This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/CVESS1wyEds4BHAfnSulEoVDL6w.roa File: CVESS1wyEds4BHAfnSulEoVDL6w.roa (raw, json) Hash identifier: hDPJ5GteWfUiIqOYYRTQikgoZpNgyrm+JUUXa3SL4+k= Subject key identifier: 09:51:12:4B:5C:32:11:DB:38:04:70:1F:9D:2B:A5:12:85:43:2F:AC Certificate issuer: /CN=4225b570f46de5c6e8b2b64ed090ad1385dab731 Certificate serial: 019B7C135F76436D8EC1AD5D85234C106B94 Authority key identifier: 42:25:B5:70:F4:6D:E5:C6:E8:B2:B6:4E:D0:90:AD:13:85:DA:B7:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/CVESS1wyEds4BHAfnSulEoVDL6w.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60377 IP address blocks: 45.13.4.0/22 maxlen: 22 45.13.5.0/24 maxlen: 24 145.40.128.0/18 maxlen: 18 2a0e:cb00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5f:76:43:6d:8e:c1:ad:5d:85:23:4c:10:6b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4225b570f46de5c6e8b2b64ed090ad1385dab731 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0951124b5c3211db3804701f9d2ba51285432fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f9:de:9f:82:be:ca:25:9c:87:9c:ac:5e:c2: 89:94:16:e9:95:63:d5:5e:9f:d3:7e:4d:ba:c2:2a: 7d:ec:a6:a8:53:b2:7d:32:7e:32:06:76:6a:61:df: de:7a:0f:fd:9e:9a:ff:4e:9d:2d:44:7a:77:30:d7: 62:8a:de:91:b9:01:22:3f:5e:2b:97:96:bc:d7:ca: 00:b6:56:40:94:b1:39:60:07:77:e4:7f:69:f1:d9: 95:a6:55:cf:38:51:89:4c:e4:ec:ff:0f:34:e0:f2: 90:35:93:fe:4a:e4:78:4e:8e:e4:ef:b0:16:f2:58: 3e:0d:a5:49:ce:b5:0c:c3:0c:4d:c8:f0:20:a3:f4: d8:3d:1e:29:04:7e:bf:be:4c:72:46:55:fe:87:cc: e2:d2:11:93:e2:75:e1:68:1b:29:7b:8c:2d:7a:1c: f5:7e:8c:0a:eb:3a:6a:5b:c7:73:db:e1:6c:15:74: 7a:fb:7b:5d:2b:88:a9:04:29:19:88:a7:ef:7e:e6: 80:86:74:e4:6a:e1:a2:79:fd:64:3f:79:78:1e:96: ad:0c:20:a9:48:97:61:89:c2:83:ff:95:9a:a2:2c: d8:5a:d0:11:3b:19:3b:c2:c2:a6:ea:ee:d3:53:4e: a4:37:11:54:16:98:c3:ab:5d:7a:ec:66:b4:01:4e: f5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:51:12:4B:5C:32:11:DB:38:04:70:1F:9D:2B:A5:12:85:43:2F:AC X509v3 Authority Key Identifier: keyid:42:25:B5:70:F4:6D:E5:C6:E8:B2:B6:4E:D0:90:AD:13:85:DA:B7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/CVESS1wyEds4BHAfnSulEoVDL6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.4.0/22 145.40.128.0/18 IPv6: 2a0e:cb00::/29 Signature Algorithm: sha256WithRSAEncryption 15:f2:73:24:ab:fd:66:72:05:e7:ba:e6:71:6a:37:50:3d:59: 12:a0:3c:aa:5a:75:87:b6:3e:c5:71:aa:2e:9f:32:7c:be:5d: 43:42:21:25:a9:ec:40:76:22:d6:0e:7d:9d:c7:46:d1:49:4d: f7:83:bd:44:b5:e2:79:65:7d:6b:b2:f9:b0:69:7b:2a:46:cd: 1a:0e:12:82:71:fb:2a:ea:a7:bd:3b:22:55:bc:12:d0:28:41: 3b:ea:2c:ce:31:a1:b7:1d:00:67:3a:06:f8:58:c2:fa:62:f1: 06:6b:08:08:55:39:f5:44:0a:99:5e:f3:37:d5:6d:33:e7:e6: 30:b9:1a:b6:e8:69:b1:27:88:0f:12:11:47:d3:9f:a1:a0:f4: e5:d6:8f:68:f9:94:d3:c2:ce:21:e3:d4:5a:20:c4:cc:a9:0f: 53:41:e3:7a:6d:18:f3:8b:d8:d1:aa:f6:a2:ad:ab:3f:d7:21: 77:75:ee:aa:c6:70:e2:c7:12:c2:7e:12:3d:ea:18:78:d3:15: 94:fd:82:34:d3:0e:7b:b5:b0:b0:23:3a:76:73:9c:6e:8b:3c: 6a:ab:fe:78:39:17:93:96:d5:ea:54:6f:78:bd:83:de:66:25: ce:83:23:88:c6:a4:6b:3a:4c:1a:5b:fd:60:9e:13:f8:d6:c3: dc:ca:9a:73 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8E192Q22Owa1dhSNMEGuUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMjViNTcwZjQ2ZGU1YzZlOGIyYjY0ZWQwOTBhZDEzODVk YWI3MzEwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTUxMTI0YjVjMzIxMWRiMzgwNDcwMWY5ZDJiYTUxMjg1NDMyZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fnen4K+yiWch5ysXsKJlBbplWPV Xp/Tfk26wip97KaoU7J9Mn4yBnZqYd/eeg/9npr/Tp0tRHp3MNdiit6RuQEiP14r l5a818oAtlZAlLE5YAd35H9p8dmVplXPOFGJTOTs/w804PKQNZP+SuR4To7k77AW 8lg+DaVJzrUMwwxNyPAgo/TYPR4pBH6/vkxyRlX+h8zi0hGT4nXhaBspe4wtehz1 fowK6zpqW8dz2+FsFXR6+3tdK4ipBCkZiKfvfuaAhnTkauGief1kP3l4HpatDCCp SJdhicKD/5WaoizYWtAROxk7wsKm6u7TU06kNxFUFpjDq1167Ga0AU71cwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAlREktcMhHbOARwH50rpRKFQy+sMB8GA1UdIwQY MBaAFEIltXD0beXG6LK2TtCQrROF2rcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWlXMWNQUnQ1Y2Jvc3JaTzBKQ3RFNFhhdHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jMzRjOTktMThjOC00MWEyLTg3NGIt MzkwYjg1Mzk0YmViLzEvQ1ZFU1Mxd3lFZHM0QkhBZm5TdWxFb1ZETDZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9jMzRjOTktMThjOC00MWEyLTg3NGItMzkwYjg1Mzk0YmVi LzEvUWlXMWNQUnQ1Y2Jvc3JaTzBKQ3RFNFhhdHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLQ0EAwQG kSiAMA0EAgACMAcDBQMqDssAMA0GCSqGSIb3DQEBCwUAA4IBAQAV8nMkq/1mcgXn uuZxajdQPVkSoDyqWnWHtj7FcaounzJ8vl1DQiElqexAdiLWDn2dx0bRSU33g71E teJ5ZX1rsvmwaXsqRs0aDhKCcfsq6qe9OyJVvBLQKEE76izOMaG3HQBnOgb4WML6 YvEGawgIVTn1RAqZXvM31W0z5+YwuRq26GmxJ4gPEhFH05+hoPTl1o9o+ZTTws4h 49RaIMTMqQ9TQeN6bRjzi9jRqvairas/1yF3de6qxnDixxLCfhI96hh40xWU/YI0 0w57tbCwIzp2c5xuizxqq/54OReTltXqVG94vYPeZiXOgyOIxqRrOkwaW/1gnhP4 1sPcyppz -----END CERTIFICATE-----Generated at Tue Jan 27 09:55:30 2026 by rpki-client