This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa File: c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa (raw, json) Hash identifier: aQ6L7ic1wbkKyG8vlw3gYFtNy2gVxv0/rtyRYP1HzOA= Subject key identifier: 73:8D:6E:5B:65:99:FB:A4:39:60:AF:76:60:74:33:35:96:04:2A:13 Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Certificate serial: 019B7C7F971C1E707D9A5AA699218BC75135 Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa Signing time: Fri 02 Jan 2026 02:18:15 +0000 ROA not before: Fri 02 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55002 IP address blocks: 87.237.108.0/24 maxlen: 24 87.237.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 11:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:97:1c:1e:70:7d:9a:5a:a6:99:21:8b:c7:51:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e Validity Not Before: Jan 2 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=738d6e5b6599fba43960af766074333596042a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:44:8b:9c:07:99:89:f2:38:5e:4e:05:49:04: cf:64:27:26:2e:94:5a:83:a6:cd:83:fe:4a:63:c4: 19:5c:8f:2b:b4:ea:ea:d4:85:90:d3:3a:4d:5d:30: 95:da:0d:c9:e3:10:c2:af:68:3d:ed:ca:bf:ad:35: 63:44:dc:50:cd:d5:fa:18:44:ce:67:6d:8b:ab:b9: 46:70:01:c6:af:b2:3a:bd:0d:b3:9d:26:8e:42:d5: d5:e1:b5:09:a6:fb:0d:6f:20:94:37:10:17:ba:34: 30:6b:a8:6b:e2:ef:36:ef:98:d3:24:fb:13:e5:d9: 9c:ef:dd:93:5e:68:23:5f:c9:93:d6:5d:e1:1f:ef: 9c:17:7f:3a:f1:00:23:80:e4:ff:94:fe:34:56:40: db:c0:a0:fc:5a:99:29:cd:f9:23:75:e3:d8:71:c8: b9:e6:e8:5d:82:53:b3:fb:42:69:0c:9b:c5:c4:85: 6b:e0:bd:36:7a:a9:c1:19:f5:7f:77:1b:9c:e1:11: 54:74:81:42:d8:ee:31:1f:59:46:59:f1:63:4b:94: c5:58:c5:20:c3:95:6f:82:9f:c6:d9:f2:64:50:53: f5:89:8a:3e:ee:c8:bb:6d:ac:a7:d2:4f:0e:5d:25: 9b:b6:c0:6f:7b:79:43:f1:13:58:04:9b:92:68:c5: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8D:6E:5B:65:99:FB:A4:39:60:AF:76:60:74:33:35:96:04:2A:13 X509v3 Authority Key Identifier: keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.237.108.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:09:04:04:11:98:df:28:ae:72:dc:69:22:13:ac:b1:b9:fc: 13:6e:f6:12:0c:d8:0d:55:e0:3a:27:53:91:0d:32:cd:a6:22: ff:87:30:9f:89:50:56:ae:23:db:06:72:90:a0:4d:f1:d8:45: be:84:51:9b:92:eb:83:12:9d:3f:50:46:92:6a:55:84:d8:1d: 03:f0:6e:e6:ff:dc:5c:0d:51:70:e3:7f:e2:64:69:04:43:c6: 8b:5e:1e:e0:19:91:b3:10:86:08:39:b4:54:51:cc:7f:f9:02: e6:c0:c6:1c:a4:0f:d0:51:2b:e2:66:92:99:4c:4f:54:c5:0e: 10:05:92:1b:d1:03:4f:bd:9f:e7:de:f3:8c:f7:17:c6:b6:3d: ca:60:ba:7f:08:5f:55:c4:8b:ca:ed:f6:5e:76:24:51:36:1f: 15:40:26:53:ba:28:1b:02:60:a8:12:75:83:c3:54:c8:9d:45: ab:62:e0:8b:f6:d4:04:8e:52:a3:59:7e:48:64:ba:04:8f:5c: 6b:c8:1e:a9:e6:c0:84:58:34:77:7a:3e:1d:35:67:6f:85:62: 47:d1:ef:5d:5f:06:cd:00:dc:79:bb:ed:c2:9d:2e:d3:ec:3f: 7f:02:74:32:4a:b5:80:d4:63:57:bc:b0:14:f6:d9:5d:f2:10: 54:6d:1e:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f5ccHnB9mlqmmSGLx1E1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjYxNzk4ZGQxODk2NWMwMjdhZmE3ZjkzYWUwMzBmZjVl MWQ3NmUwHhcNMjYwMTAyMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzhkNmU1YjY1OTlmYmE0Mzk2MGFmNzY2MDc0MzMzNTk2MDQyYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUSLnAeZifI4Xk4FSQTPZCcmLpRa g6bNg/5KY8QZXI8rtOrq1IWQ0zpNXTCV2g3J4xDCr2g97cq/rTVjRNxQzdX6GETO Z22Lq7lGcAHGr7I6vQ2znSaOQtXV4bUJpvsNbyCUNxAXujQwa6hr4u8275jTJPsT 5dmc792TXmgjX8mT1l3hH++cF3868QAjgOT/lP40VkDbwKD8WpkpzfkjdePYcci5 5uhdglOz+0JpDJvFxIVr4L02eqnBGfV/dxuc4RFUdIFC2O4xH1lGWfFjS5TFWMUg w5Vvgp/G2fJkUFP1iYo+7si7bayn0k8OXSWbtsBve3lD8RNYBJuSaMUdOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHONbltlmfukOWCvdmB0MzWWBCoTMB8GA1UdIwQY MBaAFAr2F5jdGJZcAnr6f5OuAw/14dduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEt ZDZlMWUzNDdmOWM3LzEvYzQxdVcyV1otNlE1WUs5MllIUXpOWllFS2hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEtZDZlMWUzNDdmOWM3 LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV+1sMA0G CSqGSIb3DQEBCwUAA4IBAQB/CQQEEZjfKK5y3GkiE6yxufwTbvYSDNgNVeA6J1OR DTLNpiL/hzCfiVBWriPbBnKQoE3x2EW+hFGbkuuDEp0/UEaSalWE2B0D8G7m/9xc DVFw43/iZGkEQ8aLXh7gGZGzEIYIObRUUcx/+QLmwMYcpA/QUSviZpKZTE9UxQ4Q BZIb0QNPvZ/n3vOM9xfGtj3KYLp/CF9VxIvK7fZediRRNh8VQCZTuigbAmCoEnWD w1TInUWrYuCL9tQEjlKjWX5IZLoEj1xryB6p5sCEWDR3ej4dNWdvhWJH0e9dXwbN ANx5u+3CnS7T7D9/AnQySrWA1GNXvLAU9tld8hBUbR6B -----END CERTIFICATE-----Generated at Tue Jan 20 14:15:36 2026 by rpki-client