This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/C0AVe4iSzt1tLzO1z3J_8BFSSwQ.roa File: C0AVe4iSzt1tLzO1z3J_8BFSSwQ.roa (raw, json) Hash identifier: 1x0Uuntsxdx1mq0mpp7kC3SseRJDTb+Eb50/cVmhJPA= Subject key identifier: 0B:40:15:7B:88:92:CE:DD:6D:2F:33:B5:CF:72:7F:F0:11:52:4B:04 Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c Certificate serial: 019B7C116977EBF49644373A05954B8A8009 Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/C0AVe4iSzt1tLzO1z3J_8BFSSwQ.roa Signing time: Fri 02 Jan 2026 00:17:54 +0000 ROA not before: Fri 02 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 2.59.202.0/24 maxlen: 24 2.59.203.0/24 maxlen: 24 85.209.4.0/24 maxlen: 24 85.209.6.0/24 maxlen: 24 85.209.7.0/24 maxlen: 24 88.218.150.0/24 maxlen: 24 88.218.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:69:77:eb:f4:96:44:37:3a:05:95:4b:8a:80:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c Validity Not Before: Jan 2 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b40157b8892cedd6d2f33b5cf727ff011524b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9d:17:55:d9:ef:7e:6a:86:f6:2f:2a:bd:22: cf:27:02:79:84:72:5e:91:11:de:7d:10:6c:10:eb: 72:01:cd:86:7d:c7:f3:9b:09:cb:bc:06:aa:12:67: 15:eb:c1:d3:85:d6:73:ec:47:0f:52:7f:95:e2:67: 5b:16:ca:3a:ce:9f:47:32:b9:27:57:b6:a2:0f:29: dd:9c:76:97:01:99:71:80:cc:79:db:a2:2a:07:da: e5:4d:f5:b1:29:5b:81:87:6d:c0:66:a5:8f:dc:9d: c6:92:c0:80:24:b1:0f:f8:d6:ba:c1:46:28:b8:17: 58:4a:71:7c:52:16:45:33:f6:bb:d4:cb:9d:59:e3: 28:17:08:6f:cd:ba:6c:5f:9f:3d:f0:1b:3e:81:3c: 00:99:c6:0c:93:59:88:30:40:16:14:4a:09:fb:c5: bb:99:23:95:9b:40:c6:e6:15:96:e6:67:ce:f3:be: f0:f6:56:cd:27:4a:e7:2f:d1:85:3c:08:34:73:48: 78:c2:99:fd:40:99:fc:58:45:00:17:88:1c:2c:08: 33:f8:67:5b:be:00:e0:f7:3f:64:1c:b8:05:b0:8a: 20:11:58:cb:fb:5e:56:fe:e9:fe:50:64:4b:e3:75: 3b:c2:ba:31:19:e0:c9:68:17:fa:21:81:b4:a4:aa: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:40:15:7B:88:92:CE:DD:6D:2F:33:B5:CF:72:7F:F0:11:52:4B:04 X509v3 Authority Key Identifier: keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/C0AVe4iSzt1tLzO1z3J_8BFSSwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.202.0/23 85.209.4.0/24 85.209.6.0/23 88.218.150.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:33:43:fb:91:72:e7:89:59:4e:13:9f:9e:eb:5f:19:31:4d: b8:07:71:47:03:b7:76:8f:44:04:91:7b:f4:c1:ca:93:4b:8b: 8e:4e:13:03:fd:89:8e:43:4a:4b:6a:b9:c5:7a:dd:18:49:6e: a1:83:75:57:1e:7b:da:4f:9a:21:b5:3d:72:08:33:0c:ed:00: a9:33:f3:7e:12:3b:44:e9:e7:4c:16:68:bb:51:a3:82:21:47: 82:bd:8f:64:3f:4b:38:ef:cc:74:df:6f:d0:fd:dc:7a:c6:ba: e0:e6:5a:dc:3f:d0:15:a9:57:3c:c5:65:e6:25:64:4e:1b:36: 40:17:c4:61:f4:6a:2a:f6:42:85:b7:e8:01:e2:c3:26:aa:49: 19:6f:5c:02:ce:ac:39:49:bc:7b:53:0e:cf:0c:a9:52:0a:06: bc:d2:20:88:49:e2:68:3c:66:b3:4e:09:3f:3d:a8:79:15:5b: 73:f5:8b:35:b9:1a:01:cf:ae:51:cc:95:c0:55:97:2a:58:15: f6:b4:5f:b1:17:df:e3:6e:86:d3:b1:ac:b6:dd:dc:7a:17:6b: 49:d9:63:a0:33:02:5d:49:f5:55:1e:e7:11:d1:bc:7e:bc:4b: 2f:f4:02:93:51:03:ed:ae:5d:24:53:b5:a9:03:a1:d4:78:85: 84:91:e9:19 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8EWl36/SWRDc6BZVLioAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3M2JlYzMzYWU3MzhjOTg5NTg4MTljNmMxM2JiMzM1ZWUz NGFiNGMwHhcNMjYwMTAyMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjQwMTU3Yjg4OTJjZWRkNmQyZjMzYjVjZjcyN2ZmMDExNTI0YjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl50XVdnvfmqG9i8qvSLPJwJ5hHJe kRHefRBsEOtyAc2GfcfzmwnLvAaqEmcV68HThdZz7EcPUn+V4mdbFso6zp9HMrkn V7aiDyndnHaXAZlxgMx526IqB9rlTfWxKVuBh23AZqWP3J3GksCAJLEP+Na6wUYo uBdYSnF8UhZFM/a71MudWeMoFwhvzbpsX5898Bs+gTwAmcYMk1mIMEAWFEoJ+8W7 mSOVm0DG5hWW5mfO877w9lbNJ0rnL9GFPAg0c0h4wpn9QJn8WEUAF4gcLAgz+Gdb vgDg9z9kHLgFsIogEVjL+15W/un+UGRL43U7wroxGeDJaBf6IYG0pKoiawIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAtAFXuIks7dbS8ztc9yf/ARUksEMB8GA1UdIwQY MBaAFJc77DOuc4yYlYgZxsE7szXuNKtMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQt YzQyZjlhYmYxNDc3LzEvQzBBVmU0aVN6dDF0THpPMXozSl84QkZTU3dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQtYzQyZjlhYmYxNDc3 LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBAjvKAwQA VdEEAwQBVdEGAwQBWNqWMA0GCSqGSIb3DQEBCwUAA4IBAQB8M0P7kXLniVlOE5+e 618ZMU24B3FHA7d2j0QEkXv0wcqTS4uOThMD/YmOQ0pLarnFet0YSW6hg3VXHnva T5ohtT1yCDMM7QCpM/N+EjtE6edMFmi7UaOCIUeCvY9kP0s478x032/Q/dx6xrrg 5lrcP9AVqVc8xWXmJWROGzZAF8Rh9Goq9kKFt+gB4sMmqkkZb1wCzqw5Sbx7Uw7P DKlSCga80iCISeJoPGazTgk/Pah5FVtz9Ys1uRoBz65RzJXAVZcqWBX2tF+xF9/j bobTsay23dx6F2tJ2WOgMwJdSfVVHucR0bx+vEsv9AKTUQPtrl0kU7WpA6HUeIWE kekZ -----END CERTIFICATE-----Generated at Mon Jan 19 17:33:05 2026 by rpki-client