This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/CmCCBzp5bUmg6nvSPY6Y4t9e6ZE.roa File: CmCCBzp5bUmg6nvSPY6Y4t9e6ZE.roa (raw, json) Hash identifier: uox58CNEV0+WrHqNkLkHvUfwUHH830bCPY1EHlCoSLA= Subject key identifier: 0A:60:82:07:3A:79:6D:49:A0:EA:7B:D2:3D:8E:98:E2:DF:5E:E9:91 Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019B7F1520AC3803BFC572A47C31F7931912 Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/CmCCBzp5bUmg6nvSPY6Y4t9e6ZE.roa Signing time: Fri 02 Jan 2026 14:20:49 +0000 ROA not before: Fri 02 Jan 2026 14:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 45.155.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:20:ac:38:03:bf:c5:72:a4:7c:31:f7:93:19:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Jan 2 14:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a6082073a796d49a0ea7bd23d8e98e2df5ee991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:4f:a3:cc:04:56:4f:19:34:9d:69:8c:9e: da:7f:b6:af:cd:8f:b2:7f:ad:0c:a1:4f:73:64:2d: ae:80:a8:aa:ef:e1:bd:7b:fc:a8:26:b6:d1:ac:36: eb:b8:b1:0a:be:54:b2:17:24:be:fd:81:17:c9:01: 5f:c3:c5:20:96:5e:b3:50:85:0d:8d:4c:d1:87:50: 82:13:92:e8:18:e8:47:58:ee:f8:54:ac:06:3f:5d: e8:14:a4:ea:2b:1f:26:68:84:65:46:db:c0:e0:e7: d2:64:c2:02:44:12:3e:a3:2c:cb:af:1e:5c:bf:73: ed:ad:0a:10:85:ea:4d:63:c8:92:74:91:bd:34:dd: e4:f9:87:e2:53:29:e0:52:22:e6:82:b7:1d:09:d4: e1:9e:5e:bb:1c:c8:50:c7:73:3a:b1:f2:d0:0c:03: 75:bf:41:10:8d:49:3b:5c:5f:a9:6a:00:0e:b1:c4: 8d:92:68:38:96:ff:e7:2e:f2:ad:9a:15:8c:b3:4f: d5:59:d6:2e:9e:0d:96:c9:5f:72:de:6b:8d:fd:e9: 9f:8d:56:11:ac:a9:a8:9c:d9:26:0b:af:9d:77:b1: 60:85:dc:02:9b:96:38:1d:66:b4:c1:1d:b9:d6:09: 7e:39:01:27:b2:18:30:91:cf:cd:7a:12:bc:f6:72: 15:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:60:82:07:3A:79:6D:49:A0:EA:7B:D2:3D:8E:98:E2:DF:5E:E9:91 X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/CmCCBzp5bUmg6nvSPY6Y4t9e6ZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.79.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:26:bb:21:60:8a:d3:15:72:25:bc:2d:4b:b5:d8:5c:24:6f: 18:71:2c:9e:97:b2:9f:f5:6a:2a:f5:78:79:83:64:cd:88:61: 7a:d1:74:f2:d3:09:11:aa:5f:03:f8:20:43:5d:b5:9f:73:dd: 44:f9:9e:6a:f6:1f:cd:36:9d:97:3a:87:ab:66:4a:fe:7f:ce: 81:21:ac:1b:a7:e5:7a:3e:4b:c7:03:42:b8:0f:34:5c:ec:b0: 20:ef:6b:40:81:38:83:ba:31:a9:84:de:db:38:ca:29:87:14: 0a:58:03:98:24:c3:27:4a:08:e2:01:59:3c:f3:eb:72:59:74: cb:9d:4e:cf:f8:9f:de:d3:f5:72:f8:4f:d1:d0:a5:85:e3:7e: b8:a3:0e:c6:6f:ad:ce:8b:6d:2e:c2:51:29:55:43:d1:7b:99: 8a:bd:0d:59:e3:e8:74:43:97:0f:b0:7f:ae:53:38:90:84:74: 47:10:c9:1a:a7:80:5c:ca:bb:01:5c:ad:31:75:2d:ec:7b:13: 1c:f2:a4:c4:65:7c:ed:b5:57:b4:64:1f:cf:dd:a4:4a:44:56: 8a:7a:9c:80:10:0e:9b:ff:b4:d8:21:13:2e:38:74:53:64:57: 4d:80:e8:d6:c8:24:3b:ab:61:9e:dc:3c:7b:2a:33:bb:b5:9a: ce:03:fb:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FSCsOAO/xXKkfDH3kxkSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYwMTAyMTQyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTYwODIwNzNhNzk2ZDQ5YTBlYTdiZDIzZDhlOThlMmRmNWVlOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrxPo8wEVk8ZNJ1pjJ7af7avzY+y f60MoU9zZC2ugKiq7+G9e/yoJrbRrDbruLEKvlSyFyS+/YEXyQFfw8Ugll6zUIUN jUzRh1CCE5LoGOhHWO74VKwGP13oFKTqKx8maIRlRtvA4OfSZMICRBI+oyzLrx5c v3PtrQoQhepNY8iSdJG9NN3k+YfiUyngUiLmgrcdCdThnl67HMhQx3M6sfLQDAN1 v0EQjUk7XF+pagAOscSNkmg4lv/nLvKtmhWMs0/VWdYung2WyV9y3muN/emfjVYR rKmonNkmC6+dd7FghdwCm5Y4HWa0wR251gl+OQEnshgwkc/NehK89nIVowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFApgggc6eW1JoOp70j2OmOLfXumRMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvQ21DQ0J6cDViVW1nNm52U1BZNlk0dDllNlpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZtPMA0G CSqGSIb3DQEBCwUAA4IBAQBaJrshYIrTFXIlvC1LtdhcJG8YcSyel7Kf9Woq9Xh5 g2TNiGF60XTy0wkRql8D+CBDXbWfc91E+Z5q9h/NNp2XOoerZkr+f86BIawbp+V6 PkvHA0K4DzRc7LAg72tAgTiDujGphN7bOMophxQKWAOYJMMnSgjiAVk88+tyWXTL nU7P+J/e0/Vy+E/R0KWF4364ow7Gb63Oi20uwlEpVUPRe5mKvQ1Z4+h0Q5cPsH+u UziQhHRHEMkap4BcyrsBXK0xdS3sexMc8qTEZXzttVe0ZB/P3aRKRFaKepyAEA6b /7TYIRMuOHRTZFdNgOjWyCQ7q2Ge3Dx7KjO7tZrOA/vb -----END CERTIFICATE-----Generated at Sun Jan 18 04:27:25 2026 by rpki-client