This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/Cj5zwQGWSYblCJRXKaQKctud0XU.roa File: Cj5zwQGWSYblCJRXKaQKctud0XU.roa (raw, json) Hash identifier: xmUDvaYQWawK9zhBWUIaHZpPsBr12uVNC2m3+pJz1gA= Subject key identifier: 0A:3E:73:C1:01:96:49:86:E5:08:94:57:29:A4:0A:72:DB:9D:D1:75 Certificate issuer: /CN=5ea1653e177aa2955400805c8c75bd0d68583afc Certificate serial: 019B7F80B5DC76AB583307C7A3654BDCB6E0 Authority key identifier: 5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/Cj5zwQGWSYblCJRXKaQKctud0XU.roa Signing time: Fri 02 Jan 2026 16:18:20 +0000 ROA not before: Fri 02 Jan 2026 16:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212086 IP address blocks: 185.231.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:b5:dc:76:ab:58:33:07:c7:a3:65:4b:dc:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ea1653e177aa2955400805c8c75bd0d68583afc Validity Not Before: Jan 2 16:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a3e73c101964986e508945729a40a72db9dd175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:54:91:0c:a5:59:37:26:d2:b0:b4:69:c3: cc:2c:4a:51:07:e2:6f:f5:15:f3:68:d1:ba:85:a1: 9f:c7:38:7e:27:c4:6a:ad:f5:fa:c0:9a:b9:90:7f: 76:92:79:d1:6c:f5:3d:54:0b:e5:aa:b2:3b:57:c7: 55:b5:ca:85:e1:42:c8:21:f8:de:61:48:ed:e0:8b: 0e:3c:0c:e7:02:0e:09:9a:79:f0:f3:4d:78:de:c3: 0c:7e:0e:54:c0:5e:d5:0f:a3:60:8c:57:9e:b2:9c: 13:79:97:a7:e7:27:2e:94:7e:51:b1:fa:b6:8b:7b: 52:04:77:fc:94:02:bd:30:9a:a6:7c:d3:49:db:42: 71:e9:82:e9:5c:f4:f4:12:6d:37:72:fe:03:c3:bb: 0f:a4:fe:9c:92:fa:ab:87:77:05:69:8a:1b:37:68: 45:0b:f6:6d:0d:17:8c:2a:35:25:6e:4a:3a:60:93: fe:89:6a:a5:2a:60:bb:d7:f9:aa:dd:c6:ca:12:e8: d4:c4:54:ea:54:28:f0:db:0d:60:e9:3b:87:03:e9: 41:49:79:c9:f7:33:5f:83:cf:bf:36:bd:c2:5c:d4: 0e:1f:a5:1c:cd:4e:75:c8:56:29:67:7f:06:10:f0: 59:a9:88:8d:f6:7c:7f:6a:eb:f0:91:27:0d:3b:f6: 11:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3E:73:C1:01:96:49:86:E5:08:94:57:29:A4:0A:72:DB:9D:D1:75 X509v3 Authority Key Identifier: keyid:5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/Cj5zwQGWSYblCJRXKaQKctud0XU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.64.0/24 Signature Algorithm: sha256WithRSAEncryption 03:cf:6d:c4:38:14:c2:21:3e:fd:4d:36:29:04:5f:5d:8c:39: 01:a1:b9:3d:b3:fa:d8:a4:6a:62:f9:ef:82:76:1d:62:da:15: 91:3e:c7:6e:af:e7:58:47:da:37:c8:6a:d8:f8:56:52:73:26: 79:c1:c0:e9:b0:3c:ce:7e:e6:eb:29:4e:49:ca:35:47:a5:06: 3a:c1:5b:f8:50:c2:30:42:aa:88:8a:b0:f2:81:32:dd:37:a5: 0c:6e:a1:d1:fb:ff:25:12:d7:2b:6b:f3:b2:07:64:f2:bb:4b: 44:16:74:d7:aa:4a:32:8f:ca:f8:44:72:c0:81:31:b7:de:f5: 00:63:d8:7a:d0:69:e9:70:ad:dd:7e:b8:d1:57:79:1b:c2:8c: e8:96:20:16:16:b4:a8:a6:28:e3:bd:e2:28:59:9d:17:e1:33: b0:2a:4d:53:c8:1a:61:e1:3a:84:8b:2d:c0:81:0b:51:bd:12: 59:47:55:16:eb:cd:d3:79:d7:aa:74:a8:12:f2:80:ad:67:13: e7:a7:cb:95:10:19:2b:6d:bf:d3:70:2f:2c:94:c1:3d:56:b0: e1:11:94:ac:ab:4b:63:f2:e3:9e:f4:72:4e:93:16:23:0e:4c: 31:56:04:39:69:eb:ef:5f:1f:15:83:cb:8e:b5:f3:fb:b2:bd: 86:e8:41:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gLXcdqtYMwfHo2VL3LbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYTE2NTNlMTc3YWEyOTU1NDAwODA1YzhjNzViZDBkNjg1 ODNhZmMwHhcNMjYwMTAyMTYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTNlNzNjMTAxOTY0OTg2ZTUwODk0NTcyOWE0MGE3MmRiOWRkMTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln1UkQylWTcm0rC0acPMLEpRB+Jv 9RXzaNG6haGfxzh+J8RqrfX6wJq5kH92knnRbPU9VAvlqrI7V8dVtcqF4ULIIfje YUjt4IsOPAznAg4Jmnnw80143sMMfg5UwF7VD6NgjFeespwTeZen5yculH5Rsfq2 i3tSBHf8lAK9MJqmfNNJ20Jx6YLpXPT0Em03cv4Dw7sPpP6ckvqrh3cFaYobN2hF C/ZtDReMKjUlbko6YJP+iWqlKmC71/mq3cbKEujUxFTqVCjw2w1g6TuHA+lBSXnJ 9zNfg8+/Nr3CXNQOH6UczU51yFYpZ38GEPBZqYiN9nx/auvwkScNO/YRoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAo+c8EBlkmG5QiUVymkCnLbndF1MB8GA1UdIwQY MBaAFF6hZT4XeqKVVACAXIx1vQ1oWDr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHFGbFBoZDZvcFZVQUlCY2pIVzlEV2hZT3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hNGFmMTUtN2ZkZC00NWE0LWExNzIt MWRmOGZhMjBmYTllLzEvQ2o1endRR1dTWWJsQ0pSWEthUUtjdHVkMFhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hNGFmMTUtN2ZkZC00NWE0LWExNzItMWRmOGZhMjBmYTll LzEvWHFGbFBoZDZvcFZVQUlCY2pIVzlEV2hZT3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuedAMA0G CSqGSIb3DQEBCwUAA4IBAQADz23EOBTCIT79TTYpBF9djDkBobk9s/rYpGpi+e+C dh1i2hWRPsdur+dYR9o3yGrY+FZScyZ5wcDpsDzOfubrKU5JyjVHpQY6wVv4UMIw QqqIirDygTLdN6UMbqHR+/8lEtcra/OyB2Tyu0tEFnTXqkoyj8r4RHLAgTG33vUA Y9h60GnpcK3dfrjRV3kbwozoliAWFrSopijjveIoWZ0X4TOwKk1TyBph4TqEiy3A gQtRvRJZR1UW683TedeqdKgS8oCtZxPnp8uVEBkrbb/TcC8slME9VrDhEZSsq0tj 8uOe9HJOkxYjDkwxVgQ5aevvXx8Vg8uOtfP7sr2G6EF3 -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:52 2026 by rpki-client