This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/CutVr_X7gS8lDaDuNw9F7uzem1c.roa File: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (raw, json) Hash identifier: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0= Subject key identifier: 0A:EB:55:AF:F5:FB:81:2F:25:0D:A0:EE:37:0F:45:EE:EC:DE:9B:57 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019B76EADBE5FA01EF6768B2389A3E0A2015 Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/CutVr_X7gS8lDaDuNw9F7uzem1c.roa Signing time: Thu 01 Jan 2026 00:17:41 +0000 ROA not before: Thu 01 Jan 2026 00:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210213 IP address blocks: 195.244.146.0/24 maxlen: 24 195.244.152.0/24 maxlen: 24 195.244.153.0/24 maxlen: 24 195.244.156.0/24 maxlen: 24 2a00:1780:dc00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 21:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:db:e5:fa:01:ef:67:68:b2:38:9a:3e:0a:20:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Jan 1 00:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0aeb55aff5fb812f250da0ee370f45eeecde9b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:c6:28:96:f1:81:3d:ce:4c:80:28:89:85: 2e:0a:e0:b5:50:91:0b:df:bf:cf:db:c6:83:09:77: 6c:49:c2:50:6e:b9:61:5a:7f:36:22:69:68:3f:f2: 5d:ef:df:54:d6:c4:43:ef:4d:9f:de:84:a2:d2:d8: 42:f0:13:fa:ee:b6:87:6d:1f:83:21:e4:9f:fd:bc: 87:c1:b6:46:00:5e:96:60:d4:5a:af:a1:ee:e7:f3: 30:f3:f1:8d:ff:85:a2:8c:40:de:b6:f6:ca:e4:6d: 71:f2:66:69:b3:51:70:df:47:3e:e6:2c:95:80:8f: 72:6f:e9:c7:62:79:06:ba:0b:a7:56:01:1b:38:35: 23:1c:e7:b1:e2:a2:89:eb:b7:bd:5e:60:15:70:83: f3:ec:4f:7f:57:f6:a3:3c:d2:77:14:28:d9:3e:65: e7:f7:fa:f2:6b:63:57:7b:d3:c0:77:a4:f4:24:88: d1:18:5c:44:01:ec:a8:ee:46:1b:4e:04:da:ce:df: c6:87:b5:6d:d7:22:fc:7a:de:79:62:b4:f8:e6:a0: a7:b5:16:36:ea:a9:22:e7:15:eb:89:db:bd:9a:a2: 3f:fb:b3:51:0a:2c:28:61:94:e8:e4:dc:d0:b4:2c: fe:57:6e:2b:0c:20:7a:84:de:19:87:b8:b6:5b:6c: 4d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EB:55:AF:F5:FB:81:2F:25:0D:A0:EE:37:0F:45:EE:EC:DE:9B:57 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/CutVr_X7gS8lDaDuNw9F7uzem1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.244.146.0/24 195.244.152.0/23 195.244.156.0/24 IPv6: 2a00:1780:dc00::/40 Signature Algorithm: sha256WithRSAEncryption 06:97:40:4a:ef:0b:2e:b3:61:f7:57:3d:38:e5:80:a5:f6:4c: 48:e3:68:92:14:74:95:36:0d:7d:94:de:63:39:1a:d1:67:f0: 67:ca:02:c8:f9:15:58:f8:37:7c:fe:18:9f:85:0c:9a:76:62: f1:f1:41:b2:69:3d:d3:5a:6d:e9:4e:e8:14:08:f8:07:18:f5: 77:e1:9a:62:d9:f7:2d:e7:2b:de:26:e7:57:d8:e5:58:5d:06: 38:d4:fa:98:f2:46:72:56:fd:ec:50:0c:8f:19:9b:d7:2e:4f: b0:db:cd:7c:ab:4a:4d:47:12:26:af:31:e1:a0:ae:04:02:1d: 2d:4c:1f:43:a7:fa:ef:54:b5:cf:ff:b8:9d:74:ef:60:10:a7: d8:70:bd:c3:71:e6:ec:9d:3a:9b:50:e3:74:e1:56:3a:84:5c: 2a:f0:6f:81:e4:6d:14:ba:f5:e1:c1:04:dd:23:2c:90:27:0e: 89:72:80:d6:03:be:94:c2:a6:16:55:c6:3e:4c:6b:64:bc:ef: 81:90:80:88:41:7a:92:56:61:67:26:ea:2a:57:5c:80:f5:4d: bc:e6:ea:95:a2:0a:89:e2:57:0c:13:24:7d:6a:5e:0c:d2:5b: 51:21:fe:da:cc:a8:c8:e8:ed:eb:37:02:c8:8e:e4:3a:f9:65: ab:5c:36:14 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt26tvl+gHvZ2iyOJo+CiAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwMTAxMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWViNTVhZmY1ZmI4MTJmMjUwZGEwZWUzNzBmNDVlZWVjZGU5YjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySrGKJbxgT3OTIAoiYUuCuC1UJEL 37/P28aDCXdsScJQbrlhWn82ImloP/Jd799U1sRD702f3oSi0thC8BP67raHbR+D IeSf/byHwbZGAF6WYNRar6Hu5/Mw8/GN/4WijEDetvbK5G1x8mZps1Fw30c+5iyV gI9yb+nHYnkGugunVgEbODUjHOex4qKJ67e9XmAVcIPz7E9/V/ajPNJ3FCjZPmXn 9/rya2NXe9PAd6T0JIjRGFxEAeyo7kYbTgTazt/Gh7Vt1yL8et55YrT45qCntRY2 6qki5xXridu9mqI/+7NRCiwoYZTo5NzQtCz+V24rDCB6hN4Zh7i2W2xNgQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFArrVa/1+4EvJQ2g7jcPRe7s3ptXMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvQ3V0VnJfWDdnUzhsRGFEdU53OUY3dXplbTFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQAw/SSAwQB w/SYAwQAw/ScMA4EAgACMAgDBgAqABeA3DANBgkqhkiG9w0BAQsFAAOCAQEABpdA Su8LLrNh91c9OOWApfZMSONokhR0lTYNfZTeYzka0WfwZ8oCyPkVWPg3fP4Yn4UM mnZi8fFBsmk901pt6U7oFAj4Bxj1d+GaYtn3Lecr3ibnV9jlWF0GONT6mPJGclb9 7FAMjxmb1y5PsNvNfKtKTUcSJq8x4aCuBAIdLUwfQ6f671S1z/+4nXTvYBCn2HC9 w3Hm7J06m1DjdOFWOoRcKvBvgeRtFLr14cEE3SMskCcOiXKA1gO+lMKmFlXGPkxr ZLzvgZCAiEF6klZhZybqKldcgPVNvObqlaIKieJXDBMkfWpeDNJbUSH+2syoyOjt 6zcCyI7kOvllq1w2FA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:09:49 2026 by rpki-client