This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/CnP7xic-J3ZlsEiL_ErvWxwtjH4.roa File: CnP7xic-J3ZlsEiL_ErvWxwtjH4.roa (raw, json) Hash identifier: 5VuIA/sliXJSN13FjulNtyBF4Z5iaCwmwNeqLvTqwQc= Subject key identifier: 0A:73:FB:C6:27:3E:27:76:65:B0:48:8B:FC:4A:EF:5B:1C:2D:8C:7E Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983 Certificate serial: 019B7D5C95E976AB31B4C8F55E8190017649 Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/CnP7xic-J3ZlsEiL_ErvWxwtjH4.roa Signing time: Fri 02 Jan 2026 06:19:38 +0000 ROA not before: Fri 02 Jan 2026 06:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39421 IP address blocks: 45.90.160.0/22 maxlen: 22 45.90.160.0/24 maxlen: 24 45.90.161.0/24 maxlen: 24 45.90.162.0/24 maxlen: 24 45.90.163.0/24 maxlen: 24 2a0c:8880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:95:e9:76:ab:31:b4:c8:f5:5e:81:90:01:76:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983 Validity Not Before: Jan 2 06:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a73fbc6273e277665b0488bfc4aef5b1c2d8c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:99:29:f2:3f:3b:d7:31:93:21:f2:bb:d5:58: 5a:fe:db:43:7d:68:28:4d:7a:d4:ce:96:c6:10:2d: 54:ad:0f:14:9a:c8:3e:7a:c9:06:60:dc:4c:89:de: 85:49:75:81:32:7b:33:72:51:f1:86:4b:e7:fb:e8: 92:39:f1:8b:98:f5:64:d2:a3:8e:bf:61:4e:e2:eb: cf:e4:46:1c:8b:87:78:1f:27:1d:47:01:5f:cf:93: b2:5a:97:ba:a4:9f:53:e4:0b:cc:c5:6c:74:95:84: 5c:56:de:e2:5a:64:14:23:e4:00:bd:8c:cb:02:43: 7c:78:18:d0:76:ff:9b:fd:f7:c3:4a:99:5b:4f:c8: cb:e3:9a:50:f0:39:a3:85:15:9c:9f:77:38:85:5a: d9:e3:d8:27:08:9d:4d:ae:2a:24:cd:83:9e:34:ef: 84:2b:79:c9:fe:f0:8f:a4:b6:46:e2:c6:cf:f1:03: ab:a5:e6:38:13:c1:6a:58:7a:a4:b7:31:cb:53:8c: 6b:c8:7b:d2:ff:9e:98:16:38:89:5a:10:79:01:92: 2c:5a:16:07:9c:89:68:00:12:1e:08:ae:b4:85:b7: dc:7b:71:e7:e4:75:16:16:da:67:69:0e:4b:d1:f9: 24:4e:e0:47:ad:9b:82:8a:e7:60:b5:76:19:f3:25: 99:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:73:FB:C6:27:3E:27:76:65:B0:48:8B:FC:4A:EF:5B:1C:2D:8C:7E X509v3 Authority Key Identifier: keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/CnP7xic-J3ZlsEiL_ErvWxwtjH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.160.0/22 IPv6: 2a0c:8880::/29 Signature Algorithm: sha256WithRSAEncryption 14:95:07:96:1d:57:b8:50:b7:93:f5:1f:9d:ec:51:7a:9e:97: 44:74:6d:6a:55:8b:de:27:40:41:e5:b6:c0:5f:3d:28:1d:a5: e5:e5:73:22:03:81:a0:68:34:4e:cb:b4:f6:dd:ff:79:85:c5: 9f:18:8e:23:4a:53:47:a8:cc:e7:0c:57:e6:4c:31:c8:66:75: 0c:bd:ee:7a:03:b5:71:b9:56:c3:64:74:52:24:97:b7:04:56: 2a:ad:bd:9d:28:37:7c:37:4c:c5:da:2e:0f:01:18:6c:bf:12: 69:9a:75:44:07:af:e5:c8:47:92:07:6e:a7:e6:ee:b1:01:33: 81:f8:ba:e2:87:ad:8b:de:43:8d:ff:d4:76:7d:ae:98:ce:b0: 66:6b:94:f6:c4:b5:0a:2b:50:45:d1:b9:48:92:c7:17:6e:24: cf:20:15:0a:7d:81:d9:0d:2f:37:8c:e1:cd:a8:b6:41:cb:ec: e1:e6:5f:57:e0:08:8d:e2:71:5d:29:1f:b0:d0:49:36:73:60: af:22:04:86:a2:c2:fe:c2:a8:d8:a8:2a:45:c8:84:07:46:41: a3:23:4c:bb:79:37:01:55:be:e4:32:ab:24:70:4a:38:ca:33: 36:ed:33:f3:78:89:71:76:91:b3:cc:7a:e4:5f:70:8c:68:70: 31:27:45:1d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XJXpdqsxtMj1XoGQAXZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNWUzNmYxNTlmNTc2OTg4ZmI0ZTUxZDQxMDFiYjg1ZDBk MGM5ODMwHhcNMjYwMTAyMDYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTczZmJjNjI3M2UyNzc2NjViMDQ4OGJmYzRhZWY1YjFjMmQ4YzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypkp8j871zGTIfK71Vha/ttDfWgo TXrUzpbGEC1UrQ8Umsg+eskGYNxMid6FSXWBMnszclHxhkvn++iSOfGLmPVk0qOO v2FO4uvP5EYci4d4HycdRwFfz5OyWpe6pJ9T5AvMxWx0lYRcVt7iWmQUI+QAvYzL AkN8eBjQdv+b/ffDSplbT8jL45pQ8DmjhRWcn3c4hVrZ49gnCJ1NriokzYOeNO+E K3nJ/vCPpLZG4sbP8QOrpeY4E8FqWHqktzHLU4xryHvS/56YFjiJWhB5AZIsWhYH nIloABIeCK60hbfce3Hn5HUWFtpnaQ5L0fkkTuBHrZuCiudgtXYZ8yWZ+wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFApz+8YnPid2ZbBIi/xK71scLYx+MB8GA1UdIwQY MBaAFN5eNvFZ9XaYj7TlHUEBu4XQ0MmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAt ZWJiYmI0NDQyODZlLzEvQ25QN3hpYy1KM1psc0VpTF9FcnZXeHd0akg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8xY2NiZmQtYTY1MS00YzhlLTlkNjAtZWJiYmI0NDQyODZl LzEvM2w0MjhWbjFkcGlQdE9VZFFRRzdoZERReVlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVqgMA0E AgACMAcDBQMqDIiAMA0GCSqGSIb3DQEBCwUAA4IBAQAUlQeWHVe4ULeT9R+d7FF6 npdEdG1qVYveJ0BB5bbAXz0oHaXl5XMiA4GgaDROy7T23f95hcWfGI4jSlNHqMzn DFfmTDHIZnUMve56A7VxuVbDZHRSJJe3BFYqrb2dKDd8N0zF2i4PARhsvxJpmnVE B6/lyEeSB26n5u6xATOB+Lrih62L3kON/9R2fa6YzrBma5T2xLUKK1BF0blIkscX biTPIBUKfYHZDS83jOHNqLZBy+zh5l9X4AiN4nFdKR+w0Ek2c2CvIgSGosL+wqjY qCpFyIQHRkGjI0y7eTcBVb7kMqskcEo4yjM27TPzeIlxdpGzzHrkX3CMaHAxJ0Ud -----END CERTIFICATE-----Generated at Tue Jan 27 12:59:52 2026 by rpki-client