This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/cgR421SqAdTHgGKj7wWDkEllq-c.roa File: cgR421SqAdTHgGKj7wWDkEllq-c.roa (raw, json) Hash identifier: TFpCI0FhjKnzwQKnSEL+ySqTyTjRfccX4g8rsH89wgQ= Subject key identifier: 72:04:78:DB:54:AA:01:D4:C7:80:62:A3:EF:05:83:90:49:65:AB:E7 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA5590622EA0CC04DF3700666B66735 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/cgR421SqAdTHgGKj7wWDkEllq-c.roa Signing time: Thu 01 Jan 2026 22:19:52 +0000 ROA not before: Thu 01 Jan 2026 22:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200023 IP address blocks: 45.83.206.0/24 maxlen: 24 45.92.248.0/22 maxlen: 24 45.95.176.0/22 maxlen: 24 45.139.160.0/23 maxlen: 24 45.139.164.0/22 maxlen: 24 45.139.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:59:06:22:ea:0c:c0:4d:f3:70:06:66:b6:67:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=720478db54aa01d4c78062a3ef0583904965abe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fc:00:1c:dc:e3:b2:28:b1:76:94:55:96:c9: e2:be:03:c8:87:09:7d:a8:1d:6f:84:6a:0e:5f:f9: a9:2f:27:27:4f:5c:91:21:d0:92:2e:b1:b1:e2:f2: 4b:5e:3e:10:a4:f9:68:3f:5d:22:ec:91:db:5b:83: 6e:5e:16:6f:ea:3f:d9:08:ee:af:ed:5d:f6:87:bc: 07:ef:24:9d:af:45:4b:c6:5d:97:e0:4f:2b:3f:50: 37:4c:6c:81:53:fa:eb:ac:52:48:c7:11:d5:45:82: cd:c0:29:cc:96:56:48:46:ee:7c:48:69:f1:16:fc: 12:b9:ac:2e:46:b6:7b:b5:73:67:ac:20:f3:42:59: e5:5d:b3:01:d5:d4:7a:6d:41:29:b6:b0:e2:03:03: 41:e3:b3:c8:9e:84:95:00:f8:d6:79:33:8c:6a:af: f8:a7:26:c8:47:80:98:16:9f:9f:f0:b1:bc:fc:c3: 22:74:29:9d:0b:28:ec:50:5d:2b:71:bb:08:45:5a: c9:66:a1:8d:51:25:27:87:c7:7f:dd:36:00:50:5e: fa:ec:37:69:39:f0:4a:83:c8:8e:97:67:7e:f8:09: 30:0c:66:d1:e1:1d:97:18:63:ca:ee:68:27:a4:d5: 9d:ca:f5:9c:87:ee:e1:59:51:90:e0:94:87:1d:d8: 4a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:04:78:DB:54:AA:01:D4:C7:80:62:A3:EF:05:83:90:49:65:AB:E7 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/cgR421SqAdTHgGKj7wWDkEllq-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.206.0/24 45.92.248.0/22 45.95.176.0/22 45.139.160.0/23 45.139.164.0/22 45.139.172.0/22 Signature Algorithm: sha256WithRSAEncryption 40:74:a6:69:58:12:16:33:ea:6d:0e:ea:13:08:d1:e6:74:a3: ab:b0:38:ff:27:65:22:45:10:87:3e:59:10:e8:13:55:e6:18: d6:e3:b5:61:8c:be:cb:db:3a:9b:bc:78:a0:94:1b:cd:85:6c: e6:c6:57:92:88:78:44:85:39:3b:33:9d:f2:ff:82:ce:bb:50: 9a:c6:78:f5:34:79:e6:41:89:15:aa:16:ea:9c:34:8a:92:5f: c9:43:14:79:4d:17:a2:cf:ea:56:f6:20:b4:62:95:27:b1:b6: 62:7b:ea:78:ec:5f:15:d1:51:a5:f8:27:b0:ca:aa:b0:98:15: 05:c0:2a:1b:0d:70:73:57:20:f2:ea:b8:6f:b7:d4:85:b9:a8: 89:35:33:3f:8a:91:f2:c8:14:7a:58:3a:92:08:b7:c6:72:02: 21:22:4c:d0:22:af:a2:fa:ed:91:fb:28:69:3d:a0:a5:2b:7a: 48:b7:0a:05:c5:d7:4e:2b:b7:ad:e7:72:70:8c:15:79:6d:18: fa:70:9e:89:ed:5d:8e:c5:26:30:ec:ae:c0:57:59:62:9e:8f: 81:a1:25:0d:64:93:bd:b3:05:b4:aa:39:ca:d0:08:89:63:fc: 14:fc:20:7d:39:23:ac:92:88:33:1d:0b:3e:a0:4f:8e:03:bb: 33:cb:a7:63 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7pVkGIuoMwE3zcAZmtmc1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjA0NzhkYjU0YWEwMWQ0Yzc4MDYyYTNlZjA1ODM5MDQ5NjVhYmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vwAHNzjsiixdpRVlsnivgPIhwl9 qB1vhGoOX/mpLycnT1yRIdCSLrGx4vJLXj4QpPloP10i7JHbW4NuXhZv6j/ZCO6v 7V32h7wH7ySdr0VLxl2X4E8rP1A3TGyBU/rrrFJIxxHVRYLNwCnMllZIRu58SGnx FvwSuawuRrZ7tXNnrCDzQlnlXbMB1dR6bUEptrDiAwNB47PInoSVAPjWeTOMaq/4 pybIR4CYFp+f8LG8/MMidCmdCyjsUF0rcbsIRVrJZqGNUSUnh8d/3TYAUF767Ddp OfBKg8iOl2d++AkwDGbR4R2XGGPK7mgnpNWdyvWch+7hWVGQ4JSHHdhKDwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFHIEeNtUqgHUx4Bio+8Fg5BJZavnMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvY2dSNDIxU3FBZFRIZ0dLajd3V0RrRWxscS1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALVPOAwQC LVz4AwQCLV+wAwQBLYugAwQCLYukAwQCLYusMA0GCSqGSIb3DQEBCwUAA4IBAQBA dKZpWBIWM+ptDuoTCNHmdKOrsDj/J2UiRRCHPlkQ6BNV5hjW47VhjL7L2zqbvHig lBvNhWzmxleSiHhEhTk7M53y/4LOu1Caxnj1NHnmQYkVqhbqnDSKkl/JQxR5TRei z+pW9iC0YpUnsbZie+p47F8V0VGl+CewyqqwmBUFwCobDXBzVyDy6rhvt9SFuaiJ NTM/ipHyyBR6WDqSCLfGcgIhIkzQIq+i+u2R+yhpPaClK3pItwoFxddOK7et53Jw jBV5bRj6cJ6J7V2OxSYw7K7AV1lino+BoSUNZJO9swW0qjnK0AiJY/wU/CB9OSOs kogzHQs+oE+OA7szy6dj -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:14 2026 by rpki-client