This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/CVCeZZ_sa3H3p2DH33iHGdIyWEc.roa File: CVCeZZ_sa3H3p2DH33iHGdIyWEc.roa (raw, json) Hash identifier: JqW6uDJ3RG9f6mu4pHvOKIPsSL2yj5yYpAboStI8ffM= Subject key identifier: 09:50:9E:65:9F:EC:6B:71:F7:A7:60:C7:DF:78:87:19:D2:32:58:47 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B7E4128519000698F29A0BB5D5155C0C6 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/CVCeZZ_sa3H3p2DH33iHGdIyWEc.roa Signing time: Fri 02 Jan 2026 10:29:17 +0000 ROA not before: Fri 02 Jan 2026 10:29:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149513 IP address blocks: 94.241.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:41:28:51:90:00:69:8f:29:a0:bb:5d:51:55:c0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 2 10:29:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09509e659fec6b71f7a760c7df788719d2325847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e4:10:21:34:96:68:26:cf:df:42:e2:07:75: 8e:a4:4d:30:ce:49:eb:ce:ee:0a:06:f7:92:92:11: af:fd:8e:4a:09:b1:6c:62:f0:8a:13:c8:33:75:d3: 31:61:18:2d:58:1b:be:12:62:ae:0f:4c:e0:57:bb: c7:80:23:04:eb:0e:46:2c:be:7f:54:ac:61:de:40: a5:f1:d9:70:79:61:fc:e6:e4:ec:3b:e9:14:4f:76: 8c:4e:8d:08:81:6f:b3:af:6d:ab:d3:10:ec:e5:d5: dd:23:f2:b4:58:a3:cf:ad:72:b9:2a:fb:4b:3b:33: 5b:8e:f3:8c:10:23:9a:ab:3c:7a:bf:f3:18:42:40: a6:13:62:e9:76:85:81:b3:4d:74:38:08:ff:b1:27: 5d:a3:ee:25:ea:e3:2f:09:80:6a:67:ce:6a:11:0e: 77:82:88:59:04:47:d5:2b:53:59:54:b6:d9:4d:0d: 15:08:2e:ea:b5:7c:34:68:b8:99:12:e5:4c:4a:f8: cf:12:60:cf:62:31:5f:81:37:ff:b9:74:9b:fb:0d: e6:f4:46:39:4a:88:1d:e6:53:4a:31:02:6a:ac:f7: 2b:52:8a:22:cf:eb:a6:e8:94:ad:41:65:41:73:76: 67:20:eb:21:2f:76:50:50:dd:cc:81:30:55:e9:d3: a7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:50:9E:65:9F:EC:6B:71:F7:A7:60:C7:DF:78:87:19:D2:32:58:47 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/CVCeZZ_sa3H3p2DH33iHGdIyWEc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.241.160.0/23 Signature Algorithm: sha256WithRSAEncryption 36:09:9b:75:db:0d:2f:00:4d:d7:ad:6c:8d:1a:10:3b:90:94: 2d:43:6e:e2:e3:6b:d5:5c:26:30:92:77:78:4d:f7:73:ba:39: 20:26:8d:e9:cf:88:47:7c:54:bd:93:7a:bf:a2:bf:d5:17:42: 39:c4:b5:66:72:0b:af:a5:f3:fa:d3:65:d8:37:f9:87:2b:dd: 5a:7a:90:77:23:15:54:75:a1:9a:ef:44:1a:ed:6d:cb:38:d9: 2d:d1:84:9f:50:cd:0c:09:cc:ea:6f:83:2f:28:43:30:2c:23: 96:06:11:e5:74:0e:f6:51:61:59:7e:06:09:7c:93:01:76:a9: f1:50:69:8b:80:a6:be:3a:06:8b:dd:e6:2c:15:45:6e:fd:d1: b1:8d:05:8b:53:1c:1e:3c:5e:cb:80:56:f9:7a:7f:65:71:83: 8e:e2:ea:fd:50:50:e7:ab:b9:41:3c:87:4f:a4:1c:07:f5:2a: 7e:ee:3a:bf:c6:91:55:d9:05:cc:6c:33:5f:54:49:31:0a:29: 44:1d:ca:b3:2a:cf:e1:a2:57:98:48:89:76:43:af:57:33:5b: 55:cf:37:c3:02:74:cc:66:39:18:e1:f0:84:35:83:f1:56:9e: 03:c0:fb:64:84:b8:02:52:cf:be:83:24:5b:15:fb:49:fb:2d: 01:84:95:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+QShRkABpjymgu11RVcDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTAyMTAyOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTUwOWU2NTlmZWM2YjcxZjdhNzYwYzdkZjc4ODcxOWQyMzI1ODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OQQITSWaCbP30LiB3WOpE0wzknr zu4KBveSkhGv/Y5KCbFsYvCKE8gzddMxYRgtWBu+EmKuD0zgV7vHgCME6w5GLL5/ VKxh3kCl8dlweWH85uTsO+kUT3aMTo0IgW+zr22r0xDs5dXdI/K0WKPPrXK5KvtL OzNbjvOMECOaqzx6v/MYQkCmE2LpdoWBs010OAj/sSddo+4l6uMvCYBqZ85qEQ53 gohZBEfVK1NZVLbZTQ0VCC7qtXw0aLiZEuVMSvjPEmDPYjFfgTf/uXSb+w3m9EY5 Sogd5lNKMQJqrPcrUooiz+um6JStQWVBc3ZnIOshL3ZQUN3MgTBV6dOnQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAlQnmWf7Gtx96dgx994hxnSMlhHMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvQ1ZDZVpaX3NhM0gzcDJESDMzaUhHZEl5V0VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXvGgMA0G CSqGSIb3DQEBCwUAA4IBAQA2CZt12w0vAE3XrWyNGhA7kJQtQ27i42vVXCYwknd4 TfdzujkgJo3pz4hHfFS9k3q/or/VF0I5xLVmcguvpfP602XYN/mHK91aepB3IxVU daGa70Qa7W3LONkt0YSfUM0MCczqb4MvKEMwLCOWBhHldA72UWFZfgYJfJMBdqnx UGmLgKa+OgaL3eYsFUVu/dGxjQWLUxwePF7LgFb5en9lcYOO4ur9UFDnq7lBPIdP pBwH9Sp+7jq/xpFV2QXMbDNfVEkxCilEHcqzKs/holeYSIl2Q69XM1tVzzfDAnTM ZjkY4fCENYPxVp4DwPtkhLgCUs++gyRbFftJ+y0BhJUz -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:04 2026 by rpki-client