This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/cpElJSiXGO7jJAVo9S1jen5uhjQ.roa File: cpElJSiXGO7jJAVo9S1jen5uhjQ.roa (raw, json) Hash identifier: jXHD1yWMKx7op/sh3fiD9gaMHojOuxsjiA1ioAXvW84= Subject key identifier: 72:91:25:25:28:97:18:EE:E3:24:05:68:F5:2D:63:7A:7E:6E:86:34 Certificate issuer: /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5 Certificate serial: 019B7F15A719E5BCCD142E29EC1906872012 Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/cpElJSiXGO7jJAVo9S1jen5uhjQ.roa Signing time: Fri 02 Jan 2026 14:21:24 +0000 ROA not before: Fri 02 Jan 2026 14:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 185.97.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 02:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a7:19:e5:bc:cd:14:2e:29:ec:19:06:87:20:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5 Validity Not Before: Jan 2 14:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72912525289718eee3240568f52d637a7e6e8634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:e7:7a:7e:bc:2c:a7:37:18:bb:cc:da:19: 43:61:f8:56:e4:7c:4a:a9:77:0c:90:5d:60:ac:71: 0c:93:e6:4c:33:7b:b4:b2:00:83:ab:10:6c:95:17: 5a:5f:cd:e8:3d:e9:9b:2c:40:ee:47:f6:46:55:b8: fa:96:cc:3c:80:02:05:19:c6:8f:48:07:19:13:c1: c2:3c:bb:08:2f:ae:15:61:6f:ec:0c:5a:21:18:0b: e8:f0:5d:4f:57:59:ee:4f:97:63:93:99:1c:7c:f8: 27:3f:c3:91:14:e1:b0:96:7d:b3:2e:66:0a:f3:5f: 93:52:a2:8c:0b:55:94:e7:67:94:ea:6b:51:b1:70: 95:04:0a:ce:da:29:0b:dc:42:c9:b0:42:0d:24:7d: 35:76:5a:7f:54:ee:a7:c0:53:51:5e:b7:54:b0:8f: 54:a3:71:1e:fe:3f:13:21:da:97:7a:e6:5c:38:35: 7e:01:f7:ae:e7:67:4f:8f:0f:95:84:72:04:41:b7: 66:54:b8:07:bc:f9:9a:86:af:4e:b4:c2:e8:7e:cf: 60:27:44:7f:bc:e7:b9:20:ca:dd:c7:4b:97:f1:2c: 49:11:70:01:78:4b:fc:fe:fd:1b:43:be:ec:ea:6f: ef:42:5b:6e:dc:59:eb:f0:92:b4:97:db:de:02:94: 31:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:91:25:25:28:97:18:EE:E3:24:05:68:F5:2D:63:7A:7E:6E:86:34 X509v3 Authority Key Identifier: keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/cpElJSiXGO7jJAVo9S1jen5uhjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.227.0/24 Signature Algorithm: sha256WithRSAEncryption 40:2b:6b:15:a1:80:e4:e7:8b:0b:17:46:a6:9b:c0:06:80:4f: 99:a0:c5:57:dd:6c:69:e4:bd:3d:e0:e0:81:0f:18:27:44:10: b9:e9:ee:0e:b7:55:90:2a:22:e1:5a:ce:dd:f1:5a:c7:b3:a6: d0:41:09:22:c5:4b:ed:c0:7c:cf:df:59:62:40:75:30:51:6a: 75:d2:9a:49:2c:85:13:1e:59:77:86:5f:11:35:9a:76:2a:43: 85:94:15:36:9a:8a:17:d1:f0:d7:1d:5f:70:0d:19:41:70:ce: 7b:d9:8c:f8:a2:a4:54:da:01:c8:8e:cc:1d:22:df:4e:62:ed: b3:7f:a1:6a:d1:69:85:cd:d6:bf:32:ca:75:10:92:f1:09:58: 94:b4:08:f5:b8:7e:2a:aa:f3:34:c8:ca:ee:77:1d:f2:2e:29: 1d:b9:e0:a4:fe:4b:db:bc:60:05:7a:bc:8d:b0:ca:14:c1:90: 29:f6:83:55:5d:16:9a:bb:28:31:c0:55:e6:37:d2:95:1c:08: 0e:4e:8a:c9:47:94:98:a2:45:db:30:e1:34:ef:2a:83:07:f8: ab:f1:8e:87:0b:81:50:53:7d:4e:5d:3e:8c:0b:52:71:c7:7c: d3:b4:76:74:77:9f:a2:53:14:f8:ac:7e:2b:20:bb:c1:5f:1b: c3:02:d2:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FacZ5bzNFC4p7BkGhyASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOTMwMmQ1NDZlMDY4YzJmZDc2NzdkOWQ1MjAwYWRkMzZj OGJjZDUwHhcNMjYwMTAyMTQyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjkxMjUyNTI4OTcxOGVlZTMyNDA1NjhmNTJkNjM3YTdlNmU4NjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNvnen68LKc3GLvM2hlDYfhW5HxK qXcMkF1grHEMk+ZMM3u0sgCDqxBslRdaX83oPembLEDuR/ZGVbj6lsw8gAIFGcaP SAcZE8HCPLsIL64VYW/sDFohGAvo8F1PV1nuT5djk5kcfPgnP8ORFOGwln2zLmYK 81+TUqKMC1WU52eU6mtRsXCVBArO2ikL3ELJsEINJH01dlp/VO6nwFNRXrdUsI9U o3Ee/j8TIdqXeuZcODV+Afeu52dPjw+VhHIEQbdmVLgHvPmahq9OtMLofs9gJ0R/ vOe5IMrdx0uX8SxJEXABeEv8/v0bQ77s6m/vQltu3Fnr8JK0l9veApQxHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKRJSUolxju4yQFaPUtY3p+boY0MB8GA1UdIwQY MBaAFA2TAtVG4GjC/XZ32dUgCt02yLzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUt NGJlZjQzZDNmYjE3LzEvY3BFbEpTaVhHTzdqSkFWbzlTMWplbjV1aGpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUtNGJlZjQzZDNmYjE3 LzEvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWHjMA0G CSqGSIb3DQEBCwUAA4IBAQBAK2sVoYDk54sLF0amm8AGgE+ZoMVX3Wxp5L094OCB DxgnRBC56e4Ot1WQKiLhWs7d8VrHs6bQQQkixUvtwHzP31liQHUwUWp10ppJLIUT Hll3hl8RNZp2KkOFlBU2mooX0fDXHV9wDRlBcM572Yz4oqRU2gHIjswdIt9OYu2z f6Fq0WmFzda/Msp1EJLxCViUtAj1uH4qqvM0yMrudx3yLikdueCk/kvbvGAFeryN sMoUwZAp9oNVXRaauygxwFXmN9KVHAgOTorJR5SYokXbMOE07yqDB/ir8Y6HC4FQ U31OXT6MC1Jxx3zTtHZ0d5+iUxT4rH4rILvBXxvDAtLG -----END CERTIFICATE-----Generated at Mon Jan 19 11:48:28 2026 by rpki-client