This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/CPVxDc_aZPt8p2hD-fQ5EY3ek5w.roa File: CPVxDc_aZPt8p2hD-fQ5EY3ek5w.roa (raw, json) Hash identifier: YSCCvnapCyu6BSWmfyyXkWgH96EnMt+2gyVUr+pHUOM= Subject key identifier: 08:F5:71:0D:CF:DA:64:FB:7C:A7:68:43:F9:F4:39:11:8D:DE:93:9C Certificate issuer: /CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626 Certificate serial: 019B7CEDD69607B8CADD56499A23290E8B81 Authority key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/CPVxDc_aZPt8p2hD-fQ5EY3ek5w.roa Signing time: Fri 02 Jan 2026 04:18:40 +0000 ROA not before: Fri 02 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60341 IP address blocks: 185.251.236.0/22 maxlen: 24 2a0c:1ec0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d6:96:07:b8:ca:dd:56:49:9a:23:29:0e:8b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626 Validity Not Before: Jan 2 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08f5710dcfda64fb7ca76843f9f439118dde939c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:68:40:f6:1a:d8:e5:d2:69:96:69:c6:ad:56: 51:98:86:86:da:9f:f1:a5:18:cd:80:68:55:f0:67: 0f:45:18:5e:36:84:f1:3f:4f:fa:70:4f:80:3c:5e: c9:cd:1f:4a:17:95:6e:89:76:f2:b5:76:9a:74:32: 9e:36:7d:5e:ae:58:6d:a6:66:11:b8:a6:1d:25:eb: c4:24:e7:96:2d:f0:10:cf:b8:32:f1:3d:7e:42:65: 00:1f:3a:14:b3:ef:a5:7b:52:f8:3f:ac:c8:c5:fe: d1:4b:00:8d:7f:cb:91:60:36:ba:4b:1f:77:90:ae: e9:8b:e6:b4:63:ee:c4:65:07:fa:28:ac:27:d1:4f: 47:f8:d3:c7:93:08:09:29:10:f2:0f:9f:47:15:07: fd:9a:dd:2a:c1:5c:5c:86:f6:44:13:83:4b:26:50: d5:a8:7c:e9:f5:1b:8e:66:82:ff:f6:75:bf:9e:e4: c8:74:70:a0:61:fc:ec:4f:61:56:18:b4:15:23:89: d6:1d:34:fa:63:1b:e9:05:fd:dd:95:ab:cc:34:e3: 81:6a:2d:28:77:fe:76:12:93:81:48:36:58:57:bd: f2:8b:4a:f1:98:0d:2e:72:1c:5b:7e:7c:a0:84:14: 74:34:62:4b:04:4e:5c:0a:24:48:2e:27:a0:e5:fe: c4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F5:71:0D:CF:DA:64:FB:7C:A7:68:43:F9:F4:39:11:8D:DE:93:9C X509v3 Authority Key Identifier: keyid:A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/CPVxDc_aZPt8p2hD-fQ5EY3ek5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.236.0/22 IPv6: 2a0c:1ec0::/29 Signature Algorithm: sha256WithRSAEncryption 47:b6:0d:1b:58:72:51:62:23:ad:11:bb:f2:69:3e:7f:c1:0b: 95:fe:3b:f3:26:40:60:96:d5:da:b6:33:e3:d5:0d:64:72:4f: bb:60:2c:77:b3:2e:a1:6d:62:5d:8c:a6:75:de:ce:0e:5c:2c: a4:b8:a5:33:2a:44:64:cf:29:38:9d:e3:d4:73:ba:70:ac:df: 0e:e6:04:33:6b:59:36:30:49:b9:d8:0e:94:ff:97:13:69:40: 97:c8:24:28:38:df:71:0f:a0:f2:70:cd:ee:ff:e7:17:ba:89: ba:07:7b:8c:2a:d2:a7:12:27:51:fc:c4:0c:27:0d:43:fa:e2: 5e:a8:0b:b9:27:14:c1:1c:59:10:3f:12:f3:e4:87:d1:ee:98: a1:5e:84:c2:ff:6e:ad:ca:47:0d:0a:4e:39:49:c8:00:92:86: 01:1a:78:40:d8:a7:f7:50:3d:94:e0:a9:98:be:ab:21:ca:f1: 4c:04:5e:50:f3:27:0a:75:6a:64:a8:dc:7a:93:ee:5d:95:30: cc:9f:79:ee:15:68:6b:78:b1:95:2a:28:25:b4:b9:94:94:f3: 9d:c1:74:c7:61:65:cc:54:a0:06:c1:08:6e:45:b8:91:63:b6: 2a:bb:a2:71:b8:85:38:27:70:7d:7c:79:8a:d2:7e:f7:43:34: 3a:7e:c1:3e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87daWB7jK3VZJmiMpDouBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MzhiYjBjMmI0MWVmYThjM2IwMjA2NGViYzUyZmJhOTJj MjM2MjYwHhcNMjYwMTAyMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGY1NzEwZGNmZGE2NGZiN2NhNzY4NDNmOWY0MzkxMThkZGU5MzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmhA9hrY5dJplmnGrVZRmIaG2p/x pRjNgGhV8GcPRRheNoTxP0/6cE+APF7JzR9KF5VuiXbytXaadDKeNn1erlhtpmYR uKYdJevEJOeWLfAQz7gy8T1+QmUAHzoUs++le1L4P6zIxf7RSwCNf8uRYDa6Sx93 kK7pi+a0Y+7EZQf6KKwn0U9H+NPHkwgJKRDyD59HFQf9mt0qwVxchvZEE4NLJlDV qHzp9RuOZoL/9nW/nuTIdHCgYfzsT2FWGLQVI4nWHTT6YxvpBf3dlavMNOOBai0o d/52EpOBSDZYV73yi0rxmA0uchxbfnyghBR0NGJLBE5cCiRILieg5f7EmQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAj1cQ3P2mT7fKdoQ/n0ORGN3pOcMB8GA1UdIwQY MBaAFKU4uwwrQe+ow7AgZOvFL7qSwjYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFRpN0RDdEI3NmpEc0NCazY4VXZ1cExDTmlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZWJhNWMtZTlkOS00ZTkxLWJhYmMt NjcyODJkNzEzOGEwLzEvQ1BWeERjX2FaUHQ4cDJoRC1mUTVFWTNlazV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jZWJhNWMtZTlkOS00ZTkxLWJhYmMtNjcyODJkNzEzOGEw LzEvcFRpN0RDdEI3NmpEc0NCazY4VXZ1cExDTmlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufvsMA0E AgACMAcDBQMqDB7AMA0GCSqGSIb3DQEBCwUAA4IBAQBHtg0bWHJRYiOtEbvyaT5/ wQuV/jvzJkBgltXatjPj1Q1kck+7YCx3sy6hbWJdjKZ13s4OXCykuKUzKkRkzyk4 nePUc7pwrN8O5gQza1k2MEm52A6U/5cTaUCXyCQoON9xD6DycM3u/+cXuom6B3uM KtKnEidR/MQMJw1D+uJeqAu5JxTBHFkQPxLz5IfR7pihXoTC/26tykcNCk45ScgA koYBGnhA2Kf3UD2U4KmYvqshyvFMBF5Q8ycKdWpkqNx6k+5dlTDMn3nuFWhreLGV KigltLmUlPOdwXTHYWXMVKAGwQhuRbiRY7Yqu6JxuIU4J3B9fHmK0n73QzQ6fsE+ -----END CERTIFICATE-----Generated at Tue Feb 10 03:57:23 2026 by rpki-client