This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa File: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (raw, json) Hash identifier: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U= Subject key identifier: 0A:7D:97:1F:27:81:F3:55:AA:69:94:A3:83:B4:01:7F:01:C3:F0:25 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019B7D5C9620973249BB9C01F0EF6E983CD0 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa Signing time: Fri 02 Jan 2026 06:19:38 +0000 ROA not before: Fri 02 Jan 2026 06:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26042 IP address blocks: 45.129.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:96:20:97:32:49:bb:9c:01:f0:ef:6e:98:3c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Jan 2 06:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a7d971f2781f355aa6994a383b4017f01c3f025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:e5:5e:b0:92:78:c9:c6:8a:d2:25:d1:b5: bb:e1:b1:86:31:e1:87:b3:b3:7e:51:26:83:f2:80: 52:b5:29:89:31:0d:ac:18:3f:ac:c6:e5:ab:fe:9d: d7:d8:3a:5b:a9:06:10:83:6a:e5:34:bc:6f:ac:b5: 00:53:92:27:c4:42:88:39:59:93:cd:eb:ac:03:90: d9:0b:67:a5:62:41:e3:3b:8f:f1:84:2d:b4:f5:12: 02:f6:29:da:1f:35:14:da:c3:c4:ee:ce:70:e9:15: 7b:f4:38:e0:5f:24:99:b0:f6:af:b7:bc:da:57:1e: 11:6b:29:c5:a5:1a:6b:96:34:38:2c:59:ce:60:98: c2:e1:88:69:3b:d7:c2:4d:7a:30:32:7e:04:3b:9d: b0:7d:b4:c7:fd:3f:5a:b8:59:ba:e3:19:6b:39:91: 0c:78:9c:51:b0:fb:e2:73:f4:f9:c3:97:62:6f:70: b4:5f:8d:91:05:24:2b:17:8e:cb:64:0d:e8:9f:3c: d2:72:90:1f:60:c6:e6:7a:2b:92:fc:4a:15:8f:cd: c4:14:ce:a8:79:b3:dc:b7:1c:2e:eb:de:cd:b6:d3: 96:79:f0:92:8d:dc:4e:6c:7d:df:28:86:6c:af:7a: 20:7d:01:b7:98:12:83:6e:1e:e3:95:0b:f0:7f:15: 98:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7D:97:1F:27:81:F3:55:AA:69:94:A3:83:B4:01:7F:01:C3:F0:25 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.240.0/24 Signature Algorithm: sha256WithRSAEncryption 80:32:8e:57:d2:15:51:a5:56:ed:a0:28:78:b8:d9:7c:dc:2f: 01:e6:93:46:00:b3:ed:55:7e:24:84:4d:65:44:22:e5:af:17: 23:2f:ea:8a:51:7a:eb:9f:7b:90:37:7b:4a:7c:8f:c9:11:f5: e8:d6:1f:43:9e:67:9a:ac:cc:2f:e4:05:c8:5a:23:5c:a3:0b: b9:12:03:70:ea:c6:a6:0f:19:4d:d0:6f:c5:a9:4a:2f:5a:43: 81:ca:4e:19:2d:79:f7:da:76:ae:da:96:25:7e:53:ca:23:b0: db:ff:e0:58:66:6f:79:bf:22:d1:76:c7:2d:6c:97:eb:49:ac: 40:8d:6e:2a:d9:41:99:68:ab:6f:7b:a0:89:33:38:4f:00:e2: 8f:91:3b:11:24:66:c8:ec:d5:7e:2f:17:dc:54:c9:b9:d9:94: 7c:91:20:a0:1e:7e:97:9e:5e:b4:4e:74:93:55:4e:4a:39:00: 1b:e2:d6:9c:ee:ca:38:c3:cd:c2:d1:a9:56:ee:74:26:2c:cd: 18:67:26:ca:2c:a9:5a:0d:40:b6:95:1f:68:7d:66:1a:75:10: e2:9c:72:8d:2f:32:9a:40:19:75:c0:60:6c:d5:5a:65:56:b7: 37:5b:8d:24:3f:33:9b:ce:47:95:ad:5a:aa:5d:5e:41:ed:21: 47:97:2c:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJYglzJJu5wB8O9umDzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYwMTAyMDYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTdkOTcxZjI3ODFmMzU1YWE2OTk0YTM4M2I0MDE3ZjAxYzNmMDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw97lXrCSeMnGitIl0bW74bGGMeGH s7N+USaD8oBStSmJMQ2sGD+sxuWr/p3X2DpbqQYQg2rlNLxvrLUAU5InxEKIOVmT zeusA5DZC2elYkHjO4/xhC209RIC9inaHzUU2sPE7s5w6RV79DjgXySZsPavt7za Vx4RaynFpRprljQ4LFnOYJjC4YhpO9fCTXowMn4EO52wfbTH/T9auFm64xlrOZEM eJxRsPvic/T5w5dib3C0X42RBSQrF47LZA3onzzScpAfYMbmeiuS/EoVj83EFM6o ebPctxwu697NttOWefCSjdxObH3fKIZsr3ogfQG3mBKDbh7jlQvwfxWYfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAp9lx8ngfNVqmmUo4O0AX8Bw/AlMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQ24yWEh5ZUI4MVdxYVpTamc3UUJmd0hEOENVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYHwMA0G CSqGSIb3DQEBCwUAA4IBAQCAMo5X0hVRpVbtoCh4uNl83C8B5pNGALPtVX4khE1l RCLlrxcjL+qKUXrrn3uQN3tKfI/JEfXo1h9DnmearMwv5AXIWiNcowu5EgNw6sam DxlN0G/FqUovWkOByk4ZLXn32nau2pYlflPKI7Db/+BYZm95vyLRdsctbJfrSaxA jW4q2UGZaKtve6CJMzhPAOKPkTsRJGbI7NV+LxfcVMm52ZR8kSCgHn6Xnl60TnST VU5KOQAb4tac7so4w83C0alW7nQmLM0YZybKLKlaDUC2lR9ofWYadRDinHKNLzKa QBl1wGBs1VplVrc3W40kPzObzkeVrVqqXV5B7SFHlywr -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:07 2026 by rpki-client