This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/cNrzpnZVR-vdGnfMmjiDxUQw38w.roa File: cNrzpnZVR-vdGnfMmjiDxUQw38w.roa (raw, json) Hash identifier: jDSBudPBssvuTBaPnXNJhRgSYVM03+9BoPvraHbjsUs= Subject key identifier: 70:DA:F3:A6:76:55:47:EB:DD:1A:77:CC:9A:38:83:C5:44:30:DF:CC Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 019B7C804EBE42432B508909E4A79F80A787 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/cNrzpnZVR-vdGnfMmjiDxUQw38w.roa Signing time: Fri 02 Jan 2026 02:19:02 +0000 ROA not before: Fri 02 Jan 2026 02:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207369 IP address blocks: 45.140.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4e:be:42:43:2b:50:89:09:e4:a7:9f:80:a7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Jan 2 02:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70daf3a6765547ebdd1a77cc9a3883c54430dfcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:70:38:b1:f1:9d:f8:3d:b4:90:db:41:8a:9c: c7:c2:5c:78:55:c3:af:44:35:38:64:d7:85:58:6b: bd:bb:6e:17:92:fe:20:29:62:3b:0b:d4:c9:d3:06: 0f:ef:0e:34:5f:ba:44:4f:0a:a1:87:5f:96:71:ab: c6:48:d2:32:84:7d:60:96:f8:ca:f6:a7:e4:8c:5a: cf:30:8c:4a:dd:02:0c:5a:53:14:7f:31:b2:0b:9c: f8:cb:be:30:d8:5e:42:b3:f4:a1:95:9e:a8:d4:00: 46:44:b2:ad:ef:dc:61:7a:43:69:d6:3b:7d:60:f3: d4:5d:f0:d8:f6:66:a0:28:71:82:73:2b:7d:ee:30: b9:db:89:6a:c9:d8:3d:e4:a0:e7:a7:0e:22:19:d8: 75:cf:7d:c7:85:8d:35:f1:1a:37:ba:1b:de:09:49: 1c:46:4b:1b:29:43:b9:52:a5:28:7e:c2:bf:01:c5: 5c:62:11:88:14:2c:2b:a4:0e:6f:08:e1:70:e1:cd: 06:a3:51:fd:2b:07:5b:3e:96:8e:70:ed:80:a3:0e: 33:05:98:c5:79:94:cd:4d:5c:95:c4:e7:7b:59:63: 20:41:65:6f:78:cb:a3:82:8c:53:31:28:7c:a2:10: 98:0f:0b:f5:c2:71:ff:72:05:1b:ec:9c:ad:61:16: ec:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DA:F3:A6:76:55:47:EB:DD:1A:77:CC:9A:38:83:C5:44:30:DF:CC X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/cNrzpnZVR-vdGnfMmjiDxUQw38w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.26.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:cf:f0:3b:f3:16:6b:8b:7a:07:55:e4:8d:a7:ea:f1:2a:9b: 2c:ef:11:3e:95:85:cd:c7:c4:38:b8:fc:f4:8e:8d:81:90:17: 2e:90:d0:ea:b1:4e:6c:aa:43:ce:c5:f7:a2:5d:a3:54:ed:13: 9a:91:c9:c1:92:fa:f0:3e:f1:37:4a:ef:e3:37:35:b1:20:72: 90:b8:7e:b1:3a:6d:d6:90:81:1b:e0:40:e8:9a:b5:5b:99:2f: 37:61:45:87:1c:11:9c:02:53:bd:df:13:ff:35:48:09:10:ce: 61:2a:f6:10:a4:85:21:1e:e1:78:74:a0:bc:69:1c:9b:39:b2: dd:3a:9f:a8:18:1f:b3:f0:c8:59:6b:ae:57:3d:5d:cb:9f:ea: 7d:ce:23:04:4c:e2:2f:52:10:a3:90:90:34:7a:71:f3:95:98: e5:76:35:b6:c4:62:18:66:ea:1f:ad:f7:43:e0:3c:13:46:a6: 47:8e:a6:c3:7e:81:e9:af:8c:65:28:71:2a:84:0a:1d:8d:e8: e0:fd:f7:02:9a:21:c1:a0:bd:b5:a3:59:54:ae:65:df:18:e8: 91:50:76:42:c7:3b:ea:ae:54:05:d2:ee:62:ee:db:b7:ce:9f: 1e:ad:4d:3a:d2:12:8c:39:a1:8b:9e:22:8b:33:af:ca:a9:0e: ec:e8:c4:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gE6+QkMrUIkJ5KefgKeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjYwMTAyMDIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGRhZjNhNjc2NTU0N2ViZGQxYTc3Y2M5YTM4ODNjNTQ0MzBkZmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnA4sfGd+D20kNtBipzHwlx4VcOv RDU4ZNeFWGu9u24Xkv4gKWI7C9TJ0wYP7w40X7pETwqhh1+WcavGSNIyhH1glvjK 9qfkjFrPMIxK3QIMWlMUfzGyC5z4y74w2F5Cs/ShlZ6o1ABGRLKt79xhekNp1jt9 YPPUXfDY9magKHGCcyt97jC524lqydg95KDnpw4iGdh1z33HhY018Ro3uhveCUkc RksbKUO5UqUofsK/AcVcYhGIFCwrpA5vCOFw4c0Go1H9KwdbPpaOcO2Aow4zBZjF eZTNTVyVxOd7WWMgQWVveMujgoxTMSh8ohCYDwv1wnH/cgUb7JytYRbsSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHDa86Z2VUfr3Rp3zJo4g8VEMN/MMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvY05yenBuWlZSLXZkR25mTW1qaUR4VVF3Mzh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYwaMA0G CSqGSIb3DQEBCwUAA4IBAQA/z/A78xZri3oHVeSNp+rxKpss7xE+lYXNx8Q4uPz0 jo2BkBcukNDqsU5sqkPOxfeiXaNU7ROakcnBkvrwPvE3Su/jNzWxIHKQuH6xOm3W kIEb4EDomrVbmS83YUWHHBGcAlO93xP/NUgJEM5hKvYQpIUhHuF4dKC8aRybObLd Op+oGB+z8MhZa65XPV3Ln+p9ziMETOIvUhCjkJA0enHzlZjldjW2xGIYZuofrfdD 4DwTRqZHjqbDfoHpr4xlKHEqhAodjejg/fcCmiHBoL21o1lUrmXfGOiRUHZCxzvq rlQF0u5i7tu3zp8erU060hKMOaGLniKLM6/KqQ7s6MTQ -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:31 2026 by rpki-client