This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cr0AR-w_JWFamVAtdgkvTMTy1Qo.roa File: cr0AR-w_JWFamVAtdgkvTMTy1Qo.roa (raw, json) Hash identifier: eKAgKSzUAMEtrHDrT7mnQsSII8a/h3K+YCAIf+FAWy8= Subject key identifier: 72:BD:00:47:EC:3F:25:61:5A:99:50:2D:76:09:2F:4C:C4:F2:D5:0A Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Certificate serial: 019B7F84375A755382812D08DAEB4969114A Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cr0AR-w_JWFamVAtdgkvTMTy1Qo.roa Signing time: Fri 02 Jan 2026 16:22:09 +0000 ROA not before: Fri 02 Jan 2026 16:22:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.157.139.0/24 maxlen: 24 178.211.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:37:5a:75:53:82:81:2d:08:da:eb:49:69:11:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Validity Not Before: Jan 2 16:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72bd0047ec3f25615a99502d76092f4cc4f2d50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b7:1f:b8:76:b2:0f:8a:b2:32:5b:ed:cf:48: bf:be:e5:a0:63:ab:91:5a:77:d7:60:46:39:f8:b6: 03:67:94:06:9e:fd:95:df:b5:2c:7c:b5:6b:c2:49: f8:18:12:0f:38:62:66:0d:62:f4:31:85:a3:8f:7d: fd:a2:d9:51:f4:61:1f:61:19:b4:1a:81:f2:6f:bf: c6:6b:f9:52:39:a9:09:e2:f4:bd:54:8e:67:50:65: d0:4e:07:0d:ad:d4:c7:5e:7f:ca:39:ad:41:25:29: 20:35:32:e7:a9:70:c6:96:c8:04:d8:a0:58:6a:01: 3c:f2:28:d4:c3:e2:65:da:a0:ee:a3:cf:6e:e6:55: 1e:85:8d:9e:d7:54:fc:18:f6:ae:23:76:10:c9:80: 18:4c:07:fc:0f:dc:4a:e2:87:f5:97:d7:da:03:9c: 40:74:3c:0d:8a:7a:40:fa:e5:32:56:b8:c4:c0:fc: c8:21:78:3d:23:ed:d3:eb:46:13:9b:d0:b2:bc:f6: 24:b2:5b:19:76:2e:1e:bc:fe:76:c7:87:17:7e:8c: d3:a8:1d:4a:54:aa:78:05:d4:04:fc:91:c8:82:b7: c1:25:73:9a:8f:8f:5c:5e:44:dd:ed:0f:2e:12:96: 41:99:95:6f:bc:09:99:83:bd:53:03:8f:aa:a8:a2: 18:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BD:00:47:EC:3F:25:61:5A:99:50:2D:76:09:2F:4C:C4:F2:D5:0A X509v3 Authority Key Identifier: keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cr0AR-w_JWFamVAtdgkvTMTy1Qo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.139.0/24 178.211.136.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:b1:cc:83:38:11:f2:68:0f:6b:5c:4b:8f:de:e9:b3:8c:99: 76:14:ed:11:20:da:74:e1:72:3b:62:34:54:38:1b:b0:71:2a: e2:30:dd:aa:85:f3:03:56:41:51:4b:4c:cf:30:97:a7:c3:b5: 0a:3d:d2:df:05:ea:7b:e7:b2:12:30:a5:b2:8f:46:a1:be:a3: c5:f9:f5:83:51:81:74:25:c6:f0:65:9b:32:52:70:33:92:43: ad:a8:3b:d3:f6:c5:42:bc:1b:d9:e5:bd:29:4e:b2:da:0d:cb: 8e:5d:42:6a:05:7d:4e:80:71:17:1a:f8:0b:c1:a5:45:31:28: 1c:70:85:8a:70:ae:ed:76:9a:c8:af:22:71:94:17:0c:b6:e5: 62:14:3b:2f:dc:b6:b4:1f:b9:e7:22:41:a2:1e:7d:7a:97:d8: 64:5a:50:e0:ca:09:6f:66:8a:0a:bb:4f:47:4f:4b:00:07:57: 24:5d:0a:f8:76:7b:e8:eb:9b:7c:3a:f7:5d:59:15:99:a6:9e: 8d:6c:47:16:a2:8e:9a:aa:cf:f7:73:c3:5f:1c:94:92:2f:94: c8:45:cc:b0:0c:64:7e:b8:08:94:a7:35:f8:c7:1a:e2:03:a3: 67:bf:d6:bd:13:f1:f9:bd:b2:ac:fd:97:0f:bc:57:85:75:4a: c6:52:7f:a5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hDdadVOCgS0I2utJaRFKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx MTFkNTEwHhcNMjYwMTAyMTYyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmJkMDA0N2VjM2YyNTYxNWE5OTUwMmQ3NjA5MmY0Y2M0ZjJkNTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+rcfuHayD4qyMlvtz0i/vuWgY6uR WnfXYEY5+LYDZ5QGnv2V37UsfLVrwkn4GBIPOGJmDWL0MYWjj339otlR9GEfYRm0 GoHyb7/Ga/lSOakJ4vS9VI5nUGXQTgcNrdTHXn/KOa1BJSkgNTLnqXDGlsgE2KBY agE88ijUw+Jl2qDuo89u5lUehY2e11T8GPauI3YQyYAYTAf8D9xK4of1l9faA5xA dDwNinpA+uUyVrjEwPzIIXg9I+3T60YTm9CyvPYkslsZdi4evP52x4cXfozTqB1K VKp4BdQE/JHIgrfBJXOaj49cXkTd7Q8uEpZBmZVvvAmZg71TA4+qqKIYaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHK9AEfsPyVhWplQLXYJL0zE8tUKMB8GA1UdIwQY MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt YTQyMTNjOTNmMWY3LzEvY3IwQVItd19KV0ZhbVZBdGRna3ZUTVR5MVFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3 LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZ2LAwQA stOIMA0GCSqGSIb3DQEBCwUAA4IBAQA+scyDOBHyaA9rXEuP3umzjJl2FO0RINp0 4XI7YjRUOBuwcSriMN2qhfMDVkFRS0zPMJenw7UKPdLfBep757ISMKWyj0ahvqPF +fWDUYF0JcbwZZsyUnAzkkOtqDvT9sVCvBvZ5b0pTrLaDcuOXUJqBX1OgHEXGvgL waVFMSgccIWKcK7tdprIryJxlBcMtuViFDsv3La0H7nnIkGiHn16l9hkWlDgyglv ZooKu09HT0sAB1ckXQr4dnvo65t8OvddWRWZpp6NbEcWoo6aqs/3c8NfHJSSL5TI RcywDGR+uAiUpzX4xxriA6Nnv9a9E/H5vbKs/ZcPvFeFdUrGUn+l -----END CERTIFICATE-----Generated at Wed Jan 21 17:52:20 2026 by rpki-client