This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/CBsDO18mnRAZhs0rFe-oIGwGZeQ.roa File: CBsDO18mnRAZhs0rFe-oIGwGZeQ.roa (raw, json) Hash identifier: v+64R9Yuvs5nMKSViq5julUttSHyjyUAvPmFlDm28JY= Subject key identifier: 08:1B:03:3B:5F:26:9D:10:19:86:CD:2B:15:EF:A8:20:6C:06:65:E4 Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b Certificate serial: 019B7C7FB5653A28BD0BDF2EB3C216EE2972 Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/CBsDO18mnRAZhs0rFe-oIGwGZeQ.roa Signing time: Fri 02 Jan 2026 02:18:22 +0000 ROA not before: Fri 02 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 159.46.64.0/18 maxlen: 18 159.46.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b5:65:3a:28:bd:0b:df:2e:b3:c2:16:ee:29:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b Validity Not Before: Jan 2 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=081b033b5f269d101986cd2b15efa8206c0665e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:ec:8a:4a:32:1a:ca:1e:0d:75:74:64:61: 6c:d9:54:87:3a:da:e8:ab:9f:7c:92:73:5a:cb:30: 4f:0e:3d:e8:a9:2f:bd:b4:0b:3e:8d:23:fa:de:b4: 9d:7e:79:30:35:89:65:66:91:6e:95:5d:30:46:d9: ee:b1:65:35:b5:10:2a:d3:be:2d:15:f3:95:d6:ea: b8:52:2c:b8:10:44:50:6d:1f:e5:df:b8:43:4f:66: a0:65:25:0c:2c:49:e6:ac:da:12:b1:d8:7f:88:c7: d5:5a:fb:3a:08:7c:59:32:9d:03:6d:64:3e:28:c3: 97:4c:de:4e:f1:1e:71:cc:d4:67:da:3a:47:a2:03: cc:df:b2:4e:4e:90:5e:a5:5f:82:e4:09:71:ad:d5: 55:0e:fd:d3:13:81:fd:09:99:0d:fe:4b:ed:c8:d9: 53:ae:61:56:95:1c:06:b7:9c:9b:9d:be:92:6b:57: 8c:aa:6d:c2:a8:eb:99:a3:6a:26:d8:4a:5b:91:c7: 2d:35:51:2e:60:d6:0f:32:1e:3b:8b:b5:60:06:9e: 2f:e7:46:e9:7f:df:1d:0a:0d:d4:64:ed:dc:09:62: 3f:08:fc:01:5e:46:74:d8:ac:86:01:b2:6c:b6:76: 1f:5f:03:9c:6c:21:9c:d3:7a:bb:8b:9b:44:f0:77: 04:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1B:03:3B:5F:26:9D:10:19:86:CD:2B:15:EF:A8:20:6C:06:65:E4 X509v3 Authority Key Identifier: keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/CBsDO18mnRAZhs0rFe-oIGwGZeQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.46.64.0-159.46.191.255 Signature Algorithm: sha256WithRSAEncryption 50:54:d0:3c:bb:e7:c5:72:2b:21:55:3a:36:22:34:7e:d8:3f: ee:34:92:1e:16:21:59:6e:66:95:22:e6:f1:cb:5e:a6:b4:b1: 68:b4:6f:50:9e:06:b2:99:57:26:1f:de:f1:34:b5:5c:9d:8a: db:8f:97:41:19:ad:95:d0:98:7e:1f:6a:15:a7:bc:dc:03:20: 8c:c3:1b:c4:58:d2:98:ee:2c:a4:94:7f:f3:55:11:4b:59:1a: be:29:88:a6:d3:1e:f5:81:c0:4e:fc:f0:27:48:62:8b:9d:1d: 40:25:9b:3a:0c:f7:53:d3:97:d7:21:a7:b8:c7:40:eb:42:a9: db:cc:4b:9d:df:6b:79:eb:24:f8:c7:25:8f:8f:f4:59:56:64: 01:39:a6:ae:3b:aa:eb:d0:49:4c:8c:0e:38:77:42:0b:b7:5a: ca:df:27:12:66:e3:c8:e0:d6:15:39:f6:62:bd:2c:de:bc:3c: ab:1c:d2:fd:a2:e7:12:88:0a:52:55:d6:3e:33:b8:c6:1d:72: 42:ea:90:c1:80:37:c2:9e:f2:9a:a5:96:84:74:4c:f5:7b:7c: 6d:ac:30:57:da:41:16:92:26:bb:71:25:b8:83:4c:58:3a:f1: bf:c3:e7:6a:96:ef:b1:80:90:b7:b3:05:0c:39:78:1d:a3:3c: 9e:c4:d9:c2 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8f7VlOii9C98us8IW7ilyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MmNmODU3MjM0NGMwYTY3NGE2N2QwZjRiNTFmMTg2ZThh NzFjNGIwHhcNMjYwMTAyMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODFiMDMzYjVmMjY5ZDEwMTk4NmNkMmIxNWVmYTgyMDZjMDY2NWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomPsikoyGsoeDXV0ZGFs2VSHOtro q598knNayzBPDj3oqS+9tAs+jSP63rSdfnkwNYllZpFulV0wRtnusWU1tRAq074t FfOV1uq4Uiy4EERQbR/l37hDT2agZSUMLEnmrNoSsdh/iMfVWvs6CHxZMp0DbWQ+ KMOXTN5O8R5xzNRn2jpHogPM37JOTpBepV+C5AlxrdVVDv3TE4H9CZkN/kvtyNlT rmFWlRwGt5ybnb6Sa1eMqm3CqOuZo2om2EpbkcctNVEuYNYPMh47i7VgBp4v50bp f98dCg3UZO3cCWI/CPwBXkZ02KyGAbJstnYfXwOcbCGc03q7i5tE8HcE4wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAgbAztfJp0QGYbNKxXvqCBsBmXkMB8GA1UdIwQY MBaAFGks+FcjRMCmdKZ9D0tR8YbopxxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgt YWYzOWJiMDMwOTdmLzEvQ0JzRE8xOG1uUkFaaHMwckZlLW9JR3dHWmVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgtYWYzOWJiMDMwOTdm LzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAafLkAD BAafLoAwDQYJKoZIhvcNAQELBQADggEBAFBU0Dy758VyKyFVOjYiNH7YP+40kh4W IVluZpUi5vHLXqa0sWi0b1CeBrKZVyYf3vE0tVydituPl0EZrZXQmH4fahWnvNwD IIzDG8RY0pjuLKSUf/NVEUtZGr4piKbTHvWBwE788CdIYoudHUAlmzoM91PTl9ch p7jHQOtCqdvMS53fa3nrJPjHJY+P9FlWZAE5pq47quvQSUyMDjh3Qgu3WsrfJxJm 48jg1hU59mK9LN68PKsc0v2i5xKIClJV1j4zuMYdckLqkMGAN8Ke8pqlloR0TPV7 fG2sMFfaQRaSJrtxJbiDTFg68b/D52qW77GAkLezBQw5eB2jPJ7E2cI= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:48 2026 by rpki-client