This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/CupzWU4aLHwacea9s2f26JgGU7w.roa File: CupzWU4aLHwacea9s2f26JgGU7w.roa (raw, json) Hash identifier: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE= Subject key identifier: 0A:EA:73:59:4E:1A:2C:7C:1A:71:E6:BD:B3:67:F6:E8:98:06:53:BC Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 019B78A337C57B64E697F49A6242E51BA42E Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/CupzWU4aLHwacea9s2f26JgGU7w.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 45.147.62.0/24 maxlen: 24 45.147.63.0/24 maxlen: 24 185.164.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:37:c5:7b:64:e6:97:f4:9a:62:42:e5:1b:a4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0aea73594e1a2c7c1a71e6bdb367f6e8980653bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b1:e6:62:95:85:2d:78:af:6b:e8:08:f8:11: ef:dd:64:77:31:8e:b2:74:2e:02:cd:6c:7a:09:7b: c5:5e:f3:f9:88:e1:13:b2:ca:06:d2:04:be:c5:01: 5e:1e:d0:d0:b1:c6:2c:96:ae:6b:06:36:a2:3e:fd: ef:d1:36:93:00:28:2f:41:97:73:f2:5e:9c:bd:8b: 2a:22:d5:d1:eb:a9:49:3a:71:49:80:e6:21:32:a7: 63:7b:22:35:74:37:fd:55:e7:e9:3b:09:57:d0:c0: 40:14:6f:43:d4:61:4a:f1:41:af:37:b5:f0:d5:97: f2:71:82:fc:8c:a3:3d:f7:04:8c:97:61:85:c8:e9: da:48:e8:6b:eb:84:98:76:a8:52:7f:9d:18:e0:e6: 18:c5:bb:f4:81:72:04:90:84:39:f3:00:6a:3a:23: 03:f7:f2:81:ea:1d:d8:b3:c7:50:97:d2:45:9f:05: 88:fc:95:99:a9:c0:4f:d3:4e:2e:e2:e1:f1:cd:b3: d5:9a:e7:44:e7:b7:1a:5f:bc:26:69:6c:d7:c1:e1: 33:99:31:5d:f4:a3:f0:c4:b2:81:e0:ac:e9:ad:37: e0:ac:56:f5:ee:4c:83:9a:82:c9:ee:e2:dc:ec:c5: 9d:ad:4e:36:b1:15:9f:dc:fe:d8:76:d8:89:10:39: 34:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EA:73:59:4E:1A:2C:7C:1A:71:E6:BD:B3:67:F6:E8:98:06:53:BC X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/CupzWU4aLHwacea9s2f26JgGU7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.62.0/23 185.164.64.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:41:9d:92:ad:75:42:95:aa:af:15:dc:ff:44:af:92:a5:52: ab:68:5f:a3:a9:13:e2:a0:a5:be:a1:79:af:37:1d:4f:7e:10: 80:f3:86:0d:3d:c9:97:08:8e:d9:f6:41:50:ed:01:22:9e:5d: 90:98:5a:01:2d:57:76:29:d7:a1:31:1e:53:57:58:94:37:67: 66:ab:a8:a0:0c:1d:7c:2c:16:e6:9c:2c:4e:bd:c0:27:8a:77: af:80:b6:c4:16:4d:5c:a3:9b:87:37:93:af:7f:3e:12:06:de: c6:7e:53:dd:d6:6b:44:8a:da:f0:fb:7f:83:43:c0:c5:6d:dc: 37:8d:25:1e:04:7c:88:4a:b5:39:c7:cb:6e:ad:1c:5d:06:17: 29:8b:b1:d0:28:28:60:5c:55:ba:e5:be:e5:e6:7d:b9:c6:ec: 4c:f0:a6:5c:c3:9f:3c:73:5d:e1:5c:c6:e6:4f:1d:94:28:a0: e6:b8:4c:13:e5:74:ce:1f:76:d8:1a:8e:53:59:58:6f:35:79: 5f:b4:6a:2b:a0:8b:bd:00:94:24:a3:1d:d5:9a:b4:25:be:8f: 22:ca:73:ef:a4:9a:a4:c8:32:d2:9a:58:c0:57:ef:fc:06:c2: b6:7c:1c:88:d5:23:8c:f4:a3:92:25:85:cb:a4:17:74:49:3f: 08:f7:01:ec -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ozfFe2Tml/SaYkLlG6QuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWVhNzM1OTRlMWEyYzdjMWE3MWU2YmRiMzY3ZjZlODk4MDY1M2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LHmYpWFLXiva+gI+BHv3WR3MY6y dC4CzWx6CXvFXvP5iOETssoG0gS+xQFeHtDQscYslq5rBjaiPv3v0TaTACgvQZdz 8l6cvYsqItXR66lJOnFJgOYhMqdjeyI1dDf9VefpOwlX0MBAFG9D1GFK8UGvN7Xw 1ZfycYL8jKM99wSMl2GFyOnaSOhr64SYdqhSf50Y4OYYxbv0gXIEkIQ58wBqOiMD 9/KB6h3Ys8dQl9JFnwWI/JWZqcBP004u4uHxzbPVmudE57caX7wmaWzXweEzmTFd 9KPwxLKB4KzprTfgrFb17kyDmoLJ7uLc7MWdrU42sRWf3P7YdtiJEDk0pwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFArqc1lOGix8GnHmvbNn9uiYBlO8MB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvQ3VweldVNGFMSHdhY2VhOXMyZjI2SmdHVTd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZM+AwQB uaRAMA0GCSqGSIb3DQEBCwUAA4IBAQAeQZ2SrXVClaqvFdz/RK+SpVKraF+jqRPi oKW+oXmvNx1PfhCA84YNPcmXCI7Z9kFQ7QEinl2QmFoBLVd2KdehMR5TV1iUN2dm q6igDB18LBbmnCxOvcAninevgLbEFk1co5uHN5Ovfz4SBt7GflPd1mtEitrw+3+D Q8DFbdw3jSUeBHyISrU5x8turRxdBhcpi7HQKChgXFW65b7l5n25xuxM8KZcw588 c13hXMbmTx2UKKDmuEwT5XTOH3bYGo5TWVhvNXlftGoroIu9AJQkox3VmrQlvo8i ynPvpJqkyDLSmljAV+/8BsK2fByI1SOM9KOSJYXLpBd0ST8I9wHs -----END CERTIFICATE-----Generated at Sun Jan 18 11:03:56 2026 by rpki-client