This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/cLvxrkkyUYgMpaai3Fsxuqy0m0Y.roa File: cLvxrkkyUYgMpaai3Fsxuqy0m0Y.roa (raw, json) Hash identifier: syKnvPS7DRThyoysE7TOjvIhTQSg7bMij5xdInvN0jo= Subject key identifier: 70:BB:F1:AE:49:32:51:88:0C:A5:A6:A2:DC:5B:31:BA:AC:B4:9B:46 Certificate issuer: /CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9 Certificate serial: 019B7E3817F84820E24F757F2D44C60FEE40 Authority key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/cLvxrkkyUYgMpaai3Fsxuqy0m0Y.roa Signing time: Fri 02 Jan 2026 10:19:23 +0000 ROA not before: Fri 02 Jan 2026 10:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204760 IP address blocks: 194.56.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:17:f8:48:20:e2:4f:75:7f:2d:44:c6:0f:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9 Validity Not Before: Jan 2 10:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70bbf1ae493251880ca5a6a2dc5b31baacb49b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ae:89:b0:0d:3e:7f:8a:1d:a3:51:18:1d:c0: 15:80:78:b7:04:e6:56:44:11:c7:36:46:a1:fc:54: 9c:53:39:a5:95:e0:e4:a7:22:23:3c:0a:b3:fb:4c: ef:de:38:9e:b6:ac:72:e2:6f:5f:26:3d:e4:34:5c: 67:12:31:67:2b:7b:78:81:0e:a4:a7:02:0e:1e:ae: 44:62:ad:60:72:91:90:2d:5e:bf:a7:a8:14:a2:ab: 46:aa:c8:4b:95:92:de:16:3d:2f:9c:8a:5f:1b:4d: 8e:5d:e0:f4:40:a0:50:97:b4:44:50:04:42:a1:d0: 64:3b:23:3e:b0:3c:fa:16:04:c6:85:81:bf:50:01: da:49:bd:fc:df:e0:c9:cb:e5:8c:84:94:8e:aa:e2: c4:e3:53:d0:7f:96:fc:0f:51:79:b8:cf:5d:cb:c8: 5b:82:04:81:99:f4:04:88:b8:aa:01:d0:10:6a:43: 5e:af:f8:0c:d6:c1:30:17:de:fc:4d:b6:ab:f9:62: 6d:18:22:39:36:64:62:a9:4d:7f:a8:d7:d4:a8:cc: fc:38:09:f1:3e:f2:00:90:a2:ef:87:9c:cd:0c:e5: af:e1:b1:e8:9e:20:8d:63:f3:15:e7:12:e2:3b:6a: d7:7c:aa:4b:f3:b1:6a:1e:a4:8d:59:34:25:f6:61: 52:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BB:F1:AE:49:32:51:88:0C:A5:A6:A2:DC:5B:31:BA:AC:B4:9B:46 X509v3 Authority Key Identifier: keyid:1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/cLvxrkkyUYgMpaai3Fsxuqy0m0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.88.0/22 Signature Algorithm: sha256WithRSAEncryption 77:19:0c:79:f7:f8:d5:e4:95:ea:37:74:41:d9:a0:8b:42:f5: 3e:df:9f:1f:c8:04:ab:b6:ba:a1:6f:6d:ce:22:9a:cc:a3:5f: b0:3b:d7:70:63:d2:e6:27:b9:87:fa:b6:36:04:9a:61:22:65: fb:a9:6a:b8:4b:be:bb:03:d7:e1:97:eb:d7:45:d5:f5:21:52: 2c:98:3e:77:2e:c1:c1:79:80:ed:b6:f7:dd:82:64:a6:bf:47: d3:38:36:63:aa:8d:92:7e:44:b2:76:3e:4f:24:9c:87:7c:41: 11:0a:19:84:98:dc:d7:6b:1a:7a:35:11:bf:23:04:58:18:78: fb:17:ce:80:d6:2b:e6:25:5a:2f:c3:0f:9e:1f:11:04:1b:ae: b8:b4:66:a8:56:8e:66:26:9f:3f:3d:a2:9c:c5:ea:15:0a:5e: 94:f5:60:85:16:02:71:f3:cb:da:65:a8:ac:76:72:02:92:4b: d4:e0:8e:15:f4:58:c1:7e:b7:da:14:01:5a:f4:14:e8:90:64: 53:a5:7d:57:b4:d0:17:a1:11:08:d5:c5:0e:a1:aa:57:e8:03: 3c:ea:c2:29:70:e3:3e:62:45:fe:48:6a:e0:77:78:33:6e:90: b9:88:b6:b3:c7:0f:4e:b4:15:7e:f6:53:96:20:5e:25:5f:a6: 33:03:5c:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OBf4SCDiT3V/LUTGD+5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiY2Q5Y2QzMTYwMzk5YzFlM2M4MGNmMDc0ODY3YTcyOWY3 ZGQ0ZjkwHhcNMjYwMTAyMTAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGJiZjFhZTQ5MzI1MTg4MGNhNWE2YTJkYzViMzFiYWFjYjQ5YjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK6JsA0+f4odo1EYHcAVgHi3BOZW RBHHNkah/FScUzmlleDkpyIjPAqz+0zv3jietqxy4m9fJj3kNFxnEjFnK3t4gQ6k pwIOHq5EYq1gcpGQLV6/p6gUoqtGqshLlZLeFj0vnIpfG02OXeD0QKBQl7REUARC odBkOyM+sDz6FgTGhYG/UAHaSb383+DJy+WMhJSOquLE41PQf5b8D1F5uM9dy8hb ggSBmfQEiLiqAdAQakNer/gM1sEwF978Tbar+WJtGCI5NmRiqU1/qNfUqMz8OAnx PvIAkKLvh5zNDOWv4bHoniCNY/MV5xLiO2rXfKpL87FqHqSNWTQl9mFSSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHC78a5JMlGIDKWmotxbMbqstJtGMB8GA1UdIwQY MBaAFBvNnNMWA5nB48gM8HSGenKffdT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzgyYzB4WURtY0hqeUF6d2RJWjZjcDk5MVBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS80Mjc0NTYtNDk1Ny00ZDMzLTljNjQt MTZmNDA1N2ZhYzI2LzEvY0x2eHJra3lVWWdNcGFhaTNGc3h1cXkwbTBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS80Mjc0NTYtNDk1Ny00ZDMzLTljNjQtMTZmNDA1N2ZhYzI2 LzEvRzgyYzB4WURtY0hqeUF6d2RJWjZjcDk5MVBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjhYMA0G CSqGSIb3DQEBCwUAA4IBAQB3GQx59/jV5JXqN3RB2aCLQvU+358fyASrtrqhb23O IprMo1+wO9dwY9LmJ7mH+rY2BJphImX7qWq4S767A9fhl+vXRdX1IVIsmD53LsHB eYDttvfdgmSmv0fTODZjqo2SfkSydj5PJJyHfEERChmEmNzXaxp6NRG/IwRYGHj7 F86A1ivmJVovww+eHxEEG664tGaoVo5mJp8/PaKcxeoVCl6U9WCFFgJx88vaZais dnICkkvU4I4V9FjBfrfaFAFa9BTokGRTpX1XtNAXoREI1cUOoapX6AM86sIpcOM+ YkX+SGrgd3gzbpC5iLazxw9OtBV+9lOWIF4lX6YzA1zS -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:02 2026 by rpki-client