This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/0dWCHi_zBcUGuBByV4naGSZM-xE.roa File: 0dWCHi_zBcUGuBByV4naGSZM-xE.roa (raw, json) Hash identifier: bpk10gUCOEgJ6m2LwiCf9CNtZYma2K07Ok9Nb47jyhA= Subject key identifier: D1:D5:82:1E:2F:F3:05:C5:06:B8:10:72:57:89:DA:19:26:4C:FB:11 Certificate issuer: /CN=12f27a7df2076f8d1dc795277c09a0107d2bdb2a Certificate serial: 019B7758F14DA86EE0029909370333BE6E6E Authority key identifier: 12:F2:7A:7D:F2:07:6F:8D:1D:C7:95:27:7C:09:A0:10:7D:2B:DB:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/0dWCHi_zBcUGuBByV4naGSZM-xE.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28701 IP address blocks: 45.156.108.0/22 maxlen: 22 2a10:4000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f1:4d:a8:6e:e0:02:99:09:37:03:33:be:6e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12f27a7df2076f8d1dc795277c09a0107d2bdb2a Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1d5821e2ff305c506b810725789da19264cfb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:c3:a1:ec:68:93:fa:7c:2d:0a:52:e9:e5: 2e:77:6e:62:35:16:c9:e8:99:eb:d8:9e:b9:43:cf: 6a:aa:51:c0:77:7d:87:5b:9a:ad:6d:70:c8:67:2f: ca:b3:1d:6e:e8:e3:23:d2:66:91:69:06:5d:bc:66: 90:61:ed:a0:58:8b:57:c6:55:14:6b:9b:69:4e:49: f0:21:2b:bc:93:05:5a:b3:3e:26:fa:9d:64:eb:e8: f0:0f:1c:a2:87:9f:03:63:d8:fa:e6:4b:57:a1:b6: c0:38:d2:32:02:0e:e6:04:57:2d:66:a8:bb:31:47: 49:92:a5:eb:95:47:4e:c1:f9:e8:b3:9f:66:91:c1: 90:b3:aa:96:43:54:96:01:4d:2b:ac:9f:8a:0a:b0: 98:e3:9b:13:03:f5:bd:53:bf:4b:bb:d1:25:5d:b0: 86:34:59:61:54:84:9e:fe:72:14:0a:ae:77:05:c7: b1:df:fd:35:9e:c3:a9:9a:04:64:ea:a1:aa:56:e4: 72:34:af:4c:90:d6:6f:36:e7:ac:a2:e4:3a:20:57: 87:fe:37:03:f6:df:f7:e4:b3:24:97:51:ba:fe:cf: e8:4a:60:ac:c2:ae:94:00:e7:0f:5e:57:5e:40:c9: 8a:1a:82:d5:42:c1:ad:70:6c:ac:e4:a8:64:0b:4e: bf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D5:82:1E:2F:F3:05:C5:06:B8:10:72:57:89:DA:19:26:4C:FB:11 X509v3 Authority Key Identifier: keyid:12:F2:7A:7D:F2:07:6F:8D:1D:C7:95:27:7C:09:A0:10:7D:2B:DB:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/0dWCHi_zBcUGuBByV4naGSZM-xE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.108.0/22 IPv6: 2a10:4000::/29 Signature Algorithm: sha256WithRSAEncryption 77:61:5f:bb:fe:65:dc:59:eb:03:20:cf:cd:28:80:e0:eb:27: 36:64:4e:78:26:a5:ef:c4:50:41:ef:09:21:a8:c1:02:f5:df: 18:c0:a9:d4:e3:a1:5b:6c:a4:a8:68:d2:10:23:6e:3e:c1:9c: fe:8b:57:0d:93:ed:6c:86:4d:7b:db:7c:57:77:d8:dc:ef:33: 35:8c:03:06:ce:f5:83:00:1f:d9:16:6b:5a:4d:18:9b:cc:04: aa:3b:3f:b3:67:58:ab:ff:6f:25:e8:6d:ea:f2:e8:b7:12:25: 86:d1:98:0a:2c:5f:d5:34:0f:b6:a1:9b:75:94:69:66:32:77: 54:af:d1:48:66:54:03:f9:c7:dc:c7:c3:54:43:d4:93:65:00: d7:d1:af:b0:08:85:d3:93:81:46:7f:42:59:2b:ee:00:f0:37: a5:93:b3:bd:8a:70:38:b1:5e:6c:28:e7:37:a7:c9:39:3e:e4: 69:e9:14:2c:3b:12:c4:70:4f:31:50:08:6f:bb:0b:57:de:6d: dc:46:f5:e5:4c:57:a2:29:c2:5a:ab:bb:e9:01:3e:d4:3c:51: 5c:49:a8:32:d5:74:87:c7:f1:bf:76:e6:d5:ae:5c:7e:02:27: d0:a1:30:9b:fb:2a:82:c2:3e:90:a4:5d:c1:68:6a:5e:a2:a4: 0c:33:67:f2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WPFNqG7gApkJNwMzvm5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZjI3YTdkZjIwNzZmOGQxZGM3OTUyNzdjMDlhMDEwN2Qy YmRiMmEwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWQ1ODIxZTJmZjMwNWM1MDZiODEwNzI1Nzg5ZGExOTI2NGNmYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6nDoexok/p8LQpS6eUud25iNRbJ 6Jnr2J65Q89qqlHAd32HW5qtbXDIZy/Ksx1u6OMj0maRaQZdvGaQYe2gWItXxlUU a5tpTknwISu8kwVasz4m+p1k6+jwDxyih58DY9j65ktXobbAONIyAg7mBFctZqi7 MUdJkqXrlUdOwfnos59mkcGQs6qWQ1SWAU0rrJ+KCrCY45sTA/W9U79Lu9ElXbCG NFlhVISe/nIUCq53Bcex3/01nsOpmgRk6qGqVuRyNK9MkNZvNuesouQ6IFeH/jcD 9t/35LMkl1G6/s/oSmCswq6UAOcPXldeQMmKGoLVQsGtcGys5KhkC06/ZQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNHVgh4v8wXFBrgQcleJ2hkmTPsRMB8GA1UdIwQY MBaAFBLyen3yB2+NHceVJ3wJoBB9K9sqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXZKNmZmSUhiNDBkeDVVbmZBbWdFSDByMnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lYjk0YWQtNzg5NC00YjM2LTkyNDYt MDhhZjc0YzFhNTBjLzEvMGRXQ0hpX3pCY1VHdUJCeVY0bmFHU1pNLXhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lYjk0YWQtNzg5NC00YjM2LTkyNDYtMDhhZjc0YzFhNTBj LzEvRXZKNmZmSUhiNDBkeDVVbmZBbWdFSDByMnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZxsMA0E AgACMAcDBQMqEEAAMA0GCSqGSIb3DQEBCwUAA4IBAQB3YV+7/mXcWesDIM/NKIDg 6yc2ZE54JqXvxFBB7wkhqMEC9d8YwKnU46FbbKSoaNIQI24+wZz+i1cNk+1shk17 23xXd9jc7zM1jAMGzvWDAB/ZFmtaTRibzASqOz+zZ1ir/28l6G3q8ui3EiWG0ZgK LF/VNA+2oZt1lGlmMndUr9FIZlQD+cfcx8NUQ9STZQDX0a+wCIXTk4FGf0JZK+4A 8Delk7O9inA4sV5sKOc3p8k5PuRp6RQsOxLEcE8xUAhvuwtX3m3cRvXlTFeiKcJa q7vpAT7UPFFcSagy1XSHx/G/dubVrlx+AifQoTCb+yqCwj6QpF3BaGpeoqQMM2fy -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:39 2026 by rpki-client