This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/CsxO5JGl1uLUR96vXWW1MsiVeD0.roa File: CsxO5JGl1uLUR96vXWW1MsiVeD0.roa (raw, json) Hash identifier: qaU3UmIxvjGazV+ntvpSZ0wZ4I5LxdVxbp4tBVn29k4= Subject key identifier: 0A:CC:4E:E4:91:A5:D6:E2:D4:47:DE:AF:5D:65:B5:32:C8:95:78:3D Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA55D0BB60FB6E12D3323BBD77BA1EF Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/CsxO5JGl1uLUR96vXWW1MsiVeD0.roa Signing time: Thu 01 Jan 2026 22:19:53 +0000 ROA not before: Thu 01 Jan 2026 22:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206150 IP address blocks: 45.130.140.0/24 maxlen: 24 2a0f:f40::/32 maxlen: 48 2a0f:f41::/32 maxlen: 48 2a0f:f43::/32 maxlen: 48 2a0f:e386::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:5d:0b:b6:0f:b6:e1:2d:33:23:bb:d7:7b:a1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0acc4ee491a5d6e2d447deaf5d65b532c895783d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:09:dd:6d:1e:83:75:e4:8a:a1:9c:a0:2b:c4: 90:82:fc:2d:84:42:b4:fd:bc:e6:2a:02:2a:ff:23: 2c:d2:d8:12:06:de:08:a1:2a:78:87:6c:6e:0a:2f: 19:34:e1:d4:02:e0:38:73:d3:8d:5b:15:ba:8b:94: a6:4a:fe:5f:09:e9:2d:97:4c:7a:ff:67:81:04:b9: 80:09:fa:54:c5:60:27:c4:43:49:b2:ee:d3:5e:81: 1a:b4:2e:cb:e0:75:6f:9d:a0:a1:ee:b8:93:68:f3: 4a:ab:88:12:9e:9b:aa:6a:94:ba:e6:45:48:1a:77: 99:fa:2d:09:31:71:aa:14:d8:3f:b8:c1:94:40:d8: 6d:08:a8:d6:ab:76:a3:21:c4:1d:8a:d8:00:73:e4: 5e:cb:be:a3:f2:1d:f8:53:86:94:69:32:9b:b9:ab: 2d:66:77:ff:bb:d8:a2:ea:5c:cb:6c:c4:84:32:ea: 3e:b9:1d:f5:48:ad:46:93:45:52:4c:82:6e:18:15: de:9f:15:21:50:e2:3a:0e:bf:b5:c0:2e:93:2e:fd: 12:94:09:3f:aa:2e:3a:5b:34:d6:cc:01:c9:8f:5a: 7b:0d:f6:0a:2d:d6:ba:16:56:9c:55:57:9c:d4:fc: 17:b4:a1:f1:82:cc:4d:80:70:db:1a:b2:73:9f:fc: c2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CC:4E:E4:91:A5:D6:E2:D4:47:DE:AF:5D:65:B5:32:C8:95:78:3D X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/CsxO5JGl1uLUR96vXWW1MsiVeD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.140.0/24 IPv6: 2a0f:f40::/31 2a0f:f43::/32 2a0f:e386::/32 Signature Algorithm: sha256WithRSAEncryption 9b:c6:2a:d3:bb:c8:1c:37:05:6b:f2:2e:6a:8c:9e:7b:cf:b8: 3a:02:0d:11:8e:9e:26:f3:5d:19:01:b3:ea:11:6c:c1:11:e0: 58:d9:7d:09:cb:4c:bf:fb:04:f5:a9:4d:e0:5a:27:99:b2:22: 6e:03:b8:03:df:b7:70:e3:71:f6:29:41:5e:24:2e:e6:bd:9c: ca:0a:5d:af:ba:b1:45:0e:a2:70:61:e5:be:0c:26:92:9d:57: a7:5b:85:24:01:13:37:75:65:71:44:a5:1e:6d:ed:da:02:74: 30:77:aa:53:a2:2c:e4:56:83:aa:7d:62:18:dc:2b:79:cf:c4: 8b:35:ab:c2:e9:df:c1:98:d2:3d:ab:2e:cb:b1:3c:8b:c0:8b: 45:ca:c3:8d:af:3c:50:a1:dd:a5:19:89:85:78:4d:0a:13:8c: b0:0b:17:cb:84:a6:64:4c:8a:41:e2:6f:d2:d9:e5:56:92:69: 6a:12:a3:31:fd:13:08:4b:b5:ed:e6:1f:5a:90:31:f4:b1:b2: 05:e3:cd:ba:83:4a:49:2d:89:8f:e3:4c:74:2e:39:e8:d8:0e: 10:0b:75:5a:b6:a0:20:88:34:42:a9:ce:00:d2:c5:84:68:23: 6f:fd:c1:fc:98:a4:1b:95:67:01:34:ef:0d:54:67:88:77:65: ce:4b:e3:1c -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt7pV0Ltg+24S0zI7vXe6HvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWNjNGVlNDkxYTVkNmUyZDQ0N2RlYWY1ZDY1YjUzMmM4OTU3ODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQndbR6DdeSKoZygK8SQgvwthEK0 /bzmKgIq/yMs0tgSBt4IoSp4h2xuCi8ZNOHUAuA4c9ONWxW6i5SmSv5fCektl0x6 /2eBBLmACfpUxWAnxENJsu7TXoEatC7L4HVvnaCh7riTaPNKq4gSnpuqapS65kVI GneZ+i0JMXGqFNg/uMGUQNhtCKjWq3ajIcQditgAc+Rey76j8h34U4aUaTKbuast Znf/u9ii6lzLbMSEMuo+uR31SK1Gk0VSTIJuGBXenxUhUOI6Dr+1wC6TLv0SlAk/ qi46WzTWzAHJj1p7DfYKLda6FlacVVec1PwXtKHxgsxNgHDbGrJzn/zCIQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFArMTuSRpdbi1Efer11ltTLIlXg9MB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvQ3N4TzVKR2wxdUxVUjk2dlhXVzFNc2lWZUQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAMBAIAATAGAwQALYKMMBsE AgACMBUDBQEqDw9AAwUAKg8PQwMFACoP44YwDQYJKoZIhvcNAQELBQADggEBAJvG KtO7yBw3BWvyLmqMnnvPuDoCDRGOnibzXRkBs+oRbMER4FjZfQnLTL/7BPWpTeBa J5myIm4DuAPft3DjcfYpQV4kLua9nMoKXa+6sUUOonBh5b4MJpKdV6dbhSQBEzd1 ZXFEpR5t7doCdDB3qlOiLORWg6p9YhjcK3nPxIs1q8Lp38GY0j2rLsuxPIvAi0XK w42vPFCh3aUZiYV4TQoTjLALF8uEpmRMikHib9LZ5VaSaWoSozH9EwhLte3mH1qQ MfSxsgXjzbqDSkktiY/jTHQuOejYDhALdVq2oCCINEKpzgDSxYRoI2/9wfyYpBuV ZwE07w1UZ4h3Zc5L4xw= -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:47 2026 by rpki-client