This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/cCOa9Td1dyXgSsJH0W6VbUWVeS8.roa File: cCOa9Td1dyXgSsJH0W6VbUWVeS8.roa (raw, json) Hash identifier: D7Hy4SDe+u2iQvMr4uFM192GN65qy0Iw55cUiW6a9ys= Subject key identifier: 70:23:9A:F5:37:75:77:25:E0:4A:C2:47:D1:6E:95:6D:45:95:79:2F Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991 Certificate serial: 019B790FF654468464438B581D486CBA1BCA Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/cCOa9Td1dyXgSsJH0W6VbUWVeS8.roa Signing time: Thu 01 Jan 2026 10:17:27 +0000 ROA not before: Thu 01 Jan 2026 10:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 45.150.56.0/24 maxlen: 28 109.95.124.0/22 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:f6:54:46:84:64:43:8b:58:1d:48:6c:ba:1b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991 Validity Not Before: Jan 1 10:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70239af537757725e04ac247d16e956d4595792f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6f:6a:d9:a1:8c:09:83:76:7d:c1:0f:49:fb: 4f:5e:20:80:17:83:66:c4:61:27:ba:51:56:8e:46: 24:f1:82:67:ea:36:85:c0:4f:2c:65:fb:ba:eb:ec: 7b:58:14:e2:11:75:3d:c3:ab:ad:69:96:6b:4e:b2: a9:59:0b:3f:fd:38:31:b0:03:fa:62:b5:8a:5b:98: 9e:6c:9f:72:70:7d:9b:ad:3a:bb:b9:63:51:4f:20: f8:38:f3:d2:d0:a3:30:50:01:6c:f0:f1:5d:26:f4: c0:49:23:0a:95:b5:42:54:a2:f1:77:37:9d:7c:03: 7a:cc:ba:67:83:c8:c2:2d:46:36:c9:c2:96:9d:e5: aa:48:83:bc:71:5c:af:b0:1d:8f:95:45:b0:6f:cc: 03:82:d2:72:84:9a:8a:a0:bc:68:0c:2d:aa:dd:17: a8:28:d9:6c:46:2a:59:93:cf:4a:2e:b0:35:80:26: d1:57:14:71:b1:3d:93:24:ff:ba:e7:91:1d:20:34: 39:57:72:7d:07:f7:3b:ef:2c:a5:c1:d5:ac:a4:ac: 4e:82:13:79:dd:93:55:56:19:09:8d:0e:a3:90:91: e2:fa:2f:3e:9d:bf:d6:90:eb:26:6b:2a:86:3d:1f: 0f:96:a3:9b:cf:29:3d:cd:ce:78:20:db:57:4b:bc: 31:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:23:9A:F5:37:75:77:25:E0:4A:C2:47:D1:6E:95:6D:45:95:79:2F X509v3 Authority Key Identifier: keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/cCOa9Td1dyXgSsJH0W6VbUWVeS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.56.0/24 109.95.124.0/22 Signature Algorithm: sha256WithRSAEncryption 99:51:22:84:82:a8:21:bd:05:45:7e:9a:51:df:0f:be:2a:bc: ee:4e:94:10:90:ed:7f:ff:96:6f:70:b8:04:2c:a4:6b:99:e0: 11:af:52:6d:34:d0:42:de:5e:a6:33:05:85:b5:fd:36:8e:61: fc:47:ca:57:37:d5:85:01:7d:a7:2f:e1:ba:2d:d5:e3:6f:fb: 37:a9:ac:11:2e:5c:4d:cb:6d:1f:cd:6b:57:8e:b2:0a:e2:67: 0c:5d:a0:e3:03:ec:1f:c5:5f:d8:4b:59:9a:67:87:bb:c0:55: 84:99:d0:94:67:e6:40:02:8b:5a:38:7f:12:01:94:a8:05:04: e1:8d:1f:80:28:b1:9f:15:83:aa:db:4a:0e:11:c4:65:0d:64: 5c:02:ec:38:40:98:d2:3e:cf:1f:d7:78:6f:33:2d:3c:a3:41: da:ac:9a:4b:5d:42:2e:f0:7e:d7:ff:3b:11:01:fc:0c:43:a9: 9d:1b:8e:f6:d0:e0:71:a5:bd:b9:7f:5e:9d:30:7e:a1:ed:29: 5c:97:25:3a:b4:ce:6b:40:4e:49:7e:b0:bc:7b:f2:5c:0c:eb: 95:18:3f:46:b2:4a:9e:af:d1:4b:ea:e7:51:e3:9c:bd:bb:83: 07:e5:00:6b:69:15:b3:94:da:15:5e:7f:43:d9:c8:3b:bb:a6: 22:86:87:01 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5D/ZURoRkQ4tYHUhsuhvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDU0NzJiNTUwYjM0ZmRiMDFhZGNkNTEwYTlkY2Q4MjFj OWQ5OTEwHhcNMjYwMTAxMTAxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDIzOWFmNTM3NzU3NzI1ZTA0YWMyNDdkMTZlOTU2ZDQ1OTU3OTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW9q2aGMCYN2fcEPSftPXiCAF4Nm xGEnulFWjkYk8YJn6jaFwE8sZfu66+x7WBTiEXU9w6utaZZrTrKpWQs//TgxsAP6 YrWKW5iebJ9ycH2brTq7uWNRTyD4OPPS0KMwUAFs8PFdJvTASSMKlbVCVKLxdzed fAN6zLpng8jCLUY2ycKWneWqSIO8cVyvsB2PlUWwb8wDgtJyhJqKoLxoDC2q3Reo KNlsRipZk89KLrA1gCbRVxRxsT2TJP+655EdIDQ5V3J9B/c77yylwdWspKxOghN5 3ZNVVhkJjQ6jkJHi+i8+nb/WkOsmayqGPR8PlqObzyk9zc54INtXS7wxowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHAjmvU3dXcl4ErCR9FulW1FlXkvMB8GA1UdIwQY MBaAFEpFRytVCzT9sBrc1RCp3NghydmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZTU1ZDAtZmFmZC00OWMyLTljMDgt MTJjMDU4YmZhY2MxLzEvY0NPYTlUZDFkeVhnU3NKSDBXNlZiVVdWZVM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wZTU1ZDAtZmFmZC00OWMyLTljMDgtMTJjMDU4YmZhY2Mx LzEvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZY4AwQC bV98MA0GCSqGSIb3DQEBCwUAA4IBAQCZUSKEgqghvQVFfppR3w++KrzuTpQQkO1/ /5ZvcLgELKRrmeARr1JtNNBC3l6mMwWFtf02jmH8R8pXN9WFAX2nL+G6LdXjb/s3 qawRLlxNy20fzWtXjrIK4mcMXaDjA+wfxV/YS1maZ4e7wFWEmdCUZ+ZAAotaOH8S AZSoBQThjR+AKLGfFYOq20oOEcRlDWRcAuw4QJjSPs8f13hvMy08o0HarJpLXUIu 8H7X/zsRAfwMQ6mdG4720OBxpb25f16dMH6h7SlclyU6tM5rQE5JfrC8e/JcDOuV GD9Gskqer9FL6udR45y9u4MH5QBraRWzlNoVXn9D2cg7u6YihocB -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:36 2026 by rpki-client