This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/CI7pYhGB_QWEDwWDxH9AMaXoqxk.roa File: CI7pYhGB_QWEDwWDxH9AMaXoqxk.roa (raw, json) Hash identifier: 8Hc3zWSgP8S9JcZZT3xtbamEDzOnw5hNYjfQSbaqauA= Subject key identifier: 08:8E:E9:62:11:81:FD:05:84:0F:05:83:C4:7F:40:31:A5:E8:AB:19 Certificate issuer: /CN=d94bddafb5df098419020a8fbc7a90b16e341d63 Certificate serial: 019B7C12282589FD4CF2BA80EF9C95897107 Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/CI7pYhGB_QWEDwWDxH9AMaXoqxk.roa Signing time: Fri 02 Jan 2026 00:18:43 +0000 ROA not before: Fri 02 Jan 2026 00:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58073 IP address blocks: 2.58.20.0/22 maxlen: 22 2.58.23.0/24 maxlen: 24 37.220.32.0/21 maxlen: 24 45.10.116.0/22 maxlen: 22 45.82.44.0/22 maxlen: 22 45.88.16.0/22 maxlen: 22 45.93.32.0/22 maxlen: 22 45.129.176.0/22 maxlen: 22 45.145.252.0/22 maxlen: 22 46.182.104.0/24 maxlen: 24 46.182.105.0/24 maxlen: 24 46.182.106.0/24 maxlen: 24 46.182.107.0/24 maxlen: 24 46.182.109.0/24 maxlen: 24 46.182.110.0/24 maxlen: 24 46.182.111.0/24 maxlen: 24 185.38.12.0/22 maxlen: 24 193.104.186.0/24 maxlen: 24 2a02:2a38::/32 maxlen: 32 2a02:2a38:37::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:28:25:89:fd:4c:f2:ba:80:ef:9c:95:89:71:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63 Validity Not Before: Jan 2 00:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=088ee9621181fd05840f0583c47f4031a5e8ab19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:91:3e:0b:19:5c:d2:1b:98:5e:65:9b:ad:36: b6:9b:c2:e8:8e:5d:6b:db:00:3a:d4:f1:f3:71:f8: 00:40:1c:a2:9b:f8:e8:87:82:5d:d3:d6:1f:9f:05: fd:81:0e:a8:7b:38:60:1a:86:59:ef:41:54:16:f3: 53:8c:45:e4:df:72:10:f2:81:31:c2:43:a1:79:28: 99:d4:7a:de:e5:2b:05:e9:ac:93:10:72:40:bd:f3: a7:1a:b5:a6:3a:0f:de:04:f0:d2:d3:89:1f:e0:41: 96:f9:dc:34:0a:2a:96:72:f1:be:d4:f7:ba:e7:7f: d6:93:f5:a4:d8:d2:13:97:44:da:9a:7b:bb:f4:e4: c4:a6:d1:d3:c2:d6:67:08:2f:33:c6:8b:4f:0a:46: 6f:ae:6f:13:fb:d8:e8:52:6e:68:ac:c5:94:ee:e7: 2a:4c:1b:53:67:ee:60:ec:e2:89:5d:67:57:a4:57: 38:3c:ea:11:b7:3f:36:48:cf:82:97:d7:b5:1f:b3: 30:13:b8:a0:a5:8a:07:bb:a5:c4:9b:51:78:24:1e: 17:56:f7:b5:bd:de:b7:d3:5b:a8:fb:c4:0e:19:1d: 88:b5:06:2e:ab:a8:f1:eb:25:1f:c8:59:2b:93:e7: 61:6b:34:0c:64:10:02:81:ef:b5:54:96:cc:c5:39: a5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8E:E9:62:11:81:FD:05:84:0F:05:83:C4:7F:40:31:A5:E8:AB:19 X509v3 Authority Key Identifier: keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/CI7pYhGB_QWEDwWDxH9AMaXoqxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.20.0/22 37.220.32.0/21 45.10.116.0/22 45.82.44.0/22 45.88.16.0/22 45.93.32.0/22 45.129.176.0/22 45.145.252.0/22 46.182.104.0/22 46.182.109.0-46.182.111.255 185.38.12.0/22 193.104.186.0/24 IPv6: 2a02:2a38::/32 Signature Algorithm: sha256WithRSAEncryption 76:46:50:bb:c1:fc:90:56:1c:c7:b2:3b:fb:15:5b:ae:b1:f3: 70:a2:3f:6d:84:60:d2:e3:4f:49:40:6b:7b:f5:2b:81:1a:76: e6:fa:ec:05:c7:27:d6:f1:5c:92:ed:b6:38:40:8f:6d:b6:39: 20:89:fc:9a:2b:ba:a7:fc:26:48:47:4c:ac:73:1e:01:e7:25: fa:f5:24:f2:5c:5c:46:d0:1f:ce:2e:94:9b:45:01:3f:03:88: 98:4a:53:34:c9:78:64:00:b1:03:a6:d4:1a:8c:2d:7a:d8:c2: 7a:b4:af:eb:3e:27:3b:3e:0d:8d:17:34:6e:e7:4b:82:43:1e: 07:ba:c5:b2:1d:9d:09:a5:8a:b8:2a:2d:a2:16:db:ae:ce:57: c3:41:f2:4c:6f:88:9e:3f:dd:ef:18:45:dc:0f:95:db:48:37: 8c:04:d9:f5:3e:30:7e:9a:9b:45:28:ea:29:9f:7f:b4:fa:9f: fa:f4:66:82:f2:2e:3b:16:08:1e:ca:d3:f9:62:5f:b7:42:2b: 5e:c1:a7:10:56:5b:2f:84:5b:7d:41:c4:b1:3f:14:d9:77:96: 06:a0:77:0a:dd:3c:45:4a:b2:84:09:eb:bc:13:de:01:bd:e3: ee:2b:d9:93:25:25:a3:29:0e:04:d7:c8:ca:21:ba:40:5a:a3: 81:a5:11:75 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgISAZt8Eiglif1M8rqA75yViXEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NGJkZGFmYjVkZjA5ODQxOTAyMGE4ZmJjN2E5MGIxNmUz NDFkNjMwHhcNMjYwMTAyMDAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODhlZTk2MjExODFmZDA1ODQwZjA1ODNjNDdmNDAzMWE1ZThhYjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pE+Cxlc0huYXmWbrTa2m8Lojl1r 2wA61PHzcfgAQByim/joh4Jd09YfnwX9gQ6oezhgGoZZ70FUFvNTjEXk33IQ8oEx wkOheSiZ1Hre5SsF6ayTEHJAvfOnGrWmOg/eBPDS04kf4EGW+dw0CiqWcvG+1Pe6 53/Wk/Wk2NITl0Tamnu79OTEptHTwtZnCC8zxotPCkZvrm8T+9joUm5orMWU7ucq TBtTZ+5g7OKJXWdXpFc4POoRtz82SM+Cl9e1H7MwE7igpYoHu6XEm1F4JB4XVve1 vd6301uo+8QOGR2ItQYuq6jx6yUfyFkrk+dhazQMZBACge+1VJbMxTmlVwIDAQAB o4ICYjCCAl4wHQYDVR0OBBYEFAiO6WIRgf0FhA8Fg8R/QDGl6KsZMB8GA1UdIwQY MBaAFNlL3a+13wmEGQIKj7x6kLFuNB1jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlV2ZHI3WGZDWVFaQWdxUHZIcVFzVzQwSFdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jZGU3NTctNzY3Mi00NzIwLThjZTEt NmUyNmI5MWY2OTEwLzEvQ0k3cFloR0JfUVdFRHdXRHhIOUFNYVhvcXhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jZGU3NTctNzY3Mi00NzIwLThjZTEtNmUyNmI5MWY2OTEw LzEvMlV2ZHI3WGZDWVFaQWdxUHZIcVFzVzQwSFdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBWBAIAATBQAwQCAjoUAwQD JdwgAwQCLQp0AwQCLVIsAwQCLVgQAwQCLV0gAwQCLYGwAwQCLZH8AwQCLrZoMAwD BAAutm0DBAQutmADBAK5JgwDBADBaLowDQQCAAIwBwMFACoCKjgwDQYJKoZIhvcN AQELBQADggEBAHZGULvB/JBWHMeyO/sVW66x83CiP22EYNLjT0lAa3v1K4Eadub6 7AXHJ9bxXJLttjhAj222OSCJ/Joruqf8JkhHTKxzHgHnJfr1JPJcXEbQH84ulJtF AT8DiJhKUzTJeGQAsQOm1BqMLXrYwnq0r+s+Jzs+DY0XNG7nS4JDHge6xbIdnQml irgqLaIW267OV8NB8kxviJ4/3e8YRdwPldtIN4wE2fU+MH6am0Uo6imff7T6n/r0 ZoLyLjsWCB7K0/liX7dCK17BpxBWWy+EW31BxLE/FNl3lgagdwrdPEVKsoQJ67wT 3gG94+4r2ZMlJaMpDgTXyMohukBao4GlEXU= -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:03 2026 by rpki-client