This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/civ0Ue-nzujHVWk5KgMxSl7Z3Pk.roa File: civ0Ue-nzujHVWk5KgMxSl7Z3Pk.roa (raw, json) Hash identifier: jFOIvb9DVJK6hoD4bX7f42R65P/skmQlM816J2hRvHQ= Subject key identifier: 72:2B:F4:51:EF:A7:CE:E8:C7:55:69:39:2A:03:31:4A:5E:D9:DC:F9 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019C1E8497C25B75A2522BFC7D4DFAEEA82D Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/civ0Ue-nzujHVWk5KgMxSl7Z3Pk.roa Signing time: Mon 02 Feb 2026 13:22:11 +0000 ROA not before: Mon 02 Feb 2026 13:22:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202412 IP address blocks: 45.132.180.0/24 maxlen: 24 146.19.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 20:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:84:97:c2:5b:75:a2:52:2b:fc:7d:4d:fa:ee:a8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Feb 2 13:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=722bf451efa7cee8c75569392a03314a5ed9dcf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ac:ed:20:9b:f0:91:ac:27:1b:89:3c:f3:e4: 52:04:b4:64:47:47:9e:75:cc:d1:b4:9d:eb:4e:78: 55:70:a9:32:83:1b:72:c4:1f:01:b7:20:e7:cf:08: 91:15:cc:a9:c6:f8:cd:97:d8:fe:00:81:5b:12:18: 56:f3:6d:0c:9e:2c:65:9a:ee:84:01:01:b8:10:29: cc:79:1b:96:9a:11:84:0d:41:0b:fb:dc:a1:54:5a: 0c:83:0b:01:87:bc:c7:66:48:90:41:c1:3e:69:dd: 54:b3:d2:fd:f3:13:85:54:c0:6a:3e:7b:0a:f2:a2: de:84:5e:80:a9:df:2f:73:77:68:09:2b:b5:7b:ec: 32:c8:4e:04:b5:79:82:a3:da:81:1a:fc:a0:1f:af: fa:99:28:ce:2f:9b:2e:bf:18:78:a9:04:9c:3c:e6: c7:60:dd:bf:b0:45:52:5e:90:3a:cb:38:40:47:59: 01:e4:d8:55:39:9a:5f:c2:e2:72:9c:b7:5a:8f:0c: 67:e5:41:d8:5c:a7:e5:45:ba:01:57:9a:fd:3d:81: 69:dc:8a:cc:f0:51:4b:31:d1:98:19:ae:38:93:ee: 8e:7c:6d:65:95:77:22:42:05:57:b7:97:43:7a:ec: 5d:f9:48:b1:a1:10:6d:27:bb:87:43:65:03:b1:93: b7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2B:F4:51:EF:A7:CE:E8:C7:55:69:39:2A:03:31:4A:5E:D9:DC:F9 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/civ0Ue-nzujHVWk5KgMxSl7Z3Pk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.180.0/24 146.19.125.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:a4:0d:de:1d:15:9e:45:52:41:ae:9c:32:81:2e:dd:e1:2f: 1d:6b:35:b1:30:d3:29:5e:46:91:f9:0d:6b:62:34:a8:d8:da: 0a:9e:e1:d3:13:00:00:ac:14:83:fc:ad:12:0d:69:f9:82:de: cb:8d:a6:db:97:b8:92:b8:f8:5e:cf:40:f9:8b:78:f5:98:2f: d8:6c:c6:21:dd:bb:cd:e6:f5:61:de:a7:45:09:8f:fb:f4:d0: 7a:09:47:ae:e1:08:68:d6:19:4a:5e:2e:33:39:07:91:d3:83: f3:48:7e:4e:43:7b:f9:60:9c:1b:b3:27:c4:31:55:58:04:8b: 8a:4e:67:ac:81:46:a8:8d:a7:79:c4:1e:e9:d3:39:8d:fc:89: 88:62:04:17:f6:f1:c1:fa:7e:0c:63:47:0f:ef:56:17:4c:18: a7:cc:f7:6f:40:a3:0f:d7:4f:b0:db:d3:e6:a3:70:a1:ae:50: 68:91:50:83:06:13:a5:88:8d:82:c8:a5:a8:bf:80:33:70:55: b4:b7:bc:44:be:21:1b:55:b8:2f:44:43:5c:e0:91:06:1f:7a: 9e:ee:2c:94:c2:bc:46:a0:cd:ff:07:91:16:c9:55:0b:03:74: a2:15:a6:da:f3:67:e5:94:95:55:8a:7f:47:a0:31:69:6d:f0: ad:cf:a0:da -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwehJfCW3WiUiv8fU367qgtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMjAyMTMyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjJiZjQ1MWVmYTdjZWU4Yzc1NTY5MzkyYTAzMzE0YTVlZDlkY2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKztIJvwkawnG4k88+RSBLRkR0ee dczRtJ3rTnhVcKkygxtyxB8BtyDnzwiRFcypxvjNl9j+AIFbEhhW820Mnixlmu6E AQG4ECnMeRuWmhGEDUEL+9yhVFoMgwsBh7zHZkiQQcE+ad1Us9L98xOFVMBqPnsK 8qLehF6Aqd8vc3doCSu1e+wyyE4EtXmCo9qBGvygH6/6mSjOL5suvxh4qQScPObH YN2/sEVSXpA6yzhAR1kB5NhVOZpfwuJynLdajwxn5UHYXKflRboBV5r9PYFp3IrM 8FFLMdGYGa44k+6OfG1llXciQgVXt5dDeuxd+UixoRBtJ7uHQ2UDsZO3ZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHIr9FHvp87ox1VpOSoDMUpe2dz5MB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvY2l2MFVlLW56dWpIVldrNUtnTXhTbDdaM1BrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYS0AwQA khN9MA0GCSqGSIb3DQEBCwUAA4IBAQAupA3eHRWeRVJBrpwygS7d4S8dazWxMNMp XkaR+Q1rYjSo2NoKnuHTEwAArBSD/K0SDWn5gt7Ljabbl7iSuPhez0D5i3j1mC/Y bMYh3bvN5vVh3qdFCY/79NB6CUeu4Qho1hlKXi4zOQeR04PzSH5OQ3v5YJwbsyfE MVVYBIuKTmesgUaojad5xB7p0zmN/ImIYgQX9vHB+n4MY0cP71YXTBinzPdvQKMP 10+w29Pmo3ChrlBokVCDBhOliI2CyKWov4AzcFW0t7xEviEbVbgvRENc4JEGH3qe 7iyUwrxGoM3/B5EWyVULA3SiFaba82fllJVVin9HoDFpbfCtz6Da -----END CERTIFICATE-----Generated at Tue Feb 3 05:59:20 2026 by rpki-client