08:3c:75:79:71:92:f7:21: c2:63:14:9a:d1:d7:66:f1:c3:80:78:8d:1a:28:0f: db:a4:9d:db:ec:80:96:87:47:c2:a8:71:b6:a7:a9: 4b:e5:3d:08:30:50:ea:4c:65:3b:ce:c6:07:7d:ad: 67:a7:45:cc:2a:87:c4:e7:2a:cc:4f:83:b6:3a:d5: a7:f2:db:da:f0:b1:74:b4:01:20:1a:75:90:d0:91: 29:b1:58:d7:9b:75:b0:9b:39:88:6b:b2:6d:04:97: 37:d1:06:2d:7b:ba:bf:bc:19:8a:f0:4b:63:0f:ed: b8:34:23:6a:6e:04:28:87:9f:82:5e:26:44:c2:74: c5:cb:6f:c2:37:a6:06:18:74:0a:43:2d:25:74:79: 31:89:0e:59:bf:74:ad:72:79:8c:8f:3e:2a:7b:0e: e4:d2:ce:d3:0c:fe:49:20:36:ee:94:70:59:5a:c8: f5:be:98:c2:71:ad:11:31:f3:75:9f:c1:03:41:97: d5:81:2b:f7:86:21:86:97:24:71:7e:ba:b1:00:64: 89:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E1:50:7F:90:1E:58:64:4E:8A:BD:DB:47:49:7D:A0:38:85:FC:B6 X509v3 Authority Key Identifier: keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/dOFQf5AeWGROir3bR0l9oDiF_LY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.40.0/22 IPv6: 2a0f:6e80::/32 Signature Algorithm: sha256WithRSAEncryption 4d:f0:e9:97:58:6c:d1:4a:3b:ac:79:cd:4d:dc:f2:5f:66:e8: ae:26:24:26:b0:6d:30:51:4a:90:a5:ac:05:8e:68:37:fd:22: c2:88:a5:7a:5a:37:02:c6:b7:43:f2:38:2a:6e:ff:c0:0c:5a: 5c:da:66:a6:0a:80:89:4b:11:d8:ba:ab:00:99:6e:2d:2c:ac: 7a:38:c9:1e:7e:1c:e7:59:0e:5d:f6:0f:eb:07:8c:94:78:1c: ec:84:11:bc:9f:58:e6:c9:7d:ce:56:9a:c2:42:ae:5f:2b:31: e9:9e:ac:c2:cd:83:e5:53:da:6a:76:f6:9e:ca:fb:59:0e:7f: 9f:ce:ac:98:67:08:5d:6a:b3:cf:54:72:f7:99:18:9c:45:4e: 0f:d2:d6:a7:94:69:7e:e9:f2:c9:88:8d:b4:b9:cc:a7:05:54: a8:8e:fe:f9:e3:09:0f:bb:bb:16:36:69:11:ac:49:8b:1d:bb: 9d:89:9f:dd:ce:fe:66:c3:d9:09:0f:b6:a8:d5:04:cd:52:db: 1e:5a:6c:7a:40:74:dd:b3:37:5c:41:60:3e:9e:ac:a1:3c:58: b5:98:1b:78:27:ef:62:62:f1:34:88:82:c4:07:7b:9f:d0:88: 2a:00:86:18:44:a7:61:64:0f:00:a6:82:84:1c:e2:0f:c9:01: b7:49:7c:fd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hTc2gzEAdalxkxEaFn9cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTE2ZGY2NGIzOTQxYjA0Njc0MzQxMWVkODZlYTYwMzBk NzJmYmEwHhcNMjYwMTAyMTYyMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGUxNTA3ZjkwMWU1ODY0NGU4YWJkZGI0NzQ5N2RhMDM4ODVmY2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6w3q3zy9oGdSpMZTHt1cTV0D5Bee 9v/QDtRutoX3xbVA1OxPcF6fakRZi4zPjANSbxhdCDx1eXGS9yHCYxSa0ddm8cOA eI0aKA/bpJ3b7ICWh0fCqHG2p6lL5T0IMFDqTGU7zsYHfa1np0XMKofE5yrMT4O2 OtWn8tva8LF0tAEgGnWQ0JEpsVjXm3WwmzmIa7JtBJc30QYte7q/vBmK8EtjD+24 NCNqbgQoh5+CXiZEwnTFy2/CN6YGGHQKQy0ldHkxiQ5Zv3StcnmMjz4qew7k0s7T DP5JIDbulHBZWsj1vpjCca0RMfN1n8EDQZfVgSv3hiGGlyRxfrqxAGSJYQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHThUH+QHlhkToq920dJfaA4hfy2MB8GA1UdIwQY MBaAFA9RbfZLOUGwRnQ0Ee2G6mAw1y+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2Et YmExMDJjZGIyMzk3LzEvZE9GUWY1QWVXR1JPaXIzYlIwbDlvRGlGX0xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2EtYmExMDJjZGIyMzk3 LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZ8oMA0E AgACMAcDBQAqD26AMA0GCSqGSIb3DQEBCwUAA4IBAQBN8OmXWGzRSjusec1N3PJf ZuiuJiQmsG0wUUqQpawFjmg3/SLCiKV6WjcCxrdD8jgqbv/ADFpc2mamCoCJSxHY uqsAmW4tLKx6OMkefhznWQ5d9g/rB4yUeBzshBG8n1jmyX3OVprCQq5fKzHpnqzC zYPlU9pqdvaeyvtZDn+fzqyYZwhdarPPVHL3mRicRU4P0tanlGl+6fLJiI20ucyn BVSojv754wkPu7sWNmkRrEmLHbudiZ/dzv5mw9kJD7ao1QTNUtseWmx6QHTdszdc QWA+nqyhPFi1mBt4J+9iYvE0iILEB3uf0IgqAIYYRKdhZA8ApoKEHOIPyQG3SXz9 -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:36 2026 by rpki-client