This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/CnSZhobNrgpXDd55Ywe1JVayzRA.roa File: CnSZhobNrgpXDd55Ywe1JVayzRA.roa (raw, json) Hash identifier: cBKb4Lfpix4UebHjD6IgFmqtFpp+Uoj6735juZ1ZgSU= Subject key identifier: 0A:74:99:86:86:CD:AE:0A:57:0D:DE:79:63:07:B5:25:56:B2:CD:10 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F421CE374AEBA03E58C408395B268 Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/CnSZhobNrgpXDd55Ywe1JVayzRA.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41683 IP address blocks: 213.238.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:42:1c:e3:74:ae:ba:03:e5:8c:40:83:95:b2:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a74998686cdae0a570dde796307b52556b2cd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:55:1b:56:3f:91:4c:e6:1b:05:7b:9a:cb:b0: 40:74:ac:15:50:7f:eb:43:68:1c:f7:17:57:ad:90: a3:f9:14:de:05:b7:ba:db:25:58:7c:a1:8f:13:1d: 40:77:1c:ff:b3:9e:e8:52:32:e0:ad:87:e5:6c:e8: e7:c9:0c:00:ab:e8:fa:61:a9:46:aa:87:10:3d:1a: a2:15:13:09:2a:d8:20:bc:94:ba:90:33:c7:04:0b: 96:d7:9b:83:56:7a:9e:7e:40:d7:a4:ed:6e:e7:99: c0:9c:e9:b1:58:a0:15:69:8e:17:8c:2e:79:8b:ca: cb:a2:78:20:94:d7:7c:f0:16:b8:a9:60:3e:18:ef: cf:fe:41:97:cb:60:3d:23:68:68:a3:67:ba:8d:2b: ae:f4:44:42:cd:d6:e4:1e:0a:68:a9:df:0a:fd:ca: 71:46:68:7e:ea:3e:dc:06:79:9f:c8:6b:dd:06:ce: 87:b0:cb:ab:2a:81:ec:7a:21:3b:ee:89:2c:b1:5f: df:34:96:62:de:19:e8:22:3d:63:52:db:94:45:fe: 5c:40:c9:3e:5b:16:66:dc:35:11:4b:d7:7a:02:6e: 32:2e:16:57:6f:63:96:7a:8f:7f:26:80:b0:ad:a6: 9a:ad:98:6a:18:35:0e:86:df:81:1e:6c:7e:83:fa: ac:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:74:99:86:86:CD:AE:0A:57:0D:DE:79:63:07:B5:25:56:B2:CD:10 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/CnSZhobNrgpXDd55Ywe1JVayzRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.176.0/24 Signature Algorithm: sha256WithRSAEncryption 05:d6:73:5f:8d:3e:37:fe:85:55:6a:ea:9a:36:0e:73:5e:25: e5:a0:92:6c:eb:0e:00:19:19:74:b0:b6:2c:4c:98:78:8a:25: d7:68:4f:c7:03:3d:6d:f7:14:ff:fe:5f:c8:0d:d2:4e:fa:0c: 48:da:77:cb:29:97:4c:b4:81:e8:61:cf:2d:44:ea:d2:4d:67: 70:b5:7c:e2:4e:6b:25:90:47:47:88:51:fa:65:a6:38:0a:ad: b3:41:6d:15:d0:1d:ef:92:28:17:a4:06:6b:24:bc:cd:42:a9: eb:00:25:c3:74:ae:93:c5:5f:5e:e2:e2:62:a1:67:e6:13:1b: 3c:ad:5e:47:58:8a:7d:f1:3d:3a:11:2a:bc:86:ef:37:d0:69: a0:71:d8:05:5b:13:84:e9:41:5c:0e:7f:7d:96:b4:a4:69:60: 90:8e:22:ea:10:48:fc:90:a4:9c:6a:a2:e5:e2:6f:c5:bf:72: a1:99:05:c3:2f:03:b7:53:64:f3:ab:1e:16:9e:7e:8c:c4:39: 1d:84:f4:5d:9b:3b:8c:5e:2a:99:8c:bf:e8:ae:41:fb:51:c9: 98:88:8b:7a:b4:34:66:0c:1b:5f:0d:8a:b3:18:3a:9b:f9:a2: 7e:d5:f3:18:b1:68:b6:0a:d7:60:bb:b6:77:9d:39:12:e1:c0: 57:fe:11:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f0Ic43SuugPljECDlbJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTc0OTk4Njg2Y2RhZTBhNTcwZGRlNzk2MzA3YjUyNTU2YjJjZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FUbVj+RTOYbBXuay7BAdKwVUH/r Q2gc9xdXrZCj+RTeBbe62yVYfKGPEx1Adxz/s57oUjLgrYflbOjnyQwAq+j6YalG qocQPRqiFRMJKtggvJS6kDPHBAuW15uDVnqefkDXpO1u55nAnOmxWKAVaY4XjC55 i8rLongglNd88Ba4qWA+GO/P/kGXy2A9I2hoo2e6jSuu9ERCzdbkHgpoqd8K/cpx Rmh+6j7cBnmfyGvdBs6HsMurKoHseiE77okssV/fNJZi3hnoIj1jUtuURf5cQMk+ WxZm3DURS9d6Am4yLhZXb2OWeo9/JoCwraaarZhqGDUOht+BHmx+g/qspQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAp0mYaGza4KVw3eeWMHtSVWss0QMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvQ25TWmhvYk5yZ3BYRGQ1NVl3ZTFKVmF5elJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e6wMA0G CSqGSIb3DQEBCwUAA4IBAQAF1nNfjT43/oVVauqaNg5zXiXloJJs6w4AGRl0sLYs TJh4iiXXaE/HAz1t9xT//l/IDdJO+gxI2nfLKZdMtIHoYc8tROrSTWdwtXziTmsl kEdHiFH6ZaY4Cq2zQW0V0B3vkigXpAZrJLzNQqnrACXDdK6TxV9e4uJioWfmExs8 rV5HWIp98T06ESq8hu830GmgcdgFWxOE6UFcDn99lrSkaWCQjiLqEEj8kKScaqLl 4m/Fv3KhmQXDLwO3U2Tzqx4Wnn6MxDkdhPRdmzuMXiqZjL/orkH7UcmYiIt6tDRm DBtfDYqzGDqb+aJ+1fMYsWi2Ctdgu7Z3nTkS4cBX/hER -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:57 2026 by rpki-client