This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/CALu0k-yKUvKsJUlxYFOoPV6EQE.roa File: CALu0k-yKUvKsJUlxYFOoPV6EQE.roa (raw, json) Hash identifier: s+hlryHFuUczKXFccHxAAEsjQzWGHbx1kgIYXL7zsPA= Subject key identifier: 08:02:EE:D2:4F:B2:29:4B:CA:B0:95:25:C5:81:4E:A0:F5:7A:11:01 Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd Certificate serial: 019B7BA4BD5D7B6B36AFFD46818DACAACA84 Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/CALu0k-yKUvKsJUlxYFOoPV6EQE.roa Signing time: Thu 01 Jan 2026 22:19:12 +0000 ROA not before: Thu 01 Jan 2026 22:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25227 IP address blocks: 46.28.94.0/24 maxlen: 24 81.95.134.0/24 maxlen: 24 81.95.137.0/24 maxlen: 24 81.95.140.0/24 maxlen: 24 85.236.0.0/19 maxlen: 24 92.60.80.0/20 maxlen: 24 92.60.80.0/24 maxlen: 24 94.230.0.0/20 maxlen: 24 141.136.112.0/21 maxlen: 24 213.134.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:bd:5d:7b:6b:36:af:fd:46:81:8d:ac:aa:ca:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd Validity Not Before: Jan 1 22:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0802eed24fb2294bcab09525c5814ea0f57a1101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:56:5d:17:6d:d3:b7:08:41:ac:74:8e:92: f4:b5:55:f8:12:b8:d8:c7:ea:3c:7c:d5:29:98:fe: 80:31:5f:1b:df:0f:18:4b:4f:24:28:ce:d9:38:a9: f1:40:50:c2:fe:ad:24:90:60:a8:af:e2:0a:07:6a: 21:48:43:ca:39:95:49:f1:c8:86:90:82:9f:3c:c8: bf:74:20:29:5c:e7:c3:e7:c3:0e:ab:a6:ac:c6:ff: 22:e4:81:7d:e8:9d:ea:6e:8c:14:32:9f:23:4e:cb: 82:e0:33:c5:ae:eb:4a:d1:c9:04:3e:df:3e:c8:72: 0f:5b:94:61:20:a7:df:47:14:99:8d:65:cf:59:a9: 33:74:5d:17:fc:a5:8a:57:4e:dc:e4:d7:49:88:6a: 37:70:77:29:88:7e:fe:90:86:32:df:b4:83:e8:6d: 16:3a:38:5e:48:44:1a:e1:d0:3f:41:d6:dc:1b:9e: fb:82:33:93:2c:ef:84:b1:01:99:ea:fb:37:06:b4: b6:73:e2:ed:12:57:63:29:3b:f8:09:09:86:c7:44: 76:e4:3e:8c:cb:b4:1d:1e:fc:07:6e:c2:f9:65:68: d5:9b:d5:8a:f6:ea:88:e7:b8:08:e6:5c:f4:d6:86: b2:7c:8a:b2:36:bc:7c:13:b3:1f:00:29:02:86:86: ed:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:02:EE:D2:4F:B2:29:4B:CA:B0:95:25:C5:81:4E:A0:F5:7A:11:01 X509v3 Authority Key Identifier: keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/CALu0k-yKUvKsJUlxYFOoPV6EQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.94.0/24 81.95.134.0/24 81.95.137.0/24 81.95.140.0/24 85.236.0.0/19 92.60.80.0/20 94.230.0.0/20 141.136.112.0/21 213.134.192.0/19 Signature Algorithm: sha256WithRSAEncryption 6a:81:ed:e3:d9:cd:7e:6d:29:69:e7:73:49:3f:68:9a:5f:66: fa:29:0e:ae:52:1a:0d:28:99:ad:6d:3e:a3:98:20:ca:6f:0c: 43:44:29:f3:af:58:55:3d:b5:bd:fa:ef:31:7b:fd:93:27:fd: b5:13:cf:9a:86:8f:c8:9e:be:26:40:df:a8:94:85:d2:d3:77: 98:41:a6:76:4e:d5:45:9e:05:06:00:75:08:b4:45:d8:15:7f: 95:2b:b4:f6:7e:c7:92:7a:35:63:b1:0f:50:16:2d:f8:0e:4e: 92:70:54:35:99:20:c0:46:51:ec:81:df:a7:40:32:53:e8:61: b9:10:50:67:56:56:d3:35:96:bc:53:ea:fa:bb:8e:3a:88:a9: e1:e5:f2:c9:f6:fc:fc:7b:60:11:e9:6f:bd:81:10:7e:06:a1: 29:ff:87:94:ac:03:9a:56:78:b4:fa:2e:b5:bc:00:94:6f:73: 54:9d:6c:80:b8:43:23:70:6b:04:29:a8:44:6b:b8:47:02:f0: 2b:c9:46:54:19:64:6b:cd:4b:c7:b7:16:14:aa:79:29:65:fe: 02:0d:4b:a0:66:78:91:86:b2:5e:be:57:c5:7f:09:a7:b4:40: ca:e5:9e:50:2c:93:df:bf:3b:79:f3:ba:85:5f:85:68:c2:12: d0:0e:73:56 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt7pL1de2s2r/1GgY2sqsqEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NGI3ZDMwYzFjNGY2MjQzMTgyZDNlY2QzZDA1MzlmNDJm YWFjZmQwHhcNMjYwMTAxMjIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODAyZWVkMjRmYjIyOTRiY2FiMDk1MjVjNTgxNGVhMGY1N2ExMTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdpWXRdt07cIQax0jpL0tVX4ErjY x+o8fNUpmP6AMV8b3w8YS08kKM7ZOKnxQFDC/q0kkGCor+IKB2ohSEPKOZVJ8ciG kIKfPMi/dCApXOfD58MOq6asxv8i5IF96J3qbowUMp8jTsuC4DPFrutK0ckEPt8+ yHIPW5RhIKffRxSZjWXPWakzdF0X/KWKV07c5NdJiGo3cHcpiH7+kIYy37SD6G0W OjheSEQa4dA/QdbcG577gjOTLO+EsQGZ6vs3BrS2c+LtEldjKTv4CQmGx0R25D6M y7QdHvwHbsL5ZWjVm9WK9uqI57gI5lz01oayfIqyNrx8E7MfACkChobtAQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFAgC7tJPsilLyrCVJcWBTqD1ehEBMB8GA1UdIwQY MBaAFJlLfTDBxPYkMYLT7NPQU59C+qz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVV0OU1NSEU5aVF4Z3RQczA5QlRuMEw2clAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80YWI4MWUtNDViOC00MWE1LWFhNWUt NTY0NmVlZGQ5OWJmLzEvQ0FMdTBrLXlLVXZLc0pVbHhZRk9vUFY2RVFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80YWI4MWUtNDViOC00MWE1LWFhNWUtNTY0NmVlZGQ5OWJm LzEvbVV0OU1NSEU5aVF4Z3RQczA5QlRuMEw2clAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALhxeAwQA UV+GAwQAUV+JAwQAUV+MAwQFVewAAwQEXDxQAwQEXuYAAwQDjYhwAwQF1YbAMA0G CSqGSIb3DQEBCwUAA4IBAQBqge3j2c1+bSlp53NJP2iaX2b6KQ6uUhoNKJmtbT6j mCDKbwxDRCnzr1hVPbW9+u8xe/2TJ/21E8+aho/Inr4mQN+olIXS03eYQaZ2TtVF ngUGAHUItEXYFX+VK7T2fseSejVjsQ9QFi34Dk6ScFQ1mSDARlHsgd+nQDJT6GG5 EFBnVlbTNZa8U+r6u446iKnh5fLJ9vz8e2AR6W+9gRB+BqEp/4eUrAOaVni0+i61 vACUb3NUnWyAuEMjcGsEKahEa7hHAvAryUZUGWRrzUvHtxYUqnkpZf4CDUugZniR hrJevlfFfwmntEDK5Z5QLJPfvzt587qFX4VowhLQDnNW -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:19 2026 by rpki-client