This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/OkVoScbKIL9TXKvP438rB5FRYb0.roa File: OkVoScbKIL9TXKvP438rB5FRYb0.roa (raw, json) Hash identifier: 45VM0zyf0tTbWI+Pen84q/pMakzdNZmUXMwDebqNLz4= Subject key identifier: 3A:45:68:49:C6:CA:20:BF:53:5C:AB:CF:E3:7F:2B:07:91:51:61:BD Certificate issuer: /CN=02558509e1c0ec160de2e074177213de30615d6f Certificate serial: 019B7E37DCDA7265BB5E1DEAA262F2F0A492 Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/OkVoScbKIL9TXKvP438rB5FRYb0.roa Signing time: Fri 02 Jan 2026 10:19:08 +0000 ROA not before: Fri 02 Jan 2026 10:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50474 IP address blocks: 45.143.168.0/24 maxlen: 24 45.143.169.0/24 maxlen: 24 45.143.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:dc:da:72:65:bb:5e:1d:ea:a2:62:f2:f0:a4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f Validity Not Before: Jan 2 10:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a456849c6ca20bf535cabcfe37f2b07915161bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e4:8f:88:b7:12:6e:31:bf:b2:36:16:72:1e: 4f:23:93:f3:68:4b:06:79:9f:4a:99:87:37:fb:03: ab:2b:d5:ce:ec:6e:9d:ec:3a:e2:53:86:ea:24:f7: a3:1e:bc:3a:ad:01:17:cd:82:46:6f:52:02:08:ee: 5b:4d:90:74:0e:9e:71:c1:59:bc:72:5f:74:dd:1a: f9:a5:04:79:0f:71:ef:16:fe:5b:f5:d3:7a:99:a9: b3:98:3e:e3:c5:95:61:ee:40:d3:5a:49:97:08:c7: 25:99:63:e8:43:27:2a:91:19:49:41:9c:bc:b9:52: fa:99:e6:b6:bf:81:23:6d:af:28:3b:69:14:4b:f8: 24:79:82:4c:6d:97:cb:48:59:69:32:a2:e5:aa:0a: 19:bd:1d:97:5c:4d:90:d2:f5:40:b0:19:ec:62:53: f9:1b:30:8f:66:9e:56:76:a9:52:4a:86:03:72:70: 93:cd:ec:89:99:82:ca:b4:2b:f7:e9:97:b6:a5:d6: 73:10:d4:83:dd:a3:22:35:33:2c:03:3a:a4:c1:9a: 67:7d:0c:7e:02:a4:93:27:96:d2:a7:3b:b6:bc:58: 40:39:96:99:49:0d:47:44:85:91:af:ed:da:5c:d6: 05:91:a4:a4:f6:42:8f:b4:b4:eb:58:60:74:22:57: a8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:45:68:49:C6:CA:20:BF:53:5C:AB:CF:E3:7F:2B:07:91:51:61:BD X509v3 Authority Key Identifier: keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/OkVoScbKIL9TXKvP438rB5FRYb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.168.0/22 Signature Algorithm: sha256WithRSAEncryption ac:08:5b:b9:f9:0b:75:ee:84:8f:58:51:71:0d:e0:0e:61:cb: 0e:7c:9e:52:a5:9e:c0:41:34:b1:28:7d:1c:48:fe:37:f2:88: c5:d8:6c:66:9d:c2:eb:78:43:5f:b3:4a:0d:cf:7a:75:c4:c4: cf:39:5a:61:f3:ec:00:0d:3a:f2:d2:94:cf:0d:34:4b:81:f2: 43:8f:e8:e0:5b:41:da:6a:8a:28:c2:e5:e8:13:2a:d3:83:b8: e1:f4:b4:b9:8b:00:5b:60:0e:50:2b:bb:99:5c:dd:70:eb:ba: 79:e9:99:24:1d:07:b8:2d:44:19:92:06:2f:94:02:bb:e4:61: 4b:86:3e:88:d8:06:93:b4:57:a1:0a:e2:39:30:e4:30:7a:65: 30:4a:ef:08:35:20:53:7f:85:15:1f:42:3d:b9:3b:f9:0b:38: e2:de:23:a7:9a:05:06:fd:7b:40:05:af:a7:28:f0:d4:70:d0: 44:31:5d:76:92:f9:11:40:d6:ab:ef:9c:9f:cd:f4:b6:c0:65: df:39:92:b1:cb:d5:67:fb:7f:67:84:c5:54:be:52:78:7a:3a: 79:80:38:ad:4d:18:ee:85:fd:26:a7:ba:bd:31:6e:22:0a:18: 9d:d5:06:45:ed:61:dd:43:9a:e5:fb:84:56:46:85:54:54:4a: e8:bb:f0:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N9zacmW7Xh3qomLy8KSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNTU4NTA5ZTFjMGVjMTYwZGUyZTA3NDE3NzIxM2RlMzA2 MTVkNmYwHhcNMjYwMTAyMTAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTQ1Njg0OWM2Y2EyMGJmNTM1Y2FiY2ZlMzdmMmIwNzkxNTE2MWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOSPiLcSbjG/sjYWch5PI5PzaEsG eZ9KmYc3+wOrK9XO7G6d7DriU4bqJPejHrw6rQEXzYJGb1ICCO5bTZB0Dp5xwVm8 cl903Rr5pQR5D3HvFv5b9dN6mamzmD7jxZVh7kDTWkmXCMclmWPoQycqkRlJQZy8 uVL6mea2v4Ejba8oO2kUS/gkeYJMbZfLSFlpMqLlqgoZvR2XXE2Q0vVAsBnsYlP5 GzCPZp5WdqlSSoYDcnCTzeyJmYLKtCv36Ze2pdZzENSD3aMiNTMsAzqkwZpnfQx+ AqSTJ5bSpzu2vFhAOZaZSQ1HRIWRr+3aXNYFkaSk9kKPtLTrWGB0IleooQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDpFaEnGyiC/U1yrz+N/KweRUWG9MB8GA1UdIwQY MBaAFAJVhQnhwOwWDeLgdBdyE94wYV1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWxXRkNlSEE3QllONHVCMEYzSVQzakJoWFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hODYwYmYtMWEyNy00ZjBmLWJkOTEt N2FlNjkxMWNhMTI2LzEvT2tWb1NjYktJTDlUWEt2UDQzOHJCNUZSWWIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9hODYwYmYtMWEyNy00ZjBmLWJkOTEtN2FlNjkxMWNhMTI2 LzEvQWxXRkNlSEE3QllONHVCMEYzSVQzakJoWFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY+oMA0G CSqGSIb3DQEBCwUAA4IBAQCsCFu5+Qt17oSPWFFxDeAOYcsOfJ5SpZ7AQTSxKH0c SP438ojF2GxmncLreENfs0oNz3p1xMTPOVph8+wADTry0pTPDTRLgfJDj+jgW0Ha aooowuXoEyrTg7jh9LS5iwBbYA5QK7uZXN1w67p56ZkkHQe4LUQZkgYvlAK75GFL hj6I2AaTtFehCuI5MOQwemUwSu8INSBTf4UVH0I9uTv5Czji3iOnmgUG/XtABa+n KPDUcNBEMV12kvkRQNar75yfzfS2wGXfOZKxy9Vn+39nhMVUvlJ4ejp5gDitTRju hf0mp7q9MW4iChid1QZF7WHdQ5rl+4RWRoVUVErou/CQ -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:29 2026 by rpki-client