This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CpwjRHd-dlM6HLWtJRLo65vz3sE.roa File: CpwjRHd-dlM6HLWtJRLo65vz3sE.roa (raw, json) Hash identifier: ipcBkj7y8N+DKJBxCvsI7Zk0obHeYg4amjAZYyQnzfU= Subject key identifier: 0A:9C:23:44:77:7E:76:53:3A:1C:B5:AD:25:12:E8:EB:9B:F3:DE:C1 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019B791017E389DDA90D0558D3346184EB1F Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CpwjRHd-dlM6HLWtJRLo65vz3sE.roa Signing time: Thu 01 Jan 2026 10:17:36 +0000 ROA not before: Thu 01 Jan 2026 10:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43754 IP address blocks: 45.87.6.0/23 maxlen: 24 78.110.120.0/24 maxlen: 24 78.110.122.0/24 maxlen: 24 78.110.123.0/24 maxlen: 24 88.135.36.0/24 maxlen: 24 88.135.37.0/24 maxlen: 24 88.135.38.0/24 maxlen: 24 88.135.39.0/24 maxlen: 24 91.236.168.0/24 maxlen: 24 91.236.169.0/24 maxlen: 24 152.89.44.0/24 maxlen: 24 152.89.46.0/24 maxlen: 24 152.89.47.0/24 maxlen: 24 185.18.213.0/24 maxlen: 24 185.18.214.0/24 maxlen: 24 185.51.200.0/24 maxlen: 24 185.51.201.0/24 maxlen: 24 185.51.202.0/24 maxlen: 24 185.51.203.0/24 maxlen: 24 185.58.240.0/24 maxlen: 24 185.58.241.0/24 maxlen: 24 185.58.242.0/24 maxlen: 24 185.58.243.0/24 maxlen: 24 185.112.151.0/24 maxlen: 24 185.128.136.0/24 maxlen: 24 185.141.105.0/24 maxlen: 24 185.141.106.0/24 maxlen: 24 185.141.107.0/24 maxlen: 24 185.141.132.0/24 maxlen: 24 185.141.135.0/24 maxlen: 24 188.209.153.0/24 maxlen: 24 195.110.38.0/24 maxlen: 24 195.211.45.0/24 maxlen: 24 195.211.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:17:e3:89:dd:a9:0d:05:58:d3:34:61:84:eb:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a9c2344777e76533a1cb5ad2512e8eb9bf3dec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:b8:20:5f:6c:7e:4f:d9:6e:a9:d9:67:9d: 79:c5:d4:c8:84:79:30:25:8d:2a:60:ed:14:0c:b8: 50:32:5f:bd:48:15:cb:49:e9:19:eb:09:7d:ea:de: 58:92:9a:50:e9:21:50:17:3e:cf:ff:82:3f:86:f7: 75:54:d8:c4:a0:0b:6a:28:f7:c0:49:92:84:cf:84: 9d:59:25:18:fe:14:06:37:0a:ae:1a:fd:33:0c:c3: 51:ad:34:96:09:23:4c:c9:d7:dd:74:7a:dd:f6:81: fd:af:b7:34:87:a3:c3:c1:91:05:1b:d9:75:08:0d: 1d:9c:a7:1c:d8:ca:a0:ec:a0:28:ec:cf:11:31:f6: 7a:28:e9:36:01:d3:27:69:cf:d2:3a:06:ac:bb:fe: 3f:21:2b:52:7a:ad:19:b3:6b:f8:43:42:13:11:9e: f4:21:fe:4c:a1:3e:bf:9b:11:45:21:38:29:62:97: ba:eb:04:d0:50:ad:0a:91:e8:6d:82:ab:5e:7b:43: d6:32:1f:2f:4b:84:90:9d:4e:c7:f0:6a:90:9d:d0: c5:07:49:05:ef:5d:46:50:77:13:2e:cf:ae:48:eb: 21:01:be:00:7a:ff:d9:4f:54:71:1d:9d:26:11:69: 0c:63:bc:02:91:b2:07:c0:f6:a3:eb:d9:ac:a6:b2: 90:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9C:23:44:77:7E:76:53:3A:1C:B5:AD:25:12:E8:EB:9B:F3:DE:C1 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CpwjRHd-dlM6HLWtJRLo65vz3sE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.6.0/23 78.110.120.0/24 78.110.122.0/23 88.135.36.0/22 91.236.168.0/23 152.89.44.0/24 152.89.46.0/23 185.18.213.0-185.18.214.255 185.51.200.0/22 185.58.240.0/22 185.112.151.0/24 185.128.136.0/24 185.141.105.0-185.141.107.255 185.141.132.0/24 185.141.135.0/24 188.209.153.0/24 195.110.38.0/24 195.211.45.0-195.211.46.255 Signature Algorithm: sha256WithRSAEncryption 84:30:f1:be:17:b8:87:13:dd:b2:24:54:3f:1d:8e:0f:ee:af: fe:9d:83:57:51:99:79:78:61:a1:b6:d7:4c:05:b6:a1:04:6f: d4:bb:df:02:60:19:81:35:b4:45:27:f6:4f:e2:d7:54:3f:71: ff:7e:f8:7b:8f:7e:e0:4d:bc:60:3c:7f:d2:13:0b:93:4d:bf: 64:90:09:94:82:f3:49:4c:29:89:d7:2c:64:4f:72:23:2b:70: f7:36:e5:32:58:db:8d:f9:ed:73:cc:3c:32:0b:b3:43:25:a1: f1:09:65:48:06:6f:46:64:ff:c4:31:88:58:8a:f6:75:b0:f8: d7:d8:59:14:98:92:52:13:b9:05:77:49:74:06:80:63:c6:30: 1c:a0:2f:dc:fa:0c:57:d0:76:69:2c:a9:c7:5e:1d:33:a9:1a: f7:78:a7:ea:16:5e:c1:a0:9f:55:f4:50:97:96:8f:9f:6b:b0: 09:db:98:23:ab:8d:42:29:b2:fd:0c:fc:69:6a:01:1a:ad:d4: 2c:8a:40:b6:49:be:cd:8e:1f:5c:11:4d:25:c9:31:a5:88:4a: b5:c7:27:10:04:ec:04:54:3a:74:e7:38:93:01:3e:19:fc:f6: 48:1b:86:17:e7:11:ac:4d:f6:74:e2:b2:dc:b1:9b:44:4d:23: 11:4c:3b:0f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt5EBfjid2pDQVY0zRhhOsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTljMjM0NDc3N2U3NjUzM2ExY2I1YWQyNTEyZThlYjliZjNkZWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgG4IF9sfk/ZbqnZZ515xdTIhHkw JY0qYO0UDLhQMl+9SBXLSekZ6wl96t5YkppQ6SFQFz7P/4I/hvd1VNjEoAtqKPfA SZKEz4SdWSUY/hQGNwquGv0zDMNRrTSWCSNMydfddHrd9oH9r7c0h6PDwZEFG9l1 CA0dnKcc2Mqg7KAo7M8RMfZ6KOk2AdMnac/SOgasu/4/IStSeq0Zs2v4Q0ITEZ70 If5MoT6/mxFFITgpYpe66wTQUK0Kkehtgqtee0PWMh8vS4SQnU7H8GqQndDFB0kF 711GUHcTLs+uSOshAb4Aev/ZT1RxHZ0mEWkMY7wCkbIHwPaj69msprKQXwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFAqcI0R3fnZTOhy1rSUS6Oub897BMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ3B3alJIZC1kbE02SExXdEpSTG82NXZ6M3NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBAEt VwYDBABObngDBAFObnoDBAJYhyQDBAFb7KgDBACYWSwDBAGYWS4wDAMEALkS1QME ALkS1gMEArkzyAMEArk68AMEALlwlwMEALmAiDAMAwQAuY1pAwQCuY1oAwQAuY2E AwQAuY2HAwQAvNGZAwQAw24mMAwDBADD0y0DBADD0y4wDQYJKoZIhvcNAQELBQAD ggEBAIQw8b4XuIcT3bIkVD8djg/ur/6dg1dRmXl4YaG210wFtqEEb9S73wJgGYE1 tEUn9k/i11Q/cf9++HuPfuBNvGA8f9ITC5NNv2SQCZSC80lMKYnXLGRPciMrcPc2 5TJY24357XPMPDILs0MlofEJZUgGb0Zk/8QxiFiK9nWw+NfYWRSYklITuQV3SXQG gGPGMBygL9z6DFfQdmksqcdeHTOpGvd4p+oWXsGgn1X0UJeWj59rsAnbmCOrjUIp sv0M/GlqARqt1CyKQLZJvs2OH1wRTSXJMaWISrXHJxAE7ARUOnTnOJMBPhn89kgb hhfnEaxN9nTistyxm0RNIxFMOw8= -----END CERTIFICATE-----Generated at Mon Jan 26 22:59:36 2026 by rpki-client