This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Cpm1mrXB_TVX9Tqd1LJGDIuj6q8.roa File: Cpm1mrXB_TVX9Tqd1LJGDIuj6q8.roa (raw, json) Hash identifier: hob1uX5ksYP6hXKdks44aYw3gp8SZ9/7iBC9yhN/LL4= Subject key identifier: 0A:99:B5:9A:B5:C1:FD:35:57:F5:3A:9D:D4:B2:46:0C:8B:A3:EA:AF Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E64BC6DD1F2C56CF2C6096EB78BD0 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Cpm1mrXB_TVX9Tqd1LJGDIuj6q8.roa Signing time: Thu 01 Jan 2026 12:18:05 +0000 ROA not before: Thu 01 Jan 2026 12:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 45.149.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:64:bc:6d:d1:f2:c5:6c:f2:c6:09:6e:b7:8b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a99b59ab5c1fd3557f53a9dd4b2460c8ba3eaaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:50:db:73:b6:7f:bf:78:1e:da:3d:bc:02: 74:8c:e3:bb:4c:5f:63:e0:2b:8f:fd:cb:6e:a3:79: 12:07:7e:90:c7:51:4b:72:15:76:65:a0:71:87:27: 07:ed:86:52:ae:eb:50:28:bd:fb:26:13:84:39:43: 23:21:a1:ee:d3:12:65:98:8b:61:5d:35:45:95:c2: c6:68:df:ce:c1:7a:5b:7f:0a:74:b0:f8:04:78:ac: 76:70:02:de:3f:eb:ce:9f:c2:be:a1:13:ec:14:77: f4:0c:23:e5:9c:81:3f:80:c8:2b:ad:30:bf:7c:25: 2e:f8:37:37:65:9e:c9:72:c7:ee:f5:a3:b5:9a:25: c7:62:fc:e2:76:85:91:b5:75:c6:e7:ea:d5:4b:eb: 44:98:b8:91:75:32:60:1d:97:8f:cb:a5:ae:01:0c: 86:88:49:0c:7a:4a:bb:19:c3:bd:88:ef:2f:84:3a: c5:50:54:e1:7a:78:13:ad:89:fe:73:75:39:a2:3f: 76:e8:49:63:b2:56:27:48:62:3f:a9:79:2a:57:d2: ce:13:e9:10:c9:d7:56:df:13:12:7a:d5:35:37:f5: 7d:ee:f6:dc:26:31:29:11:b9:f4:59:83:14:c4:c1: f1:67:f2:02:9c:f0:e4:57:d8:b9:e6:23:03:f9:2e: 82:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:99:B5:9A:B5:C1:FD:35:57:F5:3A:9D:D4:B2:46:0C:8B:A3:EA:AF X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Cpm1mrXB_TVX9Tqd1LJGDIuj6q8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.26.0/24 Signature Algorithm: sha256WithRSAEncryption 77:59:1b:de:a1:8f:32:86:6c:3e:69:ce:6a:cb:c6:d1:85:67: a6:49:d2:b5:a9:71:cb:70:83:8d:58:ab:8f:be:5c:cb:b9:4e: b4:55:b8:7e:39:5b:07:1d:14:46:b9:fd:06:28:73:b4:09:c8: 39:2e:5b:09:87:4f:5d:32:15:c1:5c:92:a7:de:2a:28:67:3b: 07:0a:6c:84:74:74:5f:67:a0:8e:b6:51:da:d4:7d:20:90:2c: 37:50:df:6e:84:6a:9f:fb:6b:44:18:1e:1c:13:41:c0:14:63: 4b:cc:6e:2d:5a:f4:14:f3:f9:32:03:fd:0b:f5:59:4e:03:e3: f1:02:b9:b6:9f:de:2c:da:67:cf:74:0f:a1:93:f9:dc:6c:55: eb:67:19:f3:74:25:88:20:4a:76:64:27:1b:fc:d7:10:b8:51: 57:c6:9d:db:5a:13:30:1e:fd:4d:70:fb:a0:39:9e:b4:11:16: ae:f9:0e:e1:eb:71:0a:45:0f:4c:6b:c2:a2:11:c7:03:ed:40: 35:59:e5:b2:2d:61:bf:90:25:5b:c9:05:ec:8c:ec:d8:16:b8: 16:42:60:b9:27:59:b3:ea:23:b8:d2:1f:8a:8b:21:5a:14:df: 5f:d0:e1:24:69:56:9c:8d:6f:e8:fe:cb:92:f6:13:2a:8f:fe: 22:94:b0:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmS8bdHyxWzyxglut4vQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTk5YjU5YWI1YzFmZDM1NTdmNTNhOWRkNGIyNDYwYzhiYTNlYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLtQ23O2f794Hto9vAJ0jOO7TF9j 4CuP/ctuo3kSB36Qx1FLchV2ZaBxhycH7YZSrutQKL37JhOEOUMjIaHu0xJlmIth XTVFlcLGaN/OwXpbfwp0sPgEeKx2cALeP+vOn8K+oRPsFHf0DCPlnIE/gMgrrTC/ fCUu+Dc3ZZ7Jcsfu9aO1miXHYvzidoWRtXXG5+rVS+tEmLiRdTJgHZePy6WuAQyG iEkMekq7GcO9iO8vhDrFUFThengTrYn+c3U5oj926EljslYnSGI/qXkqV9LOE+kQ yddW3xMSetU1N/V97vbcJjEpEbn0WYMUxMHxZ/ICnPDkV9i55iMD+S6CQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAqZtZq1wf01V/U6ndSyRgyLo+qvMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvQ3BtMW1yWEJfVFZYOVRxZDFMSkdESXVqNnE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUaMA0G CSqGSIb3DQEBCwUAA4IBAQB3WRveoY8yhmw+ac5qy8bRhWemSdK1qXHLcIONWKuP vlzLuU60Vbh+OVsHHRRGuf0GKHO0Ccg5LlsJh09dMhXBXJKn3iooZzsHCmyEdHRf Z6COtlHa1H0gkCw3UN9uhGqf+2tEGB4cE0HAFGNLzG4tWvQU8/kyA/0L9VlOA+Px Arm2n94s2mfPdA+hk/ncbFXrZxnzdCWIIEp2ZCcb/NcQuFFXxp3bWhMwHv1NcPug OZ60ERau+Q7h63EKRQ9Ma8KiEccD7UA1WeWyLWG/kCVbyQXsjOzYFrgWQmC5J1mz 6iO40h+KiyFaFN9f0OEkaVacjW/o/suS9hMqj/4ilLAz -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:22 2026 by rpki-client