This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/cgRdj34DpoTUvX6McD-JQwWr-WA.roa File: cgRdj34DpoTUvX6McD-JQwWr-WA.roa (raw, json) Hash identifier: ZVcWw9p279t4mbxBYleG4Xg0e+UqxRd7bXYPDCuxz2w= Subject key identifier: 72:04:5D:8F:7E:03:A6:84:D4:BD:7E:8C:70:3F:89:43:05:AB:F9:60 Certificate issuer: /CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c Certificate serial: 019B77591D2EBEDCAE4F89A94C02D9D1CF0C Authority key identifier: 6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/cgRdj34DpoTUvX6McD-JQwWr-WA.roa Signing time: Thu 01 Jan 2026 02:18:07 +0000 ROA not before: Thu 01 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47962 IP address blocks: 37.122.152.0/23 maxlen: 23 37.122.153.0/24 maxlen: 24 37.122.154.0/23 maxlen: 23 37.122.154.0/24 maxlen: 24 37.122.156.0/23 maxlen: 23 176.106.224.0/22 maxlen: 22 176.106.224.0/23 maxlen: 23 176.106.224.0/24 maxlen: 24 176.106.225.0/24 maxlen: 24 176.106.226.0/23 maxlen: 23 176.106.226.0/24 maxlen: 24 176.106.230.0/23 maxlen: 23 176.106.230.0/24 maxlen: 24 176.106.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1d:2e:be:dc:ae:4f:89:a9:4c:02:d9:d1:cf:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72045d8f7e03a684d4bd7e8c703f894305abf960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6a:52:10:49:43:90:4d:c4:18:a5:cd:a4:d8: 16:51:24:83:f1:12:22:38:0b:fd:9e:d8:39:b6:32: 7e:56:87:a6:8a:37:f4:66:46:70:95:eb:2d:bf:1a: 8e:d6:ef:23:8a:ef:16:b5:1a:20:5b:40:2e:20:18: db:7d:83:3e:16:a5:65:c9:ac:f8:fc:2b:c0:9d:f6: ba:c1:1d:48:59:a4:18:92:c6:4d:88:e0:f4:4b:7f: 9b:1f:62:79:c1:df:9b:a0:10:83:e6:ab:f5:ba:2d: 3a:50:bb:12:1c:53:44:69:b4:b4:41:8d:84:08:c2: 14:28:04:5c:d6:6c:fa:38:4d:7e:7f:cb:23:1f:4c: 36:88:51:d8:51:e8:27:1a:d7:39:ac:b8:ec:32:91: f7:58:bf:62:7f:7e:fe:47:76:46:9e:7c:8f:86:e0: 71:35:27:c7:96:55:20:67:73:29:04:88:58:be:9e: b3:53:52:be:f5:6b:6a:8c:85:fa:bc:04:03:4d:2b: 21:fc:9c:bd:73:48:6d:0c:75:fc:9b:b0:17:c3:9f: 82:75:ee:14:ed:16:ff:54:05:8b:18:c0:ac:dd:aa: 1f:92:ed:bc:33:ba:57:c6:83:f9:2e:4c:4f:d7:cf: fc:5d:48:3c:98:7d:51:9d:1f:42:71:40:b9:95:f9: 5a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:04:5D:8F:7E:03:A6:84:D4:BD:7E:8C:70:3F:89:43:05:AB:F9:60 X509v3 Authority Key Identifier: keyid:6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/cgRdj34DpoTUvX6McD-JQwWr-WA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.122.152.0-37.122.157.255 176.106.224.0/22 176.106.230.0/23 Signature Algorithm: sha256WithRSAEncryption 63:b8:59:a8:16:d9:26:fe:ea:b9:e5:77:17:8e:c2:7e:f2:b7: 6d:d2:c7:ca:d9:cc:5b:46:64:8d:be:e8:6c:cb:ba:fc:5a:ef: 09:63:e0:db:5d:8b:84:c2:52:23:a6:96:45:21:c3:11:3d:f8: 0f:a2:0d:c9:e9:e1:32:cb:f7:9f:4f:68:59:37:13:4d:06:5f: f8:38:3e:db:ef:33:79:03:58:8a:4e:86:12:32:0d:f6:e6:43: 0e:bb:9c:c1:4d:ec:de:47:5a:f3:30:46:fa:59:e1:dd:59:dc: 5f:59:76:f2:dc:86:1c:e4:fe:be:6f:bb:40:d5:4d:0d:24:d8: b7:e0:ad:9b:3e:a2:e5:57:38:85:35:37:77:5f:48:2c:4a:e7: b6:3f:b8:98:23:e8:15:dc:2a:af:9a:1c:6a:dc:6e:e8:11:07: b8:58:dd:7f:c3:24:19:2d:54:b0:7d:f4:b0:67:c2:a4:bf:68: 70:6a:f2:c9:d7:1e:7b:19:69:1a:2a:e2:ba:de:46:ba:b3:35: 22:9f:29:fa:9c:48:7e:53:4c:c0:ea:39:9e:0a:2e:c1:11:6e: e1:11:14:ac:0e:ec:74:ba:8e:28:0b:1a:b7:07:91:69:ad:39: 60:2a:19:37:a1:6f:3d:26:99:ac:b2:21:5e:c9:d6:57:2d:02: 72:67:a7:79 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt3WR0uvtyuT4mpTALZ0c8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYjMwYTQxYTZhNmYyMWE5YjJkZDdlNTg1NmEyMGQ1YjVl ZmZlMWMwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjA0NWQ4ZjdlMDNhNjg0ZDRiZDdlOGM3MDNmODk0MzA1YWJmOTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32pSEElDkE3EGKXNpNgWUSSD8RIi OAv9ntg5tjJ+Voemijf0ZkZwlestvxqO1u8jiu8WtRogW0AuIBjbfYM+FqVlyaz4 /CvAnfa6wR1IWaQYksZNiOD0S3+bH2J5wd+boBCD5qv1ui06ULsSHFNEabS0QY2E CMIUKARc1mz6OE1+f8sjH0w2iFHYUegnGtc5rLjsMpH3WL9if37+R3ZGnnyPhuBx NSfHllUgZ3MpBIhYvp6zU1K+9WtqjIX6vAQDTSsh/Jy9c0htDHX8m7AXw5+Cde4U 7Rb/VAWLGMCs3aofku28M7pXxoP5LkxP18/8XUg8mH1RnR9CcUC5lflaxQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFHIEXY9+A6aE1L1+jHA/iUMFq/lgMB8GA1UdIwQY MBaAFG2zCkGmpvIamy3X5YVqINW17/4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmJNS1FhYW04aHFiTGRmbGhXb2cxYlh2X2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yYjkyOTYtNmJkMS00OWZiLWFlYTAt ZDg5MzIxMWU2NzE5LzEvY2dSZGozNERwb1RVdlg2TWNELUpRd1dyLVdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yYjkyOTYtNmJkMS00OWZiLWFlYTAtZDg5MzIxMWU2NzE5 LzEvYmJNS1FhYW04aHFiTGRmbGhXb2cxYlh2X2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAMlepgD BAElepwDBAKwauADBAGwauYwDQYJKoZIhvcNAQELBQADggEBAGO4WagW2Sb+6rnl dxeOwn7yt23Sx8rZzFtGZI2+6GzLuvxa7wlj4Ntdi4TCUiOmlkUhwxE9+A+iDcnp 4TLL959PaFk3E00GX/g4PtvvM3kDWIpOhhIyDfbmQw67nMFN7N5HWvMwRvpZ4d1Z 3F9ZdvLchhzk/r5vu0DVTQ0k2LfgrZs+ouVXOIU1N3dfSCxK57Y/uJgj6BXcKq+a HGrcbugRB7hY3X/DJBktVLB99LBnwqS/aHBq8snXHnsZaRoq4rreRrqzNSKfKfqc SH5TTMDqOZ4KLsERbuERFKwO7HS6jigLGrcHkWmtOWAqGTehbz0mmayyIV7J1lct AnJnp3k= -----END CERTIFICATE-----Generated at Thu Jan 1 14:07:58 2026 by rpki-client