This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/CP6ZhwSgLb6O1bRBK-glPLaWrkE.roa File: CP6ZhwSgLb6O1bRBK-glPLaWrkE.roa (raw, json) Hash identifier: 0FlIFF8njtLCNWLvVxLWxtS2T3linMl1gxgDQ5HC76Q= Subject key identifier: 08:FE:99:87:04:A0:2D:BE:8E:D5:B4:41:2B:E8:25:3C:B6:96:AE:41 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019BEB08077EFEF97DBADAF0A49ABC69AD41 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/CP6ZhwSgLb6O1bRBK-glPLaWrkE.roa Signing time: Fri 23 Jan 2026 13:25:30 +0000 ROA not before: Fri 23 Jan 2026 13:25:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 45.137.196.0/24 maxlen: 24 45.137.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:08:07:7e:fe:f9:7d:ba:da:f0:a4:9a:bc:69:ad:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 23 13:25:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08fe998704a02dbe8ed5b4412be8253cb696ae41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:7f:94:1c:69:a3:46:5a:b6:6e:5c:8d:9a: c5:19:30:8d:36:1f:4b:a7:80:c2:f5:85:dd:7c:84: eb:62:6e:d9:b0:93:18:8b:b1:cc:49:d8:8a:c2:f3: 88:32:c3:51:f0:bc:38:9d:09:be:e2:08:b6:5f:67: de:9e:37:c2:bc:90:58:da:0f:a2:df:4b:3e:d6:1f: 0e:a0:90:05:67:65:3f:bb:9c:21:16:74:3f:9f:d6: be:3c:b8:b3:e8:17:f0:99:06:9b:6d:79:eb:92:f3: 01:8a:f1:47:27:9d:6c:d2:47:1b:b8:fa:dc:55:a0: fc:b4:92:13:38:41:06:8c:c1:3f:f7:1c:3f:cf:4f: 22:21:e6:5b:a4:b8:45:76:7b:7f:99:89:1a:a3:63: 51:01:b7:94:fe:f0:db:0e:30:0f:64:8c:89:32:e6: 10:95:b2:a7:9c:1b:18:39:bc:00:2b:fe:46:12:d8: 6e:a7:75:08:40:3a:6e:a1:7a:25:d7:44:78:ae:6c: 7d:d9:3f:ae:c9:e5:4e:13:79:fe:6d:8f:3b:ad:4f: bb:d4:0a:ed:f4:47:05:df:ce:72:8b:f2:02:d9:90: 6f:b6:a0:34:e2:1d:09:0b:d9:f3:13:13:19:c8:10: a6:44:94:b0:90:55:9b:34:0a:93:0d:43:36:3c:fb: 7e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FE:99:87:04:A0:2D:BE:8E:D5:B4:41:2B:E8:25:3C:B6:96:AE:41 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/CP6ZhwSgLb6O1bRBK-glPLaWrkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.196.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:49:db:8e:0f:ee:1b:bf:f1:97:ac:ba:08:6f:f9:66:82:d9: 9f:5c:60:24:c2:19:86:21:e8:9e:f3:c3:27:69:cd:61:f5:64: 0a:a7:25:9c:69:bb:0f:b3:93:b6:a0:04:91:ef:3f:40:f9:e1: de:4b:51:f7:1a:31:51:ed:57:0d:99:67:90:ee:36:16:68:0f: fd:68:68:83:69:dc:45:fc:91:a8:98:ed:4a:e2:6a:bf:05:d8: 9c:d1:42:05:20:be:8e:5e:a2:f3:c3:98:c9:17:5f:8c:11:67: 5e:d6:37:74:57:b3:f4:ee:ab:79:50:c9:1e:de:bc:52:b0:d9: 45:d4:3c:0d:70:d2:45:00:ac:21:cb:d4:05:16:9b:97:7b:f8: 59:01:7a:83:c5:69:71:f5:b8:44:09:82:3d:a3:ea:3e:20:d2: 18:2d:07:28:d0:84:5b:2c:74:47:3c:1c:0d:0f:30:3b:fd:78: 13:e6:57:6a:8e:e3:b6:bc:dc:5f:8d:bb:67:8a:f6:cb:4a:55: 19:36:c8:7a:7c:69:37:73:4c:ab:e4:2f:4c:6f:df:2b:b3:d5: e9:2a:b3:24:f8:af:25:8d:eb:47:0e:9f:a3:3a:70:66:08:02: a8:4e:98:54:cf:c9:ce:92:35:c1:28:57:1d:b3:7f:13:24:89: fe:8c:31:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvrCAd+/vl9utrwpJq8aa1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTIzMTMyNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGZlOTk4NzA0YTAyZGJlOGVkNWI0NDEyYmU4MjUzY2I2OTZhZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYR/lBxpo0Zatm5cjZrFGTCNNh9L p4DC9YXdfITrYm7ZsJMYi7HMSdiKwvOIMsNR8Lw4nQm+4gi2X2fenjfCvJBY2g+i 30s+1h8OoJAFZ2U/u5whFnQ/n9a+PLiz6BfwmQabbXnrkvMBivFHJ51s0kcbuPrc VaD8tJITOEEGjME/9xw/z08iIeZbpLhFdnt/mYkao2NRAbeU/vDbDjAPZIyJMuYQ lbKnnBsYObwAK/5GEthup3UIQDpuoXol10R4rmx92T+uyeVOE3n+bY87rU+71Art 9EcF385yi/IC2ZBvtqA04h0JC9nzExMZyBCmRJSwkFWbNAqTDUM2PPt+vwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAj+mYcEoC2+jtW0QSvoJTy2lq5BMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvQ1A2Wmh3U2dMYjZPMWJSQkstZ2xQTGFXcmtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYnEMA0G CSqGSIb3DQEBCwUAA4IBAQA/SduOD+4bv/GXrLoIb/lmgtmfXGAkwhmGIeie88Mn ac1h9WQKpyWcabsPs5O2oASR7z9A+eHeS1H3GjFR7VcNmWeQ7jYWaA/9aGiDadxF /JGomO1K4mq/Bdic0UIFIL6OXqLzw5jJF1+MEWde1jd0V7P07qt5UMke3rxSsNlF 1DwNcNJFAKwhy9QFFpuXe/hZAXqDxWlx9bhECYI9o+o+INIYLQco0IRbLHRHPBwN DzA7/XgT5ldqjuO2vNxfjbtnivbLSlUZNsh6fGk3c0yr5C9Mb98rs9XpKrMk+K8l jetHDp+jOnBmCAKoTphUz8nOkjXBKFcds38TJIn+jDE1 -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:50 2026 by rpki-client