This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/0p0uGdEjZ7MGyD-LCsx98xB11fo.roa File: 0p0uGdEjZ7MGyD-LCsx98xB11fo.roa (raw, json) Hash identifier: GafpSlAmVXAuKnmdToG18Aw2Tr0QYxi5+nEmz3437c8= Subject key identifier: D2:9D:2E:19:D1:23:67:B3:06:C8:3F:8B:0A:CC:7D:F3:10:75:D5:FA Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd Certificate serial: 019B7CED03D3384C919C528D25F214D58B5A Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/0p0uGdEjZ7MGyD-LCsx98xB11fo.roa Signing time: Fri 02 Jan 2026 04:17:46 +0000 ROA not before: Fri 02 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 45.154.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:03:d3:38:4c:91:9c:52:8d:25:f2:14:d5:8b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd Validity Not Before: Jan 2 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d29d2e19d12367b306c83f8b0acc7df31075d5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6c:af:5f:f6:46:c9:3a:d7:d6:91:0d:d9:07: 93:0b:f1:2e:8b:ef:f4:68:db:41:25:8e:d1:ae:f0: 32:df:90:6f:d7:ba:6d:57:4a:42:98:68:10:07:7d: f9:d6:7b:12:48:44:c8:66:f2:03:33:92:5a:31:37: ed:ce:90:be:4f:ca:35:26:13:a2:dc:67:62:8d:2a: d4:86:10:8d:79:cc:ef:06:f0:d3:18:c8:05:ff:0f: 34:ff:35:84:35:78:a6:0c:98:6d:5a:db:12:08:c6: 9a:b8:62:69:1e:41:c8:53:be:ac:d4:00:f3:5f:cd: 45:86:ae:ff:d3:05:c0:ed:fe:a1:ee:c8:41:4d:13: 6b:ea:83:46:7a:77:ac:b0:39:82:de:07:db:8b:a4: 0c:7b:20:37:05:73:ac:f9:2c:15:30:2b:ae:fd:62: e5:ca:25:5a:b1:9a:1a:8f:09:c1:eb:87:d7:d1:14: bd:34:8d:3f:f9:32:a7:a5:bb:db:81:fa:41:bf:49: 6c:06:fe:36:4c:ce:17:d5:cb:54:89:c1:75:d0:58: 6f:be:0c:b4:14:08:26:c5:93:d8:43:ad:18:7b:c3: 85:0d:66:33:64:ae:85:07:0b:b5:84:14:47:d5:a9: 26:f2:2d:53:92:07:d9:53:69:ce:7c:4a:98:24:f0: be:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9D:2E:19:D1:23:67:B3:06:C8:3F:8B:0A:CC:7D:F3:10:75:D5:FA X509v3 Authority Key Identifier: keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/0p0uGdEjZ7MGyD-LCsx98xB11fo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.205.0/24 Signature Algorithm: sha256WithRSAEncryption a6:08:6a:c9:2a:e2:7e:f2:fa:bf:c1:cd:80:34:88:86:31:fd: c9:a3:3d:1e:8d:3e:56:94:af:c1:84:93:75:8b:3a:fb:4f:ba: 47:ea:a3:3a:09:3c:ea:6c:4e:15:9e:ac:d7:b9:e0:e8:66:3f: 7b:ed:da:5e:25:f1:58:71:40:17:77:ce:08:b6:51:7f:d6:ec: ed:27:0c:38:f6:97:72:3e:8e:42:ea:fe:9d:99:31:d1:db:4f: df:c3:da:e2:d6:26:25:e9:95:04:3d:d1:4a:01:9d:29:b2:68: 60:3f:97:40:b9:12:2b:e0:c0:7a:b0:2c:eb:8c:e1:36:5e:f7: 86:e3:93:62:ad:0c:24:47:19:8b:5d:ca:98:4a:d1:b0:b8:38: 39:0e:cc:7b:bb:11:09:6f:bc:61:71:50:44:ee:17:3c:d7:b5: d3:93:c2:b6:46:ec:74:6f:63:49:af:df:19:02:1d:dc:9f:fc: 0f:d6:2e:13:ed:cb:a6:6d:f6:fc:bc:39:01:bb:ee:b7:42:22: 32:87:40:8c:91:c6:7f:f6:13:71:55:70:1b:31:dd:c1:d2:11: 94:28:20:50:a8:db:4b:ab:03:91:ff:8f:9d:bd:b6:48:68:ac: e3:b9:b0:9d:11:25:67:52:4c:16:a9:1d:8b:80:06:7a:ff:d5: 05:83:77:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87QPTOEyRnFKNJfIU1YtaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNzk4ZjBmZTRmNGRmZmRmZWQyYzhlNjJkMjM1NDMwZjQ5 Mzc3Y2QwHhcNMjYwMTAyMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjlkMmUxOWQxMjM2N2IzMDZjODNmOGIwYWNjN2RmMzEwNzVkNWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmyvX/ZGyTrX1pEN2QeTC/Eui+/0 aNtBJY7RrvAy35Bv17ptV0pCmGgQB3351nsSSETIZvIDM5JaMTftzpC+T8o1JhOi 3GdijSrUhhCNeczvBvDTGMgF/w80/zWENXimDJhtWtsSCMaauGJpHkHIU76s1ADz X81Fhq7/0wXA7f6h7shBTRNr6oNGenessDmC3gfbi6QMeyA3BXOs+SwVMCuu/WLl yiVasZoajwnB64fX0RS9NI0/+TKnpbvbgfpBv0lsBv42TM4X1ctUicF10Fhvvgy0 FAgmxZPYQ60Ye8OFDWYzZK6FBwu1hBRH1akm8i1TkgfZU2nOfEqYJPC+vwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNKdLhnRI2ezBsg/iwrMffMQddX6MB8GA1UdIwQY MBaAFGp5jw/k9N/9/tLI5i0jVDD0k3fNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMt NzdjZjgxMDQxMDgzLzEvMHAwdUdkRWpaN01HeUQtTENzeDk4eEIxMWZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMtNzdjZjgxMDQxMDgz LzEvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZrNMA0G CSqGSIb3DQEBCwUAA4IBAQCmCGrJKuJ+8vq/wc2ANIiGMf3Joz0ejT5WlK/BhJN1 izr7T7pH6qM6CTzqbE4VnqzXueDoZj977dpeJfFYcUAXd84ItlF/1uztJww49pdy Po5C6v6dmTHR20/fw9ri1iYl6ZUEPdFKAZ0psmhgP5dAuRIr4MB6sCzrjOE2XveG 45NirQwkRxmLXcqYStGwuDg5Dsx7uxEJb7xhcVBE7hc817XTk8K2Rux0b2NJr98Z Ah3cn/wP1i4T7cumbfb8vDkBu+63QiIyh0CMkcZ/9hNxVXAbMd3B0hGUKCBQqNtL qwOR/4+dvbZIaKzjubCdESVnUkwWqR2LgAZ6/9UFg3eO -----END CERTIFICATE-----Generated at Tue Jan 20 12:47:39 2026 by rpki-client