This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/o9T7oh4K9H0mCWBwdt1A7_X6jDg.roa File: o9T7oh4K9H0mCWBwdt1A7_X6jDg.roa (raw, json) Hash identifier: mRN5lv7EsIT/W9Bse93WAZSVdJty+NekL6x+GxdmcDI= Subject key identifier: A3:D4:FB:A2:1E:0A:F4:7D:26:09:60:70:76:DD:40:EF:F5:FA:8C:38 Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd Certificate serial: 019B7F852B60EDD8B8E897197713D87F1DED Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/o9T7oh4K9H0mCWBwdt1A7_X6jDg.roa Signing time: Fri 02 Jan 2026 16:23:12 +0000 ROA not before: Fri 02 Jan 2026 16:23:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57468 IP address blocks: 45.15.220.0/22 maxlen: 22 185.6.208.0/22 maxlen: 22 185.6.209.0/24 maxlen: 24 185.6.210.0/24 maxlen: 24 185.6.211.0/24 maxlen: 24 185.144.32.0/22 maxlen: 22 194.60.240.0/23 maxlen: 23 194.60.240.0/24 maxlen: 24 194.60.241.0/24 maxlen: 24 2a03:1040::/32 maxlen: 32 2a07:3a80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:2b:60:ed:d8:b8:e8:97:19:77:13:d8:7f:1d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd Validity Not Before: Jan 2 16:23:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3d4fba21e0af47d2609607076dd40eff5fa8c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8f:d1:f7:57:fb:98:c2:e7:f9:85:92:ae:37: 12:32:92:27:22:c6:b5:7b:cf:c1:6f:5f:0e:a7:52: 42:39:c5:42:d4:89:5c:f0:05:d3:28:31:34:b2:8b: 0e:b6:6e:da:9d:da:5a:8d:a7:46:0d:84:ba:16:99: 67:e3:4e:46:b1:da:c2:b2:ea:b1:72:b9:9d:87:a2: 3d:63:6f:20:2b:82:6c:d7:e2:26:9d:39:4c:f8:08: 58:ee:51:e8:9d:dd:3b:55:e1:64:d0:5c:3c:8e:7f: d9:24:8e:ff:30:b4:5f:92:f6:24:69:ac:c5:c0:a3: ba:d9:2c:61:c6:60:14:6e:41:8a:e7:03:00:44:d4: 4f:7a:2a:2c:04:61:52:01:89:f6:f0:8d:8b:8e:e3: 1a:bb:88:40:93:31:a6:b3:35:3e:cf:88:ac:50:6f: 87:cd:b3:c7:c3:7d:97:92:a7:77:a4:79:55:38:b1: a9:d0:8e:25:e0:c1:d1:4c:52:9a:d3:86:80:41:f9: 7d:98:2b:83:6c:5e:cd:ab:23:a4:58:1a:cd:d6:2e: 7e:12:c6:4d:a9:bc:6c:60:e6:0c:8c:be:c0:b2:35: f5:6d:b9:79:89:93:75:ad:fb:05:ef:f5:f5:50:87: 9a:22:05:98:e0:ed:70:4a:fd:53:f0:24:1c:2d:db: d9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D4:FB:A2:1E:0A:F4:7D:26:09:60:70:76:DD:40:EF:F5:FA:8C:38 X509v3 Authority Key Identifier: keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/o9T7oh4K9H0mCWBwdt1A7_X6jDg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.220.0/22 185.6.208.0/22 185.144.32.0/22 194.60.240.0/23 IPv6: 2a03:1040::/32 2a07:3a80::/29 Signature Algorithm: sha256WithRSAEncryption 52:eb:5d:f6:54:1c:ca:75:1a:e7:e1:63:20:f2:c2:ac:ff:8c: c4:d0:55:4f:fd:79:32:74:f6:25:46:ba:44:cb:10:5c:b5:82: 52:be:bf:e0:ea:cd:40:f9:f5:2f:0e:32:1d:db:e3:c4:bb:03: 9d:4b:fb:3d:4e:06:c1:65:ba:06:37:ac:21:e3:16:de:90:92: 53:6a:80:3a:7b:fd:fc:7e:28:f3:08:d3:5c:e9:ae:86:26:22: 0d:f8:6f:60:04:93:9d:3f:f1:f1:89:62:cf:92:65:36:9e:77: 64:1e:6c:09:40:00:47:81:91:58:80:ad:53:15:ab:cb:c0:9f: e8:8d:d2:1b:3b:b0:51:53:69:62:26:e6:2b:6f:60:47:04:5f: 3e:6f:da:33:b2:d2:11:26:a6:86:6c:23:fe:83:fc:60:ee:63: 26:10:cf:8d:42:70:19:0c:b1:34:60:a2:71:b0:c0:95:db:89: 24:af:64:12:47:9f:2d:da:d0:2e:47:9b:39:44:85:3f:f2:3e: 01:ad:ff:96:05:55:b7:c2:11:da:39:99:9a:fc:f5:87:2c:53: 7d:74:aa:1c:f4:47:e6:3b:ab:df:ea:8e:3d:dd:f8:83:e9:82: b4:c8:03:c6:e5:f9:7e:e1:c5:c6:15:df:70:1c:16:38:48:3b: 77:e6:86:0e -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt/hStg7di46JcZdxPYfx3tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZThkYTg0MDdmOWY3NDhlODFmZTlkYTllYjA2YjNiMTdk MDY3ZGQwHhcNMjYwMTAyMTYyMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2Q0ZmJhMjFlMGFmNDdkMjYwOTYwNzA3NmRkNDBlZmY1ZmE4YzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44/R91f7mMLn+YWSrjcSMpInIsa1 e8/Bb18Op1JCOcVC1Ilc8AXTKDE0sosOtm7andpajadGDYS6Fpln405GsdrCsuqx crmdh6I9Y28gK4Js1+ImnTlM+AhY7lHond07VeFk0Fw8jn/ZJI7/MLRfkvYkaazF wKO62SxhxmAUbkGK5wMARNRPeiosBGFSAYn28I2LjuMau4hAkzGmszU+z4isUG+H zbPHw32Xkqd3pHlVOLGp0I4l4MHRTFKa04aAQfl9mCuDbF7NqyOkWBrN1i5+EsZN qbxsYOYMjL7AsjX1bbl5iZN1rfsF7/X1UIeaIgWY4O1wSv1T8CQcLdvZEwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFKPU+6IeCvR9JglgcHbdQO/1+ow4MB8GA1UdIwQY MBaAFBDo2oQH+fdI6B/p2p6wazsX0GfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU9qYWhBZjU5MGpvSC1uYW5yQnJPeGZRWjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81NTQ5ODgtZDFhOS00YjU0LTkzZWUt MmNlZWE1Y2FmM2EwLzEvbzlUN29oNEs5SDBtQ1dCd2R0MUE3X1g2akRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81NTQ5ODgtZDFhOS00YjU0LTkzZWUtMmNlZWE1Y2FmM2Ew LzEvRU9qYWhBZjU5MGpvSC1uYW5yQnJPeGZRWjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQCLQ/cAwQC uQbQAwQCuZAgAwQBwjzwMBQEAgACMA4DBQAqAxBAAwUDKgc6gDANBgkqhkiG9w0B AQsFAAOCAQEAUutd9lQcynUa5+FjIPLCrP+MxNBVT/15MnT2JUa6RMsQXLWCUr6/ 4OrNQPn1Lw4yHdvjxLsDnUv7PU4GwWW6BjesIeMW3pCSU2qAOnv9/H4o8wjTXOmu hiYiDfhvYASTnT/x8Yliz5JlNp53ZB5sCUAAR4GRWICtUxWry8Cf6I3SGzuwUVNp YibmK29gRwRfPm/aM7LSESamhmwj/oP8YO5jJhDPjUJwGQyxNGCicbDAlduJJK9k EkefLdrQLkebOUSFP/I+Aa3/lgVVt8IR2jmZmvz1hyxTfXSqHPRH5jur3+qOPd34 g+mCtMgDxuX5fuHFxhXfcBwWOEg7d+aGDg== -----END CERTIFICATE-----Generated at Mon Jan 12 04:03:52 2026 by rpki-client