This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/CU5Qp3jSaMozjbusRwuJ_sz6X50.roa File: CU5Qp3jSaMozjbusRwuJ_sz6X50.roa (raw, json) Hash identifier: WNL42QGfsi8PgOEs1fge/vN6dCtbN88YiJdiuRXBbCo= Subject key identifier: 09:4E:50:A7:78:D2:68:CA:33:8D:BB:AC:47:0B:89:FE:CC:FA:5F:9D Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4998A9F1ABD99A017CB1FDCC5E9CD Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/CU5Qp3jSaMozjbusRwuJ_sz6X50.roa Signing time: Thu 01 Jan 2026 22:19:03 +0000 ROA not before: Thu 01 Jan 2026 22:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57494 IP address blocks: 45.153.68.0/24 maxlen: 24 45.153.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:99:8a:9f:1a:bd:99:a0:17:cb:1f:dc:c5:e9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=094e50a778d268ca338dbbac470b89feccfa5f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:18:7e:d3:39:e2:9e:2c:18:af:97:ba:db:05: 24:8e:0a:4a:42:3e:54:a5:59:2d:ef:0e:c0:98:0a: 08:58:c7:05:bb:14:cb:71:02:26:13:ee:4c:57:9a: 4a:03:3f:62:ed:d8:98:af:0f:be:3b:45:b8:45:d5: 97:d0:19:95:e6:77:7e:22:d3:22:a2:d5:71:e9:2e: e6:5b:09:45:8a:ea:fc:b9:ee:7a:28:70:0a:58:52: a2:6d:45:aa:7a:9b:44:b6:59:6c:f8:2c:06:a1:c8: c6:31:03:ae:90:30:97:68:d4:63:cb:1b:39:34:43: 49:e5:b7:99:de:00:d3:a3:a9:4a:0e:5e:98:50:4d: 23:e3:97:6b:9c:db:ab:25:59:90:2b:d5:0c:da:a3: 5d:57:37:3e:e2:fd:b5:5a:4f:75:6e:f5:e1:5a:ca: c0:c1:9f:19:5b:25:d8:2f:b8:e2:66:e4:01:aa:37: 00:a3:91:a8:33:27:01:32:f5:65:bb:c0:80:fc:31: ba:18:e8:76:f4:df:72:dd:f2:d9:9e:57:e6:a1:bf: f6:d2:eb:d1:3d:2f:72:d8:5a:e8:c1:52:df:51:a7: 31:1d:d7:45:07:f5:17:fd:21:4d:c4:7e:53:3d:f7: 7d:a7:e6:8f:e1:cd:a9:25:eb:2c:cb:cb:77:99:9d: 3e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4E:50:A7:78:D2:68:CA:33:8D:BB:AC:47:0B:89:FE:CC:FA:5F:9D X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/CU5Qp3jSaMozjbusRwuJ_sz6X50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.68.0/23 Signature Algorithm: sha256WithRSAEncryption 96:5f:0b:ab:55:1e:70:72:69:1f:e5:02:8f:fd:4f:2f:45:3b: b5:f9:57:0f:9f:4b:d2:df:b6:ee:e3:8b:3b:f8:bc:de:2d:d3: 10:ef:67:ac:b5:a5:b1:ad:98:d3:61:67:15:12:4d:0f:36:5c: e4:d7:c4:90:db:8f:61:71:93:a8:83:69:c4:e2:77:af:27:04: a7:ff:c1:0e:e0:4e:c4:cf:e9:ed:1f:6a:a7:b3:a9:86:1c:25: c8:e7:b7:ff:15:a9:49:c4:c4:fc:5e:13:75:da:c9:40:10:bb: 7b:5f:63:75:d1:a0:bf:6c:a1:8e:96:77:ca:d2:3f:ce:df:c4: 0b:c5:19:e0:c6:41:90:1d:85:d3:eb:4c:d8:c2:a8:0f:43:c9: 22:5c:7e:b7:30:21:94:44:9c:55:77:2c:76:e3:f0:dc:14:06: cb:02:f4:21:ee:ef:9d:4a:f8:62:1b:63:11:85:ab:b1:03:86: bb:f3:36:9e:99:fe:45:a7:6b:d0:ca:01:30:cd:98:a4:ce:ae: 5c:d8:b0:95:97:a6:aa:e4:3b:de:21:f8:a0:7a:51:e4:84:c4: 99:3a:a1:67:37:e9:db:47:6f:4f:d5:bb:76:6d:fd:7b:c6:82: 90:0f:85:d0:bb:86:ee:2c:5c:47:59:35:2b:f5:94:76:f6:60: ef:a5:e6:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pJmKnxq9maAXyx/cxenNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTRlNTBhNzc4ZDI2OGNhMzM4ZGJiYWM0NzBiODlmZWNjZmE1ZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxh+0zniniwYr5e62wUkjgpKQj5U pVkt7w7AmAoIWMcFuxTLcQImE+5MV5pKAz9i7diYrw++O0W4RdWX0BmV5nd+ItMi otVx6S7mWwlFiur8ue56KHAKWFKibUWqeptEtlls+CwGocjGMQOukDCXaNRjyxs5 NENJ5beZ3gDTo6lKDl6YUE0j45drnNurJVmQK9UM2qNdVzc+4v21Wk91bvXhWsrA wZ8ZWyXYL7jiZuQBqjcAo5GoMycBMvVlu8CA/DG6GOh29N9y3fLZnlfmob/20uvR PS9y2FrowVLfUacxHddFB/UX/SFNxH5TPfd9p+aP4c2pJessy8t3mZ0+UQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAlOUKd40mjKM427rEcLif7M+l+dMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvQ1U1UXAzalNhTW96amJ1c1J3dUpfc3o2WDUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZlEMA0G CSqGSIb3DQEBCwUAA4IBAQCWXwurVR5wcmkf5QKP/U8vRTu1+VcPn0vS37bu44s7 +LzeLdMQ72estaWxrZjTYWcVEk0PNlzk18SQ249hcZOog2nE4nevJwSn/8EO4E7E z+ntH2qns6mGHCXI57f/FalJxMT8XhN12slAELt7X2N10aC/bKGOlnfK0j/O38QL xRngxkGQHYXT60zYwqgPQ8kiXH63MCGURJxVdyx24/DcFAbLAvQh7u+dSvhiG2MR hauxA4a78zaemf5Fp2vQygEwzZikzq5c2LCVl6aq5DveIfigelHkhMSZOqFnN+nb R29P1bt2bf17xoKQD4XQu4buLFxHWTUr9ZR29mDvpeYP -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:50 2026 by rpki-client