This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/CZLgI1TrOoXIuuR8mtRn5Oxdnrc.roa File: CZLgI1TrOoXIuuR8mtRn5Oxdnrc.roa (raw, json) Hash identifier: aPXgiMnEH0aukIEV+u/T5KK1iHMqS2/X9emnoyzGOAM= Subject key identifier: 09:92:E0:23:54:EB:3A:85:C8:BA:E4:7C:9A:D4:67:E4:EC:5D:9E:B7 Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9 Certificate serial: 019C2A51D8D41E61069ADF2CC05573618009 Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/CZLgI1TrOoXIuuR8mtRn5Oxdnrc.roa Signing time: Wed 04 Feb 2026 20:22:12 +0000 ROA not before: Wed 04 Feb 2026 20:22:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212756 IP address blocks: 45.157.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2a:51:d8:d4:1e:61:06:9a:df:2c:c0:55:73:61:80:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9 Validity Not Before: Feb 4 20:22:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0992e02354eb3a85c8bae47c9ad467e4ec5d9eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4a:00:c2:2d:a2:8e:24:fb:4f:49:ac:4c:1e: cd:f4:89:a8:e4:54:1a:34:25:73:33:cd:7f:61:13: 18:47:6c:58:18:57:a0:92:8d:85:ff:b3:3d:6e:a1: 81:6c:50:73:9e:52:7a:95:5d:29:7e:18:28:bb:bb: 41:cb:cf:63:60:24:ee:7f:bd:19:d2:db:3c:f8:8d: 09:5b:1e:48:3a:b5:74:b6:2b:72:83:a3:f2:af:b2: c3:95:32:b9:ce:48:49:d1:28:cb:31:ee:df:9d:2a: fe:0f:12:03:31:c5:f1:1e:73:a0:f4:8c:27:58:b4: cb:2e:27:99:05:e4:b9:bd:6f:30:c0:ce:83:b9:37: 48:48:03:54:86:98:b5:e4:00:92:3b:bd:12:92:db: 0c:b9:2a:95:91:99:4f:23:a4:b7:58:65:41:6e:ef: cb:3c:e5:b8:c6:80:af:5e:72:3d:dd:d2:8a:8a:fb: 91:48:12:12:aa:eb:52:bd:d3:4c:22:4a:81:98:7b: cc:10:14:1f:0f:75:cc:d7:2f:6d:c9:f2:0b:8f:a9: 9f:b1:8b:ea:d5:a7:80:e6:5a:d1:01:65:d6:d0:7f: 29:90:20:85:d3:70:3c:9a:70:1d:34:8f:15:67:32: 1b:a6:9b:44:c9:1c:21:23:4f:aa:6c:50:3a:69:0d: 43:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:92:E0:23:54:EB:3A:85:C8:BA:E4:7C:9A:D4:67:E4:EC:5D:9E:B7 X509v3 Authority Key Identifier: keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/CZLgI1TrOoXIuuR8mtRn5Oxdnrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.53.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:68:bb:0c:71:c7:ad:53:c8:f9:94:26:b6:bc:2b:cf:76:b1: 37:16:6b:df:13:54:2b:00:63:65:88:20:b2:15:11:d9:6d:81: c5:9d:07:cf:55:08:41:5b:9f:8a:bc:83:3b:32:8a:23:db:cb: ec:1c:32:23:9e:ab:95:e1:a1:bc:d1:1d:44:60:62:a5:c6:34: 18:e8:bd:ef:39:44:54:80:ec:cf:f3:00:b1:6b:78:44:3f:70: 9b:26:19:ef:86:d3:71:2f:ad:19:f8:d7:66:86:21:7e:17:d8: 7c:4a:ba:48:05:a4:c0:08:25:f5:65:e3:9a:19:6d:c5:02:aa: 80:7f:f2:aa:c3:42:ce:9c:9a:fe:c8:85:53:6f:d5:47:9f:25: 38:15:57:42:d8:43:78:dd:ba:1a:5d:b4:a0:3d:e2:fd:33:3b: b6:9e:c9:7c:dc:2f:b1:8e:5d:c5:94:f3:82:80:6a:de:80:7c: bd:ef:3a:50:61:18:00:a3:9d:02:8c:31:3b:72:3d:90:f8:53: ce:36:1f:af:fc:99:ac:c3:f2:02:54:8d:36:86:37:17:08:22: 80:38:d3:2e:d8:61:ba:91:85:9e:52:23:9e:da:65:e2:77:18: 6d:50:19:69:47:e7:37:ab:d6:40:ee:1c:20:36:b3:53:bf:aa: 8f:15:0c:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwqUdjUHmEGmt8swFVzYYAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OThhZTVkNWYxMjgyNWE4NGU2YzQwMWMwMTNjYTVlNWRj ZDllYzkwHhcNMjYwMjA0MjAyMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTkyZTAyMzU0ZWIzYTg1YzhiYWU0N2M5YWQ0NjdlNGVjNWQ5ZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EoAwi2ijiT7T0msTB7N9Imo5FQa NCVzM81/YRMYR2xYGFegko2F/7M9bqGBbFBznlJ6lV0pfhgou7tBy89jYCTuf70Z 0ts8+I0JWx5IOrV0tityg6Pyr7LDlTK5zkhJ0SjLMe7fnSr+DxIDMcXxHnOg9Iwn WLTLLieZBeS5vW8wwM6DuTdISANUhpi15ACSO70SktsMuSqVkZlPI6S3WGVBbu/L POW4xoCvXnI93dKKivuRSBISqutSvdNMIkqBmHvMEBQfD3XM1y9tyfILj6mfsYvq 1aeA5lrRAWXW0H8pkCCF03A8mnAdNI8VZzIbpptEyRwhI0+qbFA6aQ1D5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAmS4CNU6zqFyLrkfJrUZ+TsXZ63MB8GA1UdIwQY MBaAFFWYrl1fEoJahObEAcATyl5dzZ7JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xZjYwNzMtODdiMi00YmIzLWFjYjct NWMzZGI5OGJmODY0LzEvQ1pMZ0kxVHJPb1hJdXVSOG10Um41T3hkbnJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xZjYwNzMtODdiMi00YmIzLWFjYjctNWMzZGI5OGJmODY0 LzEvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ01MA0G CSqGSIb3DQEBCwUAA4IBAQAPaLsMccetU8j5lCa2vCvPdrE3FmvfE1QrAGNliCCy FRHZbYHFnQfPVQhBW5+KvIM7Mooj28vsHDIjnquV4aG80R1EYGKlxjQY6L3vOURU gOzP8wCxa3hEP3CbJhnvhtNxL60Z+NdmhiF+F9h8SrpIBaTACCX1ZeOaGW3FAqqA f/Kqw0LOnJr+yIVTb9VHnyU4FVdC2EN43boaXbSgPeL9Mzu2nsl83C+xjl3FlPOC gGregHy97zpQYRgAo50CjDE7cj2Q+FPONh+v/Jmsw/ICVI02hjcXCCKAONMu2GG6 kYWeUiOe2mXidxhtUBlpR+c3q9ZA7hwgNrNTv6qPFQxH -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:43 2026 by rpki-client