This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/CQOdCpBLSHHQ6AramZa1bXJe9DA.roa File: CQOdCpBLSHHQ6AramZa1bXJe9DA.roa (raw, json) Hash identifier: XyLg4h/oghxr7miII9KG3Zvqwxb2XQxtLrLG6x3uqBI= Subject key identifier: 09:03:9D:0A:90:4B:48:71:D0:E8:0A:DA:99:96:B5:6D:72:5E:F4:30 Certificate issuer: /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586 Certificate serial: 019B7E38CE46871B91234392CE2E7792EC63 Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/CQOdCpBLSHHQ6AramZa1bXJe9DA.roa Signing time: Fri 02 Jan 2026 10:20:10 +0000 ROA not before: Fri 02 Jan 2026 10:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201847 IP address blocks: 45.157.228.0/22 maxlen: 24 185.62.48.0/22 maxlen: 24 2a04:efc0::/29 maxlen: 32 2a0f:4d80::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ce:46:87:1b:91:23:43:92:ce:2e:77:92:ec:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586 Validity Not Before: Jan 2 10:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09039d0a904b4871d0e80ada9996b56d725ef430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:80:9f:ad:75:c7:5e:39:e0:29:39:81:99:2b: b1:2b:cd:c3:39:e5:14:6d:18:81:3a:28:0f:68:7c: 5b:ca:3c:cc:d6:99:ac:30:59:d2:d0:07:f6:a1:58: e4:e7:d1:a2:b1:92:e1:d9:18:f6:5e:ed:50:8f:f4: 4c:48:2c:c8:f6:31:21:0e:ea:af:4c:c7:e2:45:13: a4:f3:41:0c:64:11:ce:87:3d:c5:fd:e0:2f:15:65: 59:ce:d5:25:61:e7:ec:d2:e2:df:a6:54:05:8e:17: f3:4f:ff:f3:a0:0c:53:3b:1f:5c:32:12:5f:b2:72: 65:df:9f:bc:da:b9:8f:b5:1e:1f:7a:c7:91:45:83: bc:3a:3b:32:ef:8c:82:79:bf:30:c3:90:cb:1c:aa: f4:24:98:c7:2d:08:cb:a4:be:94:ed:36:e8:07:20: bc:6a:57:50:8e:94:82:4f:49:ad:ff:d3:ae:9a:81: 25:3c:18:bc:e6:27:50:29:26:b5:a8:8d:cd:da:19: d7:d8:4f:68:24:22:39:02:af:9c:05:4a:da:2b:b2: e1:56:5d:79:43:82:71:c0:e7:bc:cd:08:e6:ac:19: 3e:6c:f7:78:75:9f:bc:d8:1c:71:86:1a:71:a8:76: e5:9a:80:4a:38:08:bb:b9:c6:1f:c6:55:ea:83:1b: 2a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:03:9D:0A:90:4B:48:71:D0:E8:0A:DA:99:96:B5:6D:72:5E:F4:30 X509v3 Authority Key Identifier: keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/CQOdCpBLSHHQ6AramZa1bXJe9DA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.228.0/22 185.62.48.0/22 IPv6: 2a04:efc0::/29 2a0f:4d80::/29 Signature Algorithm: sha256WithRSAEncryption 22:77:cc:41:52:9a:e8:c8:c2:0f:5e:37:a1:5c:a1:e9:65:e1: 99:aa:b0:d7:94:38:eb:a0:0f:6c:f3:fe:4c:bc:1e:bb:05:4f: 91:68:96:e0:f9:cd:97:eb:8b:12:8b:6c:34:c5:76:f6:25:29: 38:97:1b:fe:c0:b7:6d:b4:10:ae:fe:b9:6d:82:55:74:c5:12: 88:48:b1:1b:2f:8b:73:2b:ba:4f:34:83:e4:35:01:3c:cf:58: 2d:d9:2b:08:de:12:50:01:01:8b:34:c2:cf:f9:31:d6:01:f3: da:38:61:b1:af:3f:b7:15:8a:ef:9d:8f:f9:7e:e5:5b:9e:c7: 87:57:44:fe:7d:49:07:ab:ee:b2:8e:5f:9b:58:7a:b5:5c:0c: a5:90:94:22:b5:9a:62:6a:4b:1a:01:3e:ab:10:14:28:ca:8c: 8d:36:a9:16:5a:41:66:4d:04:de:9c:0a:56:14:90:d6:a2:11: 8b:22:f8:4d:d5:c3:0a:67:5c:4d:8d:a2:02:f7:21:a6:7d:92: 78:2a:23:da:f7:1c:34:00:8c:95:0d:0c:79:12:83:58:c1:57: 02:28:16:5e:51:73:30:05:61:9b:30:9f:d2:ba:53:8a:a8:c3: ce:90:be:9e:9b:e2:cb:16:7c:50:21:d6:28:d5:be:33:6d:db: 1f:74:b4:39 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt+OM5GhxuRI0OSzi53kuxjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMTlhMzM5ODFlMzRiMmFlNTA1ODZlMzA0OGM2NjNhMmM2 Yjg1ODYwHhcNMjYwMTAyMTAyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTAzOWQwYTkwNGI0ODcxZDBlODBhZGE5OTk2YjU2ZDcyNWVmNDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84CfrXXHXjngKTmBmSuxK83DOeUU bRiBOigPaHxbyjzM1pmsMFnS0Af2oVjk59GisZLh2Rj2Xu1Qj/RMSCzI9jEhDuqv TMfiRROk80EMZBHOhz3F/eAvFWVZztUlYefs0uLfplQFjhfzT//zoAxTOx9cMhJf snJl35+82rmPtR4feseRRYO8Ojsy74yCeb8ww5DLHKr0JJjHLQjLpL6U7TboByC8 aldQjpSCT0mt/9OumoElPBi85idQKSa1qI3N2hnX2E9oJCI5Aq+cBUraK7LhVl15 Q4JxwOe8zQjmrBk+bPd4dZ+82BxxhhpxqHblmoBKOAi7ucYfxlXqgxsqsQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAkDnQqQS0hx0OgK2pmWtW1yXvQwMB8GA1UdIwQY MBaAFLsZozmB40sq5QWG4wSMZjosa4WGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXhtak9ZSGpTeXJsQlliakJJeG1PaXhyaFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83NDgxMjAtYjRmNS00NGIwLWFjOWUt NjA2MGM0OGRhODM3LzEvQ1FPZENwQkxTSEhRNkFyYW1aYTFiWEplOURBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS83NDgxMjAtYjRmNS00NGIwLWFjOWUtNjA2MGM0OGRhODM3 LzEvdXhtak9ZSGpTeXJsQlliakJJeG1PaXhyaFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCLZ3kAwQC uT4wMBQEAgACMA4DBQMqBO/AAwUDKg9NgDANBgkqhkiG9w0BAQsFAAOCAQEAInfM QVKa6MjCD143oVyh6WXhmaqw15Q466APbPP+TLweuwVPkWiW4PnNl+uLEotsNMV2 9iUpOJcb/sC3bbQQrv65bYJVdMUSiEixGy+Lcyu6TzSD5DUBPM9YLdkrCN4SUAEB izTCz/kx1gHz2jhhsa8/txWK752P+X7lW57Hh1dE/n1JB6vuso5fm1h6tVwMpZCU IrWaYmpLGgE+qxAUKMqMjTapFlpBZk0E3pwKVhSQ1qIRiyL4TdXDCmdcTY2iAvch pn2SeCoj2vccNACMlQ0MeRKDWMFXAigWXlFzMAVhmzCf0rpTiqjDzpC+npviyxZ8 UCHWKNW+M23bH3S0OQ== -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:29 2026 by rpki-client