This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/CUTnoH-M_ZdYXGnMMN9ghfA5QvM.roa File: CUTnoH-M_ZdYXGnMMN9ghfA5QvM.roa (raw, json) Hash identifier: kLvp1hTO/Qm2XM5QINicv6F6HCO2KOxMuLYIE8U5EGQ= Subject key identifier: 09:44:E7:A0:7F:8C:FD:97:58:5C:69:CC:30:DF:60:85:F0:39:42:F3 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1C52237F97D679561411BC7270DAF Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/CUTnoH-M_ZdYXGnMMN9ghfA5QvM.roa Signing time: Fri 02 Jan 2026 18:21:49 +0000 ROA not before: Fri 02 Jan 2026 18:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214855 IP address blocks: 2a03:5840:119::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c5:22:37:f9:7d:67:95:61:41:1b:c7:27:0d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0944e7a07f8cfd97585c69cc30df6085f03942f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:06:a9:83:0f:64:a2:59:12:3c:46:b3:01:e6: 04:5d:7c:5f:c7:6a:1b:e3:d8:27:23:72:b6:f9:c4: fe:a9:4d:b4:e5:76:4e:b8:30:4b:da:c2:77:de:a6: 81:f3:4c:06:0d:1a:50:02:5b:d4:16:f4:9b:d1:91: 05:82:9a:5c:1c:15:9f:6a:11:bd:1a:4a:21:bd:4f: c3:ce:a8:ec:d9:f0:8c:cb:46:12:a7:54:bf:bb:f1: 09:2b:6c:58:eb:28:dd:4e:67:55:fc:d9:f9:36:33: 1f:eb:cf:61:ff:3b:43:62:7f:46:c0:dc:ae:86:ee: cc:fa:c1:ca:4d:3d:58:d3:95:39:3c:ff:20:c2:67: 31:ef:78:be:0b:1a:b9:2e:3b:f1:20:e9:46:fa:b3: 38:fd:af:3f:cb:bf:7b:bc:7e:0f:3f:9d:4e:e0:3a: 5b:b7:7a:11:72:c2:f1:79:bb:1b:93:68:17:92:f6: 17:b9:94:40:4d:e3:3e:43:23:f1:27:54:44:09:a2: 45:47:f1:48:06:0d:0b:9b:89:21:f4:c5:57:f5:8f: 8b:e4:4a:b8:ed:7c:d1:9b:57:e3:b4:a4:6e:49:e3: 8a:34:b5:f3:3f:e0:c7:5d:6a:14:b8:16:ce:e7:3b: cf:88:b4:20:8e:5d:a2:51:57:ad:81:40:03:b3:5e: d4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:44:E7:A0:7F:8C:FD:97:58:5C:69:CC:30:DF:60:85:F0:39:42:F3 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/CUTnoH-M_ZdYXGnMMN9ghfA5QvM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:119::/48 Signature Algorithm: sha256WithRSAEncryption 77:b1:66:ae:f1:e8:20:73:8f:27:08:a1:f3:75:60:f0:50:66: 66:69:d3:53:ab:9c:58:33:40:40:02:d8:11:bf:b0:0c:45:05: a7:d6:84:ab:48:93:bb:5c:bf:62:1a:b0:51:a9:11:56:e5:02: b6:70:80:3f:c3:b6:81:3f:55:25:aa:6c:60:f2:0b:11:13:c5: 89:c2:63:90:1e:ef:91:b2:24:cd:3f:2e:3a:ed:98:21:a9:a2: 1e:57:e9:0e:c7:64:36:ec:b8:38:c5:b6:14:6e:92:55:b8:b0: a2:e5:34:85:50:a2:f1:ee:8e:3f:74:5a:b9:b3:cf:81:4f:3b: 25:a2:63:49:e0:93:ba:61:f2:22:59:a7:86:f8:21:57:ae:ca: dd:cf:0f:28:aa:48:9a:6c:17:60:0c:52:f4:1b:49:44:ef:bb: 3c:82:04:cc:66:45:2e:15:ad:a5:a9:88:cf:eb:9b:1e:89:21: 06:a1:c7:86:b8:01:06:a8:08:23:54:59:e9:59:8a:77:52:62: 4b:15:96:f4:2d:5a:86:03:14:5c:52:05:a7:aa:5d:97:ee:b6: 3c:34:8e:bc:2a:44:25:8f:56:e2:d5:c1:eb:40:4d:f4:9b:ac: a8:ac:a8:35:5b:b3:6b:16:e7:65:56:5e:8a:ce:53:83:a6:30: f2:9a:96:bb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8cUiN/l9Z5VhQRvHJw2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTQ0ZTdhMDdmOGNmZDk3NTg1YzY5Y2MzMGRmNjA4NWYwMzk0MmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygapgw9kolkSPEazAeYEXXxfx2ob 49gnI3K2+cT+qU205XZOuDBL2sJ33qaB80wGDRpQAlvUFvSb0ZEFgppcHBWfahG9 GkohvU/Dzqjs2fCMy0YSp1S/u/EJK2xY6yjdTmdV/Nn5NjMf689h/ztDYn9GwNyu hu7M+sHKTT1Y05U5PP8gwmcx73i+Cxq5LjvxIOlG+rM4/a8/y797vH4PP51O4Dpb t3oRcsLxebsbk2gXkvYXuZRATeM+QyPxJ1RECaJFR/FIBg0Lm4kh9MVX9Y+L5Eq4 7XzRm1fjtKRuSeOKNLXzP+DHXWoUuBbO5zvPiLQgjl2iUVetgUADs17UhQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAlE56B/jP2XWFxpzDDfYIXwOULzMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvQ1VUbm9ILU1fWmRZWEduTU1OOWdoZkE1UXZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAEZ MA0GCSqGSIb3DQEBCwUAA4IBAQB3sWau8eggc48nCKHzdWDwUGZmadNTq5xYM0BA AtgRv7AMRQWn1oSrSJO7XL9iGrBRqRFW5QK2cIA/w7aBP1Ulqmxg8gsRE8WJwmOQ Hu+RsiTNPy467ZghqaIeV+kOx2Q27Lg4xbYUbpJVuLCi5TSFUKLx7o4/dFq5s8+B TzslomNJ4JO6YfIiWaeG+CFXrsrdzw8oqkiabBdgDFL0G0lE77s8ggTMZkUuFa2l qYjP65seiSEGoceGuAEGqAgjVFnpWYp3UmJLFZb0LVqGAxRcUgWnql2X7rY8NI68 KkQlj1bi1cHrQE30m6yorKg1W7NrFudlVl6KzlODpjDympa7 -----END CERTIFICATE-----Generated at Fri Jan 23 15:22:08 2026 by rpki-client