This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/cDZ-T1uCkKkDMyQBSoSCjcJu_Hw.roa File: cDZ-T1uCkKkDMyQBSoSCjcJu_Hw.roa (raw, json) Hash identifier: TXdJo9SAFs18FvWIuL5Nrv0j2DbGYy6e/eSFbxFS5Eg= Subject key identifier: 70:36:7E:4F:5B:82:90:A9:03:33:24:01:4A:84:82:8D:C2:6E:FC:7C Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83A677E712DB34E4668CE8119B3300 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/cDZ-T1uCkKkDMyQBSoSCjcJu_Hw.roa Signing time: Fri 02 Jan 2026 16:21:32 +0000 ROA not before: Fri 02 Jan 2026 16:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60062 IP address blocks: 37.230.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:a6:77:e7:12:db:34:e4:66:8c:e8:11:9b:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70367e4f5b8290a9033324014a84828dc26efc7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:9f:b3:b5:d2:ee:2c:a9:a4:11:27:41:ad: bd:fa:37:5d:4b:a0:78:ea:53:c8:3d:83:82:c3:b7: fd:a8:ba:ae:91:9c:7c:e6:7b:cc:32:b1:bb:94:95: 1e:ef:98:7a:14:f8:3d:30:83:b6:53:57:75:83:40: e9:22:f8:a3:c5:0a:ed:82:bf:98:2d:09:78:b1:5b: 5a:3b:73:a6:59:58:4f:97:3b:c8:83:27:f2:40:0e: 49:e6:02:50:e1:d5:58:47:89:2e:ef:ad:5e:d8:f1: e0:c4:6c:68:b8:cd:6a:db:66:35:07:34:6e:32:61: de:90:bb:dd:a1:28:6d:69:a5:53:8a:e1:41:80:81: ab:60:71:ca:cd:4d:9f:12:c4:c8:50:dd:1e:b0:eb: 2a:6b:ad:6f:01:6d:2b:00:0e:48:b8:19:13:42:bc: 02:5d:b9:1e:2c:ea:d8:55:c8:41:98:35:5b:c0:97: af:e8:9e:0b:36:0f:63:d4:6c:97:2c:a3:96:98:89: ca:11:29:26:84:fd:3b:f6:df:83:34:87:b5:72:7f: 65:d9:6e:88:84:0d:f2:90:a3:e9:eb:f4:e0:02:11: e7:25:82:ec:2a:88:49:f0:42:bf:b7:01:01:4d:6c: ae:fd:d7:71:64:1e:68:a6:2c:3a:b6:39:02:51:c0: af:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:36:7E:4F:5B:82:90:A9:03:33:24:01:4A:84:82:8D:C2:6E:FC:7C X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/cDZ-T1uCkKkDMyQBSoSCjcJu_Hw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.160.0/24 Signature Algorithm: sha256WithRSAEncryption c2:1c:3e:5e:5e:09:d9:83:ba:da:4b:cc:b0:6b:06:3c:a3:4f: eb:32:c7:6c:a2:08:e7:cc:cf:0e:2d:21:bc:68:49:65:6d:e8: 10:01:23:74:26:a5:90:b8:86:19:33:ae:72:5b:19:48:b4:cf: df:1f:78:d2:43:4c:60:e1:47:d0:db:41:41:d8:f5:87:1d:d4: b2:e8:97:a9:f2:1a:02:fd:4b:05:3b:b1:d9:88:bc:28:e6:2e: 5e:db:dc:14:42:f9:da:8e:a9:60:08:07:59:b1:11:71:28:4f: 38:88:c7:a3:59:6d:48:71:87:57:88:91:fd:90:69:40:83:c3: fe:9a:25:48:30:aa:5c:9b:16:3a:54:ca:8b:3b:2a:39:97:c6: ac:52:9b:dc:75:29:96:81:f3:e7:7f:7e:31:dc:e2:a0:61:e5: e1:a9:19:34:1b:cb:85:53:6d:a3:5c:ea:c3:56:75:28:14:77: 52:9e:84:ec:12:c2:eb:13:fc:06:ac:52:c3:63:e2:71:0e:7c: da:46:32:53:c2:65:b6:ef:31:3a:39:3d:3c:0a:1c:97:fa:2e: 18:27:62:e4:b6:8d:ac:96:f9:1e:c5:00:99:f5:a6:17:ef:87: 11:5c:b0:80:b8:2d:c0:a8:c8:ad:6c:71:91:b7:57:f3:c1:80: d9:1a:7c:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g6Z35xLbNORmjOgRmzMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDM2N2U0ZjViODI5MGE5MDMzMzI0MDE0YTg0ODI4ZGMyNmVmYzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbyfs7XS7iyppBEnQa29+jddS6B4 6lPIPYOCw7f9qLqukZx85nvMMrG7lJUe75h6FPg9MIO2U1d1g0DpIvijxQrtgr+Y LQl4sVtaO3OmWVhPlzvIgyfyQA5J5gJQ4dVYR4ku761e2PHgxGxouM1q22Y1BzRu MmHekLvdoShtaaVTiuFBgIGrYHHKzU2fEsTIUN0esOsqa61vAW0rAA5IuBkTQrwC XbkeLOrYVchBmDVbwJev6J4LNg9j1GyXLKOWmInKESkmhP079t+DNIe1cn9l2W6I hA3ykKPp6/TgAhHnJYLsKohJ8EK/twEBTWyu/ddxZB5opiw6tjkCUcCvIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHA2fk9bgpCpAzMkAUqEgo3Cbvx8MB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvY0RaLVQxdUNrS2tETXlRQlNvU0NqY0p1X0h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeagMA0G CSqGSIb3DQEBCwUAA4IBAQDCHD5eXgnZg7raS8ywawY8o0/rMsdsogjnzM8OLSG8 aEllbegQASN0JqWQuIYZM65yWxlItM/fH3jSQ0xg4UfQ20FB2PWHHdSy6Jep8hoC /UsFO7HZiLwo5i5e29wUQvnajqlgCAdZsRFxKE84iMejWW1IcYdXiJH9kGlAg8P+ miVIMKpcmxY6VMqLOyo5l8asUpvcdSmWgfPnf34x3OKgYeXhqRk0G8uFU22jXOrD VnUoFHdSnoTsEsLrE/wGrFLDY+JxDnzaRjJTwmW27zE6OT08ChyX+i4YJ2Lkto2s lvkexQCZ9aYX74cRXLCAuC3AqMitbHGRt1fzwYDZGnwX -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:25 2026 by rpki-client