This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/cmhQu2Y8Xwpht0Kjbz9MmCetMFs.roa File: cmhQu2Y8Xwpht0Kjbz9MmCetMFs.roa (raw, json) Hash identifier: pcJNDwdU6KGUma0lCWCQ0yEE/DOjtWZEWz1DbRzVYOU= Subject key identifier: 72:68:50:BB:66:3C:5F:0A:61:B7:42:A3:6F:3F:4C:98:27:AD:30:5B Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d Certificate serial: 019B7B35DD78274D74685C6153C7FCF64B28 Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/cmhQu2Y8Xwpht0Kjbz9MmCetMFs.roa Signing time: Thu 01 Jan 2026 20:18:06 +0000 ROA not before: Thu 01 Jan 2026 20:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203976 IP address blocks: 45.88.36.0/24 maxlen: 24 45.88.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:dd:78:27:4d:74:68:5c:61:53:c7:fc:f6:4b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d Validity Not Before: Jan 1 20:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=726850bb663c5f0a61b742a36f3f4c9827ad305b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:87:bc:5e:f8:82:ba:38:0e:e5:2b:c1:5d:9f: 31:9f:b9:88:4e:ac:39:32:37:75:b1:37:42:7e:13: b0:0f:bb:32:47:9d:61:c0:56:45:bd:23:f0:a7:e1: 03:14:ed:3e:6c:da:13:b8:0e:78:2c:23:b0:80:b9: 25:7d:9c:be:a8:93:50:3e:c4:ac:f2:33:67:f4:6b: 35:ca:20:0a:2d:c2:38:7f:0b:b2:03:60:c3:8b:b5: e9:19:54:a1:0f:94:37:21:90:82:8d:1b:76:6e:fe: 07:dd:ae:cc:bf:7e:06:97:db:01:ed:b5:9b:8a:7a: e9:db:f9:8e:30:78:c2:70:16:db:ed:db:18:27:ff: 4c:8e:e1:a1:0c:25:49:e5:c1:07:13:d3:68:c6:2c: a2:ac:6f:2f:a6:c3:18:9e:94:70:b7:39:66:6d:fb: 0c:bf:5a:d4:31:0b:2b:e4:4b:9e:84:27:38:55:04: 02:54:a1:45:27:ac:58:ab:48:af:04:b7:00:0e:55: d3:e3:c1:76:fb:66:b4:bd:b0:0d:62:ec:f7:1f:01: a1:d1:20:c5:55:91:3e:8f:3f:94:87:79:00:61:96: 8f:d4:5a:b1:44:70:b3:38:5a:c7:6a:8b:db:e0:a0: 49:03:63:1a:a1:f8:83:f8:ee:f9:a1:a7:71:c8:07: 9e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:68:50:BB:66:3C:5F:0A:61:B7:42:A3:6F:3F:4C:98:27:AD:30:5B X509v3 Authority Key Identifier: keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/cmhQu2Y8Xwpht0Kjbz9MmCetMFs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.36.0/24 45.88.38.0/24 Signature Algorithm: sha256WithRSAEncryption 21:8f:29:cd:84:6a:4c:dd:c4:7a:99:5b:ec:02:15:23:d8:b3: a2:44:d9:b1:12:ba:e0:40:74:44:28:ce:e4:a2:28:67:05:58: 6d:09:52:b5:b2:d8:8a:66:28:e5:1e:52:2a:fd:c7:3b:34:fb: 04:b2:41:0e:9f:0b:c0:0e:e9:f8:fb:71:6a:30:17:e1:a3:a1: c8:98:56:65:ee:35:00:42:06:3c:87:33:1a:f5:06:98:19:af: c5:f8:f1:4c:76:f1:4a:5a:ad:93:1b:1c:5f:ab:10:4e:eb:1a: 26:0f:95:50:1c:7d:b3:69:96:83:5d:ce:96:a3:ab:88:32:ab: d6:9c:7a:97:78:c5:6b:7d:f8:55:da:fa:3c:62:a9:14:22:28: 04:cf:db:16:3a:e9:c8:a6:5f:9b:94:f5:f2:ef:f7:0e:68:88: f5:1e:fc:67:4a:8c:db:d4:e3:00:0d:90:a9:4c:fd:f8:21:5e: 03:36:6b:ac:a2:72:df:8c:69:7a:83:08:21:7d:12:05:e0:2a: 26:41:86:13:0f:3d:cc:6d:08:8f:9c:d4:66:67:7d:f4:3c:d3: f4:e0:96:74:7c:54:3a:07:ff:c7:cf:54:e6:37:31:df:86:f1: 65:34:bf:e1:1c:fb:f2:4d:bd:d2:40:28:a8:ee:be:3e:d2:42: 2c:10:85:48 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Nd14J010aFxhU8f89ksoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNzhiNmQwMDYxNGY1NTY1ZDlkOGFmODI0N2NjNzJlYTli ODgzM2QwHhcNMjYwMTAxMjAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjY4NTBiYjY2M2M1ZjBhNjFiNzQyYTM2ZjNmNGM5ODI3YWQzMDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIe8XviCujgO5SvBXZ8xn7mITqw5 Mjd1sTdCfhOwD7syR51hwFZFvSPwp+EDFO0+bNoTuA54LCOwgLklfZy+qJNQPsSs 8jNn9Gs1yiAKLcI4fwuyA2DDi7XpGVShD5Q3IZCCjRt2bv4H3a7Mv34Gl9sB7bWb inrp2/mOMHjCcBbb7dsYJ/9MjuGhDCVJ5cEHE9NoxiyirG8vpsMYnpRwtzlmbfsM v1rUMQsr5EuehCc4VQQCVKFFJ6xYq0ivBLcADlXT48F2+2a0vbANYuz3HwGh0SDF VZE+jz+Uh3kAYZaP1FqxRHCzOFrHaovb4KBJA2MaofiD+O75oadxyAeeLwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHJoULtmPF8KYbdCo28/TJgnrTBbMB8GA1UdIwQY MBaAFE54ttAGFPVWXZ2K+CR8xy6puIM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG5pMjBBWVU5VlpkbllyNEpIekhMcW00Z3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jYjgyNjUtYzYzMi00ODEzLWI4NTgt ZGVmMzg2NzQzZjMyLzEvY21oUXUyWThYd3BodDBLamJ6OU1tQ2V0TUZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9jYjgyNjUtYzYzMi00ODEzLWI4NTgtZGVmMzg2NzQzZjMy LzEvVG5pMjBBWVU5VlpkbllyNEpIekhMcW00Z3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVgkAwQA LVgmMA0GCSqGSIb3DQEBCwUAA4IBAQAhjynNhGpM3cR6mVvsAhUj2LOiRNmxErrg QHREKM7koihnBVhtCVK1stiKZijlHlIq/cc7NPsEskEOnwvADun4+3FqMBfho6HI mFZl7jUAQgY8hzMa9QaYGa/F+PFMdvFKWq2TGxxfqxBO6xomD5VQHH2zaZaDXc6W o6uIMqvWnHqXeMVrffhV2vo8YqkUIigEz9sWOunIpl+blPXy7/cOaIj1HvxnSozb 1OMADZCpTP34IV4DNmusonLfjGl6gwghfRIF4ComQYYTDz3MbQiPnNRmZ330PNP0 4JZ0fFQ6B//Hz1TmNzHfhvFlNL/hHPvyTb3SQCio7r4+0kIsEIVI -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:15 2026 by rpki-client