This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/CzuBwM8BexrMvmVe1lNGnFx0SsI.roa File: CzuBwM8BexrMvmVe1lNGnFx0SsI.roa (raw, json) Hash identifier: oYbWXOSCXTX+A100giVddYXbi/Uhc0FrRcUcum8QwfU= Subject key identifier: 0B:3B:81:C0:CF:01:7B:1A:CC:BE:65:5E:D6:53:46:9C:5C:74:4A:C2 Certificate issuer: /CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe Certificate serial: 019B76EB1BB3761E3A3FAE8AF43E667CD274 Authority key identifier: 73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/CzuBwM8BexrMvmVe1lNGnFx0SsI.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208200 IP address blocks: 45.154.72.0/23 maxlen: 24 2a0f:b300::/36 maxlen: 48 2a0f:b300:1000::/36 maxlen: 48 2a0f:b300:b300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1b:b3:76:1e:3a:3f:ae:8a:f4:3e:66:7c:d2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b3b81c0cf017b1accbe655ed653469c5c744ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:d0:41:83:23:f1:1a:62:6c:fa:da:e8:09: 32:13:a8:53:1b:d3:29:2b:a9:75:7e:68:96:49:a8: 4d:3d:07:e9:dc:c5:61:df:d2:b3:7c:c0:08:ac:23: 3d:67:97:83:e1:cd:7d:bc:7b:af:88:9b:73:9f:34: df:88:8c:75:e1:be:1c:f3:23:54:19:ab:59:9d:07: 06:ac:f2:9a:a9:02:9a:41:0d:a3:9e:57:fa:00:33: 89:c3:91:e0:ce:8e:bc:23:bf:7a:78:a3:ab:fa:72: 53:ee:92:ba:3f:f5:a3:fd:4f:d6:f6:5c:c8:1f:8c: 59:47:6f:e3:40:72:dd:1b:13:48:e6:f9:5d:b5:37: 99:3b:af:81:c5:6b:b1:aa:3d:34:dc:3c:f9:52:8f: 21:12:bd:e9:3b:bf:06:c5:c8:59:44:04:86:9a:4f: 84:49:66:e0:05:7d:fe:b2:ac:77:fc:37:2a:1f:e1: aa:1e:88:8d:a6:f0:9f:a4:fb:dd:a8:4e:c3:51:55: dc:d8:c1:62:d0:5b:0f:15:4e:88:33:a4:c0:ba:fc: e2:60:9a:a6:22:64:6f:da:b0:bd:42:6a:67:8d:7c: cc:cb:59:c3:5b:4e:8d:16:39:c2:7c:56:22:9e:05: 51:f9:ac:6f:ad:03:5e:ea:59:4b:60:0c:7f:38:f3: b3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3B:81:C0:CF:01:7B:1A:CC:BE:65:5E:D6:53:46:9C:5C:74:4A:C2 X509v3 Authority Key Identifier: keyid:73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/CzuBwM8BexrMvmVe1lNGnFx0SsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.72.0/23 IPv6: 2a0f:b300::/35 2a0f:b300:b300::/48 Signature Algorithm: sha256WithRSAEncryption 1a:db:4c:57:0f:88:4b:59:b2:7d:7a:5c:51:77:71:7a:73:ef: a7:61:38:ac:8c:fb:52:e4:74:16:96:55:76:b8:f6:f1:7d:44: 42:4f:82:56:98:78:61:0a:04:25:a8:58:19:5c:73:76:9b:9d: 91:9f:47:2e:30:2f:cc:6c:73:41:88:d2:5e:f3:69:ec:e2:22: a3:1e:76:02:39:1a:4d:ac:e7:2d:f8:a1:49:14:d9:4f:3c:1d: 39:34:6f:17:f6:45:8c:68:76:81:ce:47:92:99:f1:4a:09:0c: 02:87:37:0a:df:db:67:96:38:61:b6:d0:7d:cf:97:d7:0d:0a: ae:39:c3:bc:f0:9e:e7:81:11:a8:7e:81:98:74:67:0c:ee:d6: 8c:d2:21:d0:89:55:2a:71:85:b4:d8:7b:1b:c2:0c:37:56:f7: a5:b6:66:ac:ea:8c:5f:79:f1:b8:9f:5b:80:37:19:ec:53:a3: db:12:f4:32:be:3f:2a:4b:29:77:f6:ba:69:2a:46:2f:97:28: fb:a6:aa:98:d1:02:df:2d:6f:2b:de:05:b6:d0:a8:68:ef:e5: 48:f2:48:48:88:72:89:f9:fa:e4:d1:1b:95:59:36:ce:e5:ca: ac:cd:00:aa:2d:7d:87:38:ef:c1:5c:14:d2:8d:8c:fd:7f:44: f4:be:31:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt26xuzdh46P66K9D5mfNJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNmQ3MjRlMjM5ZWZiN2YyZjdiZWE1MjZhOWUwYzVlN2Zj ODliYmUwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjNiODFjMGNmMDE3YjFhY2NiZTY1NWVkNjUzNDY5YzVjNzQ0YWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTHQQYMj8RpibPra6AkyE6hTG9Mp K6l1fmiWSahNPQfp3MVh39KzfMAIrCM9Z5eD4c19vHuviJtznzTfiIx14b4c8yNU GatZnQcGrPKaqQKaQQ2jnlf6ADOJw5Hgzo68I796eKOr+nJT7pK6P/Wj/U/W9lzI H4xZR2/jQHLdGxNI5vldtTeZO6+BxWuxqj003Dz5Uo8hEr3pO78GxchZRASGmk+E SWbgBX3+sqx3/DcqH+GqHoiNpvCfpPvdqE7DUVXc2MFi0FsPFU6IM6TAuvziYJqm ImRv2rC9QmpnjXzMy1nDW06NFjnCfFYingVR+axvrQNe6llLYAx/OPOzGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAs7gcDPAXsazL5lXtZTRpxcdErCMB8GA1UdIwQY MBaAFHNtck4jnvt/L3vqUmqeDF5/yJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzIxeVRpT2UtMzh2ZS1wU2FwNE1Ybl9JbTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kZmMxMTAtNzkyNC00OWE5LTg1NjQt MGJlYmZjYmRlMWYzLzEvQ3p1QndNOEJleHJNdm1WZTFsTkduRngwU3NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kZmMxMTAtNzkyNC00OWE5LTg1NjQtMGJlYmZjYmRlMWYz LzEvYzIxeVRpT2UtMzh2ZS1wU2FwNE1Ybl9JbTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQBLZpIMBcE AgACMBEDBgUqD7MAAAMHACoPswCzADANBgkqhkiG9w0BAQsFAAOCAQEAGttMVw+I S1myfXpcUXdxenPvp2E4rIz7UuR0FpZVdrj28X1EQk+CVph4YQoEJahYGVxzdpud kZ9HLjAvzGxzQYjSXvNp7OIiox52AjkaTaznLfihSRTZTzwdOTRvF/ZFjGh2gc5H kpnxSgkMAoc3Ct/bZ5Y4YbbQfc+X1w0KrjnDvPCe54ERqH6BmHRnDO7WjNIh0IlV KnGFtNh7G8IMN1b3pbZmrOqMX3nxuJ9bgDcZ7FOj2xL0Mr4/Kkspd/a6aSpGL5co +6aqmNEC3y1vK94FttCoaO/lSPJISIhyifn65NEblVk2zuXKrM0Aqi19hzjvwVwU 0o2M/X9E9L4xmQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:38:01 2026 by rpki-client