This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/cuP-bCZeFrV9kTmJnmKD5EbUeso.roa File: cuP-bCZeFrV9kTmJnmKD5EbUeso.roa (raw, json) Hash identifier: k1pZ8QNEfHSpeH3z2ped2bgTzeQQUlHYjTHorbIcTsE= Subject key identifier: 72:E3:FE:6C:26:5E:16:B5:7D:91:39:89:9E:62:83:E4:46:D4:7A:CA Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef Certificate serial: 019B76EADDB20188D70A937FA1F9BF848CB2 Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/cuP-bCZeFrV9kTmJnmKD5EbUeso.roa Signing time: Thu 01 Jan 2026 00:17:42 +0000 ROA not before: Thu 01 Jan 2026 00:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60134 IP address blocks: 2.57.2.0/24 maxlen: 24 193.30.129.0/24 maxlen: 24 213.232.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:dd:b2:01:88:d7:0a:93:7f:a1:f9:bf:84:8c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef Validity Not Before: Jan 1 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72e3fe6c265e16b57d9139899e6283e446d47aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:d8:14:cc:9b:47:4f:e1:0e:82:a9:5a:f5: 17:c9:76:6b:f1:bb:4d:28:b1:4c:60:43:4e:ce:99: 33:cd:58:b3:d7:ae:b3:bb:20:47:ff:fc:d7:b4:21: bc:c9:a5:66:0f:41:d2:fb:ab:a0:0b:b4:70:ef:26: 91:6e:31:03:87:02:9f:c8:85:a4:f7:ed:95:8c:0a: 71:54:7a:33:19:52:cd:22:25:33:78:b1:23:4a:66: cb:d7:6a:75:47:76:00:28:63:9f:1b:c0:8c:d9:cb: 23:08:e4:a0:ae:a2:f0:c4:4e:f4:32:10:4d:d8:d1: 91:28:5b:ce:ae:0f:3e:bf:f4:92:35:e8:2a:6b:c8: 7c:1d:4b:00:7f:e5:40:1b:0e:ff:fe:8c:67:98:e9: 0b:04:70:b8:7a:f6:68:5c:00:a6:14:b8:1e:ba:8b: 9d:9e:b8:58:f9:8c:38:7c:a7:ee:19:24:10:59:bb: 55:a5:b9:f0:a0:f5:4c:e5:ce:23:50:44:9d:09:c6: a7:27:b2:7c:25:4d:4c:ba:d3:10:e9:60:ce:02:9f: 16:37:2a:28:f8:7a:9f:e4:ae:02:55:e5:02:5c:52: 15:e1:7c:36:34:05:78:08:85:ef:ca:50:85:48:c7: 32:09:e9:19:63:8b:9b:a1:1d:f6:fe:74:89:36:f3: 26:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E3:FE:6C:26:5E:16:B5:7D:91:39:89:9E:62:83:E4:46:D4:7A:CA X509v3 Authority Key Identifier: keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/cuP-bCZeFrV9kTmJnmKD5EbUeso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.2.0/24 193.30.129.0/24 213.232.248.0/24 Signature Algorithm: sha256WithRSAEncryption 27:5e:3d:64:bc:d8:a1:44:e1:71:c8:58:be:71:50:9f:bd:c3: 52:e6:84:1c:70:ef:d1:a4:9a:58:18:dd:66:3c:ab:e5:97:48: 6c:7c:44:c4:f9:9d:29:88:a8:db:07:ed:81:18:58:63:23:af: 1d:bc:35:70:f1:20:74:23:8a:be:1a:72:2e:18:a5:ef:13:13: 52:2b:e1:92:e1:1c:4b:81:51:eb:49:2c:89:61:a9:39:99:b3: 35:db:75:fd:6f:9a:81:83:da:3f:1c:40:b4:2b:92:6f:3c:ac: c0:cd:20:e7:83:9e:c3:da:d6:c3:55:8f:17:a4:2e:64:ed:8c: 46:85:65:4b:20:a4:70:0d:e5:c4:ec:6e:e8:48:95:99:f7:d7: 6f:b0:53:fa:09:0a:96:bc:f0:32:45:01:b3:09:75:da:d7:18: 2d:01:1a:66:4c:d9:1d:41:75:36:f8:81:f6:79:f8:e9:99:25: 9c:f3:c2:9e:43:39:78:84:c5:cf:5e:3b:fb:56:3a:02:eb:f7: 86:73:aa:68:a8:92:16:fc:83:38:64:6a:dd:02:54:d0:a8:bd: 8b:e8:6c:78:1f:82:df:90:2c:cd:12:7f:91:c3:1c:55:0d:75: c1:ad:d6:9d:7d:a4:49:19:49:36:d6:9b:7f:36:fc:9e:73:79: ad:23:c2:92 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt26t2yAYjXCpN/ofm/hIyyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDNhNTE1NjgzZTlkZGI4NWQzOGU3YWIzOWMzM2FlZGFj YWY3ZWYwHhcNMjYwMTAxMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmUzZmU2YzI2NWUxNmI1N2Q5MTM5ODk5ZTYyODNlNDQ2ZDQ3YWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdvYFMybR0/hDoKpWvUXyXZr8btN KLFMYENOzpkzzViz166zuyBH//zXtCG8yaVmD0HS+6ugC7Rw7yaRbjEDhwKfyIWk 9+2VjApxVHozGVLNIiUzeLEjSmbL12p1R3YAKGOfG8CM2csjCOSgrqLwxE70MhBN 2NGRKFvOrg8+v/SSNegqa8h8HUsAf+VAGw7//oxnmOkLBHC4evZoXACmFLgeuoud nrhY+Yw4fKfuGSQQWbtVpbnwoPVM5c4jUESdCcanJ7J8JU1MutMQ6WDOAp8WNyoo +Hqf5K4CVeUCXFIV4Xw2NAV4CIXvylCFSMcyCekZY4uboR32/nSJNvMm2wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHLj/mwmXha1fZE5iZ5ig+RG1HrKMB8GA1UdIwQY MBaAFAjTpRVoPp3bhdOOerOcM67ayvfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAt MGI1YzVkOTQ0MjZhLzEvY3VQLWJDWmVGclY5a1RtSm5tS0Q1RWJVZXNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAtMGI1YzVkOTQ0MjZh LzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAAjkCAwQA wR6BAwQA1ej4MA0GCSqGSIb3DQEBCwUAA4IBAQAnXj1kvNihROFxyFi+cVCfvcNS 5oQccO/RpJpYGN1mPKvll0hsfETE+Z0piKjbB+2BGFhjI68dvDVw8SB0I4q+GnIu GKXvExNSK+GS4RxLgVHrSSyJYak5mbM123X9b5qBg9o/HEC0K5JvPKzAzSDng57D 2tbDVY8XpC5k7YxGhWVLIKRwDeXE7G7oSJWZ99dvsFP6CQqWvPAyRQGzCXXa1xgt ARpmTNkdQXU2+IH2efjpmSWc88KeQzl4hMXPXjv7VjoC6/eGc6poqJIW/IM4ZGrd AlTQqL2L6Gx4H4LfkCzNEn+RwxxVDXXBrdadfaRJGUk21pt/Nvyec3mtI8KS -----END CERTIFICATE-----Generated at Mon Feb 9 20:08:59 2026 by rpki-client