This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/CKM45MzLL-Kr-1wHUJmYArBZNQs.roa File: CKM45MzLL-Kr-1wHUJmYArBZNQs.roa (raw, json) Hash identifier: zgA0VgHxkkAugxLOcgin3giUJuyrnUWyjPbTTAbl/sg= Subject key identifier: 08:A3:38:E4:CC:CB:2F:E2:AB:FB:5C:07:50:99:98:02:B0:59:35:0B Certificate issuer: /CN=f73cdc6751d7c59073e4b706402d3691af09086f Certificate serial: 019B7F8325C68580BFDF37B9F023FE2C4FCA Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/CKM45MzLL-Kr-1wHUJmYArBZNQs.roa Signing time: Fri 02 Jan 2026 16:20:59 +0000 ROA not before: Fri 02 Jan 2026 16:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52056 IP address blocks: 45.82.16.0/22 maxlen: 22 45.82.16.0/23 maxlen: 23 46.23.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:25:c6:85:80:bf:df:37:b9:f0:23:fe:2c:4f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f Validity Not Before: Jan 2 16:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08a338e4cccb2fe2abfb5c0750999802b059350b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c2:d5:cd:c5:4e:37:1b:db:f5:37:cd:cf:34: 8c:23:4a:63:ab:70:77:c4:4e:25:c1:37:52:c4:6c: 55:68:40:1f:da:09:d5:14:dd:a0:8e:bc:aa:54:83: a3:57:e7:e7:87:2b:c1:7f:54:3a:04:f1:14:bc:ab: 82:c1:3b:fe:b3:51:82:a9:f6:fc:d0:8d:9d:62:42: 90:05:dd:68:17:d0:ee:28:b8:18:89:63:0f:92:7d: 01:72:91:82:d6:8e:17:e8:ee:8d:98:30:8d:2b:41: 48:4a:11:6c:b6:f6:67:d8:d1:18:ea:a9:be:c7:e1: 6e:f8:5b:5b:6e:80:ba:08:a2:13:60:71:33:14:29: a1:1e:7e:1c:f0:67:01:08:38:5f:8c:62:7d:16:68: 1d:4f:7f:18:3b:93:a4:25:a3:db:0a:57:b8:d2:00: df:09:fd:f7:10:70:c5:2a:cd:90:97:ab:ca:ef:32: 14:91:56:7c:3c:41:cf:be:d3:8a:19:b2:ed:44:9a: d6:e0:37:3d:49:c8:a3:1c:b2:2f:fc:ed:11:db:7b: f1:15:65:6c:db:b6:e1:65:75:be:58:b1:5e:32:15: 82:ee:7b:3b:3a:e1:99:84:3c:fe:1b:0f:96:6a:c3: f4:3f:ae:ef:16:92:3b:84:45:65:4d:de:80:0c:28: 72:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A3:38:E4:CC:CB:2F:E2:AB:FB:5C:07:50:99:98:02:B0:59:35:0B X509v3 Authority Key Identifier: keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/CKM45MzLL-Kr-1wHUJmYArBZNQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.16.0/22 46.23.160.0/20 Signature Algorithm: sha256WithRSAEncryption 93:4a:a0:ac:1e:9f:74:27:03:e8:b4:2e:28:33:6a:1d:b3:f1: 92:43:30:53:8a:e9:3d:09:77:ef:04:bc:74:ff:20:fb:a3:34: c7:49:eb:57:d0:69:b4:25:cd:31:38:86:86:c6:39:39:76:91: 7d:45:fd:f8:6c:02:0a:77:00:7d:0a:b1:50:e8:0f:8b:4a:f9: 8c:1c:fa:f4:6e:50:c1:a6:51:51:c1:0b:01:65:b4:0a:53:3d: f4:90:9f:99:2b:97:97:b3:40:2c:5c:71:5e:51:29:c8:53:99: 85:9f:ac:5e:5a:7c:bc:54:58:85:ab:4f:eb:68:be:7d:7e:35: d7:dc:94:5d:f7:fb:fa:1e:7b:7a:c2:c6:9e:cb:0f:ac:dd:1a: 31:18:ba:17:e5:22:b8:55:83:16:3b:72:99:b1:ab:fa:96:e2: cb:93:1a:d3:17:0d:de:a4:6b:2a:ba:8b:b4:76:ea:b3:15:38: 94:35:36:63:78:2f:bf:6b:3c:c1:59:f0:b9:1b:41:e4:2c:8d: cf:72:2b:33:c7:b0:9b:20:f0:87:fa:13:74:ac:de:df:da:9f: 00:e6:67:f9:c6:d1:a6:fe:a0:50:06:0a:5e:0b:3b:9c:50:39: 98:0f:9d:6a:10:09:a7:5b:ed:a9:03:bd:ad:b8:4c:14:ab:51: e9:c9:3f:7b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gyXGhYC/3ze58CP+LE/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3M2NkYzY3NTFkN2M1OTA3M2U0YjcwNjQwMmQzNjkxYWYw OTA4NmYwHhcNMjYwMTAyMTYyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGEzMzhlNGNjY2IyZmUyYWJmYjVjMDc1MDk5OTgwMmIwNTkzNTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMLVzcVONxvb9TfNzzSMI0pjq3B3 xE4lwTdSxGxVaEAf2gnVFN2gjryqVIOjV+fnhyvBf1Q6BPEUvKuCwTv+s1GCqfb8 0I2dYkKQBd1oF9DuKLgYiWMPkn0BcpGC1o4X6O6NmDCNK0FIShFstvZn2NEY6qm+ x+Fu+FtbboC6CKITYHEzFCmhHn4c8GcBCDhfjGJ9FmgdT38YO5OkJaPbCle40gDf Cf33EHDFKs2Ql6vK7zIUkVZ8PEHPvtOKGbLtRJrW4Dc9ScijHLIv/O0R23vxFWVs 27bhZXW+WLFeMhWC7ns7OuGZhDz+Gw+WasP0P67vFpI7hEVlTd6ADChyiwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAijOOTMyy/iq/tcB1CZmAKwWTULMB8GA1UdIwQY MBaAFPc83GdR18WQc+S3BkAtNpGvCQhvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NTUwMDItZDgyMy00MWZlLThmOWEt NzE4ZmQxOTVjNWViLzEvQ0tNNDVNekxMLUtyLTF3SFVKbVlBckJaTlFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS84NTUwMDItZDgyMy00MWZlLThmOWEtNzE4ZmQxOTVjNWVi LzEvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVIQAwQE LhegMA0GCSqGSIb3DQEBCwUAA4IBAQCTSqCsHp90JwPotC4oM2ods/GSQzBTiuk9 CXfvBLx0/yD7ozTHSetX0Gm0Jc0xOIaGxjk5dpF9Rf34bAIKdwB9CrFQ6A+LSvmM HPr0blDBplFRwQsBZbQKUz30kJ+ZK5eXs0AsXHFeUSnIU5mFn6xeWny8VFiFq0/r aL59fjXX3JRd9/v6Hnt6wsaeyw+s3RoxGLoX5SK4VYMWO3KZsav6luLLkxrTFw3e pGsquou0duqzFTiUNTZjeC+/azzBWfC5G0HkLI3Pciszx7CbIPCH+hN0rN7f2p8A 5mf5xtGm/qBQBgpeCzucUDmYD51qEAmnW+2pA72tuEwUq1HpyT97 -----END CERTIFICATE-----Generated at Tue Feb 10 02:35:41 2026 by rpki-client