This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/CmTJkgSwUryh0Xxr3-VxFED3a2A.roa File: CmTJkgSwUryh0Xxr3-VxFED3a2A.roa (raw, json) Hash identifier: QFtFIDUrNS2H+TtR8Cc3c19fEUphmScBjA3u054Y+28= Subject key identifier: 0A:64:C9:92:04:B0:52:BC:A1:D1:7C:6B:DF:E5:71:14:40:F7:6B:60 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C802B596CF00F5A538364E3F012E55F Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/CmTJkgSwUryh0Xxr3-VxFED3a2A.roa Signing time: Fri 02 Jan 2026 02:18:53 +0000 ROA not before: Fri 02 Jan 2026 02:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213535 IP address blocks: 45.13.226.0/24 maxlen: 24 45.67.136.0/24 maxlen: 24 45.67.139.0/24 maxlen: 24 45.92.218.0/24 maxlen: 24 45.92.219.0/24 maxlen: 24 45.141.118.0/24 maxlen: 24 92.119.166.0/24 maxlen: 24 185.117.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2b:59:6c:f0:0f:5a:53:83:64:e3:f0:12:e5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a64c99204b052bca1d17c6bdfe5711440f76b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:86:29:28:31:3c:2b:20:5e:ce:ef:65:a1:64: da:a2:ce:c1:f4:c3:bb:1f:8b:19:a2:52:ba:50:71: bf:0f:32:5d:bf:3f:9b:aa:df:eb:be:2c:3e:cb:17: 67:2e:69:09:9e:6d:fd:a5:d0:7f:92:54:e5:8e:f6: 88:ab:7b:c3:d5:72:49:25:13:40:9c:a9:81:d8:2e: 64:0c:3f:30:3a:d7:77:15:96:71:5f:a5:25:dc:37: 0f:e5:10:61:ef:10:9b:a0:9f:1f:b1:47:78:4e:c5: 43:98:9a:dd:84:49:30:9c:12:3e:6f:89:f3:3f:a4: 67:b4:09:88:1d:dc:0d:88:ae:be:33:99:d0:a9:b9: 69:4f:16:6b:02:1f:94:c3:b0:aa:20:f6:cf:51:7c: a1:3e:fd:bd:d9:de:99:5d:b6:7b:c4:ec:7a:91:80: 37:5a:61:e8:25:c8:6b:35:05:c6:98:f4:ef:e8:1a: 8a:6c:73:2d:a7:e2:d6:ee:08:0b:84:88:f3:dc:15: 63:64:35:01:99:6c:0c:c5:57:06:cb:8c:17:5b:f5: 1a:6a:45:c2:1a:4c:cf:8d:35:dd:d1:82:61:a4:5b: 74:43:61:5f:7f:c6:ed:82:24:96:ba:43:ad:fd:8c: 21:a4:56:cf:cc:8b:5a:44:0f:1d:b7:53:c7:5e:02: 6d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:64:C9:92:04:B0:52:BC:A1:D1:7C:6B:DF:E5:71:14:40:F7:6B:60 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/CmTJkgSwUryh0Xxr3-VxFED3a2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.226.0/24 45.67.136.0/24 45.67.139.0/24 45.92.218.0/23 45.141.118.0/24 92.119.166.0/24 185.117.0.0/24 Signature Algorithm: sha256WithRSAEncryption a3:c9:a8:88:7e:d0:53:3c:ae:39:ae:d4:cc:68:f7:7f:19:82: 47:dc:e8:2b:0e:f5:94:9f:3e:d4:84:14:61:df:da:e9:62:f4: 1e:d4:ae:a9:d6:1b:b5:d8:db:69:39:3d:4a:e4:bb:aa:66:51: 28:e6:cf:2d:ec:c5:2a:71:92:5f:48:7a:c8:8e:13:9c:3b:9e: e1:cb:36:6e:2d:86:6f:e7:f6:33:4f:e9:b7:cd:c8:42:eb:07: 51:92:38:e0:64:b8:14:0d:48:8a:c2:bb:a8:6b:37:76:d8:99: 8c:2e:aa:45:ee:73:32:5e:85:df:9a:a6:9e:30:5d:e5:e1:80: 41:81:72:f0:97:76:98:d7:24:4b:05:1b:ac:7f:52:ed:7a:b9: 7e:70:db:9b:24:c2:1b:09:23:5f:66:6e:e3:78:26:93:87:e1: 13:d5:04:32:14:ea:1a:2b:29:fc:b5:5a:cd:55:14:90:d6:dd: 37:ac:ca:ed:e3:62:fb:6d:ea:f3:b7:24:87:2e:6a:bd:d4:9b: 32:15:52:3f:98:0d:42:02:59:b4:26:15:fc:38:cc:4a:61:13: d0:8a:55:0e:4a:9e:30:df:ee:dc:49:63:5d:81:21:ba:23:26: 61:55:38:36:10:6c:0e:2d:81:20:7f:b8:b4:27:d5:5e:0a:21: a2:f2:62:4b -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt8gCtZbPAPWlODZOPwEuVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTY0Yzk5MjA0YjA1MmJjYTFkMTdjNmJkZmU1NzExNDQwZjc2YjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYYpKDE8KyBezu9loWTaos7B9MO7 H4sZolK6UHG/DzJdvz+bqt/rviw+yxdnLmkJnm39pdB/klTljvaIq3vD1XJJJRNA nKmB2C5kDD8wOtd3FZZxX6Ul3DcP5RBh7xCboJ8fsUd4TsVDmJrdhEkwnBI+b4nz P6RntAmIHdwNiK6+M5nQqblpTxZrAh+Uw7CqIPbPUXyhPv292d6ZXbZ7xOx6kYA3 WmHoJchrNQXGmPTv6BqKbHMtp+LW7ggLhIjz3BVjZDUBmWwMxVcGy4wXW/UaakXC GkzPjTXd0YJhpFt0Q2Fff8btgiSWukOt/YwhpFbPzItaRA8dt1PHXgJtRQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFApkyZIEsFK8odF8a9/lcRRA92tgMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvQ21USmtnU3dVcnloMFh4cjMtVnhGRUQzYTJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALQ3iAwQA LUOIAwQALUOLAwQBLVzaAwQALY12AwQAXHemAwQAuXUAMA0GCSqGSIb3DQEBCwUA A4IBAQCjyaiIftBTPK45rtTMaPd/GYJH3OgrDvWUnz7UhBRh39rpYvQe1K6p1hu1 2NtpOT1K5LuqZlEo5s8t7MUqcZJfSHrIjhOcO57hyzZuLYZv5/YzT+m3zchC6wdR kjjgZLgUDUiKwruoazd22JmMLqpF7nMyXoXfmqaeMF3l4YBBgXLwl3aY1yRLBRus f1Lterl+cNubJMIbCSNfZm7jeCaTh+ET1QQyFOoaKyn8tVrNVRSQ1t03rMrt42L7 berztySHLmq91JsyFVI/mA1CAlm0JhX8OMxKYRPQilUOSp4w3+7cSWNdgSG6IyZh VTg2EGwOLYEgf7i0J9VeCiGi8mJL -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:17 2026 by rpki-client