This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/cPX1K7h-wlaCr7zmE40f44WojxI.roa File: cPX1K7h-wlaCr7zmE40f44WojxI.roa (raw, json) Hash identifier: Q/KPZCaK+pTYPECUWe3LbMeOLvb3gqHt7TrGMiKZCx4= Subject key identifier: 70:F5:F5:2B:B8:7E:C2:56:82:AF:BC:E6:13:8D:1F:E3:85:A8:8F:12 Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1 Certificate serial: 019B7BA518CC39856917B4D9C013102533BF Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/cPX1K7h-wlaCr7zmE40f44WojxI.roa Signing time: Thu 01 Jan 2026 22:19:35 +0000 ROA not before: Thu 01 Jan 2026 22:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211660 IP address blocks: 185.1.201.0/24 maxlen: 24 2001:7f8:10d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:18:cc:39:85:69:17:b4:d9:c0:13:10:25:33:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1 Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70f5f52bb87ec25682afbce6138d1fe385a88f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:77:c1:d4:15:51:b2:b4:8c:67:6a:28:12:47: b5:77:cd:2a:eb:8c:d7:36:30:10:90:24:1e:de:07: 9d:d1:24:e2:54:a8:6a:3b:f1:1b:d2:1d:07:71:f7: 20:b5:5c:08:af:0c:a6:9b:5b:de:47:34:28:96:f5: 62:d3:64:a8:44:b5:f8:79:e1:02:a0:86:ea:90:fd: 3c:39:12:60:4b:fd:cf:7f:97:fc:7a:bc:20:af:5f: e7:19:23:42:f0:05:45:e2:9e:37:fc:23:74:2b:24: a4:ef:e4:e8:cc:53:bb:27:75:39:50:7b:e3:b4:81: 9b:7c:8b:e5:da:2a:11:38:b1:ac:c6:56:f5:ba:58: f0:05:d3:e5:e3:d9:37:5a:ac:f3:51:28:87:9d:82: 66:b9:98:48:4d:93:e9:50:fe:bc:55:00:cc:82:6d: b3:cc:ae:5b:7f:28:0b:35:87:2c:0a:34:a3:31:32: 2d:5e:84:5c:ee:5f:cc:d9:43:e6:22:e9:55:95:7a: da:6a:f5:a1:68:6c:73:d7:70:48:05:db:a2:aa:12: 80:20:aa:2e:cc:13:a4:69:e0:15:26:7c:df:aa:35: 94:29:2a:3a:33:4a:69:14:ec:12:6d:07:dc:8c:34: cc:2d:bd:fc:30:c6:7b:3e:00:38:77:cf:79:36:61: 56:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F5:F5:2B:B8:7E:C2:56:82:AF:BC:E6:13:8D:1F:E3:85:A8:8F:12 X509v3 Authority Key Identifier: keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/cPX1K7h-wlaCr7zmE40f44WojxI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.201.0/24 IPv6: 2001:7f8:10d::/48 Signature Algorithm: sha256WithRSAEncryption 74:4e:e2:41:9c:49:14:3b:5e:63:f0:84:a5:a4:34:2d:46:72: 3d:4c:51:06:30:a6:dc:5c:5b:d0:eb:fa:73:40:26:be:dd:7d: 67:5f:93:76:ac:db:46:7f:71:ed:ff:b3:af:3c:81:89:f6:d2: 3d:fa:8f:64:a5:2d:d8:65:63:3c:70:37:4d:ce:9b:56:1c:72: 31:e2:57:37:6b:ae:3c:18:73:a7:45:83:1f:70:7a:b2:46:75: a5:d4:9b:c4:c4:80:61:76:9b:0b:ce:18:04:7e:84:70:e4:22: 27:3d:b5:de:67:0a:86:7f:19:36:53:ca:74:9b:58:97:99:d3: 23:e1:8f:18:b2:e5:42:11:90:7b:2f:76:cf:f6:ab:86:de:67: 6d:51:fc:a5:74:c4:9b:a4:e3:d1:1e:58:93:59:fd:7e:63:04: da:8f:04:6b:a2:00:3d:d2:99:8c:75:31:53:6d:c2:da:31:dd: 63:87:80:5c:56:70:a7:27:aa:79:2d:3a:0a:3b:c8:c0:e5:5b: cf:0f:4a:c0:ed:51:f1:4e:86:46:a7:9c:5f:3d:dd:e4:35:91: c3:5b:e0:a6:29:dd:ca:ca:3f:82:1f:1f:4e:72:aa:c1:19:c7: 80:ad:0b:7f:9b:c1:ae:0d:5f:b2:cd:66:65:04:dd:c3:4d:0b: a6:40:4e:ac -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pRjMOYVpF7TZwBMQJTO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YTk2OGVkYjcyYzE1ZjVmOTU2N2ZkMzQyNjdiODc0ODVl ZjM2ZDEwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGY1ZjUyYmI4N2VjMjU2ODJhZmJjZTYxMzhkMWZlMzg1YTg4ZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXfB1BVRsrSMZ2ooEke1d80q64zX NjAQkCQe3ged0STiVKhqO/Eb0h0HcfcgtVwIrwymm1veRzQolvVi02SoRLX4eeEC oIbqkP08ORJgS/3Pf5f8erwgr1/nGSNC8AVF4p43/CN0KySk7+TozFO7J3U5UHvj tIGbfIvl2ioROLGsxlb1uljwBdPl49k3WqzzUSiHnYJmuZhITZPpUP68VQDMgm2z zK5bfygLNYcsCjSjMTItXoRc7l/M2UPmIulVlXraavWhaGxz13BIBduiqhKAIKou zBOkaeAVJnzfqjWUKSo6M0ppFOwSbQfcjDTMLb38MMZ7PgA4d895NmFWuQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHD19Su4fsJWgq+85hONH+OFqI8SMB8GA1UdIwQY MBaAFMWpaO23LBX1+VZ/00JnuHSF7zbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMt YjJjMGRmYThhMGUxLzEvY1BYMUs3aC13bGFDcjd6bUU0MGY0NFdvanhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMtYjJjMGRmYThhMGUx LzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQHJMA8E AgACMAkDBwAgAQf4AQ0wDQYJKoZIhvcNAQELBQADggEBAHRO4kGcSRQ7XmPwhKWk NC1Gcj1MUQYwptxcW9Dr+nNAJr7dfWdfk3as20Z/ce3/s688gYn20j36j2SlLdhl YzxwN03Om1YccjHiVzdrrjwYc6dFgx9werJGdaXUm8TEgGF2mwvOGAR+hHDkIic9 td5nCoZ/GTZTynSbWJeZ0yPhjxiy5UIRkHsvds/2q4beZ21R/KV0xJuk49EeWJNZ /X5jBNqPBGuiAD3SmYx1MVNtwtox3WOHgFxWcKcnqnktOgo7yMDlW88PSsDtUfFO hkannF893eQ1kcNb4KYp3crKP4IfH05yqsEZx4CtC3+bwa4NX7LNZmUE3cNNC6ZA Tqw= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:17 2026 by rpki-client