This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Cqi0LxYGUKczCUp1bfwCiz9lEoc.roa File: Cqi0LxYGUKczCUp1bfwCiz9lEoc.roa (raw, json) Hash identifier: PClNI5NM/mzelP+J90QZ01qdFdalxYRUv+KIzoZDcn4= Subject key identifier: 0A:A8:B4:2F:16:06:50:A7:33:09:4A:75:6D:FC:02:8B:3F:65:12:87 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA547509409C56CD960C0191F11671D Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Cqi0LxYGUKczCUp1bfwCiz9lEoc.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20712 IP address blocks: 45.140.215.0/24 maxlen: 24 45.142.205.0/24 maxlen: 24 45.142.207.0/24 maxlen: 24 45.144.157.0/24 maxlen: 24 45.144.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:47:50:94:09:c5:6c:d9:60:c0:19:1f:11:67:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0aa8b42f160650a733094a756dfc028b3f651287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fb:d0:7f:1f:5e:00:d3:39:93:a4:54:15:13: 9f:80:47:c7:3a:0d:63:96:45:64:37:7e:9e:bf:a5: b4:df:14:34:d7:37:36:87:b9:35:0d:f1:53:3a:33: 64:93:a4:22:ca:58:d2:81:ef:0f:60:25:4c:a1:9b: 4a:df:4d:e6:76:e7:1f:5c:d0:79:44:a4:56:10:77: 88:56:70:53:34:08:a2:98:ce:6a:98:82:ce:24:6a: f3:39:26:93:9b:57:26:28:bc:47:51:6c:50:6a:87: 3a:ae:1c:a5:ed:43:17:a1:84:ed:3e:c1:d3:a6:f5: 7d:a7:16:7f:02:3d:50:f2:90:fb:53:f6:89:2e:fd: 4d:25:7d:22:82:55:73:81:cc:40:2c:83:00:c6:b6: ca:8e:12:6f:1b:81:1b:03:d6:34:13:d5:bb:db:23: 41:c4:70:4d:2b:0e:fe:f3:71:9c:c0:f5:b0:41:95: 3a:02:c6:36:61:eb:da:c7:2d:06:ce:54:17:8e:f7: ee:ee:e5:5e:37:77:e1:c8:51:01:ad:a6:f9:ca:5b: b9:f8:f0:47:fc:e0:40:40:bd:e7:e5:6b:c1:52:4c: af:60:c1:23:7e:42:1a:54:97:1e:78:b8:d2:42:fa: a8:88:3a:3b:2e:d0:57:ab:8d:2a:6d:85:6e:4e:d5: 38:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A8:B4:2F:16:06:50:A7:33:09:4A:75:6D:FC:02:8B:3F:65:12:87 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Cqi0LxYGUKczCUp1bfwCiz9lEoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.215.0/24 45.142.205.0/24 45.142.207.0/24 45.144.157.0/24 45.144.159.0/24 Signature Algorithm: sha256WithRSAEncryption 33:65:af:fb:54:bb:51:ad:43:2c:7b:0c:99:e5:dc:1b:64:61: b0:13:4c:ad:9e:44:17:21:1b:b0:c1:40:0c:d4:83:d1:f6:ca: 48:3b:4d:b8:68:94:9f:de:c4:17:d8:ff:de:74:33:5b:e8:5a: d6:4a:7c:62:57:bd:01:f9:08:26:79:b6:83:af:c2:b2:c8:af: f7:03:86:cf:d3:62:89:81:d8:ac:1e:98:34:00:95:28:83:45: c4:41:ff:ca:84:f3:13:ff:b5:70:b3:d3:9d:20:1d:e5:a4:dd: e3:7b:5b:93:bb:87:36:02:21:53:16:6e:72:9a:e3:4c:d3:cc: b4:d3:6d:7c:61:6c:88:64:09:ab:46:be:54:c3:d9:a5:5c:de: 8c:6a:c1:79:ae:11:d9:ac:ce:c4:91:b5:a0:f1:ae:6b:f9:bf: 13:e3:f4:9a:a7:e6:51:ef:a7:bf:63:ea:75:87:e0:f5:4c:15: a9:24:14:9d:5a:59:c2:34:ae:99:d7:8e:f5:e0:10:b1:ce:d0: ce:a4:b2:76:fb:fb:e6:07:30:0a:b9:bb:e7:ec:4f:62:34:98: 4c:a4:03:68:fe:fd:06:c1:c1:a7:f9:c2:64:6b:f1:9d:6f:87: f7:7c:6f:21:e1:55:ff:e6:14:88:88:e4:b9:c7:b4:4e:ca:69: f0:85:df:e4 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt7pUdQlAnFbNlgwBkfEWcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWE4YjQyZjE2MDY1MGE3MzMwOTRhNzU2ZGZjMDI4YjNmNjUxMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/vQfx9eANM5k6RUFROfgEfHOg1j lkVkN36ev6W03xQ01zc2h7k1DfFTOjNkk6QiyljSge8PYCVMoZtK303mducfXNB5 RKRWEHeIVnBTNAiimM5qmILOJGrzOSaTm1cmKLxHUWxQaoc6rhyl7UMXoYTtPsHT pvV9pxZ/Aj1Q8pD7U/aJLv1NJX0iglVzgcxALIMAxrbKjhJvG4EbA9Y0E9W72yNB xHBNKw7+83GcwPWwQZU6AsY2Yevaxy0GzlQXjvfu7uVeN3fhyFEBrab5ylu5+PBH /OBAQL3n5WvBUkyvYMEjfkIaVJceeLjSQvqoiDo7LtBXq40qbYVuTtU4XQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFAqotC8WBlCnMwlKdW38Aos/ZRKHMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvQ3FpMEx4WUdVS2N6Q1VwMWJmd0NpejlsRW9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALYzXAwQA LY7NAwQALY7PAwQALZCdAwQALZCfMA0GCSqGSIb3DQEBCwUAA4IBAQAzZa/7VLtR rUMsewyZ5dwbZGGwE0ytnkQXIRuwwUAM1IPR9spIO024aJSf3sQX2P/edDNb6FrW SnxiV70B+QgmebaDr8KyyK/3A4bP02KJgdisHpg0AJUog0XEQf/KhPMT/7Vws9Od IB3lpN3je1uTu4c2AiFTFm5ymuNM08y00218YWyIZAmrRr5Uw9mlXN6MasF5rhHZ rM7EkbWg8a5r+b8T4/Sap+ZR76e/Y+p1h+D1TBWpJBSdWlnCNK6Z14714BCxztDO pLJ2+/vmBzAKubvn7E9iNJhMpANo/v0GwcGn+cJka/Gdb4f3fG8h4VX/5hSIiOS5 x7ROymnwhd/k -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:40 2026 by rpki-client