This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/cSJtDg9vgEHyxl9pdyznOaSGrWg.roa File: cSJtDg9vgEHyxl9pdyznOaSGrWg.roa (raw, json) Hash identifier: 76q9DQ4PdJdy77vI2HX3g1+OVo3qLamEUqimf88VMZA= Subject key identifier: 71:22:6D:0E:0F:6F:80:41:F2:C6:5F:69:77:2C:E7:39:A4:86:AD:68 Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616 Certificate serial: 019B7F157D0B666CF0C7351E329C64696FDB Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/cSJtDg9vgEHyxl9pdyznOaSGrWg.roa Signing time: Fri 02 Jan 2026 14:21:13 +0000 ROA not before: Fri 02 Jan 2026 14:21:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45009 IP address blocks: 45.150.40.0/22 maxlen: 22 45.150.40.0/24 maxlen: 24 45.150.41.0/24 maxlen: 24 45.150.42.0/24 maxlen: 24 45.150.43.0/24 maxlen: 24 2a0f:9200::/29 maxlen: 29 2a0f:9200::/48 maxlen: 48 2a0f:9201::/48 maxlen: 48 2a0f:9207::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7d:0b:66:6c:f0:c7:35:1e:32:9c:64:69:6f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616 Validity Not Before: Jan 2 14:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71226d0e0f6f8041f2c65f69772ce739a486ad68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:68:a3:1d:5a:b6:b6:a0:05:5f:1f:1f:ae:10: 6c:01:66:e4:f7:93:00:61:a6:1e:36:bd:64:4a:2e: bd:c6:f5:06:aa:c8:8f:a5:cd:51:97:62:c2:c3:0a: bf:c5:d8:ca:48:a2:be:2b:4f:80:49:40:ea:5a:94: 1b:9e:79:b0:b5:11:26:e2:e8:19:d5:b3:d4:63:b2: ea:01:9d:91:44:9c:f9:6b:b2:0a:5d:c8:7b:2e:f0: 6f:90:fa:7f:c8:7b:bc:c4:33:49:f6:be:4e:f6:a9: de:50:36:d8:02:1c:21:3a:06:8d:d2:39:ec:34:1b: 2d:69:21:dd:72:1b:9c:52:51:60:6e:0d:3b:96:d4: 6f:fc:c3:14:cc:cf:68:fc:90:52:4e:23:c4:3b:8c: 91:61:94:23:32:81:1a:5a:2c:df:d0:c0:39:87:41: 7f:a8:69:f0:25:9a:7d:4c:a9:1c:1c:f8:bc:80:9c: 8b:b8:31:71:6d:7c:7d:48:9d:9e:f3:5b:58:ea:2a: 02:5d:62:00:e1:d7:eb:34:9d:44:ef:9e:1d:b5:9a: d8:c1:29:1a:d1:39:84:9a:47:77:21:7a:07:01:e8: 5a:b7:74:ca:71:d0:b1:61:4a:f0:51:0c:06:2f:e5: 52:f8:b5:c5:07:1f:99:cb:0c:68:ed:6e:93:30:31: 57:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:22:6D:0E:0F:6F:80:41:F2:C6:5F:69:77:2C:E7:39:A4:86:AD:68 X509v3 Authority Key Identifier: keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/cSJtDg9vgEHyxl9pdyznOaSGrWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.40.0/22 IPv6: 2a0f:9200::/29 Signature Algorithm: sha256WithRSAEncryption b1:cb:75:67:20:af:35:02:8e:20:a2:4d:29:71:5d:5f:cf:29: 37:9f:74:3b:2a:f8:70:bc:e4:b1:1e:0e:fe:6f:5e:57:fc:30: 99:a0:fc:72:31:fc:50:82:78:9c:64:89:62:96:72:cf:2c:b4: cb:80:0c:8c:43:56:78:a3:9d:82:a9:75:9a:e5:89:0f:2d:1b: 09:5c:e0:91:71:74:98:55:1f:75:8c:cd:04:73:a7:ce:25:65: d3:36:e5:68:59:9a:8c:d4:4c:c5:0c:52:2e:8b:f8:ae:c0:38: 30:fe:2c:f7:9b:0f:eb:2f:75:e8:c8:18:5b:42:aa:5c:b4:5c: de:ac:22:ea:16:ea:1d:63:45:de:e3:ab:18:c7:13:1e:ac:89: ed:42:04:d6:42:25:be:22:09:26:3d:16:03:d1:f9:83:6a:46: f2:63:5b:b5:70:c9:51:46:9d:8f:88:4e:ac:ee:bc:63:27:d3: dd:83:2f:35:5d:ba:6a:35:8c:9c:23:eb:56:8a:0e:13:78:42: 0e:98:50:69:13:9f:83:fb:5c:b7:30:7e:d6:d2:5c:49:6f:c0: aa:fc:25:01:44:3e:29:1d:60:4e:81:ea:24:79:73:4b:86:a0: 3f:74:82:15:0a:95:c8:b4:78:d3:52:70:03:09:da:0f:f0:fb: db:c0:30:19 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FX0LZmzwxzUeMpxkaW/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNzJiNjBmNWZiNDkzMDAxNmNlYjg2MGNjMTc0YTUzMTM1 ZjE2MTYwHhcNMjYwMTAyMTQyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTIyNmQwZTBmNmY4MDQxZjJjNjVmNjk3NzJjZTczOWE0ODZhZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWijHVq2tqAFXx8frhBsAWbk95MA YaYeNr1kSi69xvUGqsiPpc1Rl2LCwwq/xdjKSKK+K0+ASUDqWpQbnnmwtREm4ugZ 1bPUY7LqAZ2RRJz5a7IKXch7LvBvkPp/yHu8xDNJ9r5O9qneUDbYAhwhOgaN0jns NBstaSHdchucUlFgbg07ltRv/MMUzM9o/JBSTiPEO4yRYZQjMoEaWizf0MA5h0F/ qGnwJZp9TKkcHPi8gJyLuDFxbXx9SJ2e81tY6ioCXWIA4dfrNJ1E754dtZrYwSka 0TmEmkd3IXoHAehat3TKcdCxYUrwUQwGL+VS+LXFBx+Zywxo7W6TMDFXPwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHEibQ4Pb4BB8sZfaXcs5zmkhq1oMB8GA1UdIwQY MBaAFIpytg9ftJMAFs64YMwXSlMTXxYWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQt ZTA4NTA1YzkxMDY2LzEvY1NKdERnOXZnRUh5eGw5cGR5em5PYVNHcldnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQtZTA4NTA1YzkxMDY2 LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZYoMA0E AgACMAcDBQMqD5IAMA0GCSqGSIb3DQEBCwUAA4IBAQCxy3VnIK81Ao4gok0pcV1f zyk3n3Q7KvhwvOSxHg7+b15X/DCZoPxyMfxQgnicZIlilnLPLLTLgAyMQ1Z4o52C qXWa5YkPLRsJXOCRcXSYVR91jM0Ec6fOJWXTNuVoWZqM1EzFDFIui/iuwDgw/iz3 mw/rL3XoyBhbQqpctFzerCLqFuodY0Xe46sYxxMerIntQgTWQiW+IgkmPRYD0fmD akbyY1u1cMlRRp2PiE6s7rxjJ9Pdgy81XbpqNYycI+tWig4TeEIOmFBpE5+D+1y3 MH7W0lxJb8Cq/CUBRD4pHWBOgeokeXNLhqA/dIIVCpXItHjTUnADCdoP8PvbwDAZ -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:15 2026 by rpki-client