This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/CUg3R4VfAPebaROqI8F24g_2iSE.roa File: CUg3R4VfAPebaROqI8F24g_2iSE.roa (raw, json) Hash identifier: ZOTEoUWK8IMgR81ppaJG0uL6idgY1UslcGXEjT/F7a4= Subject key identifier: 09:48:37:47:85:5F:00:F7:9B:69:13:AA:23:C1:76:E2:0F:F6:89:21 Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa Certificate serial: 019B7834962A2B1C6DAF3FEA394441E99387 Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/CUg3R4VfAPebaROqI8F24g_2iSE.roa Signing time: Thu 01 Jan 2026 06:17:50 +0000 ROA not before: Thu 01 Jan 2026 06:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201188 IP address blocks: 45.151.184.0/22 maxlen: 22 45.151.184.0/24 maxlen: 24 45.151.185.0/24 maxlen: 24 45.151.186.0/24 maxlen: 24 45.151.187.0/24 maxlen: 24 2a0f:3500::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:96:2a:2b:1c:6d:af:3f:ea:39:44:41:e9:93:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa Validity Not Before: Jan 1 06:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09483747855f00f79b6913aa23c176e20ff68921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:33:a9:24:5f:5f:0f:77:ce:fc:5e:3f:3e:4e: 79:2f:53:46:5c:1d:61:74:c2:e1:8b:e9:2b:e9:5d: 95:ed:96:12:a8:4b:43:23:1d:e3:35:dd:ed:bd:d3: 38:03:c7:e7:a6:28:72:49:00:c0:26:c2:35:19:f6: 9a:0f:87:ef:c7:bc:1e:7a:0d:3f:00:26:42:5d:13: ea:b7:20:bd:31:79:f5:55:67:cc:57:5b:da:ff:99: 69:db:90:46:ec:7c:bc:77:e3:f5:ee:18:1e:62:b9: ab:8c:ce:fc:e7:42:61:75:ab:0c:bb:e8:92:75:b4: f3:4f:af:42:2a:bb:0c:8a:66:c5:72:09:d4:4e:ee: f4:8d:a0:2b:95:b3:0b:c7:56:02:4f:b3:0d:ef:75: 40:27:6f:52:73:6e:9b:ff:7c:8c:9b:78:44:08:ea: 10:25:d5:9d:1f:d5:dd:76:01:2f:ec:8f:b2:d1:6c: 84:63:9a:e8:ca:cb:e3:b2:d3:24:3d:e5:40:06:0a: 82:14:da:4c:ac:97:db:47:99:52:de:10:ee:de:ba: ed:08:a5:ff:7d:ad:de:e8:86:7f:59:84:48:f0:40: 4d:12:79:32:35:2d:fd:57:01:27:a6:2d:44:80:b2: 55:75:55:4d:f4:3b:c1:b7:c6:b1:d0:f5:e7:2c:c3: ae:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:48:37:47:85:5F:00:F7:9B:69:13:AA:23:C1:76:E2:0F:F6:89:21 X509v3 Authority Key Identifier: keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/CUg3R4VfAPebaROqI8F24g_2iSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.184.0/22 IPv6: 2a0f:3500::/29 Signature Algorithm: sha256WithRSAEncryption 6d:e8:27:c1:7c:b0:4a:0a:cc:ac:c2:5f:00:4d:54:e7:f2:41: bc:6f:1a:d1:93:f1:8f:26:51:fa:0a:be:8e:a4:af:ef:0e:85: f0:11:c0:1b:d4:ba:72:38:f6:6b:c4:09:b3:be:2f:a3:0d:e1: 6c:b3:d6:fe:56:38:17:60:b3:1a:af:ff:c8:56:9b:f0:16:f3: 1c:21:32:7a:61:17:dd:ce:1f:89:e1:0e:c4:a5:27:14:a3:1b: 2b:08:fa:e0:3b:ac:02:d5:81:35:75:1f:fd:12:f2:d9:8a:c5: db:0b:e8:28:e0:63:24:a9:fe:b0:b7:ab:df:b3:bb:86:85:b1: 2b:01:74:39:03:12:81:d1:44:97:e1:7e:04:2d:16:5f:22:dc: ef:5f:4d:e8:10:e0:76:fd:3b:8c:5e:f1:9e:13:45:ef:c1:71: 1d:23:9b:c1:2a:94:01:6f:95:46:de:76:5f:49:4a:9d:2a:87: 0d:46:4a:65:19:2d:05:0f:68:40:7e:58:7f:c3:c9:cb:45:5a: bb:6e:31:09:69:26:55:cd:9e:59:49:3e:74:00:c5:2a:e2:87: 2b:2e:43:40:c8:bd:ae:aa:a4:a6:2f:e3:02:99:f8:6f:80:f1: 7b:b1:c1:a8:bd:ea:d0:70:b3:2e:21:d9:e5:1d:ba:16:6a:c3: 72:68:06:14 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NJYqKxxtrz/qOURB6ZOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NGI1ZTE2NDkwYjlhNjhkMDlmYmNiNDU1NzQzNTAwMDAx NDlhZmEwHhcNMjYwMTAxMDYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTQ4Mzc0Nzg1NWYwMGY3OWI2OTEzYWEyM2MxNzZlMjBmZjY4OTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zOpJF9fD3fO/F4/Pk55L1NGXB1h dMLhi+kr6V2V7ZYSqEtDIx3jNd3tvdM4A8fnpihySQDAJsI1GfaaD4fvx7weeg0/ ACZCXRPqtyC9MXn1VWfMV1va/5lp25BG7Hy8d+P17hgeYrmrjM7850JhdasMu+iS dbTzT69CKrsMimbFcgnUTu70jaArlbMLx1YCT7MN73VAJ29Sc26b/3yMm3hECOoQ JdWdH9XddgEv7I+y0WyEY5roysvjstMkPeVABgqCFNpMrJfbR5lS3hDu3rrtCKX/ fa3e6IZ/WYRI8EBNEnkyNS39VwEnpi1EgLJVdVVN9DvBt8ax0PXnLMOuwwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAlIN0eFXwD3m2kTqiPBduIP9okhMB8GA1UdIwQY MBaAFIhLXhZJC5po0J+8tFV0NQAAFJr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5Nzgt ZWYyZDUzYjVhMzRkLzEvQ1VnM1I0VmZBUGViYVJPcUk4RjI0Z18yaVNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5NzgtZWYyZDUzYjVhMzRk LzEvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZe4MA0E AgACMAcDBQMqDzUAMA0GCSqGSIb3DQEBCwUAA4IBAQBt6CfBfLBKCsyswl8ATVTn 8kG8bxrRk/GPJlH6Cr6OpK/vDoXwEcAb1LpyOPZrxAmzvi+jDeFss9b+VjgXYLMa r//IVpvwFvMcITJ6YRfdzh+J4Q7EpScUoxsrCPrgO6wC1YE1dR/9EvLZisXbC+go 4GMkqf6wt6vfs7uGhbErAXQ5AxKB0USX4X4ELRZfItzvX03oEOB2/TuMXvGeE0Xv wXEdI5vBKpQBb5VG3nZfSUqdKocNRkplGS0FD2hAflh/w8nLRVq7bjEJaSZVzZ5Z ST50AMUq4ocrLkNAyL2uqqSmL+MCmfhvgPF7scGoverQcLMuIdnlHboWasNyaAYU -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:02 2026 by rpki-client