This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/cuE4TW5rh-XwN9tNjWmFmQtIPFU.roa File: cuE4TW5rh-XwN9tNjWmFmQtIPFU.roa (raw, json) Hash identifier: NU4Otp39oKMhqOc0L+AnrGl6IMBfgna2IPqlcLesd28= Subject key identifier: 72:E1:38:4D:6E:6B:87:E5:F0:37:DB:4D:8D:69:85:99:0B:48:3C:55 Certificate issuer: /CN=84a3cf114be4fa4c4ff76b218fad50e51739160d Certificate serial: 019B78A2F3137B23EF68ADF24AECBB11449E Authority key identifier: 84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/cuE4TW5rh-XwN9tNjWmFmQtIPFU.roa Signing time: Thu 01 Jan 2026 08:18:23 +0000 ROA not before: Thu 01 Jan 2026 08:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212140 IP address blocks: 185.205.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f3:13:7b:23:ef:68:ad:f2:4a:ec:bb:11:44:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84a3cf114be4fa4c4ff76b218fad50e51739160d Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72e1384d6e6b87e5f037db4d8d6985990b483c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:e4:c9:84:66:97:b8:43:25:0e:3a:24:2e: 0e:16:23:fb:94:24:72:84:8c:9f:79:b2:4c:f4:35: b7:25:1d:47:56:1a:2a:81:d5:98:c9:48:72:ea:03: ed:cf:dd:25:a0:36:60:d6:b4:fc:c2:f4:e1:c0:76: d9:2a:d5:6d:f2:9b:6c:fa:1e:07:0b:44:73:39:a8: 95:65:3e:2a:44:9d:9d:de:f0:4e:6b:76:dc:bb:14: 44:59:c9:73:74:1d:17:cb:e5:b8:6c:80:27:a9:60: 54:42:bd:39:3b:51:46:c3:31:77:2b:a0:f9:58:50: 8d:8b:27:12:cf:96:9d:a2:4b:63:42:19:04:1b:ac: 6f:aa:f1:4b:44:6f:54:b7:4a:ef:ba:80:82:50:af: da:4b:6e:35:17:30:8e:63:73:fa:d4:c1:93:c7:94: 4c:8a:4c:c7:34:b5:00:c0:54:02:5a:3a:65:9c:c3: 53:d4:38:77:f8:a8:45:82:51:ad:e9:a1:37:6b:7f: 6b:f2:ea:80:0c:49:5a:26:3f:ef:b3:58:98:3a:db: 7d:53:ba:3b:22:c9:bc:ca:fd:94:d1:a8:aa:69:52: d5:23:04:de:e9:f9:0e:35:f4:6b:a1:b0:ac:9b:74: d7:a0:1a:a8:3c:4e:1d:c3:3c:a0:c1:d0:af:91:6c: 07:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E1:38:4D:6E:6B:87:E5:F0:37:DB:4D:8D:69:85:99:0B:48:3C:55 X509v3 Authority Key Identifier: keyid:84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/cuE4TW5rh-XwN9tNjWmFmQtIPFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.71.0/24 Signature Algorithm: sha256WithRSAEncryption 41:25:1f:ca:3d:99:a5:30:b0:5b:44:a0:ee:a0:8c:27:4e:64: 44:ac:36:77:65:ca:7b:de:6a:92:07:eb:31:1e:7c:76:f7:f2: 47:c4:e0:f0:c5:81:d9:2e:cc:06:b6:48:ce:b8:55:5c:d7:70: 5f:78:78:ab:96:cf:75:a1:81:01:f2:34:cd:26:54:36:a3:e7: cd:78:1e:6d:5a:6c:74:50:10:fd:52:20:24:be:20:2b:7c:90: 1b:59:c0:93:4b:79:a6:96:cf:a0:0c:d1:68:95:88:f4:3d:b8: e0:c0:9a:91:c2:63:09:ba:01:62:b0:25:66:6f:e7:cf:25:62: 3b:32:48:29:2a:f6:08:4e:32:c2:17:d0:4e:85:68:96:29:17: 66:50:f7:3c:fb:9f:9f:61:41:f7:1f:8f:1d:25:1a:6b:c5:3c: 6c:9c:6e:c3:61:76:d1:a5:12:5b:9d:de:bf:ea:c7:45:fd:87: 31:b6:85:6a:76:0b:5d:67:c8:cd:e4:43:f9:56:77:ce:e8:65: 88:7e:ec:8b:27:56:b9:7d:da:5d:a3:6a:66:28:82:23:59:0a: 00:e4:e7:2a:7f:4f:99:0f:50:59:c3:63:e9:b8:54:87:3c:ed: 87:a8:56:40:85:14:f8:88:98:83:ef:0f:46:31:3a:e0:a9:c8: 2a:3a:f6:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovMTeyPvaK3ySuy7EUSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YTNjZjExNGJlNGZhNGM0ZmY3NmIyMThmYWQ1MGU1MTcz OTE2MGQwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmUxMzg0ZDZlNmI4N2U1ZjAzN2RiNGQ4ZDY5ODU5OTBiNDgzYzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCHkyYRml7hDJQ46JC4OFiP7lCRy hIyfebJM9DW3JR1HVhoqgdWYyUhy6gPtz90loDZg1rT8wvThwHbZKtVt8pts+h4H C0RzOaiVZT4qRJ2d3vBOa3bcuxREWclzdB0Xy+W4bIAnqWBUQr05O1FGwzF3K6D5 WFCNiycSz5adoktjQhkEG6xvqvFLRG9Ut0rvuoCCUK/aS241FzCOY3P61MGTx5RM ikzHNLUAwFQCWjplnMNT1Dh3+KhFglGt6aE3a39r8uqADElaJj/vs1iYOtt9U7o7 Ism8yv2U0aiqaVLVIwTe6fkONfRrobCsm3TXoBqoPE4dwzygwdCvkWwHlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHLhOE1ua4fl8DfbTY1phZkLSDxVMB8GA1UdIwQY MBaAFISjzxFL5PpMT/drIY+tUOUXORYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEtQUEVVdmsta3hQOTJzaGo2MVE1UmM1RmcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MDVmNDYtN2Q0Yy00NmI4LWJhYTUt NTM5MzI5YmVkNDZlLzEvY3VFNFRXNXJoLVh3Tjl0TmpXbUZtUXRJUEZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82MDVmNDYtN2Q0Yy00NmI4LWJhYTUtNTM5MzI5YmVkNDZl LzEvaEtQUEVVdmsta3hQOTJzaGo2MVE1UmM1RmcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc1HMA0G CSqGSIb3DQEBCwUAA4IBAQBBJR/KPZmlMLBbRKDuoIwnTmRErDZ3Zcp73mqSB+sx Hnx29/JHxODwxYHZLswGtkjOuFVc13BfeHirls91oYEB8jTNJlQ2o+fNeB5tWmx0 UBD9UiAkviArfJAbWcCTS3mmls+gDNFolYj0PbjgwJqRwmMJugFisCVmb+fPJWI7 MkgpKvYITjLCF9BOhWiWKRdmUPc8+5+fYUH3H48dJRprxTxsnG7DYXbRpRJbnd6/ 6sdF/YcxtoVqdgtdZ8jN5EP5VnfO6GWIfuyLJ1a5fdpdo2pmKIIjWQoA5Ocqf0+Z D1BZw2PpuFSHPO2HqFZAhRT4iJiD7w9GMTrgqcgqOvaT -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:44 2026 by rpki-client