This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cCNpV45avSFLyCVAF239LgxMJOs.roa File: cCNpV45avSFLyCVAF239LgxMJOs.roa (raw, json) Hash identifier: kf4rn0wNlgm36xiVqJ57sVl9nlXgJLOB9HTj+6//hys= Subject key identifier: 70:23:69:57:8E:5A:BD:21:4B:C8:25:40:17:6D:FD:2E:0C:4C:24:EB Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AA6453A1E49847E0C61D403BCE799 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cCNpV45avSFLyCVAF239LgxMJOs.roa Signing time: Thu 01 Jan 2026 16:18:39 +0000 ROA not before: Thu 01 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48266 IP address blocks: 81.5.191.0/24 maxlen: 24 82.152.177.0/24 maxlen: 24 82.153.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a6:45:3a:1e:49:84:7e:0c:61:d4:03:bc:e7:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=702369578e5abd214bc82540176dfd2e0c4c24eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d9:77:39:fa:76:94:4d:b1:52:19:55:04:ca: f7:8f:7a:32:f4:a3:63:54:bf:a8:3e:c4:78:4f:11: 1b:a3:9c:b7:50:dd:d6:f2:50:27:e5:34:6a:32:c0: 69:ba:52:6a:95:2b:f7:cf:d8:dc:1f:ac:42:45:ae: cc:a4:30:f9:dc:ec:d8:e2:e3:f4:80:60:d4:3f:e4: 81:ee:3a:94:28:c1:b8:3a:9e:f4:4a:c0:8c:fd:01: 61:26:56:25:ae:04:c6:b2:f6:f1:7c:55:be:5f:6e: 8f:32:9c:b4:82:66:71:a0:e4:0b:69:13:a8:ad:9c: 00:b6:86:70:2f:86:fd:7f:75:b9:2a:8a:98:a4:c6: 12:cd:40:49:a4:c2:4c:bc:f6:e2:6d:9a:aa:5e:3f: 1b:42:87:60:62:11:46:de:88:14:15:27:1a:53:33: 4f:35:dd:5c:05:64:ba:6c:ae:a8:5e:cf:16:81:ed: 7a:ae:b4:00:b0:fa:aa:81:ac:0e:62:9e:be:5b:9a: 8e:54:9b:5a:26:96:02:f9:e1:a8:02:f6:36:e2:dd: 1e:f0:c3:75:a1:08:6b:b1:f7:d7:a4:86:57:c5:4c: db:c5:c5:9c:5b:94:71:74:21:07:72:2d:ed:a9:b5: 3f:c4:bc:95:03:ac:35:2e:45:6f:d0:f4:2a:ad:cc: 35:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:23:69:57:8E:5A:BD:21:4B:C8:25:40:17:6D:FD:2E:0C:4C:24:EB X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/cCNpV45avSFLyCVAF239LgxMJOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.5.191.0/24 82.152.177.0/24 82.153.69.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:9f:6f:f1:04:93:2e:ba:f2:1e:b5:1c:b9:28:51:6f:8a:86: 09:31:ee:d5:64:c2:35:97:e7:93:38:50:7e:8a:84:f2:e4:e7: dd:f7:8a:19:38:24:41:b1:f7:ea:ad:20:0f:c5:09:6d:eb:7b: f7:3c:12:e2:86:ff:70:9a:fc:67:7c:41:6a:de:d3:c7:32:9e: 99:00:64:7e:18:15:08:94:a8:8a:ea:1f:c9:d4:f5:12:20:bf: 2c:2e:a9:7d:ce:a8:9e:a9:d9:db:81:f2:23:73:4a:88:d5:50: 4e:d8:19:a8:e6:b5:b6:24:66:e8:08:d4:44:eb:7f:10:76:28: dc:ec:28:b4:a9:b2:0b:d5:cc:08:72:a3:9f:0e:6b:c9:4c:6e: 16:f7:1c:32:9a:a5:23:c6:37:88:6a:8e:d1:11:1c:ec:6f:fc: a2:cc:80:32:29:da:c5:28:79:7e:88:be:c6:45:c7:78:7d:45: b2:20:97:b4:70:b7:dc:82:48:e3:5a:30:1b:96:be:3c:cc:9d: 1f:ed:02:80:3b:ad:1d:cf:f0:18:50:49:30:76:21:36:71:9e: 6a:d7:1f:42:63:51:da:ad:43:35:62:64:39:87:94:32:d7:53: fa:da:88:bd:66:7c:fe:ca:06:ff:62:1d:b7:45:7b:cd:c5:fa: 7a:69:74:9e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6WqZFOh5JhH4MYdQDvOeZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDIzNjk1NzhlNWFiZDIxNGJjODI1NDAxNzZkZmQyZTBjNGMyNGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9l3Ofp2lE2xUhlVBMr3j3oy9KNj VL+oPsR4TxEbo5y3UN3W8lAn5TRqMsBpulJqlSv3z9jcH6xCRa7MpDD53OzY4uP0 gGDUP+SB7jqUKMG4Op70SsCM/QFhJlYlrgTGsvbxfFW+X26PMpy0gmZxoOQLaROo rZwAtoZwL4b9f3W5KoqYpMYSzUBJpMJMvPbibZqqXj8bQodgYhFG3ogUFScaUzNP Nd1cBWS6bK6oXs8Wge16rrQAsPqqgawOYp6+W5qOVJtaJpYC+eGoAvY24t0e8MN1 oQhrsffXpIZXxUzbxcWcW5RxdCEHci3tqbU/xLyVA6w1LkVv0PQqrcw1oQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHAjaVeOWr0hS8glQBdt/S4MTCTrMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvY0NOcFY0NWF2U0ZMeUNWQUYyMzlMZ3hNSk9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUQW/AwQA UpixAwQAUplFMA0GCSqGSIb3DQEBCwUAA4IBAQBNn2/xBJMuuvIetRy5KFFvioYJ Me7VZMI1l+eTOFB+ioTy5Ofd94oZOCRBsffqrSAPxQlt63v3PBLihv9wmvxnfEFq 3tPHMp6ZAGR+GBUIlKiK6h/J1PUSIL8sLql9zqieqdnbgfIjc0qI1VBO2Bmo5rW2 JGboCNRE638Qdijc7Ci0qbIL1cwIcqOfDmvJTG4W9xwymqUjxjeIao7RERzsb/yi zIAyKdrFKHl+iL7GRcd4fUWyIJe0cLfcgkjjWjAblr48zJ0f7QKAO60dz/AYUEkw diE2cZ5q1x9CY1HarUM1YmQ5h5Qy11P62oi9Znz+ygb/Yh23RXvNxfp6aXSe -----END CERTIFICATE-----Generated at Wed Jan 21 04:21:26 2026 by rpki-client