This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/cvsVj4Nxvo824NrKadr7CqxaETo.roa File: cvsVj4Nxvo824NrKadr7CqxaETo.roa (raw, json) Hash identifier: 6GdZp9tVQFM/JG4iIzlhh+KgWjJbdYXxpM8R/v3gqEM= Subject key identifier: 72:FB:15:8F:83:71:BE:8F:36:E0:DA:CA:69:DA:FB:0A:AC:5A:11:3A Certificate issuer: /CN=d3b4a2787222597f16d1ee4c435be8690f1033d9 Certificate serial: 019B7FF1F744DD8E2980316AD8BF5AA84B06 Authority key identifier: D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/cvsVj4Nxvo824NrKadr7CqxaETo.roa Signing time: Fri 02 Jan 2026 18:22:02 +0000 ROA not before: Fri 02 Jan 2026 18:22:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206636 IP address blocks: 185.179.96.0/22 maxlen: 22 2a14:5e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:f7:44:dd:8e:29:80:31:6a:d8:bf:5a:a8:4b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b4a2787222597f16d1ee4c435be8690f1033d9 Validity Not Before: Jan 2 18:22:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72fb158f8371be8f36e0daca69dafb0aac5a113a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:88:f0:2b:b8:55:ff:94:7e:0b:e8:97:40: 7c:3e:7a:06:8a:b6:8f:cd:72:2c:a8:4a:66:ef:bd: ab:5e:2e:5c:7a:38:6b:9d:07:c5:9d:da:60:29:f8: d2:a6:36:d8:3d:10:fc:7f:e7:7a:14:41:cb:33:ce: 80:1e:0f:06:e5:ef:f1:d6:5a:c3:6c:98:ca:f7:ff: 2d:cb:75:ea:f6:81:58:95:74:9a:f9:b2:e0:19:c5: 9b:fa:66:8a:5d:cf:6e:7b:b4:e0:b7:aa:8b:3f:2e: 1f:0e:9d:ef:bf:ef:5a:bc:19:a8:e8:0e:66:14:5d: 64:43:82:de:cd:19:ff:2b:05:17:27:89:43:d9:83: 32:5e:3d:5a:0d:5a:44:2c:60:76:b2:8f:78:31:03: ad:91:06:1f:6a:c2:6f:4c:18:c0:ea:7e:14:b7:0e: 1e:33:d0:63:82:fa:29:47:9e:63:91:13:89:c3:ff: 2b:33:7c:ba:69:81:d4:ff:c7:3b:86:2d:b2:25:63: d7:72:1e:d1:e8:ad:b5:00:c9:80:a4:65:a2:73:29: 65:c8:b4:5d:29:18:54:1a:6f:15:ed:89:3b:a6:84: 73:57:8e:a7:55:54:44:00:84:f0:7d:7e:7b:cd:56: 2c:2d:d3:34:6a:48:33:44:77:2e:b7:21:4f:06:f4: b9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FB:15:8F:83:71:BE:8F:36:E0:DA:CA:69:DA:FB:0A:AC:5A:11:3A X509v3 Authority Key Identifier: keyid:D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/cvsVj4Nxvo824NrKadr7CqxaETo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.96.0/22 IPv6: 2a14:5e80::/32 Signature Algorithm: sha256WithRSAEncryption 9d:20:36:99:01:c7:e9:4e:0e:7c:d5:72:c1:95:5e:0f:30:b8: 1f:be:42:79:89:fe:15:a3:8a:72:43:2b:d3:b2:7f:f5:e4:e5: 29:ca:44:69:5b:e0:05:43:16:9f:75:be:6b:6c:62:ac:0e:6b: 5d:44:3a:80:41:a9:16:3a:e5:8e:4d:c5:76:9c:cf:a5:d6:a7: d8:5a:9d:55:92:ee:81:36:08:3a:8d:bf:59:34:56:43:77:59: eb:e6:e1:8d:d1:88:d2:ec:33:19:45:70:8d:f7:d0:8c:0c:9a: ed:c2:df:b8:03:79:02:72:bb:12:ce:c2:d2:1e:41:64:3d:4a: 4f:1c:02:87:0e:5d:1d:63:8a:76:e9:9b:c7:6e:f4:ac:6d:79: 1d:44:26:0a:cb:5a:3d:35:7e:10:d0:77:9f:15:87:46:64:ac: 65:48:6c:77:dd:39:58:38:fa:33:6e:63:c7:19:38:45:af:a4: e9:35:86:aa:b1:d3:61:16:59:60:82:bb:14:d3:e1:69:5f:0a: 62:d2:f8:2e:f6:27:14:ca:7a:ea:46:e5:f5:09:54:df:cc:c4: 74:24:e8:f3:ce:55:7b:15:c1:47:97:2e:f1:cb:14:d2:1b:a0: f4:0c:a6:f4:9f:17:25:80:3f:c7:9e:fe:2d:9e:9f:43:ee:bd: 04:21:4a:f3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8fdE3Y4pgDFq2L9aqEsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYjRhMjc4NzIyMjU5N2YxNmQxZWU0YzQzNWJlODY5MGYx MDMzZDkwHhcNMjYwMTAyMTgyMjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmZiMTU4ZjgzNzFiZThmMzZlMGRhY2E2OWRhZmIwYWFjNWExMTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukeI8Cu4Vf+Ufgvol0B8PnoGiraP zXIsqEpm772rXi5cejhrnQfFndpgKfjSpjbYPRD8f+d6FEHLM86AHg8G5e/x1lrD bJjK9/8ty3Xq9oFYlXSa+bLgGcWb+maKXc9ue7Tgt6qLPy4fDp3vv+9avBmo6A5m FF1kQ4LezRn/KwUXJ4lD2YMyXj1aDVpELGB2so94MQOtkQYfasJvTBjA6n4Utw4e M9BjgvopR55jkROJw/8rM3y6aYHU/8c7hi2yJWPXch7R6K21AMmApGWicyllyLRd KRhUGm8V7Yk7poRzV46nVVREAITwfX57zVYsLdM0akgzRHcutyFPBvS5fQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHL7FY+Dcb6PNuDaymna+wqsWhE6MB8GA1UdIwQY MBaAFNO0onhyIll/FtHuTENb6GkPEDPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDdTaWVISWlXWDhXMGU1TVExdm9hUThRTTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zOWVjOGMtNDg0MS00ZGQxLTgwOGQt N2JlODczNDE3ZDc2LzEvY3ZzVmo0Tnh2bzgyNE5yS2FkcjdDcXhhRVRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zOWVjOGMtNDg0MS00ZGQxLTgwOGQtN2JlODczNDE3ZDc2 LzEvMDdTaWVISWlXWDhXMGU1TVExdm9hUThRTTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubNgMA0E AgACMAcDBQAqFF6AMA0GCSqGSIb3DQEBCwUAA4IBAQCdIDaZAcfpTg581XLBlV4P MLgfvkJ5if4Vo4pyQyvTsn/15OUpykRpW+AFQxafdb5rbGKsDmtdRDqAQakWOuWO TcV2nM+l1qfYWp1Vku6BNgg6jb9ZNFZDd1nr5uGN0YjS7DMZRXCN99CMDJrtwt+4 A3kCcrsSzsLSHkFkPUpPHAKHDl0dY4p26ZvHbvSsbXkdRCYKy1o9NX4Q0HefFYdG ZKxlSGx33TlYOPozbmPHGThFr6TpNYaqsdNhFllggrsU0+FpXwpi0vgu9icUynrq RuX1CVTfzMR0JOjzzlV7FcFHly7xyxTSG6D0DKb0nxclgD/Hnv4tnp9D7r0EIUrz -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:44 2026 by rpki-client