This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/1-1OC6LmWlkhKJ9j7O2V8uHCIeLQ.roa File: 1-1OC6LmWlkhKJ9j7O2V8uHCIeLQ.roa (raw, json) Hash identifier: pObdATG8V/x1kQuTr2uqeIMaWJhyU9KZK2VfEs01ILg= Subject key identifier: FB:53:82:E8:B9:96:96:48:4A:27:D8:FB:3B:65:7C:B8:70:88:78:B4 Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2 Certificate serial: 019B7C7EE460DDB9FC5623A706B56EAA724E Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/1-1OC6LmWlkhKJ9j7O2V8uHCIeLQ.roa Signing time: Fri 02 Jan 2026 02:17:29 +0000 ROA not before: Fri 02 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208275 IP address blocks: 45.149.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:e4:60:dd:b9:fc:56:23:a7:06:b5:6e:aa:72:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2 Validity Not Before: Jan 2 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb5382e8b99696484a27d8fb3b657cb8708878b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:d8:95:8b:df:51:45:5f:d8:07:c8:5e:ca: f9:5b:ad:e4:e8:a7:39:6a:d2:a1:f3:0d:cf:2d:1e: 58:49:0d:d0:c5:f8:a1:4f:0f:c7:7e:0e:9d:1e:3d: ef:e5:21:e6:f1:05:51:93:2a:d0:41:09:ef:61:03: bc:59:ca:9d:b2:ce:45:93:8a:b4:a2:9c:46:1b:6e: 9e:33:44:82:26:8c:a1:9c:e4:9c:8d:7f:58:a7:02: c4:db:e0:e4:03:96:a1:5c:be:05:f1:78:d7:2e:f9: 2b:7e:c5:a1:85:a1:94:f4:44:fb:e7:e6:97:38:a7: 50:37:d8:40:4d:d4:8b:8a:73:70:2b:b9:bd:f6:04: 4e:28:c8:74:3a:3f:a4:93:0a:b5:be:b6:e6:2b:58: b4:04:3e:8a:5d:fa:87:f4:73:e1:c1:8b:e6:c9:bc: 48:c2:10:57:c4:f5:93:be:93:d5:92:73:60:36:59: 0c:b7:b4:0f:8b:9e:fe:0a:79:a2:f0:d7:fb:89:37: 66:24:9a:9f:a2:7c:c8:a7:6f:26:25:fd:2b:16:6a: 1f:71:1c:bf:f4:ae:a8:6d:01:da:fb:ef:04:cf:33: e5:5c:7f:66:36:52:ef:d7:39:9a:fc:7b:c7:b1:ed: f2:84:68:77:11:e1:89:2d:72:f8:f9:98:0e:46:c9: 10:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:53:82:E8:B9:96:96:48:4A:27:D8:FB:3B:65:7C:B8:70:88:78:B4 X509v3 Authority Key Identifier: keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/1-1OC6LmWlkhKJ9j7O2V8uHCIeLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.155.0/24 Signature Algorithm: sha256WithRSAEncryption b9:f5:76:9d:36:1d:b4:ee:7c:08:1b:34:38:da:4d:e3:58:ae: 0c:f7:16:25:95:d2:82:89:58:65:e4:d9:eb:aa:f5:5f:a9:01: d6:b0:ba:bd:07:a8:98:d3:e6:0a:bd:e1:73:c4:dc:a3:a0:8f: 7f:c2:b2:55:7f:fa:26:59:00:78:d5:67:42:f6:0a:fa:f3:4e: c1:5c:ba:09:09:92:b9:30:af:59:0f:59:27:ef:a4:5a:f7:86: dc:62:f6:a7:e2:18:0f:1b:a4:1e:fd:61:3a:51:d6:60:a9:8c: 17:9b:1c:e1:e6:71:dc:56:ad:05:67:8e:9d:3c:a7:4b:6b:9f: 5a:f5:c3:7a:43:39:bc:8b:05:1c:83:41:c8:fe:20:9e:e1:74: a5:73:4c:7e:fb:b4:97:69:f7:01:8b:de:bb:83:1b:e9:8a:d2: 6d:1a:8f:51:de:d4:b8:47:64:f1:e4:38:78:7d:1b:c3:8b:93: 8f:dd:56:4a:84:2b:9c:0d:ce:49:19:b3:1e:f1:11:ac:62:7d: cd:0c:6c:19:3b:9e:bf:2a:01:24:8e:4d:de:96:19:29:f9:1d: 69:3d:c2:f1:c2:37:c1:ff:9c:2b:d4:fd:54:55:65:f5:42:47: 47:bf:22:01:0d:62:31:72:ca:23:57:66:db:04:61:80:a1:bd: 57:8a:fd:ac -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8fuRg3bn8ViOnBrVuqnJOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3OTVjOTYxN2NhNWE2YTNiZmYyNjNmYzE4Mzc5OTJmZDFh YzQ3ZjIwHhcNMjYwMTAyMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjUzODJlOGI5OTY5NjQ4NGEyN2Q4ZmIzYjY1N2NiODcwODg3OGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz7YlYvfUUVf2AfIXsr5W63k6Kc5 atKh8w3PLR5YSQ3QxfihTw/Hfg6dHj3v5SHm8QVRkyrQQQnvYQO8Wcqdss5Fk4q0 opxGG26eM0SCJoyhnOScjX9YpwLE2+DkA5ahXL4F8XjXLvkrfsWhhaGU9ET75+aX OKdQN9hATdSLinNwK7m99gROKMh0Oj+kkwq1vrbmK1i0BD6KXfqH9HPhwYvmybxI whBXxPWTvpPVknNgNlkMt7QPi57+Cnmi8Nf7iTdmJJqfonzIp28mJf0rFmofcRy/ 9K6obQHa++8EzzPlXH9mNlLv1zma/HvHse3yhGh3EeGJLXL4+ZgORskQjwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPtTgui5lpZISifY+ztlfLhwiHi0MB8GA1UdIwQY MBaAFOeVyWF8paajv/Jj/Bg3mS/RrEfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85ODZkZGUtNWY2OC00YzIxLWI1NDYt ZDU0MGRmODg2YmFiLzEvMS0xT0M2TG1XbGtoS0o5ajdPMlY4dUhDSWVMUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTAvOTg2ZGRlLTVmNjgtNGMyMS1iNTQ2LWQ1NDBkZjg4NmJh Yi8xLzU1WEpZWHlscHFPXzhtUDhHRGVaTDlHc1JfSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2VmzAN BgkqhkiG9w0BAQsFAAOCAQEAufV2nTYdtO58CBs0ONpN41iuDPcWJZXSgolYZeTZ 66r1X6kB1rC6vQeomNPmCr3hc8Tco6CPf8KyVX/6JlkAeNVnQvYK+vNOwVy6CQmS uTCvWQ9ZJ++kWveG3GL2p+IYDxukHv1hOlHWYKmMF5sc4eZx3FatBWeOnTynS2uf WvXDekM5vIsFHINByP4gnuF0pXNMfvu0l2n3AYveu4Mb6YrSbRqPUd7UuEdk8eQ4 eH0bw4uTj91WSoQrnA3OSRmzHvERrGJ9zQxsGTuevyoBJI5N3pYZKfkdaT3C8cI3 wf+cK9T9VFVl9UJHR78iAQ1iMXLKI1dm2wRhgKG9V4r9rA== -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:59 2026 by rpki-client