This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/C0jIgMcLTHgqOBjTV2Pk_I0UXpE.roa File: C0jIgMcLTHgqOBjTV2Pk_I0UXpE.roa (raw, json) Hash identifier: Vnmpnxzb5d888xy3LtJLua3mvD0ti0N+tPvmlqaYeqw= Subject key identifier: 0B:48:C8:80:C7:0B:4C:78:2A:38:18:D3:57:63:E4:FC:8D:14:5E:91 Certificate issuer: /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f Certificate serial: 019B775968775FF6AFA47F47C83D6AB07E19 Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/C0jIgMcLTHgqOBjTV2Pk_I0UXpE.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208246 IP address blocks: 45.150.88.0/22 maxlen: 22 45.150.88.0/23 maxlen: 23 45.150.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:68:77:5f:f6:af:a4:7f:47:c8:3d:6a:b0:7e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b48c880c70b4c782a3818d35763e4fc8d145e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:fb:91:59:30:82:68:1f:69:ee:b6:5a:83: 52:1f:fb:34:a1:8b:b7:e9:43:e4:33:81:f9:6d:c5: 4c:85:66:51:15:7c:37:df:74:3d:15:19:ed:bf:d0: ff:03:35:7e:8f:52:e8:19:43:9c:cd:f5:0a:c2:45: 1c:df:c9:6d:e9:19:19:3a:62:0b:52:21:2b:f5:fc: 05:5c:ee:ab:89:d8:dc:5d:9c:92:6d:82:e0:00:6c: 1c:2e:c2:52:31:31:f4:e2:a2:05:44:b1:82:a4:d8: e1:d6:0a:a3:75:19:1b:d4:78:12:98:87:a0:1d:dc: 2c:86:c2:b2:06:65:9e:85:32:e0:09:a6:32:23:4e: 01:e9:51:6d:1a:47:e5:3d:ac:2a:32:fb:5f:4f:da: c0:b5:e7:0e:fb:13:fd:ac:90:08:35:3b:de:61:d3: 01:e6:f1:bf:30:17:fe:47:f1:47:c6:be:df:29:9e: bd:5c:3b:53:14:58:62:0f:73:71:4a:5c:3a:5d:83: 54:f4:4c:4f:33:40:b1:98:dd:18:99:82:17:9f:66: bb:ea:ba:42:04:55:75:2e:2f:64:26:3e:03:6c:ec: f6:a6:7e:8a:36:8b:8d:32:97:c6:2d:26:95:dc:32: a7:b4:4a:c5:76:48:22:83:d8:f9:dc:51:75:c7:b5: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:48:C8:80:C7:0B:4C:78:2A:38:18:D3:57:63:E4:FC:8D:14:5E:91 X509v3 Authority Key Identifier: keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/C0jIgMcLTHgqOBjTV2Pk_I0UXpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.88.0/22 Signature Algorithm: sha256WithRSAEncryption 70:aa:08:eb:7a:63:cc:13:dc:4f:8b:20:5e:05:13:d2:05:25: 44:47:02:e2:6f:78:bb:14:37:9b:de:9f:1a:03:a2:12:19:ac: 57:4d:18:d9:01:e7:05:3a:fe:78:81:7f:87:8c:34:5e:1f:50: 0c:fe:1c:a6:4b:40:84:71:de:ab:be:dc:08:fd:ca:76:d8:7f: 0b:96:a0:08:10:93:19:04:5c:f9:0c:c0:e9:39:51:3c:51:56: ce:58:90:60:f5:6e:c7:01:e7:1d:c7:9f:7a:9b:db:f5:df:d9: 80:d9:a4:99:4f:18:fe:27:cb:34:4b:0a:d5:d1:66:c0:e6:16: 1a:54:5f:b2:7d:5c:b8:67:a4:c1:28:87:d3:4b:60:41:b9:1c: 29:d4:3b:cb:a5:68:da:31:b4:93:a9:98:9b:b3:f3:4f:65:cf: 97:df:3c:ee:57:5f:d4:f7:74:11:03:d5:83:e4:c3:0e:af:ed: 9e:a3:70:32:0c:c3:b0:15:dd:aa:f2:19:47:18:99:e5:a7:25: bd:ee:05:69:9c:40:3a:50:d0:09:1f:13:29:86:8e:46:20:4c: b6:54:96:2e:be:7b:4e:60:73:de:b6:e3:77:88:ed:6d:3b:17: 79:e2:28:40:89:38:4f:5d:81:22:aa:0a:d8:28:c6:7a:b2:43: 97:4b:5e:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WWh3X/avpH9HyD1qsH4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YWE5YmNkMDZlYTZjNTY1ZGQ5MDdjYTA0ZTUwNzdkNjhj MDY2NGYwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjQ4Yzg4MGM3MGI0Yzc4MmEzODE4ZDM1NzYzZTRmYzhkMTQ1ZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa37kVkwgmgfae62WoNSH/s0oYu3 6UPkM4H5bcVMhWZRFXw333Q9FRntv9D/AzV+j1LoGUOczfUKwkUc38lt6RkZOmIL UiEr9fwFXO6ridjcXZySbYLgAGwcLsJSMTH04qIFRLGCpNjh1gqjdRkb1HgSmIeg HdwshsKyBmWehTLgCaYyI04B6VFtGkflPawqMvtfT9rAtecO+xP9rJAINTveYdMB 5vG/MBf+R/FHxr7fKZ69XDtTFFhiD3NxSlw6XYNU9ExPM0CxmN0YmYIXn2a76rpC BFV1Li9kJj4DbOz2pn6KNouNMpfGLSaV3DKntErFdkgig9j53FF1x7WBwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAtIyIDHC0x4KjgY01dj5PyNFF6RMB8GA1UdIwQY MBaAFKSqm80G6mxWXdkHygTlB31owGZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEtxYnpRYnFiRlpkMlFmS0JPVUhmV2pBWms4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wNTJmNGMtYmUzYy00ZDE5LWFhMDQt MGFiOGRkOWViYWIxLzEvQzBqSWdNY0xUSGdxT0JqVFYyUGtfSTBVWHBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wNTJmNGMtYmUzYy00ZDE5LWFhMDQtMGFiOGRkOWViYWIx LzEvcEtxYnpRYnFiRlpkMlFmS0JPVUhmV2pBWms4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZZYMA0G CSqGSIb3DQEBCwUAA4IBAQBwqgjremPME9xPiyBeBRPSBSVERwLib3i7FDeb3p8a A6ISGaxXTRjZAecFOv54gX+HjDReH1AM/hymS0CEcd6rvtwI/cp22H8LlqAIEJMZ BFz5DMDpOVE8UVbOWJBg9W7HAecdx596m9v139mA2aSZTxj+J8s0SwrV0WbA5hYa VF+yfVy4Z6TBKIfTS2BBuRwp1DvLpWjaMbSTqZibs/NPZc+X3zzuV1/U93QRA9WD 5MMOr+2eo3AyDMOwFd2q8hlHGJnlpyW97gVpnEA6UNAJHxMpho5GIEy2VJYuvntO YHPetuN3iO1tOxd54ihAiThPXYEiqgrYKMZ6skOXS16s -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:18 2026 by rpki-client