This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/CbDZWAH-omIyip_WwmqNFzGEN6Q.roa File: CbDZWAH-omIyip_WwmqNFzGEN6Q.roa (raw, json) Hash identifier: JAGjJAojKoIa2rnuQE4G2jO7W0AL58snegAhZ+6Gung= Subject key identifier: 09:B0:D9:58:01:FE:A2:62:32:8A:9F:D6:C2:6A:8D:17:31:84:37:A4 Certificate issuer: /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b Certificate serial: 019B7CECBD059BD5D311CDC71D0FD1B3AA63 Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/CbDZWAH-omIyip_WwmqNFzGEN6Q.roa Signing time: Fri 02 Jan 2026 04:17:28 +0000 ROA not before: Fri 02 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42228 IP address blocks: 45.137.48.0/22 maxlen: 22 77.108.128.0/18 maxlen: 18 77.108.154.0/24 maxlen: 24 77.108.158.0/24 maxlen: 24 77.108.160.0/24 maxlen: 24 2a00:6300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:bd:05:9b:d5:d3:11:cd:c7:1d:0f:d1:b3:aa:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b Validity Not Before: Jan 2 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09b0d95801fea262328a9fd6c26a8d17318437a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dd:8c:da:84:a6:e6:9d:96:84:fd:ed:24:62: 24:57:89:a3:7b:07:62:23:f7:27:77:62:7d:b8:47: 83:95:b1:49:dc:42:91:ec:ad:7d:f1:95:ee:56:a5: 82:c5:31:06:64:c3:ae:53:ab:a5:55:b2:88:57:8c: cf:06:90:0c:f8:7b:9e:de:52:89:af:ed:84:2e:5d: 14:cc:f6:95:0b:d9:5d:e3:86:08:f0:30:14:d2:88: 62:9b:ca:af:7e:18:3b:1f:26:f0:e6:67:90:15:b3: f7:e3:d0:a8:c1:73:2f:1e:83:b6:a0:0c:a1:b2:3d: 23:5e:3f:22:d8:7a:7d:26:91:80:ce:c9:05:99:b2: e8:f4:7a:9d:49:0e:c5:e4:34:01:1a:19:2f:e9:9e: 9b:48:bc:7f:2f:36:0f:bd:f0:6e:99:46:9f:05:1e: 73:3c:86:2c:67:e4:d7:5c:2b:49:96:32:8d:4d:b2: 80:82:3f:d7:4f:a0:5a:68:4f:e8:6d:a4:de:dd:4d: 36:d1:31:ed:46:50:0b:c9:55:4b:ba:27:21:ad:1a: 09:b1:b5:fc:35:8a:00:3a:af:23:8e:12:4d:3a:19: 7a:c0:df:fe:84:fe:31:bb:6e:bb:22:45:e0:c7:ea: c2:06:a4:b4:6a:6e:8f:0c:cc:38:c7:36:56:c8:c3: ec:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B0:D9:58:01:FE:A2:62:32:8A:9F:D6:C2:6A:8D:17:31:84:37:A4 X509v3 Authority Key Identifier: keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/CbDZWAH-omIyip_WwmqNFzGEN6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.48.0/22 77.108.128.0/18 IPv6: 2a00:6300::/32 Signature Algorithm: sha256WithRSAEncryption 7d:27:02:0e:a6:a6:98:93:39:7a:6e:1f:3c:51:0a:9c:41:ec: 88:96:fe:2e:59:08:58:bf:11:b6:8e:66:ba:d0:66:d1:88:b1: 2a:53:ea:88:07:07:6a:42:8c:90:f6:9a:b3:16:f1:43:8e:d9: 60:8a:e4:ff:b0:d7:91:94:09:03:59:94:94:17:f0:b7:7c:38: 18:b3:8b:56:67:23:03:18:1f:38:91:21:a0:81:e0:4f:98:4b: 58:17:81:f3:d6:0e:7c:5d:77:84:ba:97:e9:d1:60:95:c2:3d: f6:da:bb:fa:d4:49:8d:93:b3:f8:6e:49:c7:c1:40:70:c7:75: 55:2b:f1:9c:fc:f9:f5:f1:5b:ab:60:da:f7:e2:bd:c2:d2:b5: 5d:5e:5f:79:5d:9b:91:b2:13:b9:66:0f:86:4c:7c:25:7a:a9: fe:35:bc:ba:78:4f:e0:bd:1a:55:9b:1d:21:63:7c:bc:52:a7: 7a:a9:92:00:84:e2:ad:92:3c:f9:f0:09:eb:f9:ca:f3:d6:70: 87:90:a4:0a:f1:89:7f:5b:f9:ce:32:9a:b9:d2:43:62:9f:b4: ba:6b:e0:25:9a:cc:e3:03:3c:7f:fc:13:f6:91:81:a4:4a:d6: 02:6a:6e:27:52:72:47:d9:00:4f:73:2a:97:97:c9:c1:3b:e1: 47:e6:13:25 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87L0Fm9XTEc3HHQ/Rs6pjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NDgyMDcyOWEwZjlhYmZiNmNhYzNiNWY5NmMyNzE5OGQ3 NjM5MWIwHhcNMjYwMTAyMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWIwZDk1ODAxZmVhMjYyMzI4YTlmZDZjMjZhOGQxNzMxODQzN2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN2M2oSm5p2WhP3tJGIkV4mjewdi I/cnd2J9uEeDlbFJ3EKR7K198ZXuVqWCxTEGZMOuU6ulVbKIV4zPBpAM+Hue3lKJ r+2ELl0UzPaVC9ld44YI8DAU0ohim8qvfhg7Hybw5meQFbP349CowXMvHoO2oAyh sj0jXj8i2Hp9JpGAzskFmbLo9HqdSQ7F5DQBGhkv6Z6bSLx/LzYPvfBumUafBR5z PIYsZ+TXXCtJljKNTbKAgj/XT6BaaE/obaTe3U020THtRlALyVVLuichrRoJsbX8 NYoAOq8jjhJNOhl6wN/+hP4xu267IkXgx+rCBqS0am6PDMw4xzZWyMPsjQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAmw2VgB/qJiMoqf1sJqjRcxhDekMB8GA1UdIwQY MBaAFNRIIHKaD5q/tsrDtflsJxmNdjkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80YmE0NmYtMzQ2OS00MmIwLTliOWUt NjE5NDkzNTZhOWEwLzEvQ2JEWldBSC1vbUl5aXBfV3dtcU5GekdFTjZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80YmE0NmYtMzQ2OS00MmIwLTliOWUtNjE5NDkzNTZhOWEw LzEvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLYkwAwQG TWyAMA0EAgACMAcDBQAqAGMAMA0GCSqGSIb3DQEBCwUAA4IBAQB9JwIOpqaYkzl6 bh88UQqcQeyIlv4uWQhYvxG2jma60GbRiLEqU+qIBwdqQoyQ9pqzFvFDjtlgiuT/ sNeRlAkDWZSUF/C3fDgYs4tWZyMDGB84kSGggeBPmEtYF4Hz1g58XXeEupfp0WCV wj322rv61EmNk7P4bknHwUBwx3VVK/Gc/Pn18VurYNr34r3C0rVdXl95XZuRshO5 Zg+GTHwleqn+Nby6eE/gvRpVmx0hY3y8Uqd6qZIAhOKtkjz58Anr+crz1nCHkKQK 8Yl/W/nOMpq50kNin7S6a+AlmszjAzx//BP2kYGkStYCam4nUnJH2QBPcyqXl8nB O+FH5hMl -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:28 2026 by rpki-client