This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/CFsvP2hD3gmFjv__2Tyhe-RY0Wc.roa File: CFsvP2hD3gmFjv__2Tyhe-RY0Wc.roa (raw, json) Hash identifier: 62NrbZ3F0XaxVmb0wIiq4eSU0cht7XOifDXoDw7smqk= Subject key identifier: 08:5B:2F:3F:68:43:DE:09:85:8E:FF:FF:D9:3C:A1:7B:E4:58:D1:67 Certificate issuer: /CN=598fa4201344d4107f792eee2566c62d65714e2d Certificate serial: 019B7B36418DE6BE492A9A9A3C946E18AFA6 Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/CFsvP2hD3gmFjv__2Tyhe-RY0Wc.roa Signing time: Thu 01 Jan 2026 20:18:31 +0000 ROA not before: Thu 01 Jan 2026 20:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211141 IP address blocks: 45.80.13.0/24 maxlen: 24 45.80.14.0/24 maxlen: 24 45.80.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:41:8d:e6:be:49:2a:9a:9a:3c:94:6e:18:af:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d Validity Not Before: Jan 1 20:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=085b2f3f6843de09858effffd93ca17be458d167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bb:2d:59:56:be:7d:00:11:6d:8b:aa:a5:77: 75:22:29:1d:d4:cc:1d:48:be:c7:97:b6:1c:a9:da: 63:cd:f7:18:63:d8:ce:a8:d9:98:b1:ec:f6:49:f9: 51:fc:33:37:15:ba:36:33:91:df:7e:cc:28:32:14: b5:96:4f:60:45:97:6d:70:6d:0e:1a:ab:5d:f8:86: 62:d5:7f:2d:8d:da:2e:fe:1e:58:92:46:ac:c7:df: 85:3c:40:4b:5e:f2:a6:38:6f:c0:b7:5d:9a:d5:d7: 43:4a:31:4e:05:0a:c2:78:5a:ed:7c:65:a8:77:23: d1:86:49:67:d0:23:1a:12:7f:c2:b0:d4:f1:a9:54: c1:29:d0:cb:08:58:13:5b:f8:df:66:27:79:bf:1e: ad:0a:c0:28:d4:fb:c5:9b:80:24:fc:48:5f:34:d6: e6:55:72:92:6f:64:ee:b0:a7:7c:be:96:04:66:50: df:75:ce:b0:88:a7:c8:d5:01:28:88:bd:32:9f:2c: c7:ad:a0:ec:45:92:49:e0:3f:14:d5:b1:f7:c6:3c: 93:4d:0d:22:da:90:0c:3a:1c:92:9b:56:db:83:c7: 95:db:19:9c:8e:38:57:3b:36:ca:e1:9d:27:16:f3: 80:ed:13:bc:5b:8b:cd:aa:e5:8c:60:a6:49:36:81: 0c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5B:2F:3F:68:43:DE:09:85:8E:FF:FF:D9:3C:A1:7B:E4:58:D1:67 X509v3 Authority Key Identifier: keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/CFsvP2hD3gmFjv__2Tyhe-RY0Wc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.13.0-45.80.15.255 Signature Algorithm: sha256WithRSAEncryption 91:8b:0b:ac:aa:e3:f8:90:41:f0:25:0b:84:d6:ef:c3:b5:00: 52:73:2b:4b:2d:29:19:64:68:03:6c:d4:0a:da:8d:e1:b1:06: f0:0c:2b:15:f5:b0:2b:bf:e9:db:c7:b9:a2:ed:f4:66:3c:73: 4a:48:01:55:c7:10:de:de:03:6f:55:32:02:dd:d4:9f:87:3b: 40:1a:24:0f:7d:09:dd:8b:d4:11:b6:15:b8:c9:bc:be:d1:fe: ac:a2:ba:9c:8c:04:4c:d6:9c:d2:30:cc:7a:f4:f8:c9:c8:6c: 53:09:0a:d6:34:5d:d3:e1:df:86:47:24:3b:c4:f8:33:17:68: b4:2b:63:8f:1e:cf:78:82:16:79:5f:fc:bc:8b:13:80:fe:98: 91:af:e5:ae:8b:cc:4b:54:f1:34:fb:36:16:46:02:54:86:5d: 4c:22:e2:f5:93:82:e3:6f:28:e9:c6:0a:3c:b1:7d:44:ff:15: 61:c4:8e:f9:40:4e:0f:3a:3b:7b:1b:3e:50:ac:37:07:c2:e7: 55:3d:8c:ab:8c:22:1a:d0:d2:60:6f:c4:64:ef:99:f6:5b:c7: cf:32:8a:bb:44:cc:16:19:a8:51:4a:80:8c:69:f7:e5:45:83: fd:aa:5f:5b:78:2a:1c:56:01:f6:26:af:da:84:b8:8c:be:b8: 37:c0:ab:90 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NkGN5r5JKpqaPJRuGK+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5OGZhNDIwMTM0NGQ0MTA3Zjc5MmVlZTI1NjZjNjJkNjU3 MTRlMmQwHhcNMjYwMTAxMjAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODViMmYzZjY4NDNkZTA5ODU4ZWZmZmZkOTNjYTE3YmU0NThkMTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LstWVa+fQARbYuqpXd1Iikd1Mwd SL7Hl7YcqdpjzfcYY9jOqNmYsez2SflR/DM3Fbo2M5HffswoMhS1lk9gRZdtcG0O Gqtd+IZi1X8tjdou/h5Ykkasx9+FPEBLXvKmOG/At12a1ddDSjFOBQrCeFrtfGWo dyPRhkln0CMaEn/CsNTxqVTBKdDLCFgTW/jfZid5vx6tCsAo1PvFm4Ak/EhfNNbm VXKSb2TusKd8vpYEZlDfdc6wiKfI1QEoiL0ynyzHraDsRZJJ4D8U1bH3xjyTTQ0i 2pAMOhySm1bbg8eV2xmcjjhXOzbK4Z0nFvOA7RO8W4vNquWMYKZJNoEMrwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAhbLz9oQ94JhY7//9k8oXvkWNFnMB8GA1UdIwQY MBaAFFmPpCATRNQQf3ku7iVmxi1lcU4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84MzhlZjEtNzM5My00ZmJkLWI2N2It NjY0YjhmMDNkMTgwLzEvQ0ZzdlAyaEQzZ21GanZfXzJUeWhlLVJZMFdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84MzhlZjEtNzM5My00ZmJkLWI2N2ItNjY0YjhmMDNkMTgw LzEvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtUA0D BAQtUAAwDQYJKoZIhvcNAQELBQADggEBAJGLC6yq4/iQQfAlC4TW78O1AFJzK0st KRlkaANs1ArajeGxBvAMKxX1sCu/6dvHuaLt9GY8c0pIAVXHEN7eA29VMgLd1J+H O0AaJA99Cd2L1BG2FbjJvL7R/qyiupyMBEzWnNIwzHr0+MnIbFMJCtY0XdPh34ZH JDvE+DMXaLQrY48ez3iCFnlf/LyLE4D+mJGv5a6LzEtU8TT7NhZGAlSGXUwi4vWT guNvKOnGCjyxfUT/FWHEjvlATg86O3sbPlCsNwfC51U9jKuMIhrQ0mBvxGTvmfZb x88yirtEzBYZqFFKgIxp9+VFg/2qX1t4KhxWAfYmr9qEuIy+uDfAq5A= -----END CERTIFICATE-----Generated at Mon Jan 26 14:44:26 2026 by rpki-client