This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/cLXri-wviIsJ5iHidksAtpZN5SY.roa File: cLXri-wviIsJ5iHidksAtpZN5SY.roa (raw, json) Hash identifier: UtWyYW3E/+2IaDZ2hwPVOR71jr9t19OookjTmPk0g7A= Subject key identifier: 70:B5:EB:8B:EC:2F:88:8B:09:E6:21:E2:76:4B:00:B6:96:4D:E5:26 Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87 Certificate serial: 019B7A5B9550195AA3D57EB985852BD54BFB Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/cLXri-wviIsJ5iHidksAtpZN5SY.roa Signing time: Thu 01 Jan 2026 16:19:40 +0000 ROA not before: Thu 01 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48952 IP address blocks: 185.161.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:95:50:19:5a:a3:d5:7e:b9:85:85:2b:d5:4b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87 Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70b5eb8bec2f888b09e621e2764b00b6964de526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:fe:3d:67:38:32:2b:7f:c9:88:28:79:b5: 0a:51:37:a0:a9:60:0a:aa:9e:0c:80:0b:80:73:76: df:16:83:94:75:6b:94:94:82:14:87:a5:d0:bf:0a: 32:f3:97:b5:cf:40:f9:77:d8:c8:4b:7f:06:0e:03: 50:5d:50:91:5b:49:2e:4e:7f:15:ae:03:32:0e:7b: bc:cd:d2:44:f8:70:f4:e8:11:ce:24:ca:14:f4:de: 74:94:a4:63:79:07:af:22:a5:e1:7b:1a:64:09:69: f1:17:96:a4:f4:e1:8c:d9:d1:5f:dd:b3:07:bc:7d: 4a:00:0b:79:cd:b9:be:6d:8d:a8:c5:8d:79:7d:7b: b6:f6:98:9c:15:74:2d:df:92:70:f9:67:fa:fb:15: f4:da:c7:cc:37:1c:49:40:2e:39:19:9b:99:40:ed: ea:69:53:b5:45:ed:53:fe:d6:fb:45:b8:52:36:e5: a2:d2:a2:74:35:8c:78:8d:bc:25:1c:0d:cb:b5:ca: fd:47:ae:e7:c6:44:2f:f2:fd:32:ce:66:c7:19:43: f7:bc:3b:47:f3:89:2f:a5:3f:a0:d4:43:c8:24:22: f9:85:19:05:09:10:c6:7f:0f:b5:8e:5b:ad:f7:15: 32:fa:f3:50:6d:29:70:0e:9a:d6:36:27:e4:de:e2: 29:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B5:EB:8B:EC:2F:88:8B:09:E6:21:E2:76:4B:00:B6:96:4D:E5:26 X509v3 Authority Key Identifier: keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/cLXri-wviIsJ5iHidksAtpZN5SY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.40.0/22 Signature Algorithm: sha256WithRSAEncryption 52:27:c7:aa:f4:53:1c:a3:9b:33:85:cc:2f:81:1d:60:3c:8a: e3:ff:4c:0b:9d:f9:ac:72:c5:05:c2:05:0c:dd:98:28:c3:75: b1:bf:81:14:b7:8b:18:71:83:7b:30:e7:5a:c0:f7:e3:fb:b7: e3:99:5e:bc:b3:4f:7f:77:af:e4:0b:91:3f:be:84:ad:bb:00: ad:a5:a1:42:da:5a:96:d8:ad:10:19:68:00:c2:cf:88:fe:3d: dd:6f:18:52:5b:f2:b7:2a:2b:7d:29:57:0d:86:e9:10:0b:f5: 60:ba:af:16:57:5c:e5:4e:0a:fd:cf:8c:73:35:9b:8b:ea:2f: a6:16:39:56:ec:e7:1a:05:d0:86:02:8f:ed:5c:d7:d8:5a:f9: 27:7e:04:76:b8:53:56:92:c3:70:fa:e2:75:6c:86:05:67:80: 0b:1d:5c:e9:06:ba:8c:34:03:c1:ab:cf:91:95:ae:eb:0f:87: 17:db:07:f7:d1:03:22:cb:3d:3b:81:92:e9:f6:a1:95:98:d9: 97:09:f7:6f:06:14:12:b7:45:9e:de:9c:b0:e0:c5:2c:b0:cd: 99:6b:f9:49:a4:89:b0:ca:98:c0:3a:f3:40:60:f5:49:a1:f4: 8f:e4:10:51:74:a4:88:24:1a:41:76:64:15:8e:35:40:c9:f4: 5d:a7:09:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5VQGVqj1X65hYUr1Uv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNGY2NjVkNDZkNmEyYWJmMDUyMWU1Y2IxZjdjNDUxY2Ez MzdhODcwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGI1ZWI4YmVjMmY4ODhiMDllNjIxZTI3NjRiMDBiNjk2NGRlNTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zn+PWc4Mit/yYgoebUKUTegqWAK qp4MgAuAc3bfFoOUdWuUlIIUh6XQvwoy85e1z0D5d9jIS38GDgNQXVCRW0kuTn8V rgMyDnu8zdJE+HD06BHOJMoU9N50lKRjeQevIqXhexpkCWnxF5ak9OGM2dFf3bMH vH1KAAt5zbm+bY2oxY15fXu29picFXQt35Jw+Wf6+xX02sfMNxxJQC45GZuZQO3q aVO1Re1T/tb7RbhSNuWi0qJ0NYx4jbwlHA3Ltcr9R67nxkQv8v0yzmbHGUP3vDtH 84kvpT+g1EPIJCL5hRkFCRDGfw+1jlut9xUy+vNQbSlwDprWNifk3uIp0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHC164vsL4iLCeYh4nZLALaWTeUmMB8GA1UdIwQY MBaAFE5PZl1G1qKr8FIeXLH3xFHKM3qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGs5bVhVYldvcXZ3VWg1Y3NmZkVVY296ZW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNzBiODktN2M0Ny00MjYzLTg2YTAt MDA3M2MyYjdhN2VlLzEvY0xYcmktd3ZpSXNKNWlIaWRrc0F0cFpONVNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8yNzBiODktN2M0Ny00MjYzLTg2YTAtMDA3M2MyYjdhN2Vl LzEvVGs5bVhVYldvcXZ3VWg1Y3NmZkVVY296ZW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaEoMA0G CSqGSIb3DQEBCwUAA4IBAQBSJ8eq9FMco5szhcwvgR1gPIrj/0wLnfmscsUFwgUM 3Zgow3Wxv4EUt4sYcYN7MOdawPfj+7fjmV68s09/d6/kC5E/voStuwCtpaFC2lqW 2K0QGWgAws+I/j3dbxhSW/K3Kit9KVcNhukQC/Vguq8WV1zlTgr9z4xzNZuL6i+m FjlW7OcaBdCGAo/tXNfYWvknfgR2uFNWksNw+uJ1bIYFZ4ALHVzpBrqMNAPBq8+R la7rD4cX2wf30QMiyz07gZLp9qGVmNmXCfdvBhQSt0We3pyw4MUssM2Za/lJpImw ypjAOvNAYPVJofSP5BBRdKSIJBpBdmQVjjVAyfRdpwnS -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:56 2026 by rpki-client