This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/cuqHyO4V93ncme-J7Fr8-_3DTvU.roa File: cuqHyO4V93ncme-J7Fr8-_3DTvU.roa (raw, json) Hash identifier: RSEzdn3Ri0wlzenvwY/b18Rq2sLeWzRaHbLOuqaUorY= Subject key identifier: 72:EA:87:C8:EE:15:F7:79:DC:99:EF:89:EC:5A:FC:FB:FD:C3:4E:F5 Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47 Certificate serial: 019B7CEE6F182C51F0C62799DB549F75A8CB Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/cuqHyO4V93ncme-J7Fr8-_3DTvU.roa Signing time: Fri 02 Jan 2026 04:19:19 +0000 ROA not before: Fri 02 Jan 2026 04:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35046 IP address blocks: 94.143.232.0/21 maxlen: 21 185.133.100.0/22 maxlen: 22 213.226.208.0/20 maxlen: 20 2a00:5100::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6f:18:2c:51:f0:c6:27:99:db:54:9f:75:a8:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47 Validity Not Before: Jan 2 04:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72ea87c8ee15f779dc99ef89ec5afcfbfdc34ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cc:bf:59:1a:6e:f4:fa:f1:23:c4:7a:ea:2b: 0d:28:8a:76:cb:b7:fc:51:5c:7c:33:68:12:2b:85: 8b:e2:a7:37:0c:74:4c:cd:48:73:4d:69:7c:8e:a5: 9f:0d:de:03:a9:a1:78:6b:c0:21:c3:ab:5d:40:74: 8e:0b:0e:56:9b:5b:a8:23:13:de:37:16:61:3f:97: 6e:f2:68:86:99:e9:b6:83:4b:bb:95:22:69:ec:de: 75:bf:64:50:94:c6:3d:af:73:58:c4:c8:45:30:40: c9:c9:78:1f:58:21:66:be:f5:9f:fd:3e:93:95:15: 52:15:37:a4:11:80:13:a3:b1:ce:34:af:6e:1c:b6: 6d:01:c4:39:a5:cb:ac:27:8a:c7:11:b3:f4:95:05: 9f:6d:f7:89:c1:82:1b:f0:39:e5:12:cc:3d:eb:22: 9a:f6:fd:be:1d:b7:06:fe:01:ea:96:b5:77:2d:8c: 42:10:e8:80:68:54:a0:dc:0a:42:4c:26:9e:cb:df: fe:90:a9:30:47:cb:7c:e8:80:e9:ae:fd:a2:ef:3c: d4:6f:5b:78:20:8c:0e:62:de:ce:d1:a4:41:b1:d7: 54:5e:02:1a:a3:c2:c6:da:4c:34:27:e5:1e:57:2d: 89:1f:15:f9:07:51:4f:70:3d:8d:c8:fd:41:6c:38: 32:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EA:87:C8:EE:15:F7:79:DC:99:EF:89:EC:5A:FC:FB:FD:C3:4E:F5 X509v3 Authority Key Identifier: keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/cuqHyO4V93ncme-J7Fr8-_3DTvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.143.232.0/21 185.133.100.0/22 213.226.208.0/20 IPv6: 2a00:5100::/32 Signature Algorithm: sha256WithRSAEncryption 31:44:77:2c:8e:31:dd:bb:98:60:a7:75:2e:32:56:26:98:9f: 42:8f:f1:68:d5:24:b9:27:a9:c9:46:04:01:44:73:4b:6d:23: 71:ec:cf:5e:75:45:08:14:80:94:dc:6b:cd:18:8e:be:11:3b: 37:7a:8a:8b:b2:c6:00:b6:65:25:b1:de:1a:19:98:63:86:62: 87:a4:61:af:41:73:92:46:57:e4:49:19:79:8b:67:e8:44:79: 7b:fd:c9:b6:9d:0d:71:20:6d:5d:80:6b:a3:b6:92:da:c2:49: 95:45:90:f4:b0:fd:9d:a8:28:69:ea:2f:10:56:51:dc:61:ed: b9:69:07:2b:a5:23:ea:84:0f:f2:87:af:18:f7:51:b8:f9:29: b1:c9:77:92:a7:57:af:c0:a4:72:86:2d:5c:59:64:90:93:bc: 32:cb:f2:1f:81:42:43:93:cb:fc:f2:ff:28:32:fb:15:cd:c4: 06:23:98:53:11:51:a3:29:ee:54:46:47:3a:8b:6d:17:ec:25: f2:c3:fb:2f:f7:b0:63:16:d6:7c:db:b9:6f:ee:fc:7a:2c:d0: cc:02:80:b7:87:44:ff:18:e8:6a:6d:98:5d:2d:ff:da:5c:d2: 66:d2:d4:68:7b:d0:7a:e4:3a:1a:60:63:0a:2c:58:68:78:f2: 32:80:1b:41 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt87m8YLFHwxieZ21SfdajLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjBjYWM4MzhmMjgyZTA0Mjk0OGY5ZDJiMmNkNTc1NGQy ZThjNDcwHhcNMjYwMTAyMDQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmVhODdjOGVlMTVmNzc5ZGM5OWVmODllYzVhZmNmYmZkYzM0ZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cy/WRpu9PrxI8R66isNKIp2y7f8 UVx8M2gSK4WL4qc3DHRMzUhzTWl8jqWfDd4DqaF4a8Ahw6tdQHSOCw5Wm1uoIxPe NxZhP5du8miGmem2g0u7lSJp7N51v2RQlMY9r3NYxMhFMEDJyXgfWCFmvvWf/T6T lRVSFTekEYATo7HONK9uHLZtAcQ5pcusJ4rHEbP0lQWfbfeJwYIb8DnlEsw96yKa 9v2+HbcG/gHqlrV3LYxCEOiAaFSg3ApCTCaey9/+kKkwR8t86IDprv2i7zzUb1t4 IIwOYt7O0aRBsddUXgIao8LG2kw0J+UeVy2JHxX5B1FPcD2NyP1BbDgy1wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFHLqh8juFfd53Jnviexa/Pv9w071MB8GA1UdIwQY MBaAFISwysg48oLgQpSPnSss1XVNLoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lOTQ4N2YtZmRjNy00MGE3LThhNjct MWJlNjljYTM5M2JhLzEvY3VxSHlPNFY5M25jbWUtSjdGcjgtXzNEVHZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lOTQ4N2YtZmRjNy00MGE3LThhNjctMWJlNjljYTM5M2Jh LzEvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDXo/oAwQC uYVkAwQE1eLQMA0EAgACMAcDBQAqAFEAMA0GCSqGSIb3DQEBCwUAA4IBAQAxRHcs jjHdu5hgp3UuMlYmmJ9Cj/Fo1SS5J6nJRgQBRHNLbSNx7M9edUUIFICU3GvNGI6+ ETs3eoqLssYAtmUlsd4aGZhjhmKHpGGvQXOSRlfkSRl5i2foRHl7/cm2nQ1xIG1d gGujtpLawkmVRZD0sP2dqChp6i8QVlHcYe25aQcrpSPqhA/yh68Y91G4+SmxyXeS p1evwKRyhi1cWWSQk7wyy/IfgUJDk8v88v8oMvsVzcQGI5hTEVGjKe5URkc6i20X 7CXyw/sv97BjFtZ827lv7vx6LNDMAoC3h0T/GOhqbZhdLf/aXNJm0tRoe9B65Doa YGMKLFhoePIygBtB -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:17 2026 by rpki-client