This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/CuoNMY7Qq37VOjNaS3NSAgeASU8.roa File: CuoNMY7Qq37VOjNaS3NSAgeASU8.roa (raw, json) Hash identifier: oV7Za3ljWN5/ELZ5W0IrtTxHnlCCtRf76iTFx/48w6Y= Subject key identifier: 0A:EA:0D:31:8E:D0:AB:7E:D5:3A:33:5A:4B:73:52:02:07:80:49:4F Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58 Certificate serial: 019B79ECCA57EC6926E3E5B2863187F754DB Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/CuoNMY7Qq37VOjNaS3NSAgeASU8.roa Signing time: Thu 01 Jan 2026 14:18:39 +0000 ROA not before: Thu 01 Jan 2026 14:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213025 IP address blocks: 91.200.179.0/24 maxlen: 24 2a0a:d700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ca:57:ec:69:26:e3:e5:b2:86:31:87:f7:54:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58 Validity Not Before: Jan 1 14:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0aea0d318ed0ab7ed53a335a4b7352020780494f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:7a:ec:14:d2:07:43:83:40:c5:a6:c3:8d: 21:e2:ca:50:17:78:f8:61:c4:81:f7:95:52:29:cc: 8b:35:9f:1d:f6:dd:3e:b4:cd:99:d4:73:59:d2:44: ef:64:cf:f4:c5:d2:5b:8d:be:a4:cf:64:e0:e1:f3: 2c:3a:b4:f3:41:b3:8d:db:bb:95:2b:d8:81:5e:b4: cd:29:6b:93:a8:0c:f0:aa:d9:00:30:59:15:33:26: 85:e2:34:b8:9f:80:ca:47:50:53:81:25:da:02:cb: cc:d7:fa:cd:06:57:5f:25:5f:e5:e0:e0:15:c1:9b: 0e:a6:1a:bc:42:85:93:4a:82:12:eb:cf:fc:5b:9b: f8:3e:7c:0b:90:34:ae:ba:d0:60:27:22:6e:7b:2b: 89:54:75:97:a9:8c:6d:07:82:67:61:30:0c:71:e2: 8b:9d:70:bf:da:a1:b1:ea:71:59:b4:da:a4:e6:c7: 4c:b0:c1:77:c2:e9:79:af:ef:47:89:ef:d7:8d:49: 6f:a8:d1:8e:c3:aa:2f:92:79:4c:f3:92:88:46:9b: 9d:c5:94:92:ae:7d:e9:1a:eb:26:cd:c6:1a:00:9e: fe:39:6f:20:94:f9:e6:4b:c8:0a:38:cc:37:7c:37: e0:3f:3c:61:92:a9:6d:59:f6:fa:90:ad:26:b1:3d: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EA:0D:31:8E:D0:AB:7E:D5:3A:33:5A:4B:73:52:02:07:80:49:4F X509v3 Authority Key Identifier: keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/CuoNMY7Qq37VOjNaS3NSAgeASU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.179.0/24 IPv6: 2a0a:d700::/32 Signature Algorithm: sha256WithRSAEncryption 35:ac:e3:53:ad:99:79:6d:7b:40:01:69:17:e5:6f:17:d8:7a: 26:4a:46:a7:e8:55:ae:d6:71:a2:8f:47:ce:43:d8:de:3d:fb: 79:fe:d5:13:f3:42:1b:56:75:f9:25:b4:0f:76:a4:99:0d:e4: d8:fa:a5:a0:c6:6c:71:5e:c0:d8:0f:8c:7a:d9:30:31:a6:2a: 56:8e:a0:11:d2:cb:de:f3:ca:59:a2:f7:0f:0c:49:e0:bd:91: cf:d5:18:e8:d7:bd:af:6e:e1:cc:5a:cb:32:24:d5:25:c7:80: 0b:11:d5:48:ab:5e:60:71:a9:d9:a3:50:ec:b2:7c:4e:85:91: 3a:30:a2:e0:14:d2:a4:b0:16:10:66:53:7d:37:d0:fd:9c:49: 79:f8:24:38:8e:a1:c7:4b:de:86:e6:9e:e8:1a:3c:29:84:2d: 64:26:f3:69:cd:7e:cd:48:f9:f8:ae:17:a6:be:1f:7c:28:6d: 6c:2f:67:43:8d:02:ef:93:79:ee:39:02:c0:98:e0:8a:1d:da: 9f:85:07:fa:99:fd:9a:fe:5b:e2:d2:3b:65:8d:97:a3:b5:f4: e1:f0:56:84:84:db:47:d1:93:24:18:a4:cf:31:77:3f:21:38: 8c:d5:e7:3e:d7:7a:9b:06:0b:2b:e7:25:1f:43:98:54:84:ee: 66:aa:4a:81 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57MpX7Gkm4+WyhjGH91TbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYmJjOTA1NTVkNmQwZDM0MzJiYWJiOTViNjBjZGVlZWE1 ODBmNTgwHhcNMjYwMTAxMTQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWVhMGQzMThlZDBhYjdlZDUzYTMzNWE0YjczNTIwMjA3ODA0OTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFF67BTSB0ODQMWmw40h4spQF3j4 YcSB95VSKcyLNZ8d9t0+tM2Z1HNZ0kTvZM/0xdJbjb6kz2Tg4fMsOrTzQbON27uV K9iBXrTNKWuTqAzwqtkAMFkVMyaF4jS4n4DKR1BTgSXaAsvM1/rNBldfJV/l4OAV wZsOphq8QoWTSoIS68/8W5v4PnwLkDSuutBgJyJueyuJVHWXqYxtB4JnYTAMceKL nXC/2qGx6nFZtNqk5sdMsMF3wul5r+9Hie/XjUlvqNGOw6ovknlM85KIRpudxZSS rn3pGusmzcYaAJ7+OW8glPnmS8gKOMw3fDfgPzxhkqltWfb6kK0msT3DiQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFArqDTGO0Kt+1TozWktzUgIHgElPMB8GA1UdIwQY MBaAFNK7yQVV1tDTQyuruVtgze7qWA9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHJ2SkJWWFcwTk5ESzZ1NVcyRE43dXBZRDFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82ZmZjZDItNWJmMS00MWUyLTg2YTgt N2JjMWU0ZjU2Yzg4LzEvQ3VvTk1ZN1FxMzdWT2pOYVMzTlNBZ2VBU1U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82ZmZjZDItNWJmMS00MWUyLTg2YTgtN2JjMWU0ZjU2Yzg4 LzEvMHJ2SkJWWFcwTk5ESzZ1NVcyRE43dXBZRDFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW8izMA0E AgACMAcDBQAqCtcAMA0GCSqGSIb3DQEBCwUAA4IBAQA1rONTrZl5bXtAAWkX5W8X 2HomSkan6FWu1nGij0fOQ9jePft5/tUT80IbVnX5JbQPdqSZDeTY+qWgxmxxXsDY D4x62TAxpipWjqAR0sve88pZovcPDEngvZHP1Rjo172vbuHMWssyJNUlx4ALEdVI q15gcanZo1DssnxOhZE6MKLgFNKksBYQZlN9N9D9nEl5+CQ4jqHHS96G5p7oGjwp hC1kJvNpzX7NSPn4rhemvh98KG1sL2dDjQLvk3nuOQLAmOCKHdqfhQf6mf2a/lvi 0jtljZejtfTh8FaEhNtH0ZMkGKTPMXc/ITiM1ec+13qbBgsr5yUfQ5hUhO5mqkqB -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:59 2026 by rpki-client