This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/CILl_zyXusNg3CeT5TPh9rVx7SE.roa File: CILl_zyXusNg3CeT5TPh9rVx7SE.roa (raw, json) Hash identifier: FdMkKAGOUUSgyKvsP1F6/x5+Yu144fskvlYf4TyAXN0= Subject key identifier: 08:82:E5:FF:3C:97:BA:C3:60:DC:27:93:E5:33:E1:F6:B5:71:ED:21 Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA326190FF587AAEFB3A38BAB1B54A Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/CILl_zyXusNg3CeT5TPh9rVx7SE.roa Signing time: Fri 02 Jan 2026 08:19:21 +0000 ROA not before: Fri 02 Jan 2026 08:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49665 IP address blocks: 5.189.215.0/24 maxlen: 24 85.140.95.0/24 maxlen: 24 178.155.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:32:61:90:ff:58:7a:ae:fb:3a:38:ba:b1:b5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0882e5ff3c97bac360dc2793e533e1f6b571ed21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:63:44:cc:a4:f0:62:9a:99:83:26:4d:76:31: 51:0d:48:e7:9b:85:35:a1:1c:0a:42:97:f1:96:ba: 73:83:26:fc:61:88:db:f7:87:61:0c:fc:3d:7d:81: 2f:33:65:57:55:46:6e:49:db:05:5a:a3:85:65:aa: 14:72:fa:c8:64:0a:c6:8e:db:7d:50:4f:4d:49:56: 1b:c3:76:34:a7:bb:1b:da:71:90:f3:6c:4e:20:69: 7d:03:d8:0e:fb:c6:07:a2:43:3d:2b:39:ef:dc:80: 78:1a:ab:dd:bf:90:e8:96:a4:3c:08:b6:b2:c9:6b: f4:cd:a8:4f:04:9d:c7:83:aa:9c:ac:c6:e8:06:0a: ef:50:7a:20:a7:d4:6d:33:dc:15:db:f9:1e:33:fe: 03:06:cc:c9:16:46:5a:10:cb:c8:7a:59:58:b2:a6: 21:50:55:91:5b:6a:16:21:ac:7e:44:70:94:c0:ba: 1e:dd:d5:f5:41:a8:19:76:ce:bf:cf:f8:00:1b:5d: 97:3b:a5:42:a4:1a:7d:98:34:82:2e:82:ab:c2:e5: 23:72:ee:52:2a:68:d3:66:4e:65:8d:d7:5f:a5:68: 16:c6:50:9a:92:df:d1:df:7f:19:f0:99:22:66:86: ac:15:b0:93:94:d4:22:ae:2d:4d:b8:3a:bd:d9:d5: 96:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:82:E5:FF:3C:97:BA:C3:60:DC:27:93:E5:33:E1:F6:B5:71:ED:21 X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/CILl_zyXusNg3CeT5TPh9rVx7SE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.189.215.0/24 85.140.95.0/24 178.155.52.0/24 Signature Algorithm: sha256WithRSAEncryption 68:ad:10:ba:f6:a6:97:1b:ff:6e:96:21:57:4e:e6:31:69:d0: 97:c8:67:27:f0:ea:4e:d2:9f:d3:45:91:28:76:66:36:5f:4c: 09:87:f8:c7:f0:ec:4d:91:d7:b0:43:1a:88:c8:98:69:58:5e: cf:f3:96:9e:27:a9:c2:45:c4:e6:7c:5b:bb:95:a8:3c:aa:7e: 5a:7e:0e:4e:41:4f:0f:35:b9:ca:31:94:2a:9c:06:c8:77:ce: 02:9b:4f:3f:f8:4f:3e:91:ca:e6:ca:66:fe:2e:c9:ca:b5:90: 56:b8:5f:67:e5:2f:3b:fb:56:c2:4f:b4:23:db:28:23:4c:2e: a3:50:5a:3f:c3:f2:c7:13:13:58:aa:13:b6:b1:8b:3f:03:24: 91:af:f9:9d:f4:4d:d6:76:2c:4c:5f:f8:94:1f:69:ff:1e:07: a5:42:20:2a:a6:05:88:ee:b1:8a:51:70:e6:6f:7b:e6:b1:6e: 12:c2:5c:a1:9e:59:16:21:a4:2d:c8:c3:b2:6b:da:6d:52:16: 09:9f:46:19:91:1e:9d:22:99:4f:b9:0c:69:32:a8:3a:7b:52: 62:18:df:1b:28:c9:40:02:d6:48:28:4d:b3:69:13:e0:49:00: 8e:6f:56:50:82:61:aa:8b:fb:4b:f6:05:bd:94:f3:9f:74:6e: 27:30:f6:5b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yjJhkP9Yeq77Oji6sbVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODgyZTVmZjNjOTdiYWMzNjBkYzI3OTNlNTMzZTFmNmI1NzFlZDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmNEzKTwYpqZgyZNdjFRDUjnm4U1 oRwKQpfxlrpzgyb8YYjb94dhDPw9fYEvM2VXVUZuSdsFWqOFZaoUcvrIZArGjtt9 UE9NSVYbw3Y0p7sb2nGQ82xOIGl9A9gO+8YHokM9Kznv3IB4Gqvdv5DolqQ8CLay yWv0zahPBJ3Hg6qcrMboBgrvUHogp9RtM9wV2/keM/4DBszJFkZaEMvIellYsqYh UFWRW2oWIax+RHCUwLoe3dX1QagZds6/z/gAG12XO6VCpBp9mDSCLoKrwuUjcu5S KmjTZk5ljddfpWgWxlCakt/R338Z8JkiZoasFbCTlNQiri1NuDq92dWWuwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAiC5f88l7rDYNwnk+Uz4fa1ce0hMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvQ0lMbF96eVh1c05nM0NlVDVUUGg5clZ4N1NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABb3XAwQA VYxfAwQAsps0MA0GCSqGSIb3DQEBCwUAA4IBAQBorRC69qaXG/9uliFXTuYxadCX yGcn8OpO0p/TRZEodmY2X0wJh/jH8OxNkdewQxqIyJhpWF7P85aeJ6nCRcTmfFu7 lag8qn5afg5OQU8PNbnKMZQqnAbId84Cm08/+E8+kcrmymb+LsnKtZBWuF9n5S87 +1bCT7Qj2ygjTC6jUFo/w/LHExNYqhO2sYs/AySRr/md9E3WdixMX/iUH2n/Hgel QiAqpgWI7rGKUXDmb3vmsW4SwlyhnlkWIaQtyMOya9ptUhYJn0YZkR6dIplPuQxp Mqg6e1JiGN8bKMlAAtZIKE2zaRPgSQCOb1ZQgmGqi/tL9gW9lPOfdG4nMPZb -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:17 2026 by rpki-client