This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/CcbOPSFowzuVmbQQQVUT4gQZao4.roa File: CcbOPSFowzuVmbQQQVUT4gQZao4.roa (raw, json) Hash identifier: QoVwdK39dtT9IvoLSexiLLdImyTyxwcjHq7QNn6fGOA= Subject key identifier: 09:C6:CE:3D:21:68:C3:3B:95:99:B4:10:41:55:13:E2:04:19:6A:8E Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f Certificate serial: 019B7B365B4E1C9F6DCE6CCE802669FEE2E8 Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/CcbOPSFowzuVmbQQQVUT4gQZao4.roa Signing time: Thu 01 Jan 2026 20:18:38 +0000 ROA not before: Thu 01 Jan 2026 20:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48095 IP address blocks: 2.56.48.0/23 maxlen: 23 2.56.50.0/23 maxlen: 23 5.253.116.0/23 maxlen: 23 5.253.118.0/23 maxlen: 23 45.66.236.0/23 maxlen: 23 45.66.238.0/23 maxlen: 23 46.175.152.0/22 maxlen: 22 77.83.168.0/23 maxlen: 23 77.83.170.0/23 maxlen: 23 81.16.128.0/22 maxlen: 22 85.208.120.0/23 maxlen: 23 85.208.122.0/23 maxlen: 23 86.62.56.0/23 maxlen: 23 86.62.58.0/23 maxlen: 23 92.118.40.0/23 maxlen: 23 92.118.42.0/23 maxlen: 23 152.89.128.0/23 maxlen: 23 152.89.130.0/23 maxlen: 23 185.234.4.0/22 maxlen: 22 193.47.236.0/22 maxlen: 22 194.59.200.0/23 maxlen: 23 194.59.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5b:4e:1c:9f:6d:ce:6c:ce:80:26:69:fe:e2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f Validity Not Before: Jan 1 20:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09c6ce3d2168c33b9599b410415513e204196a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0f:ee:e5:5f:d8:60:e0:8b:e4:af:76:56:26: 3f:d2:ae:87:7f:fb:56:20:14:d6:6e:ba:a4:f2:7c: 2d:4d:6b:78:b5:d9:e4:56:c1:a2:4c:44:25:3b:cf: c9:98:b1:1d:8b:cc:ec:b3:b9:b7:a8:bc:86:dd:63: 2a:75:08:22:35:ae:11:92:6b:4b:9d:2f:77:4f:ef: dc:ae:86:a2:a2:51:99:9d:e7:1f:1c:ca:ce:f6:e7: 47:f1:c6:44:f8:25:95:ee:82:2d:3d:cf:68:11:75: 4a:b8:28:d1:27:43:49:6b:3e:02:d7:27:c3:81:ff: d3:76:24:62:87:d0:34:0e:ca:8f:e3:58:99:2d:8f: 98:50:23:1b:68:b4:7d:df:77:b2:4a:76:54:1a:28: f2:f7:6b:a7:fe:dd:d3:77:36:67:50:89:83:4f:b4: f9:93:bf:d3:54:26:bc:e2:4c:04:30:75:c6:1b:9a: c6:af:7d:57:5d:84:55:c9:11:42:53:f6:91:86:33: f9:4b:49:1b:b5:6f:39:0a:14:ad:16:fe:f6:d3:d2: 6e:e9:da:e1:f0:cb:ce:eb:9a:3e:09:8e:08:50:bb: bf:e7:4f:88:34:d8:7b:dd:ef:28:89:2e:4c:37:c6: 8b:11:cb:33:d1:fb:97:6a:19:f8:cd:16:34:18:c6: 0d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C6:CE:3D:21:68:C3:3B:95:99:B4:10:41:55:13:E2:04:19:6A:8E X509v3 Authority Key Identifier: keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/CcbOPSFowzuVmbQQQVUT4gQZao4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.48.0/22 5.253.116.0/22 45.66.236.0/22 46.175.152.0/22 77.83.168.0/22 81.16.128.0/22 85.208.120.0/22 86.62.56.0/22 92.118.40.0/22 152.89.128.0/22 185.234.4.0/22 193.47.236.0/22 194.59.200.0/22 Signature Algorithm: sha256WithRSAEncryption 46:cf:4e:4e:07:7d:b5:69:5a:7c:d2:7a:64:7a:f3:28:1c:4f: 9c:84:07:56:f0:da:48:ee:26:5d:d6:8e:7b:ad:4b:0f:60:46: 3c:7d:44:48:d9:6a:6e:03:13:c8:53:60:ec:bb:b8:4b:88:ef: 07:e0:15:2c:c5:ef:6b:65:f2:2f:a9:41:44:05:c1:cf:76:05: 8a:9e:2a:f3:de:3e:f4:e0:e9:0f:52:06:4c:55:6c:84:64:6c: bb:b9:7a:0b:8c:b5:5c:ef:60:69:d1:fa:ad:85:74:5d:e2:de: 90:a8:1f:86:57:0c:f3:65:a4:5b:c2:49:26:71:d3:40:a5:de: 79:65:65:61:85:64:3d:8f:fc:0b:02:ab:11:da:7a:c4:e6:b8: 06:0a:ee:dd:b6:61:55:3c:aa:4a:48:bc:e7:d4:6f:e9:72:5e: b4:63:f7:e1:3c:30:8e:44:3b:73:76:02:84:39:55:c6:f8:6d: fc:84:58:64:25:01:27:5f:52:d3:8f:32:31:30:61:6b:e1:13: 72:a6:3e:15:3b:d1:22:22:a1:3c:90:8f:03:1a:ce:72:10:23: 0c:da:a3:40:2e:4a:e5:83:ca:10:e3:37:94:d2:67:09:82:16: 57:36:a8:22:84:49:2d:61:fa:6d:fb:00:0d:46:2f:b1:cd:33: 1c:f6:2c:b4 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt7NltOHJ9tzmzOgCZp/uLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNzgyMWUxYmNiZjZlMDc0ZWE0ODE0YWFhNWM2M2UzYmE4 MTNjNWYwHhcNMjYwMTAxMjAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWM2Y2UzZDIxNjhjMzNiOTU5OWI0MTA0MTU1MTNlMjA0MTk2YThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8g/u5V/YYOCL5K92ViY/0q6Hf/tW IBTWbrqk8nwtTWt4tdnkVsGiTEQlO8/JmLEdi8zss7m3qLyG3WMqdQgiNa4RkmtL nS93T+/croaiolGZnecfHMrO9udH8cZE+CWV7oItPc9oEXVKuCjRJ0NJaz4C1yfD gf/TdiRih9A0DsqP41iZLY+YUCMbaLR933eySnZUGijy92un/t3TdzZnUImDT7T5 k7/TVCa84kwEMHXGG5rGr31XXYRVyRFCU/aRhjP5S0kbtW85ChStFv7209Ju6drh 8MvO65o+CY4IULu/50+INNh73e8oiS5MN8aLEcsz0fuXahn4zRY0GMYNdQIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFAnGzj0haMM7lZm0EEFVE+IEGWqOMB8GA1UdIwQY MBaAFNx4IeG8v24HTqSBSqpcY+O6gTxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYt ZDQ4YjQyZWYxNTliLzEvQ2NiT1BTRm93enVWbWJRUVFWVVQ0Z1FaYW80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYtZDQ4YjQyZWYxNTli LzEvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQCAjgwAwQC Bf10AwQCLULsAwQCLq+YAwQCTVOoAwQCURCAAwQCVdB4AwQCVj44AwQCXHYoAwQC mFmAAwQCueoEAwQCwS/sAwQCwjvIMA0GCSqGSIb3DQEBCwUAA4IBAQBGz05OB321 aVp80npkevMoHE+chAdW8NpI7iZd1o57rUsPYEY8fURI2WpuAxPIU2Dsu7hLiO8H 4BUsxe9rZfIvqUFEBcHPdgWKnirz3j704OkPUgZMVWyEZGy7uXoLjLVc72Bp0fqt hXRd4t6QqB+GVwzzZaRbwkkmcdNApd55ZWVhhWQ9j/wLAqsR2nrE5rgGCu7dtmFV PKpKSLzn1G/pcl60Y/fhPDCORDtzdgKEOVXG+G38hFhkJQEnX1LTjzIxMGFr4RNy pj4VO9EiIqE8kI8DGs5yECMM2qNALkrlg8oQ4zeU0mcJghZXNqgihEktYfpt+wAN Ri+xzTMc9iy0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:45 2026 by rpki-client